【原创】【HW资产发现工具】KScan
发现大家对高级会员充满怨念，这样吧，如果购买的人超过50个我就提供一个小技巧，可以勉强达到高级会员的效果
最近参与了几次护网
原来护网好歹还会给个目标地址
现在护网只给你一个单位名称，上来就是百把个单位名称，资产收集的头痛
所以起了写这个工具的念头，主要使用场景是针对IP地址进行WEB资产发现，然后在不发送更多数据包的情况下提取有用的信息，至于IP地址从哪来
轮子也不全是自己造的，很大程度上参考了
Ra1ndr0op 写的 https://github.com/dr0op/bufferfly
我这只做使用一部分使用体验的改良，以及新增了一些端口信息，还有部分代码的优化
自己使用了一下，挺顺手的，有啥意见也可以提，我后续加进去。
这里也写几个自己用过的使用场景
比如前几天很火的宝塔
可以使用
kscan -t target.txt --path /pma -p 888 --threads 50 --http-code 200
正常获取标题
kscan -t target.txt --threads 1024
kscan -t 192.168.0.1/24 --threads 1024
土豪版：
# _*_ coding:utf-8 _*-
import requests
import re
import sys
import threading
from queue import Queue
import argparse
from IPy import IP
from lxml import etree
import random
import socket
from urllib.parse import urlparse
class kscan(object):
def __init__(self):
self._threads = None
self._path = None
self._port = None
self._output = None
self._target = []
self._http_code = []
self._urlTarget = []
self._targetType = None
self._proxy = None
self._domainQueue = Queue(10000)
self._urlQueue = Queue(10000 * 65535)
self._repeat = {
'line_all': 0,
'line_rep': 0,
'line_unrep': 0,
'ip_all': 0,
'domin_all': 0,
'domin_rep': 0,
'domin_unrep': 0
}
def run(self):
self._makeUrlQueue()
Thread = []
for j in range(self._threads):
Thread.append(self._urlThread(self))
for k in Thread:
k.start()
for m in Thread:
m.join()
@property
def target_type(self):
return self._targetType
@target_type.setter
def target_type(self, value):
self._targetType = value
@property
def top(self):
return self._top
@top.setter
def top(self, value):
self._top = value
@property
def proxy(self):
return self._proxy
@proxy.setter
def proxy(self, value):
proxy = urlparse(value)
if proxy.scheme not in ['http', 'https']:
return
res = {
'http': proxy.scheme + '://' +proxy.netloc,
'https': proxy.scheme + '://' +proxy.netloc
}
self._proxy = res
@property
def output(self):
return self._output
@output.setter
def output(self, value):
if not value:
return
self._output = open(value, 'w+')
@property
def port(self):
return self._port
@port.setter
def port(self, string=None):
res = []
if string:
port_arr = string.split(',')
for port in port_arr:
if '-' in port:
port = port.split('-')
res = res + list(range(int(port[0]), int(port[1])))
else:
res.append(int(port))
else:
res = self._Port[:100]
if self._top:
res = self._Port[:self._top]
self._port = res
@property
def threads(self):
return self._threads
@threads.setter
def threads(self, value=5):
self._threads = value
@property
def http_code(self):
return self._http_code
@http_code.setter
def http_code(self, string=None):
res = []
if string:
http_code_arr = string.split(',')
for i in http_code_arr:
res.append(int(i))
else:
res += [200, 301, 302, 403, 404]
self._http_code = res
@property
def path(self):
return self._path
@path.setter
def path(self, string=None):
res = []
if string:
path_arr = string.split(',')
for Path in path_arr:
if Path[0] != '/':
Path = '/' + Path
res.append(Path)
else:
res.append('/')
self._path = res
@property
def target(self):
return self._target
@target.setter
def target(self, string):
res = []
if self._targetType == 'file':
array = open(string, 'r')
