Skip to content

Commit f4d4d6c

Browse files
x51pwnx51pwn
committed
还是满足国人的需求
1 parent 817a5de commit f4d4d6c

File tree

3 files changed

+112
-46
lines changed

3 files changed

+112
-46
lines changed

‎README.md

Lines changed: 47 additions & 45 deletions
Original file line numberDiff line numberDiff line change
@@ -1,64 +1,66 @@
11
<p align="center">
2-
<a href="/static/Installation.md">Compile/Install/Run</a> •
3-
<a href="/static/usage.md">Parameter Description</a> •
4-
<a href="/static/running.md">How To</a> •
5-
<a href="/static/scenario.md">Scenario</a> •
6-
<a href="/static/pocs.md">POC List</a> •
7-
<a href="/static/development.md">Custom Scanner</a>
2+
<a href="/static/Installation.md">编译/安装/运行</a> •
3+
<a href="/static/usage.md">参数说明</a> •
4+
<a href="/static/running.md">如何使用</a> •
5+
<a href="/static/scenario.md">使用场景</a> •
6+
<a href="/static/pocs.md">POC列表</a> •
7+
<a href="/static/development.md">自定义扫描</a>
8+
<a href="/README_EN.md">README_EN</a>
89
</p>
910

10-
# Features
11+
# 特性
1112

1213
<h1 align="center">
1314
<img width="966" alt="image" src="https://user-images.githubusercontent.com/18223385/175191886-aec31972-d81b-46f4-b6ac-70debd2508e7.png">
1415
</h1>
1516

16-
- Fast port scan, fingerprint detection function
17-
- Fast login password blasting function
18-
- Fast POC detection function
19-
- Fast sensitive file detection
20-
- Lightweight, open source, cross-platform use
21-
- Supports multiple types of input - STDIN/HOST/IP/CIDR/URL/TXT
22-
- Supports multiple types of output - JSON/TXT/CSV/STDOUT
23-
## New features controlled by configuration files, environment variables
24-
- url list with context path, enable precise scan UrlPrecise=true ./main -l xx.txt
25-
- Enable smart subdomain traversal, export EnableSubfinder=true
26-
- Automatically identify the situation that a domain (DNS) is associated with multiple IPs, and automatically scan the associated multiple IPs
27-
- Preprocessing, when multiple domain names in the list have the same ip, port scans are merged to improve efficiency
28-
- In-depth analysis, automatic correlation scan: automatically obtain domain name information in ssl, in the case of *.xxx.com, and configured to allow automatic subdomain traversal, the subdomain traversal will be automatically completed, and the target will be added to the scan list
29-
- When the input target (target) is ip, all domain names, fingerprint information, historical port information will be automatically associated from the 51pwn cloud, and processed (the cloud service function requires authorization)
30-
- Automated supply chain analysis and scanning, which requires authorization to use
31-
- Allows to define your own dictionary through config/config.json configuration, or set related switches, you can define several Options for nuclei, httx, naabu here
32-
# Implementation process
33-
- 0. [Subdomain] integrates Subfinder, export EnableSubfinder=true starts, automatically drills deep into the domain name information in the ssl certificate
34-
- 1. [Port Scanning] Integrate naabu (2.1k), the official product of Nuclei, the famous name Dingding
35-
- 2. [Service Identification] naabu calls the nmap installed by the system, please install nmap yourself first
36-
- 3. [Fingerprint recognition] nmap + integrated and optimized EHole (1.4k), and will continue to integrate more fingerprint recognition later
37-
- 4. [Web Scanning] Integrated httpx (3.2k), officially produced by Nuclei, the famous name Dingding
38-
- 5. [Vulnerability Scanning]
39-
* Integrated nuclei (8.6k) + nuclei-templates (4.5k optimized version, https://github.com/hktalent/nuclei-templates)
40-
* Integrated xray 2.0 (6.9k), a total of 354 POCs
41-
* scan4all itself implements 8 fuzz components, and at the same time implements vulnerability detection that integrates 14 types of common components
42-
# How Install
17+
- 快速端口扫描，指纹检测功能
18+
- 快速登录密码爆破功能
19+
- 快速POC检测功能
20+
- 快速敏感文件检测
21+
- 轻量级、开源、跨平台使用
22+
- 支持多种类型的输入 - STDIN/HOST/IP/CIDR/URL/TXT
23+
- 支持多种输出类型 - JSON/TXT/CSV/STDOUT
24+
25+
## 由配置文件、环境变量控制的新特性
26+
- 带有上下文路径的url列表，启用精确扫描 UrlPrecise=true ./main -l xx.txt
27+
- 开启智能子域遍历， 导出 EnableSubfinder=true
28+
- 自动识别域（DNS）关联多个IP的情况，并自动扫描关联的多个IP
29+
- 预处理，当列表中多个域名的ip相同时，合并端口扫描，提高效率
30+
- 深入分析，自动关联扫描：自动获取ssl中的域名信息，如*.xxx.com，并配置允许自动子域遍历，子域遍历自动完成，添加目标到扫描列表
31+
- 当输入目标（target）为ip时，所有域名、指纹信息、历史端口信息都会从51pwn云自动关联，并进行处理（云服务功能需要授权）
32+
- 自动化供应链分析和扫描，需要授权才能使用
33+
- 允许通过config/config.json配置定义自己的字典，或者设置相关的开关，可以在这里定义nuclei、httx、naabu的几个Options
34+
# 实现过程
35+
- 0.【Subdomain】集成Subfinder，导出EnableSubfinder=true启动，自动深挖ssl证书中的域名信息
36+
- 1.【端口扫描】集成Nuclei官方产品naabu(2.1k)，大名鼎鼎
37+
- 2.【服务识别】naabu调用系统安装的nmap，请先自行安装nmap
38+
- 3.【指纹识别】nmap+集成优化的EHole（1.4k），后续会继续集成更多指纹识别
39+
- 4.【网页扫描】集成httpx（3.2k），Nuclei官方出品，大名鼎鼎
40+
- 5.【漏洞扫描】
41+
* 集成核（8.6k）+核模板（4.5k优化版，https://github.com/hktalent/nuclei-templates）
42+
* 集成 xray 2.0 (6.9k)，共 354 个 POC
43+
* scan4all本身实现了8个fuzz组件，同时实现了集成14类常用组件的漏洞检测
44+
# 如何安装
4345
```bash
4446
go install github.com/hktalent/[email protected]
4547
scan4all -h
4648
```
47-
# How use
48-
Please install nmap by yourself before use
49+
# 如何使用
50+
使用前请自行安装nmap
4951
```bash
5052
go build -o scan4all main.go
5153
# or
5254
go build
53-
# Precise scanning UrlPrecise=true
55+
# 精准扫描 url列表 UrlPrecise=true
5456
UrlPrecise=true ./scan4all -l xx.txt
5557
```
5658

