diff --git a/Common/Flag.go b/Common/Flag.go index 34cb172..653bbf1 100644 --- a/Common/Flag.go +++ b/Common/Flag.go @@ -5,26 +5,65 @@ import ( "fmt" "os" "strings" - "sync" "github.com/fatih/color" ) -var flagInitOnce sync.Once +func Banner() { + // 定义暗绿色系 + colors := []color.Attribute{ + color.FgGreen, // 基础绿 + color.FgHiGreen, // 亮绿 + } -// defineFlags 用于本地 CLI 注册全局 flag.CommandLine 的 flag -func defineFlags(info *HostInfo) { - flagInitOnce.Do(func() { - defineFlagsForSet(flag.CommandLine, info) - }) + lines := []string{ + " ___ _ ", + " / _ \\ ___ ___ _ __ __ _ ___| | __ ", + " / /_\\/____/ __|/ __| '__/ _` |/ __| |/ /", + "/ /_\\\\_____\\__ \\ (__| | | (_| | (__| < ", + "\\____/ |___/\\___|_| \\__,_|\\___|_|\\_\\ ", + } + + // 获取最长行的长度 + maxLength := 0 + for _, line := range lines { + if len(line) > maxLength { + maxLength = len(line) + } + } + + // 创建边框 + topBorder := "┌" + strings.Repeat("─", maxLength+2) + "┐" + bottomBorder := "└" + strings.Repeat("─", maxLength+2) + "┘" + + // 打印banner + fmt.Println(topBorder) + + for lineNum, line := range lines { + fmt.Print("│ ") + // 使用对应的颜色打印每个字符 + c := color.New(colors[lineNum%2]) + c.Print(line) + // 补齐空格 + padding := maxLength - len(line) + fmt.Printf("%s │\n", strings.Repeat(" ", padding)) + } + + fmt.Println(bottomBorder) + + // 打印版本信息 + c := color.New(colors[1]) + c.Printf(" Fscan Version: %s\n\n", version) } -// 通用 flag 注册逻辑，支持 flag.CommandLine 和新建 FlagSet（用于远程） -func defineFlagsForSet(fs *flag.FlagSet, info *HostInfo) { +// Flag 解析命令行参数并配置扫描选项 +func Flag(Info *HostInfo) { + Banner() + // ═════════════════════════════════════════════════ // 目标配置参数 // ═════════════════════════════════════════════════ - flag.StringVar(&info.Host, "h", "", GetText("flag_host")) + flag.StringVar(&Info.Host, "h", "", GetText("flag_host")) flag.StringVar(&ExcludeHosts, "eh", "", GetText("flag_exclude_hosts")) flag.StringVar(&Ports, "p", MainPorts, GetText("flag_ports")) flag.StringVar(&HostsFile, "hf", "", GetText("flag_hosts_file")) @@ -107,152 +146,6 @@ func defineFlagsForSet(fs *flag.FlagSet, info *HostInfo) { flag.BoolVar(&ShowScanPlan, "sp", false, GetText("flag_show_scan_plan")) flag.BoolVar(&SlowLogOutput, "slow", false, GetText("flag_slow_log_output")) - // ═════════════════════════════════════════════════ - // 其他参数 - // ═════════════════════════════════════════════════ - flag.StringVar(&Shellcode, "sc", "", GetText("flag_shellcode")) - flag.StringVar(&Language, "lang", "zh", GetText("flag_language")) - fs.StringVar(&ApiAddr, "api", "", GetText("flag_api")) - fs.StringVar(&SecretKey, "secret", "", GetText("flag_api_key")) -} - -func Banner() { - // 定义暗绿色系 - colors := []color.Attribute{ - color.FgGreen, // 基础绿 - color.FgHiGreen, // 亮绿 - } - - lines := []string{ - " ___ _ ", - " / _ \\ ___ ___ _ __ __ _ ___| | __ ", - " / /_\\/____/ __|/ __| '__/ _` |/ __| |/ /", - "/ /_\\\\_____\\__ \\ (__| | | (_| | (__| < ", - "\\____/ |___/\\___|_| \\__,_|\\___|_|\\_\\ ", - } - - // 获取最长行的长度 - maxLength := 0 - for _, line := range lines { - if len(line) > maxLength { - maxLength = len(line) - } - } - - // 创建边框 - topBorder := "┌" + strings.Repeat("─", maxLength+2) + "┐" - bottomBorder := "└" + strings.Repeat("─", maxLength+2) + "┘" - - // 打印banner - fmt.Println(topBorder) - - for lineNum, line := range lines { - fmt.Print("│ ") - // 使用对应的颜色打印每个字符 - c := color.New(colors[lineNum%2]) - c.Print(line) - // 补齐空格 - padding := maxLength - len(line) - fmt.Printf("%s │\n", strings.Repeat(" ", padding)) - } - - fmt.Println(bottomBorder) - - // 打印版本信息 - c := color.New(colors[1]) - c.Printf(" Fscan Version: %s\n\n", version) -} - -func