mirrors/fscan
1
0
Fork 0
mirror of https://github.com/shadow1ng/fscan.git synced 2025-07-13 21:02:44 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

perf: 优化Postgre.go的代码，添加注释，规范输出

Browse Source
This commit is contained in:
ZacharyZcR 2024-12-18 23:40:41 +08:00
parent cd6809e775
commit 352cbd44be
1 changed files with 51 additions and 27 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

78
Plugins/Postgres.go
View File

@ -10,47 +10,71 @@ import (
"time" "time"
) )
// PostgresScan 执行PostgreSQL服务扫描
func PostgresScan(info *Config.HostInfo) (tmperr error) { func PostgresScan(info *Config.HostInfo) (tmperr error) {
if Common.IsBrute { if Common.IsBrute {
return return
} }
starttime := time.Now().Unix() starttime := time.Now().Unix()
// 尝试用户名密码组合
for _, user := range Common.Userdict["postgresql"] { for _, user := range Common.Userdict["postgresql"] {
for _, pass := range Common.Passwords { for _, pass := range Common.Passwords {
pass = strings.Replace(pass, "{user}", string(user), -1) // 替换密码中的用户名占位符
pass = strings.Replace(pass, "{user}", user, -1)
flag, err := PostgresConn(info, user, pass) flag, err := PostgresConn(info, user, pass)
if flag == true && err == nil { if flag && err == nil {
return err
}
// 记录错误信息
errlog := fmt.Sprintf("[-] PostgreSQL %v:%v %v %v %v", info.Host, info.Ports, user, pass, err)
Common.LogError(errlog)
tmperr = err
if Common.CheckErrs(err) {
return err
}
// 超时检查
if time.Now().Unix()-starttime > (int64(len(Common.Userdict["postgresql"])*len(Common.Passwords)) * Common.Timeout) {
return err return err
} else {
errlog := fmt.Sprintf("[-] psql %v:%v %v %v %v", info.Host, info.Ports, user, pass, err)
Common.LogError(errlog)
tmperr = err
if Common.CheckErrs(err) {
return err
}
if time.Now().Unix()-starttime > (int64(len(Common.Userdict["postgresql"])*len(Common.Passwords)) * Common.Timeout) {
return err
}
} }
} }
} }
return tmperr return tmperr
} }
func PostgresConn(info *Config.HostInfo, user string, pass string) (flag bool, err error) { // PostgresConn 尝试PostgreSQL连接
flag = false func PostgresConn(info *Config.HostInfo, user string, pass string) (bool, error) {
Host, Port, Username, Password := info.Host, info.Ports, user, pass host, port, username, password := info.Host, info.Ports, user, pass
dataSourceName := fmt.Sprintf("postgres://%v:%v@%v:%v/%v?sslmode=%v", Username, Password, Host, Port, "postgres", "disable") timeout := time.Duration(Common.Timeout) * time.Second
db, err := sql.Open("postgres", dataSourceName)
if err == nil { // 构造连接字符串
db.SetConnMaxLifetime(time.Duration(Common.Timeout) * time.Second) connStr := fmt.Sprintf(
defer db.Close() "postgres://%v:%v@%v:%v/postgres?sslmode=disable",
err = db.Ping() username, password, host, port,
if err == nil { )
result := fmt.Sprintf("[+] Postgres:%v:%v:%v %v", Host, Port, Username, Password)
Common.LogSuccess(result) // 建立数据库连接
flag = true db, err := sql.Open("postgres", connStr)
} if err != nil {
return false, err
} }
return flag, err defer db.Close()
// 设置连接参数
db.SetConnMaxLifetime(timeout)
// 测试连接
if err = db.Ping(); err != nil {
return false, err
}
// 连接成功
result := fmt.Sprintf("[+] PostgreSQL %v:%v:%v %v", host, port, username, password)
Common.LogSuccess(result)
return true, nil
} }