57-
# changelog
58-
- 2022-06-20 Integrated Subfinder, domain name blasting, startup parameter export EnableSubfinder=true, note that it is very slow after startup; automatic deep drilling of domain name information in ssl certificate
59-
Allows to define your own dictionary through config/config.json configuration, or set related switches
60-
- 2022-06-17 Optimize the case of multiple IPs in one domain name, all IPs will be port scanned, and then follow the subsequent scanning process
61-
- 2022-06-15 This version adds several weblogic password dictionaries and webshell dictionaries obtained in actual combat in the past
62-
- 2022-06-10 Complete the integration of nuclei, including the integration of nuclei templates of course
63-
- 2022-06-07 Added similarity algorithm to detect 404
64-
- 2022-06-07 Added the http url list precise scan parameter, which is enabled based on the environment variable UrlPrecise=true
59+
# 变更日志
60+
- 2022-06-20 集成Subfinder，域名爆破，启动参数导出EnableSubfinder=true，注意启动后很慢； ssl证书中域名信息的自动深度钻取
61+
允许通过 config/config.json 配置定义自己的字典，或设置相关开关
62+
- 2022-06-17 优化一个域名多个IP的情况，所有IP都会被端口扫描，然后按照后续的扫描流程
63+
- 2022-06-15 此版本增加了过去实战中获得的几个weblogic密码字典和webshell字典
64+
- 2022-06-10 完成核的整合，当然包括核模板的整合
65+
- 2022-06-07 添加相似度算法来检测 404
66+
- 2022-06-07 增加http url列表精准扫描参数，根据环境变量UrlPrecise=true开启