Flag(info *HostInfo) { - Banner() - - // ═════════════════════════════════════════════════ - // 目标配置参数 - // ═════════════════════════════════════════════════ - flag.StringVar(&Info.Host, "h", "", GetText("flag_host")) - flag.StringVar(&ExcludeHosts, "eh", "", GetText("flag_exclude_hosts")) - flag.StringVar(&Ports, "p", MainPorts, GetText("flag_ports")) - flag.StringVar(&ExcludePorts, "ep", "", GetText("flag_exclude_ports")) - flag.StringVar(&HostsFile, "hf", "", GetText("flag_hosts_file")) - flag.StringVar(&PortsFile, "pf", "", GetText("flag_ports_file")) - - // ═════════════════════════════════════════════════ - // 扫描控制参数 - // ═════════════════════════════════════════════════ - flag.StringVar(&ScanMode, "m", "All", GetText("flag_scan_mode")) - flag.IntVar(&ThreadNum, "t", 10, GetText("flag_thread_num")) - flag.Int64Var(&Timeout, "time", 3, GetText("flag_timeout")) - flag.IntVar(&ModuleThreadNum, "mt", 10, GetText("flag_module_thread_num")) - flag.Int64Var(&GlobalTimeout, "gt", 180, GetText("flag_global_timeout")) - flag.IntVar(&LiveTop, "top", 10, GetText("flag_live_top")) - flag.BoolVar(&DisablePing, "np", false, GetText("flag_disable_ping")) - flag.BoolVar(&UsePing, "ping", false, GetText("flag_use_ping")) - flag.BoolVar(&EnableFingerprint, "fingerprint", false, GetText("flag_enable_fingerprint")) - flag.BoolVar(&LocalMode, "local", false, GetText("flag_local_mode")) - - // ═════════════════════════════════════════════════ - // 认证与凭据参数 - // ═════════════════════════════════════════════════ - flag.StringVar(&Username, "user", "", GetText("flag_username")) - flag.StringVar(&Password, "pwd", "", GetText("flag_password")) - flag.StringVar(&AddUsers, "usera", "", GetText("flag_add_users")) - flag.StringVar(&AddPasswords, "pwda", "", GetText("flag_add_passwords")) - flag.StringVar(&UsersFile, "userf", "", GetText("flag_users_file")) - flag.StringVar(&PasswordsFile, "pwdf", "", GetText("flag_passwords_file")) - flag.StringVar(&HashFile, "hashf", "", GetText("flag_hash_file")) - flag.StringVar(&HashValue, "hash", "", GetText("flag_hash_value")) - flag.StringVar(&Domain, "domain", "", GetText("flag_domain")) // SMB扫描用 - flag.StringVar(&SshKeyPath, "sshkey", "", GetText("flag_ssh_key")) // SSH扫描用 - - // ═════════════════════════════════════════════════ - // Web扫描参数 - // ═════════════════════════════════════════════════ - flag.StringVar(&TargetURL, "u", "", GetText("flag_target_url")) - flag.StringVar(&URLsFile, "uf", "", GetText("flag_urls_file")) - flag.StringVar(&Cookie, "cookie", "", GetText("flag_cookie")) - flag.Int64Var(&WebTimeout, "wt", 5, GetText("flag_web_timeout")) - flag.StringVar(&HttpProxy, "proxy", "", GetText("flag_http_proxy")) - flag.StringVar(&Socks5Proxy, "socks5", "", GetText("flag_socks5_proxy")) - - // ═════════════════════════════════════════════════ - // POC测试参数 - // ═════════════════════════════════════════════════ - flag.StringVar(&PocPath, "pocpath", "", GetText("flag_poc_path")) - flag.StringVar(&Pocinfo.PocName, "pocname", "", GetText("flag_poc_name")) - flag.BoolVar(&PocFull, "full", false, GetText("flag_poc_full")) - flag.BoolVar(&DnsLog, "dns", false, GetText("flag_dns_log")) - flag.IntVar(&PocNum, "num", 20, GetText("flag_poc_num")) - flag.BoolVar(&DisablePocScan, "nopoc", false, GetText("flag_no_poc")) - - // ═════════════════════════════════════════════════ - // Redis利用参数 - // ═════════════════════════════════════════════════ - flag.StringVar(&RedisFile, "rf", "", GetText("flag_redis_file")) - flag.StringVar(&RedisShell, "rs", "", GetText("flag_redis_shell")) - flag.BoolVar(&DisableRedis, "noredis", false, GetText("flag_disable_redis")) - flag.StringVar(&RedisWritePath, "rwp", "", GetText("flag_redis_write_path")) - flag.StringVar(&RedisWriteContent, "rwc", "", GetText("flag_redis_write_content")) - flag.StringVar(&RedisWriteFile, "rwf", "", GetText("flag_redis_write_file")) - - // ═════════════════════════════════════════════════ - // 暴力破解控制参数 - // ═════════════════════════════════════════════════ - flag.BoolVar(&DisableBrute, "nobr", false, GetText("flag_disable_brute")) - flag.IntVar(&MaxRetries, "retry", 3, GetText("flag_max_retries")) - - // ═════════════════════════════════════════════════ - // 输出与显示控制参数 - // ═════════════════════════════════════════════════ - flag.StringVar(&Outputfile, "o", "result.txt", GetText("flag_output_file")) - flag.StringVar(&OutputFormat, "f", "txt", GetText("flag_output_format")) - flag.BoolVar(&DisableSave, "no", false, GetText("flag_disable_save")) - flag.BoolVar(&Silent, "silent", false, GetText("flag_silent_mode")) - flag.BoolVar(&NoColor, "nocolor", false, GetText("flag_no_color")) - flag.StringVar(&LogLevel, "log", LogLevelSuccess, GetText("flag_log_level")) - flag.BoolVar(&ShowProgress, "pg", false, GetText("flag_show_progress")) - flag.BoolVar(&ShowScanPlan, "sp", false, GetText("flag_show_scan_plan")) - flag.BoolVar(&SlowLogOutput, "slow", false, GetText("flag_slow_log_output")) - // ═════════════════════════════════════════════════ // 其他参数 // ═════════════════════════════════════════════════ @@ -260,51 +153,132 @@ func Flag(info *HostInfo) { flag.StringVar(&Language, "lang", "zh", GetText("flag_language")) flag.StringVar(&ApiAddr, "api", "", GetText("flag_api")) flag.StringVar(&SecretKey, "secret", "", GetText("flag_api_key")) - // 解析命令行参数 parseCommandLineArgs() + + // 设置语言 SetLanguage() } +// FlagFormRemote 解析远程扫描的命令行参数 func FlagFromRemote(info *HostInfo, argString string) error { if strings.TrimSpace(argString) == "" { return fmt.Errorf("参数为空") } + args, err := parseEnvironmentArgs(argString) if err != nil { return fmt.Errorf("远程参数解析失败: %v", err) } + // 创建一个新的 FlagSet 用于远程参数解析，避免污染主命令行 fs := flag.NewFlagSet("remote", flag.ContinueOnError) - defineFlagsForSet(fs, info) + // 注册需要的远程 flag，注意使用 fs 而非 flag 包的全局变量 + fs.StringVar(&info.Host, "h", "", GetText("flag_host")) + fs.StringVar(&ExcludeHosts, "eh", "", GetText("flag_exclude_hosts")) + fs.StringVar(&Ports, "p", MainPorts, GetText("flag_ports")) + fs.StringVar(&HostsFile, "hf", "", GetText("flag_hosts_file")) + fs.StringVar(&PortsFile, "pf", "", GetText("flag_ports_file")) + + fs.StringVar(&ScanMode, "m", "All", GetText("flag_scan_mode")) + fs.IntVar(&ThreadNum, "t", 10, GetText("flag_thread_num")) + fs.Int64Var(&Timeout, "time", 3, GetText("flag_timeout")) + fs.IntVar(&ModuleThreadNum, "mt", 10, GetText("flag_module_thread_num")) + fs.Int64Var(&GlobalTimeout, "gt", 180, GetText("flag_global_timeout")) + fs.IntVar(&LiveTop, "top", 10, GetText("flag_live_top")) + fs.BoolVar(&DisablePing, "np", false, GetText("flag_disable_ping")) + fs.BoolVar(&UsePing, "ping", false, GetText("flag_use_ping")) + fs.BoolVar(&EnableFingerprint, "fingerprint", false, GetText("flag_enable_fingerprint")) + fs.BoolVar(&LocalMode, "local", false, GetText("flag_local_mode")) + + fs.StringVar(&Username, "user", "", GetText("flag_username")) + fs.StringVar(&Password, "pwd", "", GetText("flag_password")) + fs.StringVar(&AddUsers, "usera", "", GetText("flag_add_users")) + fs.StringVar(&AddPasswords, "pwda", "", GetText("flag_add_passwords")) + fs.StringVar(&UsersFile, "userf", "", GetText("flag_users_file")) + fs.StringVar(&PasswordsFile, "pwdf", "", GetText("flag_passwords_file")) + fs.StringVar(&HashFile, "hashf", "", GetText("flag_hash_file")) + fs.StringVar(&HashValue, "hash", "", GetText("flag_hash_value")) + fs.StringVar(&Domain, "domain", "", GetText("flag_domain")) + fs.StringVar(&SshKeyPath, "sshkey", "", GetText("flag_ssh_key")) + + fs.StringVar(&TargetURL, "u", "", GetText("flag_target_url")) + fs.StringVar(&URLsFile, "uf", "", GetText("flag_urls_file")) + fs.StringVar(&Cookie, "cookie", "", GetText("flag_cookie")) + fs.Int64Var(&WebTimeout, "wt", 