更新优化
This commit is contained in:
parent
73647db414
commit
ce90acdb64
@ -5,5 +5,9 @@
|
||||
|
||||
- POC示例模板在poc文件夹下,请根据此来更改
|
||||
- 本扫描器暂不支持时间检测和无回显检测。
|
||||
|
||||
运行方法:
|
||||
1. 先在MatchedPOC.txt中填入需要扫描的poc路径(可一次填入多个,使用相对路径)
|
||||
2. 在urls.txt填入需要扫描的目标(可以从fofa,hunter等获取)
|
||||
3. 运行命令:python new_poc_tools.py,随后按照提示输入参数。
|
||||
4. 在file文件夹下即可获取生成文档
|
||||
!新版本指南后续更新。
|
@ -125,7 +125,7 @@ def add_scan_results_to_document(document, domain, results, include_all, descrip
|
||||
if result == "存在漏洞" and choice_3 == "y":
|
||||
screenshot_path_1 = screenshot(url)
|
||||
# print(screenshot_path_1)
|
||||
# 站长工具反爬,该截图已废弃
|
||||
# 站长工具反爬,该截图路径已废弃
|
||||
# screenshot_path_2 = screenshot("https://icp.chinaz.com/home/info?host=" + extract_root_domain(domain))
|
||||
# print(screenshot_path_2)
|
||||
#word处理部分
|
||||
@ -154,17 +154,22 @@ def add_scan_results_to_document(document, domain, results, include_all, descrip
|
||||
doc_name = str(company_name) + "_" + name + ".docx"
|
||||
doc.save(doc_save_path + doc_name)
|
||||
|
||||
|
||||
def mass_poc_scan(domains, include_all, choice_2, docx_name, status):
|
||||
document = create_document()
|
||||
current_domain = None # 用于记录当前正在扫描的域名
|
||||
|
||||
try:
|
||||
for domain in domains:
|
||||
logging.info(f"正在扫描域名:{domain}")
|
||||
current_domain = domain # 记录当前正在扫描的域名
|
||||
|
||||
if status == 'y':
|
||||
if not check_url_status(domain):
|
||||
logging.warning(f"访问失败,跳过当前域名的扫描:{domain}")
|
||||
print("--------------------------------------------------")
|
||||
if choice_2.lower() == 'y':
|
||||
document.add_heading(f"目标:{domain} 无法访问!", level=3) # 将标题升级为level=3
|
||||
document.add_heading(f"目标:{domain} 无法访问!", level=3) # 将标题升级为level=3
|
||||
continue
|
||||
|
||||
try:
|
||||
@ -181,8 +186,15 @@ def mass_poc_scan(domains, include_all, choice_2, docx_name, status):
|
||||
except Exception as e:
|
||||
logging.error(f"扫描域名 {domain} 时出错:{e}")
|
||||
print("--------------------------------------------------")
|
||||
|
||||
except KeyboardInterrupt:
|
||||
print(Fore.RED +'\n检测到Ctrl+C,中断程序。' + Fore.RESET)
|
||||
print(Fore.RED + '\n检测到Ctrl+C,中断程序:')
|
||||
if current_domain is not None:
|
||||
print(f"当前正在扫描的域名为:{current_domain} 。")
|
||||
else:
|
||||
print("暂未开始扫描计划。")
|
||||
print(Fore.RESET)
|
||||
|
||||
save_document(document, docx_name)
|
||||
|
||||
def save_document(document, docx_name):
|
||||
|
Loading…
Reference in New Issue
Block a user