更新优化

This commit is contained in:
MasonLiu 2024-10-14 16:48:04 +08:00
parent 73647db414
commit ce90acdb64
2 changed files with 20 additions and 4 deletions

View File

@ -5,5 +5,9 @@
- POC示例模板在poc文件夹下请根据此来更改
- 本扫描器暂不支持时间检测和无回显检测。
运行方法:
1. 先在MatchedPOC.txt中填入需要扫描的poc路径可一次填入多个使用相对路径
2. 在urls.txt填入需要扫描的目标可以从fofahunter等获取
3. 运行命令python new_poc_tools.py随后按照提示输入参数。
4. 在file文件夹下即可获取生成文档
!新版本指南后续更新。

View File

@ -125,7 +125,7 @@ def add_scan_results_to_document(document, domain, results, include_all, descrip
if result == "存在漏洞" and choice_3 == "y":
screenshot_path_1 = screenshot(url)
# print(screenshot_path_1)
# 站长工具反爬,该截图已废弃
# 站长工具反爬,该截图路径已废弃
# screenshot_path_2 = screenshot("https://icp.chinaz.com/home/info?host=" + extract_root_domain(domain))
# print(screenshot_path_2)
#word处理部分
@ -154,17 +154,22 @@ def add_scan_results_to_document(document, domain, results, include_all, descrip
doc_name = str(company_name) + "_" + name + ".docx"
doc.save(doc_save_path + doc_name)
def mass_poc_scan(domains, include_all, choice_2, docx_name, status):
document = create_document()
current_domain = None # 用于记录当前正在扫描的域名
try:
for domain in domains:
logging.info(f"正在扫描域名:{domain}")
current_domain = domain # 记录当前正在扫描的域名
if status == 'y':
if not check_url_status(domain):
logging.warning(f"访问失败,跳过当前域名的扫描:{domain}")
print("--------------------------------------------------")
if choice_2.lower() == 'y':
document.add_heading(f"目标:{domain} 无法访问!", level=3) # 将标题升级为level=3
document.add_heading(f"目标:{domain} 无法访问!", level=3) # 将标题升级为level=3
continue
try:
@ -181,8 +186,15 @@ def mass_poc_scan(domains, include_all, choice_2, docx_name, status):
except Exception as e:
logging.error(f"扫描域名 {domain} 时出错:{e}")
print("--------------------------------------------------")
except KeyboardInterrupt:
print(Fore.RED +'\n检测到Ctrl+C中断程序。' + Fore.RESET)
print(Fore.RED + '\n检测到Ctrl+C中断程序')
if current_domain is not None:
print(f"当前正在扫描的域名为:{current_domain}")
else:
print("暂未开始扫描计划。")
print(Fore.RESET)
save_document(document, docx_name)
def save_document(document, docx_name):