mirrors/fscan
1
0
Fork 0
mirror of https://github.com/shadow1ng/fscan.git synced 2025-07-14 21:32:35 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update wmiexec.go

Browse Source
This commit is contained in:
影舞者 2023-11-13 11:28:15 +08:00 committed by GitHub
parent 268f7d2aed
commit 468381fb18
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 16 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
Plugins/wmiexec.go
View File

@ -3,12 +3,11 @@ package Plugins
import ( import (
"errors" "errors"
"fmt" "fmt"
"github.com/shadow1ng/fscan/common"
"os" "os"
"strings" "strings"
"time" "time"
"github.com/shadow1ng/fscan/common"
"github.com/C-Sto/goWMIExec/pkg/wmiexec" "github.com/C-Sto/goWMIExec/pkg/wmiexec"
) )
@ -27,8 +26,8 @@ func init() {
flag = true flag = true
} }
func WmiExec(info *common.HostInfo, flags common.Flags) (tmperr error) { func WmiExec(info *common.HostInfo) (tmperr error) {
if flags.IsBrute { if common.IsBrute {
return nil return nil
} }
starttime := time.Now().Unix() starttime := time.Now().Unix()
@ -36,19 +35,19 @@ func WmiExec(info *common.HostInfo, flags common.Flags) (tmperr error) {
PASS: PASS:
for _, pass := range common.Passwords { for _, pass := range common.Passwords {
pass = strings.Replace(pass, "{user}", user, -1) pass = strings.Replace(pass, "{user}", user, -1)
flag, err := Wmiexec(info, flags, user, pass) flag, err := Wmiexec(info, user, pass, common.Hash)
errlog := fmt.Sprintf("[-] WmiExec %v:%v %v %v %v", info.Host, 445, user, pass, err) errlog := fmt.Sprintf("[-] WmiExec %v:%v %v %v %v", info.Host, 445, user, pass, err)
errlog = strings.Replace(errlog, "\n", "", -1) errlog = strings.Replace(errlog, "\n", "", -1)
common.LogError(errlog) common.LogError(errlog)
if flag { if flag == true {
var result string var result string
if flags.Domain != "" { if common.Domain != "" {
result = fmt.Sprintf("[+] WmiExec:%v:%v:%v\\%v ", info.Host, info.Ports, flags.Domain, user) result = fmt.Sprintf("[+] WmiExec %v:%v:%v\\%v ", info.Host, info.Ports, common.Domain, user)
} else { } else {
result = fmt.Sprintf("[+] WmiExec:%v:%v:%v ", info.Host, info.Ports, user) result = fmt.Sprintf("[+] WmiExec %v:%v:%v ", info.Host, info.Ports, user)
} }
if flags.Hash != "" { if common.Hash != "" {
result += "hash: " + flags.Hash result += "hash: " + common.Hash
} else { } else {
result += pass result += pass
} }
@ -59,11 +58,11 @@ func WmiExec(info *common.HostInfo, flags common.Flags) (tmperr error) {
if common.CheckErrs(err) { if common.CheckErrs(err) {
return err return err
} }
if time.Now().Unix()-starttime > (int64(len(common.Userdict["smb"])*len(common.Passwords)) * flags.Timeout) { if time.Now().Unix()-starttime > (int64(len(common.Userdict["smb"])*len(common.Passwords)) * common.Timeout) {
return err return err
} }
} }
if len(flags.Hash) == 32 { if len(common.Hash) == 32 {
break PASS break PASS
} }
} }
@ -71,10 +70,10 @@ func WmiExec(info *common.HostInfo, flags common.Flags) (tmperr error) {
return tmperr return tmperr
} }
func Wmiexec(info *common.HostInfo, flags common.Flags, user string, pass string) (flag bool, err error) { func Wmiexec(info *common.HostInfo, user string, pass string, hash string) (flag bool, err error) {
target := fmt.Sprintf("%s:%v", info.Host, info.Ports) target := fmt.Sprintf("%s:%v", info.Host, info.Ports)
wmiexec.Timeout = int(flags.Timeout) wmiexec.Timeout = int(common.Timeout)
return WMIExec(target, user, pass, flags.Hash, flags.Domain, flags.Command, ClientHost, "", nil) return WMIExec(target, user, pass, hash, common.Domain, common.Command, ClientHost, "", nil)
} }
func WMIExec(target, username, password, hash, domain, command, clientHostname, binding string, cfgIn *wmiexec.WmiExecConfig) (flag bool, err error) { func WMIExec(target, username, password, hash, domain, command, clientHostname, binding string, cfgIn *wmiexec.WmiExecConfig) (flag bool, err error) {