mirror of
https://github.com/shadow1ng/fscan.git
synced 2026-02-09 02:09:17 +08:00
267 lines
12 KiB
Go
267 lines
12 KiB
Go
package config
|
||
|
||
// PocInfo POC详细信息结构 - 保留给webscan使用
|
||
type PocInfo struct {
|
||
Target string `json:"target"`
|
||
PocName string `json:"poc_name"`
|
||
}
|
||
|
||
// CredentialPair 精确的用户名密码对
|
||
type CredentialPair struct {
|
||
Username string `json:"username"`
|
||
Password string `json:"password"`
|
||
}
|
||
|
||
// =============================================================================
|
||
// 端口组常量 - 从common/constants.go迁移
|
||
// =============================================================================
|
||
|
||
// 预定义端口组 - 字符串格式，用于命令行参数默认值
|
||
var (
|
||
// 注意：9100 已移除，该端口为打印机 RAW 端口，发送数据会触发打印 (Issue #517)
|
||
WebPorts = "80,81,82,83,84,85,86,87,88,89,90,91,92,98,99,443,800,801,808,880,888,889,1000,1010,1080,1081,1082,1099,1118,1888,2008,2020,2100,2375,2379,3000,3008,3128,3505,5555,6080,6648,6868,7000,7001,7002,7003,7004,7005,7007,7008,7070,7071,7074,7078,7080,7088,7200,7680,7687,7688,7777,7890,8000,8001,8002,8003,8004,8005,8006,8008,8009,8010,8011,8012,8016,8018,8020,8028,8030,8038,8042,8044,8046,8048,8053,8060,8069,8070,8080,8081,8082,8083,8084,8085,8086,8087,8088,8089,8090,8091,8092,8093,8094,8095,8096,8097,8098,8099,8100,8101,8108,8118,8161,8172,8180,8181,8200,8222,8244,8258,8280,8288,8300,8360,8443,8448,8484,8800,8834,8838,8848,8858,8868,8879,8880,8881,8888,8899,8983,8989,9000,9001,9002,9008,9010,9043,9060,9080,9081,9082,9083,9084,9085,9086,9087,9088,9089,9090,9091,9092,9093,9094,9095,9096,9097,9098,9099,9200,9443,9448,9800,9981,9986,9988,9998,9999,10000,10001,10002,10004,10008,10010,10051,10250,12018,12443,14000,15672,15671,16080,18000,18001,18002,18004,18008,18080,18082,18088,18090,18098,19001,20000,20720,20880,21000,21501,21502,28018"
|
||
|
||
// MainPorts 主要扫描端口 (约150个)
|
||
// 包含: 基础服务、远程管理、数据库、消息队列、Web中间件、容器云、监控、安全设备等
|
||
MainPorts = "" +
|
||
// 基础服务 (21-995)
|
||
"21,22,23,25,53,80,81,88,110,111,135,139,143,161,389,443,445,465,502,512,513,514,515,548,554,587,623,636,873,902,993,995," +
|
||
// 代理/隧道 (1080-1883)
|
||
"1080,1099,1194,1433,1434,1521,1522,1525,1723,1883," +
|
||
// 远程/数据库 (2049-3690)
|
||
"2049,2121,2181,2200,2222,2375,2376,2379,2380,3000,3128,3268,3269,3306,3389,3690," +
|
||
// Java/中间件 (4369-5986)
|
||
"4369,4444,4848,5000,5005,5044,5060,5432,5601,5631,5632,5671,5672,5900,5984,5985,5986," +
|
||
// 缓存/数据库 (6000-6667)
|
||
"6000,6379,6380,6443,6666,6667," +
|
||
// Web/中间件 (7001-9999)
|
||
// 注意：9100 已移除，该端口为打印机 RAW 端口，发送数据会触发打印
|
||
"7001,7002,7474,7687,8000,8005,8008,8009,8080,8081,8086,8088,8089,8090,8161,8180,8443,8500,8834,8848,8880,8888,9000,9001,9042,9080,9090,9092,9093,9160,9200,9300,9418,9443,9999," +
|
||
// 管理/监控 (10000-11211)
|
||
"10000,10051,10250,10255,11211," +
|
||
// 消息队列/集群 (15672-27018)
|
||
"15672,22222,26379,27017,27018," +
|
||
// Hadoop/大数据 (50000-61616)
|
||
"50000,50070,50075,61613,61614,61616"
|
||
|
||
// DbPorts 数据库端口
|
||
DbPorts = "1433,1521,3306,5432,5672,5984,6379,7687,8086,9042,9093,9160,9200,11211,26379,27017,27018,61616"
|
||
|
