From 5dfd0397d5c5efab629385cc0d8ac9d16c5a16d8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E6=A2=81=E5=87=AF=E5=BC=BA?= <1249648969@qq.com> Date: Fri, 18 Apr 2025 10:07:05 +0800 Subject: [PATCH] =?UTF-8?q?=E7=AE=80=E5=8C=96=E8=BE=93=E5=87=BA=E6=A0=BC?= =?UTF-8?q?=E5=BC=8F?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- Common/Config.go | 5 +++-- Common/Flag.go | 1 + Plugins/WebPoc.go | 3 +++ WebScan/pocs/test111.yml | 10 ++++++++++ 4 files changed, 17 insertions(+), 2 deletions(-) create mode 100644 WebScan/pocs/test111.yml diff --git a/Common/Config.go b/Common/Config.go index 9476de0..921d95d 100644 --- a/Common/Config.go +++ b/Common/Config.go @@ -925,8 +925,9 @@ var ( // POC与漏洞利用配置 // ========================================================= // POC配置 - PocPath string // POC脚本路径 - Pocinfo PocInfo // POC详细信息结构 + PocPath string // POC脚本路径 + Pocinfo PocInfo // POC详细信息结构 + DisablePocScan bool //nopoc // Redis利用 RedisFile string // Redis利用目标文件 diff --git a/Common/Flag.go b/Common/Flag.go index c9efe39..490b8c4 100644 --- a/Common/Flag.go +++ b/Common/Flag.go @@ -114,6 +114,7 @@ func Flag(Info *HostInfo) { flag.BoolVar(&PocFull, "full", false, GetText("flag_poc_full")) flag.BoolVar(&DnsLog, "dns", false, GetText("flag_dns_log")) flag.IntVar(&PocNum, "num", 20, GetText("flag_poc_num")) + flag.BoolVar(&DisablePocScan, "nopoc", false, GetText("flag_nopoc")) // ═════════════════════════════════════════════════ // Redis利用参数 diff --git a/Plugins/WebPoc.go b/Plugins/WebPoc.go index 98bee71..b709864 100644 --- a/Plugins/WebPoc.go +++ b/Plugins/WebPoc.go @@ -7,6 +7,9 @@ import ( // WebPoc 直接执行Web漏洞扫描 func WebPoc(info *Common.HostInfo) error { + if Common.DisablePocScan { + return nil + } WebScan.WebScan(info) return nil } diff --git a/WebScan/pocs/test111.yml b/WebScan/pocs/test111.yml new file mode 100644 index 0000000..0e014f7 --- /dev/null +++ b/WebScan/pocs/test111.yml @@ -0,0 +1,10 @@ +name: test2222 +rules: + - method: GET + path: / + expression: | + response.status == 200 +detail: + author: jinqi + links: + - https://www.t00ls.net/articles-54436.html