Skip to content

Commit f1a442d

Browse files
hktalenthktalent
committed
integrated jaeles，add new web PoCs 370，By default, nuclei is turned on and jaeles scanning is turned on
1 parent 0801244 commit f1a442d

File tree

986 files changed

+187179
-41399
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

986 files changed

+187179
-41399
lines changed

‎.gitignore

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,11 +6,14 @@
66
*.dll
77
*.so
88
*.dylib
9-
scan4all
109
release
1110
.DbCache
1211
scan4all_linux
1312
.DS_Store
13+
db/GeoIP2-City.mmdb.zip
14+
main
15+
scan4all
16+
config/rockyou.txt
1417

1518
# Test binary, built with `go testnmanp -c`
1619
*.test

‎.gitmodules

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,6 @@
11
[submodule "config/nuclei-templates"]
22
path = config/nuclei-templates
33
url = https://github.com/hktalent/nuclei-templates.git
4+
[submodule "config/jaeles-signatures"]
5+
path = config/jaeles-signatures
6+
url = https://github.com/hktalent/jaeles-signatures.git

‎Formula.rb

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
class scan4all < Formula
2+
desc "Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)..."
3+
homepage "https://github.com/hktalent/scan4all"
4+
url "https://github.com/hktalent/scan4all/releases/download/2.8.5/scan4all_2.8.5_macOS_amd64.zip"
5+
sha256 "ccd874a283defad6a0deb11377cb9d6024cb5946b46f61f36008e0afe9db4950"
6+
version "V2.8.5"
7+
8+
def install
9+
bin.install "scan4all"
10+
end
11+
end

‎brute/dicts/127.txt

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
127.0.0.1
2+
127.0.0.2
3+
127.1
4+
127.2
5+
::1
6+
0:0:0:0:0:0:0:1
7+
0:0:0:000:0:0:0:1
8+
0000:0000:0000:0000:0000:0000:0000:0001
9+
2130706433
10+
2130706434
11+
7F000001
12+
7F000002
13+
localhost

‎brute/dicts/action.txt

Lines changed: 100 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,100 @@
1+
/root/chat.action
2+
/login.action
3+
/index.action
4+
/homeLogin.action
5+
/portal/login_init.action
6+
/stardy/Login.action
7+
/login_login.action
8+
/license!getExpireDateOfDays.action
9+
/indexAction.action
10+
/index/downLoadFile.action
11+
/common/common_info.action
12+
/pages/xxfb/editor/uploadAction.action
13+
/accountlossList.action
14+
/ggxxfb.action
15+
/ivhs/ajax_updateUserInfo.action
16+
/download.action
17+
/Login.action
18+
/syfile/imageCompress.action
19+
/managerOneGgxxfb.action
20+
/user/login.action
21+
/loginAction!login.action
22+
/index!index.action
23+
/login/login.action
24+
/managerNManager.action
25+
/home.action
26+
/indexmanagerLogin.action
27+
/Ahsffyww/Default.action
28+
/DRP/login.action
29+
/spam/system/index.action
30+
/user/gotoLoginPage.action
31+
/ecp/announcement/announcement_view.action
32+
/managerAddNManager.action
33+
/managerEditNManager.action
34+
/main.action
35+
/system/login_login.action
36+
/login!login.action
37+
/loginAction.action
38+
/login/index.action
39+
/logout.action
40+
/register.action
41+
/security/loginInit.action
42+
/bgxz/bgxzAction_executeBack.action
43+
/nFixcardAllList.action
44+
/beian/login_login.action
45+
//opac_two/mylibrary/comment/queryAllComment.action
46+
/module/newzwgk/getmainById.action
47+
/index/index.action
48+
/shop/member!passwordRecover.action
49+
/mail/login.action
50+
/admin/login.action
51+
/htweixin/InsuranceDownload.action
52+
//admin/user_logon.action
53+
/BSBM/loginedLogin.action
54+
/robot/check-login.action
55+
/website/dflz/dflzSiteAction!sjList.action
56+
/module/newzwgk/viewquan.action
57+
/hbwz/wcms/searchAll.action
58+
/ahsffyww/Default.action
59+
/wfvideo/login.action
60+
/website-rank/addVoteRecord.action
61+
/module/newzwgk/viewZwxxQianMore.action
62+
/superadmin/index.action
63+
/mall/ui/giftIndex.action
64+
/userlogin.action
65+
/cms/admin/login.action
66+
/szxy/logon.action
67+
/virtual/shouye.action
68+
/feedback/buyIntention!saveBuyIntentionInfo.action
69+
/superadmin/adminLogin.action
70+
/Index.action
71+
/security/login.action
72+
/MemberToLoginIgnore.action
73+
/rdms/satisfyaid/actions/cstContactAction!register.action
74+
/regmail/download.action
75+
/IndexAction.action
76+
/publish/query/indexFirst.action
77+
/manage/login.action
78+
/home/index.action
79+
/eeoaftp/downloadFile.action
80+
/eis/index.action
81+
/gzwl/visit/renewBusinessOrder/renewBusinessOrderDetail.action
82+
/css/myquery/queryWQSBill.action
83+
/LoginAction.action
84+
/detail.action
85+
/index/index!list.action
86+
/auth/login.action
87+
/server/spreq/attachment!download.action
88+
/lmsv/user!editUserInfo.action
89+
/clib/bookWeb.action
90+
/otomc/user/loginUI.action
91+
/im-client/imclient/selfHelp.action
92+
/ahsffyww/ZXDefault.action
93+
/user!login.action
94+
/Dzsw/Shky/hwky.wai/index.action
95+
/aic/webnz/welcome-web-home!welcome.action
96+
/ess/Homepage.action
97+
/skypearl/cn/toPrintCard.action
98+
/spdt/spdt_listSp.action
99+
/xxsearch.action
100+
/web/Info!list.action