||
// ServicePorts 服务端口
|
||
ServicePorts = "21,22,23,25,53,110,111,135,139,143,161,389,445,465,502,512,513,514,587,623,636,873,993,995,1433,1521,2049,2181,2222,3306,3389,5432,5672,5671,5900,5985,5986,6379,8161,8443,9000,9092,9093,9200,10051,11211,15672,15671,27017,61616,61613"
|
||
|
||
// CommonPorts 常用端口
|
||
CommonPorts = "21,22,23,25,53,80,110,135,139,143,443,445,993,995,1723,3389,5060,5985,5986"
|
||
|
||
// AllPorts 全端口
|
||
AllPorts = "1-65535"
|
||
)
|
||
|
||
// GetPortGroups 获取端口组映射 - 用于解析器
|
||
func GetPortGroups() map[string]string {
|
||
return map[string]string{
|
||
"web": WebPorts,
|
||
"main": MainPorts,
|
||
"db": DbPorts,
|
||
"service": ServicePorts,
|
||
"common": CommonPorts,
|
||
"all": AllPorts,
|
||
}
|
||
}
|
||
|
||
// =============================================================================
|
||
// 服务探测配置
|
||
// =============================================================================
|
||
|
||
// DefaultProbeMap 默认探测器列表
|
||
var DefaultProbeMap = []string{
|
||
"GenericLines",
|
||
"GetRequest",
|
||
"TLSSessionReq",
|
||
"SSLSessionReq",
|
||
"ms-sql-s",
|
||
"JavaRMI",
|
||
"LDAPSearchReq",
|
||
"LDAPBindReq",
|
||
"oracle-tns",
|
||
"Socks5",
|
||
}
|
||
|
||
// DefaultPortMap 默认端口映射关系
|
||
var DefaultPortMap = map[int][]string{
|
||
1: {"GetRequest", "Help"},
|
||
7: {"Help"},
|
||
21: {"GenericLines", "Help"},
|
||
23: {"GenericLines", "tn3270"},
|
||
25: {"Hello", "Help"},
|
||
35: {"GenericLines"},
|
||
42: {"SMBProgNeg"},
|
||
43: {"GenericLines"},
|
||
53: {"DNSVersionBindReqTCP", "DNSStatusRequestTCP"},
|
||
70: {"GetRequest"},
|
||
79: {"GenericLines", "GetRequest", "Help"},
|
||
80: {"GetRequest", "HTTPOptions", "RTSPRequest", "X11Probe", "FourOhFourRequest"},
|
||
81: {"GetRequest", "HTTPOptions", "RPCCheck", "FourOhFourRequest"},
|
||
82: {"GetRequest", "HTTPOptions", "FourOhFourRequest"},
|
||
83: {"GetRequest", "HTTPOptions", "FourOhFourRequest"},
|
||
84: {"GetRequest", "HTTPOptions", "FourOhFourRequest"},
|
||
85: {"GetRequest", "HTTPOptions", "FourOhFourRequest"},
|
||
88: {"GetRequest", "Kerberos", "SMBProgNeg", "FourOhFourRequest"},
|
||
98: {"GenericLines"},
|
||
110: {"GenericLines"},
|
||
111: {"RPCCheck"},
|
||
113: {"GenericLines", "GetRequest", "Help"},
|
||
119: {"GenericLines", "Help"},
|
||
130: {"NotesRPC"},
|
||
135: {"DNSVersionBindReqTCP", "SMBProgNeg"},
|
||
139: {"GetRequest", "SMBProgNeg"},
|
||
143: {"GetRequest"},
|
||
175: {"NJE"},
|
||
199: {"GenericLines", "RPCCheck", "Socks5", "Socks4"},
|
||
214: {"GenericLines"},
|
||
264: {"GenericLines"},
|
||
311: {"LDAPSearchReq"},
|
||
340: {"GenericLines"},
|
||
389: {"LDAPSearchReq", "LDAPBindReq"},
|
||
443: {"TLSSessionReq", "SSLSessionReq", "GetRequest", "HTTPOptions", "TerminalServerCookie"},
|
||
444: {"TLSSessionReq", "SSLSessionReq", "GetRequest", "HTTPOptions", "TerminalServerCookie"},
|
||
445: {"SMBProgNeg"},
|
||
465: {"SSLSessionReq", "TLSSessionReq", "Hello", "Help", "GetRequest", "HTTPOptions", "TerminalServerCookie"},
|
||
502: {"GenericLines"},
|
||
503: {"GenericLines"},
|
||
513: {"GenericLines"},
|
||