‎README_EN.md

Lines changed: 64 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,64 @@
1+
<p align="center">
2+
<a href="/static/Installation.md">Compile/Install/Run</a> •
3+
<a href="/static/usage.md">Parameter Description</a> •
4+
<a href="/static/running.md">How To</a> •
5+
<a href="/static/scenario.md">Scenario</a> •
6+
<a href="/static/pocs.md">POC List</a> •
7+
<a href="/static/development.md">Custom Scanner</a>
8+
</p>
9+
10+
# Features
11+
12+
<h1 align="center">
13+
<img width="966" alt="image" src="https://user-images.githubusercontent.com/18223385/175191886-aec31972-d81b-46f4-b6ac-70debd2508e7.png">
14+
</h1>
15+
16+
- Fast port scan, fingerprint detection function
17+
- Fast login password blasting function
18+
- Fast POC detection function
19+
- Fast sensitive file detection
20+
- Lightweight, open source, cross-platform use
21+
- Supports multiple types of input - STDIN/HOST/IP/CIDR/URL/TXT
22+
- Supports multiple types of output - JSON/TXT/CSV/STDOUT
23+
## New features controlled by configuration files, environment variables
24+
- url list with context path, enable precise scan UrlPrecise=true ./main -l xx.txt
25+
- Enable smart subdomain traversal, export EnableSubfinder=true
26+
- Automatically identify the situation that a domain (DNS) is associated with multiple IPs, and automatically scan the associated multiple IPs
27+
- Preprocessing, when multiple domain names in the list have the same ip, port scans are merged to improve efficiency
28+
- In-depth analysis, automatic correlation scan: automatically obtain domain name information in ssl, in the case of *.xxx.com, and configured to allow automatic subdomain traversal, the subdomain traversal will be automatically completed, and the target will be added to the scan list
29+
- When the input target (target) is ip, all domain names, fingerprint information, historical port information will be automatically associated from the 51pwn cloud, and processed (the cloud service function requires authorization)
30+
- Automated supply chain analysis and scanning, which requires authorization to use
31+
- Allows to define your own dictionary through config/config.json configuration, or set related switches, you can define several Options for nuclei, httx, naabu here
32+
# Implementation process
33+
- 0. [Subdomain] integrates Subfinder, export EnableSubfinder=true starts, automatically drills deep into the domain name information in the ssl certificate
34+
- 1. [Port Scanning] Integrate naabu (2.1k), the official product of Nuclei, the famous name Dingding
35+
- 2. [Service Identification] naabu calls the nmap installed by the system, please install nmap yourself first
36+
- 3. [Fingerprint recognition] nmap + integrated and optimized EHole (1.4k), and will continue to integrate more fingerprint recognition later
37+
- 4. [Web Scanning] Integrated httpx (3.2k), officially produced by Nuclei, the famous name Dingding
38+
- 5. [Vulnerability Scanning]
39+
* Integrated nuclei (8.6k) + nuclei-templates (4.5k optimized version, https://github.com/hktalent/nuclei-templates)
40+
* Integrated xray 2.0 (6.9k), a total of 354 POCs
41+
* scan4all itself implements 8 fuzz components, and at the same time implements vulnerability detection that integrates 14 types of common components
42+
# How Install
43+
```bash
44+
go install github.com/hktalent/[email protected]
45+
scan4all -h
46+
```
47+
# How use
48+
Please install nmap by yourself before use
49+
```bash
50+
go build -o scan4all main.go
51+
# or
52+
go build
53+
# Precise scanning UrlPrecise=true
54+
UrlPrecise=true ./scan4all -l xx.txt
55+
```
56+
57+
# changelog
58+
- 2022-06-20 Integrated Subfinder, domain name blasting, startup parameter export EnableSubfinder=true, note that it is very slow after startup; automatic deep drilling of domain name information in ssl certificate
59+
Allows to define your own dictionary through config/config.json configuration, or set related switches
60+
- 2022-06-17 Optimize the case of multiple IPs in one domain name, all IPs will be port scanned, and then follow the subsequent scanning process
61+
- 2022-06-15 This version adds several weblogic password dictionaries and webshell dictionaries obtained in actual combat in the past
62+
- 2022-06-10 Complete the integration of nuclei, including the integration of nuclei templates of course
63+
- 2022-06-07 Added similarity algorithm to detect 404
64+
- 2022-06-07 Added the http url list precise scan parameter, which is enabled based on the environment variable UrlPrecise=true

‎pkg/naabu/v2/pkg/runner/options.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -103,7 +103,7 @@ func ParseOptions() *Options {
103103
)
104104

105105
flagSet.CreateGroup("rate-limit", "Rate-limit",
106-
flagSet.IntVar(&options.Threads, "c", 25, "general internal worker threads"),
106+
flagSet.IntVar(&options.Threads, "c", 64, "general internal worker threads"),
107107
flagSet.IntVar(&options.Rate, "rate", DefaultRateSynScan, "packets to send per second"),
108108
)
109109

0 commit comments

Comments
 (0)