diff --git a/doc/README_CN.md b/doc/README_CN.md index 65ee7d9..5fd9de7 100644 --- a/doc/README_CN.md +++ b/doc/README_CN.md @@ -275,7 +275,7 @@ HostCrash 1.1.1.1 G:\host.txt Kunyu v1.6.2新增了一个有意思的功能,结合云函数对目标进行HOSTS碰撞,通过这样的方式有效的隐藏了我们的扫描IP防止被目标态势感知捕捉到,也防止了WAF对真实IP的封禁,并对特征进行了隐匿,通过下面的扫描效果可以发现扫描的IP均为云服务厂商且每次扫描均为随机IP地址,可以通过初始化时配置云函数地址的方式自主选择是否启用。 -**配置导读:** [云函数的配置方法](./doc/Serverless_CN.md) +**配置导读:** [云函数的配置方法](./Serverless_CN.md) **相关技术:**https://www.anquanke.com/post/id/261551 diff --git a/kunyu/config/__version__.py b/kunyu/config/__version__.py index 8dda16b..fa60d05 100644 --- a/kunyu/config/__version__.py +++ b/kunyu/config/__version__.py @@ -15,7 +15,7 @@ __python_version__ = sys.version.split()[0] __platform__ = platform.platform() __url__ = "https://github.com/knownsec/Kunyu" -__version__ = '1.6.2' +__version__ = '1.6.3' __author__ = '风起' __Team__ = 'KnownSec 404 Team' __author_email__ = 'onlyzaliks@gmail.com' diff --git a/kunyu/core/crash.py b/kunyu/core/crash.py index 354273b..df15900 100644 --- a/kunyu/core/crash.py +++ b/kunyu/core/crash.py @@ -178,12 +178,12 @@ def host_scan(self, search, ip): res.encoding = 'gbk2312' # Get the title of the returned result title = re.findall('(.+)', res.text) - tmp_list = [res.request.headers['ip'], title[0]] + tmp_list = [res.request.headers['ip'],title[0]] if status: - tmp_list.append(res.request.headers['hosts']) + tmp_list.insert(1,res.request.headers['hosts']) # Unicode decoding of the information returned by cloud functions - tmp_list[1] = title[0].encode('utf8').decode('unicode_escape') - else:tmp_list.append(res.request.headers['host']) + tmp_list[2] = (title[0].encode('utf8').decode('unicode_escape')) + else:tmp_list.insert(1,res.request.headers['host']) crash_list.append(tmp_list) except Exception: continue diff --git a/kunyu/core/zoomeye.py b/kunyu/core/zoomeye.py index 12b18c0..139f3ed 100644 --- a/kunyu/core/zoomeye.py +++ b/kunyu/core/zoomeye.py @@ -1,11 +1,11 @@ #!/usr/bin/env python # encoding: utf-8 -''' +""" @author: 风起 @contact: onlyzaliks@gmail.com @File: zoomeye.py @Time: 2021/6/24 22:18 -''' +""" import os import sys @@ -616,7 +616,7 @@ def command_hostcrash(cls, args): # Set output list content for res in result_list: table.add_row( - str(res[0]), str(res[2]),str(res[1]) + str(res[0]), str(res[1]),str(res[2]) ) # Output table list to console console.print(table)