‎brute/dicts/filedic.txt

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7386,6 +7386,7 @@ $metadata
73867386
/id/:id
73877387
/id_dsa
73887388
/id_dsa.ppk
7389+
/_groupcache/
73897390
/id_rsa
73907391
/id_rsa.pub
73917392
/iiasdmpwd/

‎brute/dicts/spring.txt

Lines changed: 87 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,87 @@
1+
/actuator
2+
/actuator/auditevents
3+
/actuator/beans
4+
/actuator/conditions
5+
/actuator/configprops
6+
/actuator/env
7+
/actuator/trace
8+
/actuator/health
9+
/actuator/logfile
10+
/actuator/heapdump
11+
/actuator/httptrace
12+
/actuator/hystrix.stream
13+
/actuator/info
14+
/actuator/jolokia
15+
/actuator/loggers
16+
/actuator/mappings
17+
/actuator/metrics
18+
/actuator/scheduledtasks
19+
/actuator/threaddump
20+
/actuator/swagger-ui.html
21+
/auditevents
22+
/autoconfig
23+
/eureka
24+
/beans
25+
/cloudfoundryapplication
26+
/configprops
27+
/dump
28+
/druid/login.html
29+
/entity/all
30+
/swagger/swagger-ui.html
31+
/api/swagger-ui.html
32+
/swagger/index.html
33+
/v1.1/swagger-ui.html
34+
/v1.2/swagger-ui.html
35+
/v1.3/swagger-ui.html
36+
/v1.4/swagger-ui.html
37+
/v1.5/swagger-ui.html
38+
/v1.6/swagger-ui.html
39+
/v1.7/swagger-ui.html
40+
/v1.8/swagger-ui.html
41+
/v1.9/swagger-ui.html
42+
/v2.0/swagger-ui.html
43+
/v2.1/swagger-ui.html
44+
/v2.2/swagger-ui.html
45+
/v2.3/swagger-ui.html
46+
/%20/swagger-ui.html
47+
/logfile
48+
/env
49+
/env/(name)
50+
/health
51+
/heapdump
52+
/hystrix
53+
/hystrix.stream
54+
/info
55+
/webpage/system/druid/index.html
56+
/system/druid/index.html
57+
/druid/index.html
58+
/druid/websession.html
59+
/jolokia
60+
/jolokia/list
61+
/loggers
62+
/mappings
63+
/metrics
64+
/monitor
65+
/swagger-ui.html
66+
/threaddump
67+
/trace
68+
/gateway/actuator
69+
/gateway/actuator/auditevents
70+
/gateway/actuator/beans
71+
/gateway/actuator/conditions
72+
/gateway/actuator/configprops
73+
/gateway/actuator/env
74+
/gateway/actuator/trace
75+
/gateway/actuator/health
76+
/gateway/actuator/logfile
77+
/gateway/actuator/heapdump
78+
/gateway/actuator/httptrace
79+
/gateway/actuator/hystrix.stream
80+
/gateway/actuator/info
81+
/gateway/actuator/jolokia
82+
/gateway/actuator/loggers
83+
/gateway/actuator/mappings
84+
/gateway/actuator/metrics
85+
/gateway/actuator/scheduledtasks
86+
/gateway/actuator/threaddump
87+
/gateway/actuator/swagger-ui.html