elif self._targetType == 'target':
t = self._toHost(string)
if '/' in t:
t = t.split('/')
t = IP(t[0]).make_net(int(t[1]))
array = []
for i in list(t):
array.append(i.strNormal())
else:
array = list()
array.append(string)
else:
array = []
for line in array:
self._repeat['line_all'] += 1
line = self._toHost(line)
if line in res:
self._repeat['line_rep'] += 1
continue
self._repeat['line_unrep'] += 1
if re.match('.*[a-z]', line):
self._repeat['domin_all'] += 1
sys.stdout.write("\r[*]正在导入域名队列 {} ...".format(line))
for path in self._path:
self._urlQueue.put('http://{}{}'.format(line,path)) #将域名加入URL请求队列，但不会针对域名扫描端口
self._domainQueue.put(line)
else:
self._repeat['ip_all'] += 1
res.append(line)
self._target += res
self._runIPThread()
print('\r共读取文件{}行，其中IP地址{}个，域名{}个，重复行{}行，'
'经过域名解析指向同一IP地址的域名{}个，最终可扫描IP{}个'.format(self._repeat.get('line_all'),
self._repeat.get('ip_all'), self._repeat.get('domin_all'),
self._repeat.get('line_rep'), self._repeat.get('domin_rep'),
len(self._target)+self._repeat.get('domin_all')))
# 域名转IP多线程
class _IPThread(threading.Thread):
def __init__(self, this):
threading.Thread.__init__(self)
self.this = this
def run(self):
while not self.this._domainQueue.empty():
domain = self.this._domainQueue.get()
sys.stdout.write("\r[*]正在解析域名 {} ...".format(domain))
try:
ip = self.this._toIP(domain)
except:
continue
if ip in self.this._target:
self.this._repeat['domin_rep'] += 1
continue
self.this._repeat['domin_unrep'] += 1
self.this._target.append(ip)
# url请求多线程
class _urlThread(threading.Thread):
def __init__(self, this):
threading.Thread.__init__(self)
self.this = this
self.size = this._urlQueue.qsize()
def run(self):
while not self.this._urlQueue.empty():
status = '{}/{}'.format(self.size - self.this._urlQueue.unfinished_tasks, self.size)
url = self.this._urlQueue.get()
if self.this._urlQueue.unfinished_tasks % 20:
sys.stdout.write("\r[*][{}]Recording to access {} ...".format(status, url))
sys.stdout.flush()
result = self.this.getBanner(url)
if result:
sys.stdout.write("\r" + " " * 100)
print('\r[+]{}\t{}\t{}\t{}\t{}'.format(*result))
self.this._addOutPut('{}\t{}\t{}\t{}\t{}'.format(*result))
sys.stdout.write("\r[*][{}]Recording to access {} ...".format(status, url))
sys.stdout.flush()
self.this._urlQueue.task_done()
# 写入文件
def _addOutPut(self, value):
if not self._output:
return
self._output.writelines(value + '\n')
self._output.flush()
# 生成URL队列
def _makeUrlQueue(self):
target = self._target
for i in target:
sys.stdout.write("\r[*]正在生成URL队列：{}..".format(i))
for p in self._port:
for j in self._path:
url = 'http://{}:{}{}'.format(i, p, j)
self._urlQueue.put(url)
def _runIPThread(self):
Thread = []
for j in range(10):
Thread.append(self._IPThread(self))
for k in Thread:
k.start()
for m in Thread:
m.join()
# UA生成器
def getUserAgent(self):
return random.choice(self._user_agents)
# 数据获取函数
def getBanner(self, url):
headers = {'User-Agent': self.getUserAgent(), 'Cookie': 'rememberMe=b69375edcb2b3c5084c02bd9690b6625'}
try:
if self._proxy:
res = requests.get(url, headers=headers, timeout=2,proxies = self._proxy)
else:
res = requests.get(url, headers=headers, timeout=2)
except:
return
