Files
fscan/web/ws/hub.go
T
ZacharyZcR 71b92d4408 feat: v2.1.0 核心重构与功能增强
## 架构重构
- 全局变量消除,迁移至 Config/State 对象
- SMB 插件融合(smb/smb2/smbghost/smbinfo)
- 服务探测重构,实现 Nmap 风格 fallback 机制
- 输出系统重构,TXT 实时刷盘 + 双写机制
- i18n 框架升级至 go-i18n

## 性能优化
- 正则表达式预编译
- 内存优化 map[string]struct{}
- 并发指纹匹配
- SOCKS5 连接复用
- 滑动窗口调度 + 自适应线程池

## 新功能
- Web 管理界面
- 多格式 POC 适配(xray/afrog)
- 增强指纹库(3139条)
- Favicon hash 指纹识别
- 插件选择性编译(Build Tags)
- fscan-lab 靶场环境
- 默认端口扩展(62→133)

## 构建系统
- 添加 no_local tag 支持排除本地插件
- 多版本构建:fscan/fscan-nolocal/fscan-web
- CI 添加 snapshot 模式支持仅测试构建

## Bug 修复
- 修复 120+ 个问题,包括 RDP panic、批量扫描漏报、
  JSON 输出格式、Redis 检测、Context 超时等

## 测试增强
- 单元测试覆盖率 74-100%
- 并发安全测试
- 集成测试(Web/端口/服务/SSH/ICMP)
2026-01-11 20:16:23 +08:00

216 lines
4.3 KiB
Go

//go:build web
package ws
import (
"encoding/json"
"net/http"
"sync"
"time"
"github.com/gorilla/websocket"
)
var upgrader = websocket.Upgrader{
ReadBufferSize: 1024,
WriteBufferSize: 1024,
CheckOrigin: func(r *http.Request) bool {
return true // 允许所有来源(本地工具)
},
}
// MessageType WebSocket消息类型
type MessageType string
const (
// 扫描相关
MsgScanStarted MessageType = "scan_started"
MsgScanProgress MessageType = "scan_progress"
MsgScanResult MessageType = "scan_result"
MsgScanCompleted MessageType = "scan_completed"
MsgScanError MessageType = "scan_error"
// 系统相关
MsgConnected MessageType = "connected"
MsgPing MessageType = "ping"
MsgPong MessageType = "pong"
)
// Message WebSocket消息结构
type Message struct {
Type MessageType `json:"type"`
Timestamp int64 `json:"timestamp"`
Data interface{} `json:"data,omitempty"`
}
// Client WebSocket客户端
type Client struct {
hub *Hub
conn *websocket.Conn
send chan []byte
}
// Hub 管理所有WebSocket连接
type Hub struct {
clients map[*Client]bool
broadcast chan []byte
register chan *Client
unregister chan *Client
mu sync.RWMutex
}
// NewHub 创建Hub实例
func NewHub() *Hub {
return &Hub{
clients: make(map[*Client]bool),
broadcast: make(chan []byte, 256),
register: make(chan *Client),
unregister: make(chan *Client),
}
}
// Run 启动Hub
func (h *Hub) Run() {
for {
select {
case client := <-h.register:
h.mu.Lock()
h.clients[client] = true
h.mu.Unlock()
// 发送连接成功消息
msg := Message{
Type: MsgConnected,
Timestamp: time.Now().UnixMilli(),
Data: map[string]string{"status": "connected"},
}
if data, err := json.Marshal(msg); err == nil {
client.send <- data
}
case client := <-h.unregister:
h.mu.Lock()
if _, ok := h.clients[client]; ok {
delete(h.clients, client)
close(client.send)
}
h.mu.Unlock()
case message := <-h.broadcast:
h.mu.RLock()
for client := range h.clients {
select {
case client.send <- message:
default:
close(client.send)
delete(h.clients, client)
}
}
h.mu.RUnlock()
}
}
}
// Broadcast 广播消息给所有客户端
func (h *Hub) Broadcast(msgType MessageType, data interface{}) {
msg := Message{
Type: msgType,
Timestamp: time.Now().UnixMilli(),
Data: data,
}
if jsonData, err := json.Marshal(msg); err == nil {
h.broadcast <- jsonData
}
}
// ClientCount 返回当前连接的客户端数量
func (h *Hub) ClientCount() int {
h.mu.RLock()
defer h.mu.RUnlock()
return len(h.clients)
}
// ServeWs 处理WebSocket连接
func ServeWs(hub *Hub, w http.ResponseWriter, r *http.Request) {
conn, err := upgrader.Upgrade(w, r, nil)
if err != nil {
return
}
client := &Client{
hub: hub,
conn: conn,
send: make(chan []byte, 256),
}
hub.register <- client
go client.writePump()
go client.readPump()
}
// readPump 读取客户端消息
func (c *Client) readPump() {
defer func() {
c.hub.unregister <- c
c.conn.Close()
}()
c.conn.SetReadLimit(512 * 1024) // 512KB
c.conn.SetReadDeadline(time.Now().Add(60 * time.Second))
c.conn.SetPongHandler(func(string) error {
c.conn.SetReadDeadline(time.Now().Add(60 * time.Second))
return nil
})
for {
_, message, err := c.conn.ReadMessage()
if err != nil {
break
}
// 处理ping消息
var msg Message
if json.Unmarshal(message, &msg) == nil {
if msg.Type == MsgPing {
pong := Message{
Type: MsgPong,
Timestamp: time.Now().UnixMilli(),
}
if data, err := json.Marshal(pong); err == nil {
c.send <- data
}
}
}
}
}
// writePump 发送消息给客户端
func (c *Client) writePump() {
ticker := time.NewTicker(30 * time.Second)
defer func() {
ticker.Stop()
c.conn.Close()
}()
for {
select {
case message, ok := <-c.send:
c.conn.SetWriteDeadline(time.Now().Add(10 * time.Second))
if !ok {
c.conn.WriteMessage(websocket.CloseMessage, []byte{})
return
}
if err := c.conn.WriteMessage(websocket.TextMessage, message); err != nil {
return
}
case <-ticker.C:
c.conn.SetWriteDeadline(time.Now().Add(10 * time.Second))
if err := c.conn.WriteMessage(websocket.PingMessage, nil); err != nil {
return
}
}
}
}