514: {"GenericLines"},
|
||
515: {"LPDString"},
|
||
544: {"GenericLines"},
|
||
548: {"afp"},
|
||
554: {"GetRequest"},
|
||
563: {"GenericLines"},
|
||
587: {"Hello", "Help"},
|
||
631: {"GetRequest", "HTTPOptions"},
|
||
636: {"LDAPSearchReq", "LDAPBindReq", "SSLSessionReq"},
|
||
646: {"LDAPSearchReq", "RPCCheck"},
|
||
691: {"GenericLines"},
|
||
873: {"GenericLines"},
|
||
898: {"GetRequest"},
|
||
993: {"GenericLines", "SSLSessionReq", "TerminalServerCookie", "TLSSessionReq"},
|
||
995: {"GenericLines", "SSLSessionReq", "TerminalServerCookie", "TLSSessionReq"},
|
||
1080: {"GenericLines", "Socks5", "Socks4"},
|
||
1099: {"JavaRMI"},
|
||
1234: {"SqueezeCenter_CLI"},
|
||
1311: {"GenericLines"},
|
||
1352: {"oracle-tns"},
|
||
1414: {"ibm-mqseries"},
|
||
1433: {"ms-sql-s"},
|
||
1521: {"oracle-tns"},
|
||
1723: {"GenericLines"},
|
||
1883: {"mqtt"},
|
||
1911: {"oracle-tns"},
|
||
2000: {"GenericLines", "oracle-tns"},
|
||
2049: {"RPCCheck"},
|
||
2121: {"GenericLines", "Help"},
|
||
2181: {"GenericLines"},
|
||
2222: {"GetRequest", "GenericLines", "HTTPOptions", "Help", "SSH", "TerminalServerCookie"},
|
||
2375: {"docker", "GetRequest", "HTTPOptions"},
|
||
2376: {"TLSSessionReq", "SSLSessionReq", "docker", "GetRequest", "HTTPOptions"},
|
||
2484: {"oracle-tns"},
|
||
2628: {"dominoconsole"},
|
||
3000: {"GetRequest", "HTTPOptions", "FourOhFourRequest"},
|
||
3268: {"LDAPSearchReq", "LDAPBindReq"},
|
||
3269: {"LDAPSearchReq", "LDAPBindReq", "SSLSessionReq"},
|
||
3306: {"GenericLines", "GetRequest", "HTTPOptions"},
|
||
3389: {"TerminalServerCookie", "TerminalServer"},
|
||
3690: {"GenericLines"},
|
||
4000: {"GenericLines"},
|
||
4369: {"epmd"},
|
||
4444: {"GenericLines"},
|
||
4840: {"GenericLines"},
|
||
5000: {"GetRequest", "HTTPOptions", "FourOhFourRequest"},
|
||
5050: {"GenericLines"},
|
||
5060: {"SIPOptions"},
|
||
5222: {"GenericLines"},
|
||
5432: {"GenericLines"},
|
||
5555: {"GenericLines"},
|
||
5560: {"GenericLines", "oracle-tns"},
|
||
5631: {"GenericLines", "PCWorkstation"},
|
||
5672: {"GenericLines"},
|
||
5984: {"GetRequest", "HTTPOptions"},
|
||
6000: {"X11Probe"},
|
||
6379: {"redis-server"},
|
||
6432: {"GenericLines"},
|
||
6667: {"GenericLines"},
|
||
7000: {"GetRequest", "HTTPOptions", "FourOhFourRequest", "JavaRMI"},
|
||
7001: {"GetRequest", "HTTPOptions", "FourOhFourRequest", "JavaRMI"},
|
||
7002: {"GetRequest", "HTTPOptions", "FourOhFourRequest", "JavaRMI"},
|
||
7070: {"GetRequest", "HTTPOptions", "FourOhFourRequest"},
|
||
7443: {"TLSSessionReq", "SSLSessionReq", "GetRequest", "HTTPOptions"},
|
||
7777: {"GenericLines", "oracle-tns"},
|
||
8000: {"GetRequest", "HTTPOptions", "FourOhFourRequest", "iperf3"},
|
||
8005: {"GetRequest", "HTTPOptions", "FourOhFourRequest"},
|
||
8008: {"GetRequest", "HTTPOptions", "FourOhFourRequest"},
|
||
8009: {"GetRequest", "HTTPOptions", "FourOhFourRequest", "ajp"},
|
||
8080: {"GetRequest", "HTTPOptions", "FourOhFourRequest"},
|
||
8081: {"GetRequest", "HTTPOptions", "FourOhFourRequest"},
|
||
8089: {"GetRequest", "HTTPOptions", "FourOhFourRequest"},
|
||
