mirrors/fscan
1
0
Fork 0
mirror of https://github.com/shadow1ng/fscan.git synced 2025-07-14 05:12:36 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

perf: 优化MSSQL.go的代码，添加注释，规范输出

Browse Source
This commit is contained in:
ZacharyZcR 2024-12-18 23:39:45 +08:00
parent ec30b0d2a4
commit 35fc0fadc5
1 changed files with 52 additions and 28 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

64
Plugins/MSSQL.go
View File

@ -10,49 +10,73 @@ import (
"time" "time"
) )
// MssqlScan 执行MSSQL服务扫描
func MssqlScan(info *Config.HostInfo) (tmperr error) { func MssqlScan(info *Config.HostInfo) (tmperr error) {
if Common.IsBrute { if Common.IsBrute {
return return
} }
starttime := time.Now().Unix() starttime := time.Now().Unix()
// 尝试用户名密码组合
for _, user := range Common.Userdict["mssql"] { for _, user := range Common.Userdict["mssql"] {
for _, pass := range Common.Passwords { for _, pass := range Common.Passwords {
// 替换密码中的用户名占位符
pass = strings.Replace(pass, "{user}", user, -1) pass = strings.Replace(pass, "{user}", user, -1)
flag, err := MssqlConn(info, user, pass) flag, err := MssqlConn(info, user, pass)
if flag == true && err == nil { if flag && err == nil {
return err return err
} else { }
errlog := fmt.Sprintf("[-] mssql %v:%v %v %v %v", info.Host, info.Ports, user, pass, err)
// 记录错误信息
errlog := fmt.Sprintf("[-] MSSQL %v:%v %v %v %v", info.Host, info.Ports, user, pass, err)
Common.LogError(errlog) Common.LogError(errlog)
tmperr = err tmperr = err
if Common.CheckErrs(err) { if Common.CheckErrs(err) {
return err return err
} }
// 超时检查
if time.Now().Unix()-starttime > (int64(len(Common.Userdict["mssql"])*len(Common.Passwords)) * Common.Timeout) { if time.Now().Unix()-starttime > (int64(len(Common.Userdict["mssql"])*len(Common.Passwords)) * Common.Timeout) {
return err return err
} }
} }
} }
}
return tmperr return tmperr
} }
func MssqlConn(info *Config.HostInfo, user string, pass string) (flag bool, err error) { // MssqlConn 尝试MSSQL连接
flag = false func MssqlConn(info *Config.HostInfo, user string, pass string) (bool, error) {
Host, Port, Username, Password := info.Host, info.Ports, user, pass host, port, username, password := info.Host, info.Ports, user, pass
dataSourceName := fmt.Sprintf("server=%s;user id=%s;password=%s;port=%v;encrypt=disable;timeout=%v", Host, Username, Password, Port, time.Duration(Common.Timeout)*time.Second) timeout := time.Duration(Common.Timeout) * time.Second
db, err := sql.Open("mssql", dataSourceName)
if err == nil { // 构造连接字符串
db.SetConnMaxLifetime(time.Duration(Common.Timeout) * time.Second) connStr := fmt.Sprintf(
db.SetConnMaxIdleTime(time.Duration(Common.Timeout) * time.Second) "server=%s;user id=%s;password=%s;port=%v;encrypt=disable;timeout=%v",
db.SetMaxIdleConns(0) host, username, password, port, timeout,
)
// 建立数据库连接
db, err := sql.Open("mssql", connStr)
if err != nil {
return false, err
}
defer db.Close() defer db.Close()
err = db.Ping()
if err == nil { // 设置连接参数
result := fmt.Sprintf("[+] mssql %v:%v:%v %v", Host, Port, Username, Password) db.SetConnMaxLifetime(timeout)
db.SetConnMaxIdleTime(timeout)
db.SetMaxIdleConns(0)
// 测试连接
if err = db.Ping(); err != nil {
return false, err
}
// 连接成功
result := fmt.Sprintf("[+] MSSQL %v:%v:%v %v", host, port, username, password)
Common.LogSuccess(result) Common.LogSuccess(result)
flag = true return true, nil
}
}
return flag, err
} }