‎brute/dicts/vcode.txt

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
123456
2+
123123
3+
000000
4+
111111
5+
222222
6+
333333
7+
444444
8+
555555
9+
666666
10+
777777
11+
888888
12+
999999
13+
321321
14+
321123
15+
123321

‎brute/filefuzz.go

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,10 +5,10 @@ import (
55
_ "embed"
66
"fmt"
77
"github.com/antlabs/strsim"
8+
"github.com/hktalent/51pwnPlatform/lib/scan/Const"
9+
"github.com/hktalent/51pwnPlatform/pkg/models"
810
"github.com/hktalent/ProScan4all/lib/util"
911
"github.com/hktalent/ProScan4all/pkg/fingerprint"
10-
"github.com/hktalent/goSqlite_gorm/lib/scan/Const"
11-
"github.com/hktalent/goSqlite_gorm/pkg/models"
1212
"io/ioutil"
1313
"log"
1414
"mime"

‎config/config.json

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -106,6 +106,7 @@
106106
},
107107
"enableEsSv": true,
108108
"CheckWeakPassword": true,
109+
"jaelesThread": 8,
109110
"esthread": 8,
110111
"hydrathread": 64,
111112
"Fuzzthreads": 16,

‎config/jaeles-signatures

Submodule jaeles-signatures added at 98b358e

‎engine/dispather.go

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
package engine
22

33
import (
4+
"github.com/hktalent/51pwnPlatform/lib"
5+
. "github.com/hktalent/51pwnPlatform/lib/scan/Const"
6+
"github.com/hktalent/51pwnPlatform/pkg/models"
47
"github.com/hktalent/ProScan4all/pkg/portScan"
5-
"github.com/hktalent/goSqlite_gorm/lib"
6-
. "github.com/hktalent/goSqlite_gorm/lib/scan/Const"
7-
"github.com/hktalent/goSqlite_gorm/pkg/models"
88
)
99

1010
// 扫描任务分发

‎engine/dispather_test.go

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,9 @@
11
package engine
22

33
import (
4+
"github.com/hktalent/51pwnPlatform/lib/scan/Const"
5+
"github.com/hktalent/51pwnPlatform/pkg/models"
46
"github.com/hktalent/ProScan4all/lib/util"
5-
"github.com/hktalent/goSqlite_gorm/lib/scan/Const"
6-
"github.com/hktalent/goSqlite_gorm/pkg/models"
77
"os"
88
"runtime"
99
"testing"

‎engine/engineImp.go

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,11 @@ package engine
22

33
import (
44
"context"
5+
"github.com/hktalent/51pwnPlatform/lib"
6+
"github.com/hktalent/51pwnPlatform/pkg/models"
57
"github.com/hktalent/ProScan4all/lib/util"
68
"github.com/hktalent/ProScan4all/pocs_go"
7-
"github.com/hktalent/goSqlite_gorm/lib"
8-
"github.com/hktalent/goSqlite_gorm/pkg/models"
9+
"github.com/hktalent/jaeles/cmd"
910
"github.com/panjf2000/ants/v2"
1011
"log"
1112
"os"
@@ -37,7 +38,7 @@ func NewEngine(c *context.Context, pool int) *Engine {
3738
p, err := ants.NewPoolWithFunc(pool, func(i interface{}) {
3839
defer x1.Wg.Done()
3940
x1.DoEvent(i.(*models.EventData))
40-
})
41+
}, ants.WithPreAlloc(true))
4142
if nil != err {
4243
log.Println("ants.NewPoolWithFunc is error: ", err)
4344
}
@@ -67,6 +68,7 @@ func (e *Engine) Close() {
6768
defer ants.Release()
6869
e.PoolFunc.Release()
6970
e.Wg.Wait()
71+
cmd.CleanOutput()
7072
}
7173

7274
// case 扫描使用的函数
@@ -120,6 +122,10 @@ func (x1 *Engine) Running() {
120122
case <-c:
121123
util.DoCbk("exit")
122124
os.Exit(1)
125+
case l1, ok := <-util.OutLogV:
126+
if ok {
127+
util.WriteLog2File(l1)
128+
}
123129
case x2 := <-x1.EventData: // 各种扫描的控制
124130
if nil != x2 && nil != x2.EventData {
125131
x1.Wg.Add(1)

0 commit comments

Comments
 (0)