if res.status_code not in self._http_code:
return
text = res.text
try:
text = text.encode(res.encoding or 'utf-8').decode('gbk')
except:
text = text.encode(res.encoding or 'utf-8').decode('utf-8')
title = self.getTitle(text)
server = self.getServer(res)
ctext = self.getContext(text)
result = []
result.append(url)
result.append(res.status_code)
result.append(title)
result.append(server)
result.append(ctext.replace('\t', '').replace('\r', ''))
return result
def getTitle(self, text):
try:
html = etree.HTML(text)
except:
return 'Null'
if html is None:
return 'Null'
title = html.findtext('.//title') or 'Null'
return title.replace(" ", "").replace("\n", "").replace("\r", "")
def getContext(self, text):
try:
html = etree.HTML(text)
except:
return 'Null'
if html is None:
return 'None'
for bad in html.xpath(".//script"):
bad.getparent().remove(bad)
for bad in html.xpath(".//style"):
bad.getparent().remove(bad)
content = html.xpath('string(.)').replace(" ", "").replace("\n", "").replace("\r", "")
return content.strip()[:25] or 'None'
def getServer(self, resp):
try:
short_server = 'Unkonw'
for k in resp.headers.keys():
if k.upper() == 'SERVER':
short_server = resp.headers[k].upper()
if k.upper() == 'SET-COOKIE':
header_cookie = resp.headers[k]
if 'rememberMe=deleteMe' in header_cookie:
short_server += ',shiro'
return short_server
except:
return "Unkonw"
# 转主机名
def _toHost(self, line):
line = line.strip()
if ("http://" in line) or ("https://" in line):
host = urlparse(line)[1]
else:
host = line
return host
# 转IP
def _toIP(self, host):
try:
ip = socket.getaddrinfo(host, None)[0][4][0]
return ip
except Exception as e:
pass
_Port = [8080, 80, 81, 8081, 7001, 8000, 8088, 8888, 9090, 8090, 88, 8001, 82, 9080, 8082, 8089, 9000, 8443,
9999, 8002, 89, 8083, 8200, 8008, 90, 8086, 801, 8011, 8085, 9001, 9200, 8100, 8012, 85, 8084, 8070,
7002, 8091, 8003, 99, 7777, 8010, 443, 8028, 8087, 83, 7003, 10000, 808, 38888, 8181, 800, 18080,
8099, 8899, 86, 8360, 8300, 8800, 8180, 3505, 7000, 9002, 8053, 1000, 7080, 8989, 28017, 9060, 888,
3000, 8006, 41516, 880, 8484, 6677, 8016, 84, 7200, 9085, 5555, 8280, 7005, 1980, 8161, 9091, 7890,
8060, 6080, 8880, 8020, 7070, 889, 8881, 9081, 8009, 7007, 8004, 38501, 1010, 93, 6666, 7010, 100,
9003, 6789, 7060, 8018, 8022, 4848, 3050, 8787, 2000, 9010, 10001, 8013, 6888, 8040, 10021, 1080,
2011, 6006, 4000, 5000, 8055, 4430, 1723, 6060, 7788, 8066, 9898, 6001, 8801, 10040, 7006, 9998,
803, 6688, 10080, 7008, 8050, 7011, 7009, 40310, 18090, 802, 10003, 8014, 2080, 7288, 8044, 9992,
8005, 8889, 5644, 8886, 9500, 58031, 50000, 9020, 8015, 50060, 8887, 8021, 8700, 91, 9900, 9191,
3312, 8186, 8735, 8380, 1234, 38080, 9088, 9988, 2110, 8007, 21245, 3333, 2046, 9061, 8686, 2375,
9011, 8061, 8093, 9876, 8030, 8282, 60465, 2222, 98, 9009, 1100, 18081, 70, 8383, 5155, 92, 8188,
2517, 50070, 8062, 11324, 2008, 9231, 999, 28214, 5001, 16080, 8092, 8987, 8038, 809, 2010, 8983,
7700, 3535, 7921, 9093, 11080, 6778, 805, 9083, 8073, 10002, 114, 2012, 701, 8810, 8400, 9099, 8098,
9007, 8808, 20000, 8065, 8822, 15000, 9100, 9901, 11158, 1107, 28099, 12345, 2006, 9527, 51106, 688,
