Skip to content

Commit ef28301

Browse files
author
qi4l
committed
feat: 新增多个漏洞扫描和爆破
1 parent a561e81 commit ef28301

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

46 files changed

+4576
-761
lines changed

‎1.json

Lines changed: 59 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,59 @@
1+
[
2+
{
3+
"Keyword": "NetInfo",
4+
"URL": "NetInfo://127.0.0.1:135",
5+
"主机名": ",DESKTOP-6QB1NLT",
6+
"网络接口": ",192.168.1.4,240e:34c:5523:9230:8cff:2143:be82:72cd,240e:34c:5523:9230:b4f1:4903:56ff:f1fc"
7+
},
8+
{
9+
"Digest": "\"SMB@AcVxL{b\u0026/s*`(+00+7+7\"",
10+
"IP": "127.0.0.1",
11+
"Keyword": "smb",
12+
"Length": "246",
13+
"MatchRegexString": "^(?si:\\x00\\x00...SMB.*)",
14+
"Port": "445",
15+
"ProbeName": "TCP_SMB_NEGOTIATE",
16+
"Response": "\u0000\u0000\u0000\ufffd\ufffdSMB@\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000A\u0000\u0001\u0000\u0011\u0003\u0002\u0000\ufffd\u0000cVx\ufffd\ufffdL\ufffd\ufffd͜{\ufffdb\u0026/\u0000\u0000\u0000\u0000\u0000\ufffd\u0000\u0000\u0000\ufffd\u0000\u0000\u0000\ufffd\u0000\ufffd\ufffd\ufffd\ufffds\ufffd\ufffd\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\ufffd\u0000*\u0000\ufffd\u0000\u0000\u0000`(\u0006\u0006+\u0006\u0001\u0005\u0005\u0002\ufffd\u001e0\u001c\ufffd\u001a0\u0018\u0006\n+\u0006\u0001\u0004\u0001\ufffd7\u0002\u0002\u001e\u0006\n+\u0006\u0001\u0004\u0001\ufffd7\u0002\u0002\n\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0026\u0000\u0000\u0000\u0000\u0000\u0001\u0000 \u0000\u0001\u0000\ufffd\ufffd\ufffd0\ufffdĀ!lh9\ufffd\ufffd\ufffdY\ufffd\ufffd'\ufffdT7\ufffdU ΅D\ufffd\u0018f\u0000\u0000\u0003\u0000\n\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0001\u0000",
17+
"Service": "smb",
18+
"URL": "smb://127.0.0.1:445"
19+
},
20+
{
21+
"Digest": "\"\\r\\n\\r\\n\"",
22+
"FingerPrint": "WebSocket++/0.8.2",
23+
"Header": "HTTP/1.1 426 Upgrade Required\r\nServer: WebSocket++/0.8.2\r\n",
24+
"IP": "127.0.0.1",
25+
"Keyword": "",
26+
"Length": "60",
27+
"Port": "9010",
28+
"Response": "HTTP/1.1 426 Upgrade Required\r\nServer: WebSocket++/0.8.2\r\n\r\n",
29+
"Service": "http",
30+
"URL": "http://127.0.0.1:9010"
31+
},
32+
{
33+
"Body": "\u003chtml\u003e\u003chead\u003e\u003ctitle\u003eNot Found\u003c/title\u003e\u003c/head\u003e\u003cbody\u003e\u003ch1\u003e404 Not Found\u003c/h1\u003e\u003c/body\u003e\u003c/html\u003e",
34+
"Digest": "\"itle\u003eNot Found\u003c/title\u003e\u003c/\"",
35+
"Header": "HTTP/1.0 404 Not Found\r\nContent-Length: 85\r\nContent-Type: text/html\r\n",
36+
"IP": "127.0.0.1",
37+
"Keyword": "NotFound",
38+
"Length": "156",
39+
"Port": "9080",
40+
"Response": "HTTP/1.0 404 Not Found\r\nContent-Length: 85\r\nContent-Type: text/html\r\n\r\n\u003chtml\u003e\u003chead\u003e\u003ctitle\u003eNot Found\u003c/title\u003e\u003c/head\u003e\u003cbody\u003e\u003ch1\u003e404 Not Found\u003c/h1\u003e\u003c/body\u003e\u003c/html\u003e",
41+
"Service": "http",
42+
"URL": "http://127.0.0.1:9080"
43+
},
44+
{
45+
"Body": "{\"code\":0,\"msg\":\"success\"}",
46+
"Cert": "SignatureAlgorithm: SHA256-RSA\r\nPublicKeyAlgorithm: RSA\r\nVersion: 3\r\nSerialNumber: 18180314610807744709599553085745103519\r\nIssuer: CN=DigiCert Secure Site CN CA G3,O=DigiCert Inc,C=US\r\nSubject: CN=localhost.ptlogin2.qq.com,O=Shenzhen Tencent Computer Systems Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN\r\nNotBefore: 2024-06-26 00:00:00 +0000 UTC\r\nNotAfter: 2025-06-26 23:59:59 +0000 UTC\r\nMaxPathLen: -1\r\nOCSPServer: http://ocsp.digicert.cn\r\nIssuingCertificateURL: http://cacerts.digicert.cn/DigiCertSecureSiteCNCAG3.crt\r\nDNSNames: localhost.ptlogin2.qq.com; localhost.ptlogin2.tencent.com; localhost.ptlogin2.tenpay.com; localhost.ptlogin2.weiyun.com\r\nCRLDistributionPoints: http://crl.digicert.cn/DigiCertSecureSiteCNCAG3.crl\r\n\r\nSUBJECT:\r\nCountry: CN\r\nOrganization: Shenzhen Tencent Computer Systems Company Limited\r\nLocality: Shenzhen\r\nProvince: Guangdong Province\r\nCommonName: localhost.ptlogin2.qq.com\r\n\r\nIssuer:\r\nCountry: US\r\nOrganization: DigiCert Inc\r\nCommonName: DigiCert Secure Site CN CA G3\r\n",
47+
"Digest": "\"\\n\\r\\n{\\\"code\\\":0,\\\"msg\\\":\\\"succ\"",
48+
"FingerPrint": "DigiCert-Cert\t",
49+
"FoundDomain": "localhost.ptlogin2.qq.com、ocsp.digicert.cn、cacerts.digicert.cn、localhost.ptlogin2.tencent.com、localhost.ptlogin2.tenpay.com、localhost.ptlogin2.weiyun.com、crl.digicert.cn",
50+
"Header": "HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nContent-Length: 26\r\n",
51+
"IP": "127.0.0.1",
52+
"Keyword": "",
53+
"Length": "97",
54+
"Port": "4001",
55+
"Response": "HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nContent-Length: 26\r\n\r\n{\"code\":0,\"msg\":\"success\"}",
56+
"Service": "https",
57+
"URL": "https://127.0.0.1:4001"
58+
}
59+
]

