refactor: 默认扫描机制

This commit is contained in:
ZacharyZcR 2024-12-20 17:54:36 +08:00
parent 92c03e95a9
commit 8f1c5dbae9
2 changed files with 39 additions and 2 deletions

View File

@ -9,87 +9,104 @@ func init() {
// 注册标准端口服务扫描 // 注册标准端口服务扫描
Common.RegisterPlugin("ftp", Common.ScanPlugin{ Common.RegisterPlugin("ftp", Common.ScanPlugin{
Name: "FTP", Name: "FTP",
Port: 21,
ScanFunc: Plugins.FtpScan, ScanFunc: Plugins.FtpScan,
}) })
Common.RegisterPlugin("ssh", Common.ScanPlugin{ Common.RegisterPlugin("ssh", Common.ScanPlugin{
Name: "SSH", Name: "SSH",
Port: 22,
ScanFunc: Plugins.SshScan, ScanFunc: Plugins.SshScan,
}) })
Common.RegisterPlugin("findnet", Common.ScanPlugin{ Common.RegisterPlugin("findnet", Common.ScanPlugin{
Name: "FindNet", Name: "FindNet",
Port: 135,
ScanFunc: Plugins.Findnet, ScanFunc: Plugins.Findnet,
}) })
Common.RegisterPlugin("netbios", Common.ScanPlugin{ Common.RegisterPlugin("netbios", Common.ScanPlugin{
Name: "NetBIOS", Name: "NetBIOS",
Port: 139,
ScanFunc: Plugins.NetBIOS, ScanFunc: Plugins.NetBIOS,
}) })
Common.RegisterPlugin("smb", Common.ScanPlugin{ Common.RegisterPlugin("smb", Common.ScanPlugin{
Name: "SMB", Name: "SMB",
Port: 445,
ScanFunc: Plugins.SmbScan, ScanFunc: Plugins.SmbScan,
}) })
Common.RegisterPlugin("mssql", Common.ScanPlugin{ Common.RegisterPlugin("mssql", Common.ScanPlugin{
Name: "MSSQL", Name: "MSSQL",
Port: 1433,
ScanFunc: Plugins.MssqlScan, ScanFunc: Plugins.MssqlScan,
}) })
Common.RegisterPlugin("oracle", Common.ScanPlugin{ Common.RegisterPlugin("oracle", Common.ScanPlugin{
Name: "Oracle", Name: "Oracle",
Port: 1521,
ScanFunc: Plugins.OracleScan, ScanFunc: Plugins.OracleScan,
}) })
Common.RegisterPlugin("mysql", Common.ScanPlugin{ Common.RegisterPlugin("mysql", Common.ScanPlugin{
Name: "MySQL", Name: "MySQL",
Port: 3306,
ScanFunc: Plugins.MysqlScan, ScanFunc: Plugins.MysqlScan,
}) })
Common.RegisterPlugin("rdp", Common.ScanPlugin{ Common.RegisterPlugin("rdp", Common.ScanPlugin{
Name: "RDP", Name: "RDP",
Port: 3389,
ScanFunc: Plugins.RdpScan, ScanFunc: Plugins.RdpScan,
}) })
Common.RegisterPlugin("postgres", Common.ScanPlugin{ Common.RegisterPlugin("postgres", Common.ScanPlugin{
Name: "PostgreSQL", Name: "PostgreSQL",
Port: 5432,
ScanFunc: Plugins.PostgresScan, ScanFunc: Plugins.PostgresScan,
}) })
Common.RegisterPlugin("vnc", Common.ScanPlugin{ Common.RegisterPlugin("vnc", Common.ScanPlugin{
Name: "VNC", Name: "VNC",
Port: 5900,
ScanFunc: Plugins.VncScan, ScanFunc: Plugins.VncScan,
}) })
Common.RegisterPlugin("redis", Common.ScanPlugin{ Common.RegisterPlugin("redis", Common.ScanPlugin{
Name: "Redis", Name: "Redis",
Port: 6379,
ScanFunc: Plugins.RedisScan, ScanFunc: Plugins.RedisScan,
}) })
Common.RegisterPlugin("fcgi", Common.ScanPlugin{ Common.RegisterPlugin("fcgi", Common.ScanPlugin{
Name: "FastCGI", Name: "FastCGI",
Port: 9000,
ScanFunc: Plugins.FcgiScan, ScanFunc: Plugins.FcgiScan,
}) })
Common.RegisterPlugin("memcached", Common.ScanPlugin{ Common.RegisterPlugin("memcached", Common.ScanPlugin{
Name: "Memcached", Name: "Memcached",
Port: 11211,
ScanFunc: Plugins.MemcachedScan, ScanFunc: Plugins.MemcachedScan,
}) })
Common.RegisterPlugin("mongodb", Common.ScanPlugin{ Common.RegisterPlugin("mongodb", Common.ScanPlugin{
Name: "MongoDB", Name: "MongoDB",
Port: 27017,
ScanFunc: Plugins.MongodbScan, ScanFunc: Plugins.MongodbScan,
}) })
// 注册特殊扫描类型 // 注册特殊扫描类型
Common.RegisterPlugin("ms17010", Common.ScanPlugin{ Common.RegisterPlugin("ms17010", Common.ScanPlugin{
Name: "MS17010", Name: "MS17010",
Port: 445,
ScanFunc: Plugins.MS17010, ScanFunc: Plugins.MS17010,
}) })
Common.RegisterPlugin("smbghost", Common.ScanPlugin{ Common.RegisterPlugin("smbghost", Common.ScanPlugin{
Name: "SMBGhost", Name: "SMBGhost",
Port: 445,
ScanFunc: Plugins.SmbGhost, ScanFunc: Plugins.SmbGhost,
}) })
@ -105,11 +122,13 @@ func init() {
Common.RegisterPlugin("smb2", Common.ScanPlugin{ Common.RegisterPlugin("smb2", Common.ScanPlugin{
Name: "SMBScan2", Name: "SMBScan2",
Port: 445,
ScanFunc: Plugins.SmbScan2, ScanFunc: Plugins.SmbScan2,
}) })
Common.RegisterPlugin("wmiexec", Common.ScanPlugin{ Common.RegisterPlugin("wmiexec", Common.ScanPlugin{
Name: "WMIExec", Name: "WMIExec",
Port: 135,
ScanFunc: Plugins.WmiExec, ScanFunc: Plugins.WmiExec,
}) })