25006, 8045, 9006, 8023, 8029, 9997, 9043, 7048, 8580, 8585, 2001, 8035, 10088, 20022, 4001, 9005,
2013, 20808, 8095, 106, 3580, 7742, 8119, 7071, 6868, 32766, 50075, 7272, 3380, 3220, 7801, 5256,
5255, 10086, 1300, 5200, 8096, 6198, 1158, 6889, 3503, 6088, 9991, 9008, 806, 7004, 5050, 8183,
8688, 1001, 58080, 1182, 9025, 8112, 7776, 7321, 235, 8077, 8500, 11347, 7081, 8877, 8480, 9182,
58000, 8026, 11001, 10089, 5888, 8196, 8078, 9995, 2014, 5656, 8019, 5003, 8481, 6002, 9889, 9015,
8866, 8182, 8057, 8399, 10010, 8308, 511, 12881, 4016, 8042, 1039, 28080, 5678, 7500, 8051, 18801,
15018, 15888, 38443, 8123, 9004, 8144, 94, 9070, 1800, 9112, 8990, 3456, 2051, 9098, 444, 9131, 97,
7100, 7711, 7180, 11000, 8037, 6988, 122, 8885, 14007, 8184, 7012, 8079, 9888, 9301, 59999, 49705,
1979, 8900, 5080, 5013, 1550, 8844, 4850, 206, 5156, 8813, 3030, 1790, 8802, 9012, 5544, 3721, 8980,
10009, 8043, 8390, 7943, 8381, 8056, 7111, 1500, 7088, 5881, 9437, 5655, 8102, 6000, 65486, 4443,
3690, 2181, 10025, 8024, 8333, 8666, 103, 8, 9666, 8999, 9111, 8071, 9092, 522, 11381, 20806, 8041,
1085, 8864, 7900, 1700, 8036, 8032, 8033, 8111, 60022, 955, 3080, 8788, 27017, 7443, 8192, 6969,
9909, 5002, 9990, 188, 8910, 9022, 50030, 10004, 866, 8582, 4300, 9101, 6879, 8891, 4567, 4440,
10051, 10068, 50080, 8341, 30001, 6890, 8168, 8955, 16788, 8190, 18060, 6379, 7041, 42424, 8848,
15693, 2521, 19010, 18103, 6010, 8898, 9910, 9190, 9082, 8260, 8445, 1680, 8890, 8649, 30082, 3013,
30000, 2480, 7202, 9704, 5233, 8991, 11366, 7888, 8780, 7129, 6600, 9443, 47088, 7791, 18888, 50045,
15672, 9089, 2585, 60, 9494, 31945, 2060, 8610, 8860, 58060, 6118, 2348, 8097, 38000, 18880, 13382,
6611, 8064, 7101, 5081, 7380, 7942, 10016, 8027, 2093, 403, 9014, 8133, 6886, 95, 8058, 9201, 6443,
5966, 27000, 7017, 6680, 8401, 9036, 8988, 8806, 6180, 421, 423, 57880, 7778, 18881, 812, 3306,
15004, 9110, 8213, 8868, 9300, 87, 1213, 8193, 8956, 1108, 778, 65000, 7020, 1122, 9031, 17000,
8039, 8600, 50090, 1863, 8191, 65, 6587, 8136, 9507, 132, 200, 2070, 308, 5811, 3465, 8680, 7999,
7084, 18082, 3938, 18001, 8069, 5902, 9595, 442, 4433, 7171, 9084, 7567, 811, 1128, 6003, 2125,
6090, 10007, 7022, 1949, 6565, 65001, 1301, 19244, 10087, 8025, 5098, 21080, 1200, 15801, 1005,
22343, 7086, 8601, 6259, 7102, 10333, 211, 10082, 18085, 180, 40000, 7021, 7702, 66, 38086, 666,
6603, 1212, 65493, 96, 9053, 7031, 23454, 30088, 6226, 8660, 6170, 8972, 9981, 48080, 9086, 10118,
40069, 28780, 20153, 20021, 20151, 58898, 10066, 1818, 9914, 55351, 8343, 18000, 6546, 3880, 8902,
22222, 19045, 5561, 7979, 5203, 8879, 50240, 49960, 2007, 1722, 25, 8913, 8912, 9504, 8103, 8567,
1666, 8720, 8197, 3012, 8220, 9039, 5898, 925, 38517, 8382, 6842, 8895, 2808, 447, 3600, 3606, 9095,
45177, 19101, 171, 133, 8189, 7108, 10154, 47078, 6800, 8122, 381, 1443, 15580, 23352, 3443, 1180,
268, 2382, 43651, 10099, 65533, 7018, 60010, 60101, 6699, 2005, 18002, 2009, 59777, 591, 1933, 9013,
8477, 9696, 9030, 2015, 7925, 6510, 18803, 280, 5601, 2901, 2301, 5201, 302, 610, 8031, 5552, 8809,
6869, 9212, 17095, 20001, 8781, 25024, 5280, 7909, 17003, 1088, 7117, 20052, 1900, 10038, 30551,