‎README.md

Lines changed: 0 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -12,17 +12,6 @@ QScan
1212
FScan
1313
![img.png](assets/FScan.png)
1414

15-
+ 免杀
16-
17-
![img.png](assets/火绒免杀.png)
18-
19-
![img.png](assets/img360.png)
20-
21-
![img.png](assets/img卡巴斯基.png)
22-
23-
+ 漏洞扫描
24-
![img_1.png](assets/img_1.png)
25-
2615
+ MS17010检测
2716

2817
## 使用参数

‎app/type-args.go

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,7 @@ import (
66
"github.com/gookit/color"
77
"os"
88
"strings"
9+
"time"
910
)
1011

1112
type args struct {
@@ -195,3 +196,50 @@ func gradient(text string, coloRR []*color.Style256) string {
195196

196197
return strings.TrimRight(output, "\n")
197198
}
199+
200+
// CheckErrs 检查是否为需要重试的错误
201+
func CheckErrs(err error) error {
202+
if err == nil {
203+
return nil
204+
}
205+
206+
// 已知需要重试的错误列表
207+
errs := []string{
208+
"closed by the remote host", "too many connections",
209+
"EOF", "A connection attempt failed",
210+
"established connection failed", "connection attempt failed",
211+
"Unable to read", "is not allowed to connect to this",
212+
"no pg_hba.conf entry",
213+
"No connection could be made",
214+
"invalid packet size",
215+
"bad connection",
216+
}
217+
218+
// 检查错误是否匹配
219+
errLower := strings.ToLower(err.Error())
220+
for _, key := range errs {
221+
if strings.Contains(errLower, strings.ToLower(key)) {
222+
time.Sleep(3 * time.Second)
223+
return err
224+
}
225+
}
226+
227+
return nil
228+
}
229+
230+
var Userdict = map[string][]string{
231+
"elastic": {"elastic", "admin", "kibana"},
232+
"rabbitmq": {"guest", "admin", "administrator", "rabbit", "rabbitmq", "root"},
233+
"kafka": {"admin", "kafka", "root", "test"},
234+
"activemq": {"admin", "root", "activemq", "system", "user"},
235+
"ldap": {"admin", "administrator", "root", "cn=admin", "cn=administrator", "cn=manager"},
236+
"smtp": {"admin", "root", "postmaster", "mail", "smtp", "administrator"},
237+
"imap": {"admin", "mail", "postmaster", "root", "user", "test"},
238+
"pop3": {"admin", "root", "mail", "user", "test", "postmaster"},
239+
"zabbix": {"Admin", "admin", "guest", "user"},
240+
"rsync": {"rsync", "root", "admin", "backup"},
241+
"cassandra": {"cassandra", "admin", "root", "system"},
242+
"neo4j": {"neo4j", "admin", "root", "test"},
243+
}
244+
245+
var Passwords = []string{"123456", "admin", "admin123", "root", "", "pass123", "pass@123", "password", "Password", "P@ssword123", "123123", "654321", "111111", "123", "1", "admin@123", "Admin@123", "admin123!@#", "{user}", "{user}1", "{user}111", "{user}123", "{user}@123", "{user}_123", "{user}#123", "{user}@111", "{user}@2019", "{user}@123#4", "P@ssw0rd!", "P@ssw0rd", "Passw0rd", "qwe123", "12345678", "test", "test123", "123qwe", "123qwe!@#", "123456789", "123321", "666666", "a123456.", "123456~a", "123456!a", "000000", "1234567890", "8888888", "!QAZ2wsx", "1qaz2wsx", "abc123", "abc123456", "1qaz@WSX", "a11111", "a12345", "Aa1234", "Aa1234.", "Aa12345", "a123456", "a123123", "Aa123123", "Aa123456", "Aa12345.", "sysadmin", "system", "1qaz!QAZ", "2wsx@WSX", "qwe123!@#", "Aa123456!", "A123456s!", "sa123456", "1q2w3e", "Charge123", "Aa123456789", "elastic123"}

