mirrors/fscan
1
0
Fork 0
mirror of https://github.com/shadow1ng/fscan.git synced 2025-07-13 21:02:44 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

perf: 优化MSSQL.go的代码，添加注释，规范输出

Browse Source
This commit is contained in:
ZacharyZcR 2024-12-18 23:39:45 +08:00
parent ec30b0d2a4
commit 35fc0fadc5
1 changed files with 52 additions and 28 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

80
Plugins/MSSQL.go
View File

@ -10,49 +10,73 @@ import (
"time" "time"
) )
// MssqlScan 执行MSSQL服务扫描
func MssqlScan(info *Config.HostInfo) (tmperr error) { func MssqlScan(info *Config.HostInfo) (tmperr error) {
if Common.IsBrute { if Common.IsBrute {
return return
} }
starttime := time.Now().Unix() starttime := time.Now().Unix()
// 尝试用户名密码组合
for _, user := range Common.Userdict["mssql"] { for _, user := range Common.Userdict["mssql"] {
for _, pass := range Common.Passwords { for _, pass := range Common.Passwords {
// 替换密码中的用户名占位符
pass = strings.Replace(pass, "{user}", user, -1) pass = strings.Replace(pass, "{user}", user, -1)
flag, err := MssqlConn(info, user, pass) flag, err := MssqlConn(info, user, pass)
if flag == true && err == nil { if flag && err == nil {
return err
}
// 记录错误信息
errlog := fmt.Sprintf("[-] MSSQL %v:%v %v %v %v", info.Host, info.Ports, user, pass, err)
Common.LogError(errlog)
tmperr = err
if Common.CheckErrs(err) {
return err
}
// 超时检查
if time.Now().Unix()-starttime > (int64(len(Common.Userdict["mssql"])*len(Common.Passwords)) * Common.Timeout) {
return err return err
} else {
errlog := fmt.Sprintf("[-] mssql %v:%v %v %v %v", info.Host, info.Ports, user, pass, err)
Common.LogError(errlog)
tmperr = err
if Common.CheckErrs(err) {
return err
}
if time.Now().Unix()-starttime > (int64(len(Common.Userdict["mssql"])*len(Common.Passwords)) * Common.Timeout) {
return err
}
} }
} }
} }
return tmperr return tmperr
} }
func MssqlConn(info *Config.HostInfo, user string, pass string) (flag bool, err error) { // MssqlConn 尝试MSSQL连接
flag = false func MssqlConn(info *Config.HostInfo, user string, pass string) (bool, error) {
Host, Port, Username, Password := info.Host, info.Ports, user, pass host, port, username, password := info.Host, info.Ports, user, pass
dataSourceName := fmt.Sprintf("server=%s;user id=%s;password=%s;port=%v;encrypt=disable;timeout=%v", Host, Username, Password, Port, time.Duration(Common.Timeout)*time.Second) timeout := time.Duration(Common.Timeout) * time.Second
db, err := sql.Open("mssql", dataSourceName)
if err == nil { // 构造连接字符串
db.SetConnMaxLifetime(time.Duration(Common.Timeout) * time.Second) connStr := fmt.Sprintf(
db.SetConnMaxIdleTime(time.Duration(Common.Timeout) * time.Second) "server=%s;user id=%s;password=%s;port=%v;encrypt=disable;timeout=%v",
db.SetMaxIdleConns(0) host, username, password, port, timeout,
defer db.Close() )
err = db.Ping()
if err == nil { // 建立数据库连接
result := fmt.Sprintf("[+] mssql %v:%v:%v %v", Host, Port, Username, Password) db, err := sql.Open("mssql", connStr)
Common.LogSuccess(result) if err != nil {
flag = true return false, err
}
} }
return flag, err defer db.Close()
// 设置连接参数
db.SetConnMaxLifetime(timeout)
db.SetConnMaxIdleTime(timeout)
db.SetMaxIdleConns(0)
// 测试连接
if err = db.Ping(); err != nil {
return false, err
}
// 连接成功
result := fmt.Sprintf("[+] MSSQL %v:%v:%v %v", host, port, username, password)
Common.LogSuccess(result)
return true, nil
} }