9980, 9180, 59009, 28280, 7028, 61999, 7915, 8384, 9918, 9919, 55858, 7215, 77, 9845, 20140, 8288,
7856, 1982, 1123, 17777, 8839, 208, 2886, 877, 6101, 5100, 804, 983, 5600, 8402, 5887, 8322, 5632,
770, 13333, 7330, 3216, 31188, 47583, 8710, 22580, 1042, 2020, 34440, 20, 7703, 65055, 8997, 6543,
6388, 8283, 7201, 4040, 61081, 12001, 3588, 7123, 2490, 4389, 1313, 19080, 9050, 6920, 299, 20046,
8892, 9302, 7899, 30058, 7094, 6801, 321, 1356, 12333, 11362, 11372, 6602, 7709, 45149, 3668, 517,
9912, 9096, 8130, 7050, 7713, 40080, 8104, 13988, 18264, 8799, 7072, 55070, 23458, 8176, 9517, 9541,
9542, 9512, 8905, 11660, 1025, 44445, 44401, 17173, 436, 560, 733, 968, 602, 3133, 3398, 16580,
8488, 8901, 8512, 10443, 9113, 9119, 6606, 22080, 5560, 7, 5757, 1600, 8250, 10024, 10200, 333, 73,
7547, 8054, 6372, 223, 3737, 9800, 9019, 8067, 45692, 15400, 15698, 9038, 37006, 2086, 1002, 9188,
8094, 8201, 8202, 30030, 2663, 9105, 10017, 4503, 1104, 8893, 40001, 27779, 3010, 7083, 5010, 5501,
309, 1389, 10070, 10069, 10056, 3094, 10057, 10078, 10050, 10060, 10098, 4180, 10777, 270, 6365,
9801, 1046, 7140, 1004, 9198, 8465, 8548, 108, 2100, 30015, 8153, 1020, 50100, 8391, 34899, 7090,
6100, 8777, 8298, 8281, 7023, 3377, 8499, 7501, 4321, 3437, 9977, 14338, 843, 7901, 6020, 6011,
1988, 4023, 20202, 20200, 7995, 18181, 9836, 586, 2340, 8110, 9192, 2525, 6887, 4005, 8992, 11212,
2168, 21, 60080, 6664, 10005, 956, 1016, 4453, 8974, 10101, 58124, 30025, 7789, 7280, 8222, 8068,
11180, 1984, 873, 5566, 11211, 1433, 916, 8828, 17071, 15080, 8820, 104, 21900, 5151, 860, 6286,
5118, 18765, 7055, 9989, 807, 7751, 8684, 1999, 9333, 55352, 8681, 19994, 3033, 8017, 7093, 7896,
4242, 58083, 56688, 6167, 9922, 3618, 7082, 1603, 16929, 198, 8075, 7044, 8101, 8232, 12315, 4570,
4569, 31082, 8861, 3680, 3001, 4455, 8403, 4497, 4380, 7273, 8896, 21188, 22480, 1445, 20165, 20142,
9068, 1083, 59093, 41474, 9224, 9718, 23380, 5225, 18889, 4237, 30, 14549, 8052, 911, 19000, 7799,
7300, 9168, 29798, 4480, 22228, 7903, 810, 68, 31000, 9103, 20992, 8049, 2261, 8105, 10152, 5780,
10111, 3003]
_user_agents = [
"Mozilla/5.0 (compatible; Baiduspider/2.0; +[url]http://www.baidu.com/search/spider.html[/url])",
"Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; AcooBrowser; .NET CLR 1.1.4322; .NET CLR 2.0.50727)",
"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Acoo Browser; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506)",
"Mozilla/4.0 (compatible; MSIE 7.0; AOL 9.5; AOLBuild 4337.35; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)",
"Mozilla/5.0 (Windows; U; MSIE 9.0; Windows NT 9.0; en-US)",
"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET CLR 2.0.50727; Media Center PC 6.0)",
"Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET CLR 1.0.3705; .NET CLR 1.1.4322)",
"Mozilla/4.0 (compatible; MSIE 7.0b; Windows NT 5.2; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2; .NET CLR 3.0.04506.30)",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN) AppleWebKit/523.15 (KHTML, like Gecko, Safari/419.3) Arora/0.3 (Change: 287 c9dfb30)",