‎assets/img360.png

-67.5 KB
Binary file not shown.

‎assets/img卡巴斯基.png

-47 KB
Binary file not shown.

‎assets/火绒免杀.png

-264 KB
Binary file not shown.

‎core/hydra/default_ftp_authlist.go

Lines changed: 7 additions & 65 deletions
Original file line numberDiff line numberDiff line change
@@ -6,74 +6,16 @@ func DefaultFtpList() *AuthList {
66
"anonymous",
77
"ftp",
88
"test",
9+
"admin",
10+
"www",
911
"web",
10-
//"admin",
11-
//"test",
12-
//"user",
13-
//"root",
14-
//"manager",
15-
//"webadmin",
12+
"root",
13+
"db",
14+
"wwwroot",
15+
"data",
1616
}
1717
a.Password = []string{
18-
"",
19-
"123456",
20-
"zaq1@WSX",
21-
"%user%",
22-
"%user%123",
23-
"%user%1234",
24-
"%user%123456",
25-
"%user%12345",
26-
"%user%@123",
27-
"%user%@123456",
28-
"%user%@12345",
29-
"%user%#123",
30-
"%user%#123456",
31-
"%user%#12345",
32-
"%user%_123",
33-
"%user%_123456",
34-
"%user%_12345",
35-
"%user%123!@#",
36-
"%user%!@#$",
37-
"%user%!@#",
38-
"%user%~!@",
39-
"%user%!@#123",
40-
"%user%2022",
41-
"%user%2021",
42-
"%user%2020",
43-
"%user%2019",
44-
"%user%2018",
45-
"%user%2017",
46-
"%user%2016",
47-
"%user%2015",
48-
"%user%@2017",
49-
"%user%@2016",
50-
"%user%@2015",
51-
"qweasdzxc",
52-
"Passw0rd",
53-
"password",
54-
"12345",
55-
"1234",
56-
"123",
57-
"qwerty",
58-
"1q2w3e4r",
59-
"1qaz2wsx",
60-
"qazwsx",
61-
"123qwe",
62-
"123qaz",
63-
"0000",
64-
"1234567",
65-
"123456qwerty",
66-
"password123",
67-
"12345678",
68-
"1q2w3e",
69-
"abc123",
70-
"test123",
71-
"123456789",
72-
"q1w2e3r4",
73-
//"okmnji",
74-
//"postgres",
75-
//"test",
76-
//"user",
18+
"123456", "admin", "admin123", "root", "", "pass123", "pass@123", "password", "Password", "P@ssword123", "123123", "654321", "111111", "123", "1", "admin@123", "Admin@123", "admin123!@#", "{user}", "{user}1", "{user}111", "{user}123", "{user}@123", "{user}_123", "{user}#123", "{user}@111", "{user}@2019", "{user}@123#4", "P@ssw0rd!", "P@ssw0rd", "Passw0rd", "qwe123", "12345678", "test", "test123", "123qwe", "123qwe!@#", "123456789", "123321", "666666", "a123456.", "123456~a", "123456!a", "000000", "1234567890", "8888888", "!QAZ2wsx", "1qaz2wsx", "abc123", "abc123456", "1qaz@WSX", "a11111", "a12345", "Aa1234", "Aa1234.", "Aa12345", "a123456", "a123123", "Aa123123", "Aa123456", "Aa12345.", "sysadmin", "system", "1qaz!QAZ", "2wsx@WSX", "qwe123!@#", "Aa123456!", "A123456s!", "sa123456", "1q2w3e", "Charge123", "Aa123456789", "elastic123",
7719
}
7820
a.Special = []Auth{
7921
NewSpecialAuth("anonymous", "anonymous"),