8090: {"GetRequest", "HTTPOptions", "FourOhFourRequest"},
|
||
8443: {"TLSSessionReq", "SSLSessionReq", "GetRequest", "HTTPOptions"},
|
||
8888: {"GetRequest", "HTTPOptions", "FourOhFourRequest"},
|
||
9000: {"GetRequest", "HTTPOptions", "FourOhFourRequest"},
|
||
9042: {"GenericLines"},
|
||
9092: {"GenericLines", "kafka"},
|
||
9200: {"GetRequest", "HTTPOptions", "elasticsearch"},
|
||
9300: {"GenericLines"},
|
||
9999: {"GetRequest", "HTTPOptions", "FourOhFourRequest", "adbConnect"},
|
||
10000: {"GetRequest", "HTTPOptions", "FourOhFourRequest", "JavaRMI"},
|
||
10051: {"GenericLines"},
|
||
11211: {"Memcache"},
|
||
15672: {"GetRequest", "HTTPOptions"},
|
||
27017: {"mongodb"},
|
||
27018: {"mongodb"},
|
||
50070: {"GetRequest", "HTTPOptions"},
|
||
61616: {"GenericLines"},
|
||
}
|
||
|
||
// DefaultUserDict 默认服务用户字典
|
||
var DefaultUserDict = map[string][]string{
|
||
"ftp": {"ftp", "admin", "www", "web", "root", "db", "wwwroot", "data"},
|
||
"mysql": {"root", "mysql"},
|
||
"mssql": {"sa", "sql"},
|
||
"smb": {"administrator", "admin", "guest"},
|
||
"rdp": {"administrator", "admin", "guest"},
|
||
"postgresql": {"postgres", "admin"},
|
||
"ssh": {"root", "admin"},
|
||
"mongodb": {"root", "admin"},
|
||
"redis": {""},
|
||
"oracle": {"sys", "system", "admin", "test", "web", "orcl"},
|
||
"telnet": {"root", "admin", "test"},
|
||
"elastic": {"elastic", "admin", "kibana"},
|
||
"rabbitmq": {"guest", "admin", "administrator", "rabbit", "rabbitmq", "root"},
|
||
"kafka": {"admin", "kafka", "root", "test"},
|
||
"activemq": {"admin", "root", "activemq", "system", "user"},
|
||
"ldap": {"admin", "administrator", "root", "cn=admin", "cn=administrator", "cn=manager"},
|
||
"smtp": {"admin", "root", "postmaster", "mail", "smtp", "administrator"},
|
||
"imap": {"admin", "mail", "postmaster", "root", "user", "test"},
|
||
"pop3": {"admin", "root", "mail", "user", "test", "postmaster"},
|
||
"zabbix": {"Admin", "admin", "guest", "user"},
|
||
"rsync": {"root", "admin", "backup"},
|
||
"cassandra": {"cassandra", "admin", "root", "system"},
|
||
"neo4j": {"neo4j", "admin", "root", "test"},
|
||
}
|
||
|
||
// DefaultPasswords 默认密码字典
|
||
var DefaultPasswords = []string{
|
||
"123456", "admin", "admin123", "root", "", "pass123", "pass@123",
|
||
"password", "Password", "P@ssword123", "123123", "654321", "111111",
|
||
"123", "1", "admin@123", "Admin@123", "admin123!@#", "{user}",
|
||
"{user}1", "{user}111", "{user}123", "{user}@123", "{user}_123",
|
||
"{user}#123", "{user}@111", "{user}@2019", "{user}@123#4",
|
||
"P@ssw0rd!", "P@ssw0rd", "Passw0rd", "qwe123", "12345678", "test",
|
||
"test123", "123qwe", "123qwe!@#", "123456789", "123321", "666666",
|
||
"a123456.", "123456~a", "123456!a", "000000", "1234567890", "8888888",
|
||
"!QAZ2wsx", "1qaz2wsx", "abc123", "abc123456", "1qaz@WSX", "a11111",
|
||
"a12345", "Aa1234", "Aa1234.", "Aa12345", "a123456", "a123123",
|
||
"Aa123123", "Aa123456", "Aa12345.", "sysadmin", "system", "1qaz!QAZ",
|
||
"2wsx@WSX", "qwe123!@#", "Aa123456!", "A123456s!", "sa123456",
|
||
"1q2w3e", "Charge123", "Aa123456789", "redis", "elastic123",
|
||
}
|