"Mozilla/5.0 (X11; U; Linux; en-US) AppleWebKit/527+ (KHTML, like Gecko, Safari/419.3) Arora/0.6",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.2pre) Gecko/20070215 K-Ninja/2.1.1",
"Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.9) Gecko/20080705 Firefox/3.0 Kapiko/3.0",
"Mozilla/5.0 (X11; Linux i686; U;) Gecko/20070322 Kazehakase/0.4.5",
"Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.8) Gecko Fedora/1.9.0.8-1.fc10 Kazehakase/0.5.6",
"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11",
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_3) AppleWebKit/535.20 (KHTML, like Gecko) Chrome/19.0.1036.7 Safari/535.20",
"Opera/9.80 (Macintosh; Intel Mac OS X 10.6.8; U; fr) Presto/2.9.168 Version/11.52", ]
def make_parser():
parser = argparse.ArgumentParser(description='攻防资产处理工具，用于简单处理筛选攻防前的有价值资产')
group1 = parser.add_mutually_exclusive_group(required=True)
group1.add_argument('-f', '--file', metavar='', default='', help='从文件读取')
group1.add_argument('-t', '--target', metavar='', default='', help='直接扫描指定对象,支持IP、URL、IP/mask')
group2 = parser.add_mutually_exclusive_group(required=False)
group2.add_argument('--top', metavar='', type=int, help='扫描wooyun统计开放端口前x个，最高支持1000个')
group2.add_argument('-p', '--port', metavar='', default='', help='扫描指定端口，默认会扫描')
parser.add_argument('-o', '--output', metavar='', default='', help='将扫描结果保存到文件')
parser.add_argument('--proxy', metavar='', default='', help='设置代理')
parser.add_argument('--threads', metavar='', type=int, default='10', help='线程参数')
parser.add_argument('--http-code', metavar='', default='', help='指定会记录的HTTP状态码,默认会记录200、301、302、403、404')
parser.add_argument('--path', metavar='', default='', help='指定请求访问的目录')
return parser
def main():
banner = """
██╗ ██╗███████╗ ██████╗ █████╗ ███╗ ██╗
██║ ██╔╝██╔════╝██╔════╝██╔══██╗████╗ ██║
█████╔╝ ███████╗██║ ███████║██╔██╗ ██║
██╔═██╗ ╚════██║██║ ██╔══██║██║╚██╗██║
██║ ██╗███████║╚██████╗██║ ██║██║ ╚████║
╚═╝ ╚═╝╚══════╝ ╚═════╝╚═╝ ╚═╝╚═╝ ╚═══╝
v1.1 by kv2
"""
print(banner)
KScan = kscan()
parser = make_parser()
args = parser.parse_args()
KScan.top = args.top
KScan.port = args.port
KScan.path = args.path
KScan.proxy = args.proxy
KScan.http_code = args.http_code
KScan.threads = args.threads
if args.target:
KScan.target_type = 'target'
else:
KScan.target_type = 'file'
KScan.target = args.target or args.file
KScan.output = args.output
KScan.run()
if __name__ == '__main__':
main()关于作者
评论52次
到最后，发现我还是没有fofa高级会员
好东西。
其实nmap很好用...
发现我还是没有fofa高级会员
还以为是输入中文名字直接出资产得工具.gif)
通常情况下是护网的时候在tmp下面白嫖各攻击队的工具
吓我一跳，我还以为是HuaWei资产发现工具呢
收费附件和本身贴出来的代码是一样的吧
是一样的，所以是土豪版，土豪才买
有些信息搜集必备项，fofa有特效，但分站和直属xi统的搜集，以及目标外网出口IP范围确定比较麻烦
收费附件和本身贴出来的代码是一样的吧
自动筛选出解析IP一样的，不然都是手工去查 再筛选
这个也不错 https://www.t00ls.com/viewthread.php?tid=44181
各种扫描器啊，端口识别啊，web识别啊，撸一把，无数个目标就有了，再来波自动化渗透。。
师傅 用你说的方法 报错TypeError: 'NoneType' object is not iterable 是因为txt文件里面的格式不对么？
详细报错给我看一下，txt文件里面是什么呢？
我还是觉得web识别小工具是 masscan->nmap->web识别，思路不错
国内fofa香得很哦
有没有结果输出怎么样的，感觉结果格式化输出是重点，有些信息搜集必备项，fofa有特效，但分站和直属xi统的搜集，以及目标外网出口IP范围确定比较麻烦，耗精力。
师傅 用你说的方法 报错TypeError: 'NoneType' object is not iterable 是因为txt文件里面的格式不对么？
正好面宁这个问题太好了
goby听香的，完全符合
工具不错，但我和大佬之间插了个fofa高级会员
再顺手加个爆破功能，完美
爆破这个开发难度太大了，而且有很多成熟的工具了呀