diff --git a/Common/Config.go b/Common/Config.go index 9476de0..921d95d 100644 --- a/Common/Config.go +++ b/Common/Config.go @@ -925,8 +925,9 @@ var ( // POC与漏洞利用配置 // ========================================================= // POC配置 - PocPath string // POC脚本路径 - Pocinfo PocInfo // POC详细信息结构 + PocPath string // POC脚本路径 + Pocinfo PocInfo // POC详细信息结构 + DisablePocScan bool //nopoc // Redis利用 RedisFile string // Redis利用目标文件 diff --git a/Common/Flag.go b/Common/Flag.go index c9efe39..490b8c4 100644 --- a/Common/Flag.go +++ b/Common/Flag.go @@ -114,6 +114,7 @@ func Flag(Info *HostInfo) { flag.BoolVar(&PocFull, "full", false, GetText("flag_poc_full")) flag.BoolVar(&DnsLog, "dns", false, GetText("flag_dns_log")) flag.IntVar(&PocNum, "num", 20, GetText("flag_poc_num")) + flag.BoolVar(&DisablePocScan, "nopoc", false, GetText("flag_nopoc")) // ═════════════════════════════════════════════════ // Redis利用参数 diff --git a/Plugins/WebPoc.go b/Plugins/WebPoc.go index 98bee71..b709864 100644 --- a/Plugins/WebPoc.go +++ b/Plugins/WebPoc.go @@ -7,6 +7,9 @@ import ( // WebPoc 直接执行Web漏洞扫描 func WebPoc(info *Common.HostInfo) error { + if Common.DisablePocScan { + return nil + } WebScan.WebScan(info) return nil } diff --git a/WebScan/pocs/test111.yml b/WebScan/pocs/test111.yml new file mode 100644 index 0000000..0e014f7 --- /dev/null +++ b/WebScan/pocs/test111.yml @@ -0,0 +1,10 @@ +name: test2222 +rules: + - method: GET + path: / + expression: | + response.status == 200 +detail: + author: jinqi + links: + - https://www.t00ls.net/articles-54436.html