5, GetText("flag_web_timeout")) + fs.StringVar(&HttpProxy, "proxy", "", GetText("flag_http_proxy")) + fs.StringVar(&Socks5Proxy, "socks5", "", GetText("flag_socks5_proxy")) + + fs.StringVar(&PocPath, "pocpath", "", GetText("flag_poc_path")) + fs.StringVar(&Pocinfo.PocName, "pocname", "", GetText("flag_poc_name")) + fs.BoolVar(&PocFull, "full", false, GetText("flag_poc_full")) + fs.BoolVar(&DnsLog, "dns", false, GetText("flag_dns_log")) + fs.IntVar(&PocNum, "num", 20, GetText("flag_poc_num")) + fs.BoolVar(&DisablePocScan, "nopoc", false, GetText("flag_nopoc")) + + fs.StringVar(&RedisFile, "rf", "", GetText("flag_redis_file")) + fs.StringVar(&RedisShell, "rs", "", GetText("flag_redis_shell")) + fs.BoolVar(&DisableRedis, "noredis", false, GetText("flag_disable_redis")) + fs.StringVar(&RedisWritePath, "rwp", "", GetText("flag_redis_write_path")) + fs.StringVar(&RedisWriteContent, "rwc", "", GetText("flag_redis_write_content")) + fs.StringVar(&RedisWriteFile, "rwf", "", GetText("flag_redis_write_file")) + + fs.BoolVar(&DisableBrute, "nobr", false, GetText("flag_disable_brute")) + fs.IntVar(&MaxRetries, "retry", 3, GetText("flag_max_retries")) + + fs.StringVar(&Outputfile, "o", "result.txt", GetText("flag_output_file")) + fs.StringVar(&OutputFormat, "f", "txt", GetText("flag_output_format")) + fs.BoolVar(&DisableSave, "no", false, GetText("flag_disable_save")) + fs.BoolVar(&Silent, "silent", false, GetText("flag_silent_mode")) + fs.BoolVar(&NoColor, "nocolor", false, GetText("flag_no_color")) + fs.StringVar(&LogLevel, "log", LogLevelSuccess, GetText("flag_log_level")) + fs.BoolVar(&ShowProgress, "pg", false, GetText("flag_show_progress")) + fs.BoolVar(&ShowScanPlan, "sp", false, GetText("flag_show_scan_plan")) + fs.BoolVar(&SlowLogOutput, "slow", false, GetText("flag_slow_log_output")) + + fs.StringVar(&Shellcode, "sc", "", GetText("flag_shellcode")) + fs.StringVar(&Language, "lang", "zh", GetText("flag_language")) + + // 开始解析远程传入的参数 if err := fs.Parse(args); err != nil { - return fmt.Errorf("参数解析失败: %v", err) + return fmt.Errorf("远程参数解析失败: %v", err) } + return nil } +// parseCommandLineArgs 处理来自环境变量和命令行的参数 func parseCommandLineArgs() { + // 首先检查环境变量中的参数 envArgsString := os.Getenv("FS_ARGS") if envArgsString != "" { + // 解析环境变量参数 (跨平台支持) envArgs, err := parseEnvironmentArgs(envArgsString) if err == nil && len(envArgs) > 0 { flag.CommandLine.Parse(envArgs) - os.Unsetenv("FS_ARGS") + os.Unsetenv("FS_ARGS") // 使用后清除环境变量 return } + // 如果环境变量解析失败，继续使用命令行参数 } + + // 解析命令行参数 flag.Parse() } +// parseEnvironmentArgs 安全地解析环境变量中的参数 func parseEnvironmentArgs(argsString string) ([]string, error) { if strings.TrimSpace(argsString) == "" { return nil, fmt.Errorf("empty arguments string") } + + // 使用更安全的参数分割方法 var args []string var currentArg strings.Builder inQuote := false quoteChar := ' ' + for _, char := range argsString { switch { case char == '"' || char == '\'': @@ -325,8 +299,10 @@ func parseEnvironmentArgs(argsString string) ([]string, error) { currentArg.WriteRune(char) } } + if currentArg.Len() > 0 { args = append(args, currentArg.String()) } + return args, nil }