View File

@ -4,6 +4,7 @@ import (
"fmt" "fmt"
"github.com/shadow1ng/fscan/Common" "github.com/shadow1ng/fscan/Common"
"github.com/shadow1ng/fscan/WebScan/lib" "github.com/shadow1ng/fscan/WebScan/lib"
"strconv"
"strings" "strings"
"sync" "sync"
) )
@ -114,12 +115,29 @@ func executeScans(targets []Common.HostInfo, ch *chan struct{}, wg *sync.WaitGro
if plugins := Common.GetPluginsForMode(mode); plugins != nil { if plugins := Common.GetPluginsForMode(mode); plugins != nil {
// 使用预设模式的插件组 // 使用预设模式的插件组
for _, target := range targets { for _, target := range targets {
for _, plugin := range plugins { targetPort := target.Ports // 目标端口
AddScan(plugin, target, ch, wg) for _, pluginName := range plugins {
// 获取插件信息
plugin, exists := Common.PluginManager[pluginName]
if !exists {
continue
}
// 检查插件是否有默认端口配置
if plugin.Port != 0 {
// 只有当目标端口匹配插件默认端口时才执行
if targetPort == strconv.Itoa(plugin.Port) {
AddScan(pluginName, target, ch, wg)
}
} else {
// 对于没有默认端口的插件如web扫描始终执行
AddScan(pluginName, target, ch, wg)
}
} }
} }
} else { } else {
// 使用单个插件 // 使用单个插件
// 对于单个插件模式,不进行端口匹配检查,直接执行
for _, target := range targets { for _, target := range targets {
AddScan(mode, target, ch, wg) AddScan(mode, target, ch, wg)
} }