‎core/hydra/default_mssql_authlist.go

Lines changed: 2 additions & 59 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,7 @@ func DefaultMssqlList() *AuthList {
44
a := NewAuthList()
55
a.Username = []string{
66
"sa",
7+
"sql",
78
//"admin",
89
//"test",
910
//"user",
@@ -12,65 +13,7 @@ func DefaultMssqlList() *AuthList {
1213
//"webadmin",
1314
}
1415
a.Password = []string{
15-
"",
16-
"123456",
17-
"zaq1@WSX",
18-
"%user%",
19-
"%user%123",
20-
"%user%1234",
21-
"%user%123456",
22-
"%user%12345",
23-
"%user%@123",
24-
"%user%@123456",
25-
"%user%@12345",
26-
"%user%#123",
27-
"%user%#123456",
28-
"%user%#12345",
29-
"%user%_123",
30-
"%user%_123456",
31-
"%user%_12345",
32-
"%user%123!@#",
33-
"%user%!@#$",
34-
"%user%!@#",
35-
"%user%~!@",
36-
"%user%!@#123",
37-
"%user%2022",
38-
"%user%2021",
39-
"%user%2020",
40-
"%user%2019",
41-
"%user%2018",
42-
"%user%2017",
43-
"%user%2016",
44-
"%user%2015",
45-
"%user%@2017",
46-
"%user%@2016",
47-
"%user%@2015",
48-
"qweasdzxc",
49-
"Passw0rd",
50-
"password",
51-
"12345",
52-
"1234",
53-
"123",
54-
"qwerty",
55-
"1q2w3e4r",
56-
"1qaz2wsx",
57-
"qazwsx",
58-
"123qwe",
59-
"123qaz",
60-
"0000",
61-
"1234567",
62-
"123456qwerty",
63-
"password123",
64-
"12345678",
65-
"1q2w3e",
66-
"abc123",
67-
"test123",
68-
"123456789",
69-
"q1w2e3r4",
70-
//"okmnji",
71-
//"postgres",
72-
//"test",
73-
//"user",
16+
"123456", "admin", "admin123", "root", "", "pass123", "pass@123", "password", "Password", "P@ssword123", "123123", "654321", "111111", "123", "1", "admin@123", "Admin@123", "admin123!@#", "{user}", "{user}1", "{user}111", "{user}123", "{user}@123", "{user}_123", "{user}#123", "{user}@111", "{user}@2019", "{user}@123#4", "P@ssw0rd!", "P@ssw0rd", "Passw0rd", "qwe123", "12345678", "test", "test123", "123qwe", "123qwe!@#", "123456789", "123321", "666666", "a123456.", "123456~a", "123456!a", "000000", "1234567890", "8888888", "!QAZ2wsx", "1qaz2wsx", "abc123", "abc123456", "1qaz@WSX", "a11111", "a12345", "Aa1234", "Aa1234.", "Aa12345", "a123456", "a123123", "Aa123123", "Aa123456", "Aa12345.", "sysadmin", "system", "1qaz!QAZ", "2wsx@WSX", "qwe123!@#", "Aa123456!", "A123456s!", "sa123456", "1q2w3e", "Charge123", "Aa123456789", "elastic123",
7417
}
7518
a.Special = []Auth{
7619
NewSpecialAuth("test", "test"),

‎core/hydra/default_mysql_authlist.go

Lines changed: 2 additions & 59 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,7 @@ func DefaultMysqlList() *AuthList {
44
a := NewAuthList()
55
a.Username = []string{
66
"root",
7+
"mysql",
78
//"admin",
89
//"test",
910
//"user",
@@ -12,65 +13,7 @@ func DefaultMysqlList() *AuthList {
1213
//"webadmin",
1314
}
1415
a.Password = []string{
15-
"",
16-
"123456",
17-
"zaq1@WSX",
18-
"%user%",
19-
"%user%123",
20-
"%user%1234",
21-
"%user%123456",
22-
"%user%12345",
23-
"%user%@123",
24-
"%user%@123456",
25-
"%user%@12345",
26-
"%user%#123",
27-
"%user%#123456",
28-
"%user%#12345",
29-
"%user%_123",
30-
"%user%_123456",
31-
"%user%_12345",
32-
"%user%123!@#",
33-
"%user%!@#$",
34-
"%user%!@#",
35-
"%user%~!@",
36-
"%user%!@#123",
37-
"%user%2022",
38-
"%user%2021",
39-
"%user%2020",
40-
"%user%2019",
41-
"%user%2018",
42-
"%user%2017",
43-
"%user%2016",
44-
"%user%2015",
45-
"%user%@2017",
46-
"%user%@2016",
47-
"%user%@2015",
48-
"qweasdzxc",
49-
"Passw0rd",
50-
"password",
51-
"12345",
52-
"1234",
53-
"123",
54-
"qwerty",
55-
"1q2w3e4r",
56-
"1qaz2wsx",
57-
"qazwsx",
58-
"123qwe",
59-
"123qaz",
60-
"0000",
61-
"1234567",
62-
"123456qwerty",
63-
"password123",
64-
"12345678",
65-
"1q2w3e",
66-
"abc123",
67-
"test123",
68-
"123456789",
69-
"q1w2e3r4",
70-
//"okmnji",
71-
//"postgres",
72-
//"test",
73-
//"user",
16+
"123456", "admin", "admin123", "root", "", "pass123", "pass@123", "password", "Password", "P@ssword123", "123123", "654321", "111111", "123", "1", "admin@123", "Admin@123", "admin123!@#", "{user}", "{user}1", "{user}111", "{user}123", "{user}@123", "{user}_123", "{user}#123", "{user}@111", "{user}@2019", "{user}@123#4", "P@ssw0rd!", "P@ssw0rd", "Passw0rd", "qwe123", "12345678", "test", "test123", "123qwe", "123qwe!@#", "123456789", "123321", "666666", "a123456.", "123456~a", "123456!a", "000000", "1234567890", "8888888", "!QAZ2wsx", "1qaz2wsx", "abc123", "abc123456", "1qaz@WSX", "a11111", "a12345", "Aa1234", "Aa1234.", "Aa12345", "a123456", "a123123", "Aa123123", "Aa123456", "Aa12345.", "sysadmin", "system", "1qaz!QAZ", "2wsx@WSX", "qwe123!@#", "Aa123456!", "A123456s!", "sa123456", "1q2w3e", "Charge123", "Aa123456789", "elastic123",
7417
}
7518
a.Special = []Auth{
7619
NewSpecialAuth("test", "test"),

‎core/hydra/default_oracle_authlist.go

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -11,9 +11,7 @@ func DefaultOracleList() *AuthList {
1111
"orcl",
1212
}
1313
a.Password = []string{
14-
"123456",
15-
"abc123",
16-
"okmnji",
14+
"123456", "admin", "admin123", "root", "", "pass123", "pass@123", "password", "Password", "P@ssword123", "123123", "654321", "111111", "123", "1", "admin@123", "Admin@123", "admin123!@#", "{user}", "{user}1", "{user}111", "{user}123", "{user}@123", "{user}_123", "{user}#123", "{user}@111", "{user}@2019", "{user}@123#4", "P@ssw0rd!", "P@ssw0rd", "Passw0rd", "qwe123", "12345678", "test", "test123", "123qwe", "123qwe!@#", "123456789", "123321", "666666", "a123456.", "123456~a", "123456!a", "000000", "1234567890", "8888888", "!QAZ2wsx", "1qaz2wsx", "abc123", "abc123456", "1qaz@WSX", "a11111", "a12345", "Aa1234", "Aa1234.", "Aa12345", "a123456", "a123123", "Aa123123", "Aa123456", "Aa12345.", "sysadmin", "system", "1qaz!QAZ", "2wsx@WSX", "qwe123!@#", "Aa123456!", "A123456s!", "sa123456", "1q2w3e", "Charge123", "Aa123456789", "elastic123",
1715
}
1816
a.Special = []Auth{
1917
NewSpecialAuth("internal", "oracle"),

0 commit comments

Comments
 (0)