在进行web打点时,信息收集中对目标进行指纹识别是必不可少的一个环节,使用EHole识别出来的重点资产还要用其他漏洞利用工具去检测,非常的不方便,在原本的基础上加了个漏洞检测功能。提打点的效率。(不影响原版功能的使用)
对资产进行指纹识别-->重点资产进行漏洞检测-->如:http://www.xxx.com存在通达OA--> 对通达OA漏洞进行扫描->对ftp服务进行暴力破解
默认不开启,在poc.ini中将poc=no改为poc=yes开启
ftp爆破默认不开启,在poc.ini中将brute=no改为brute=yes开启
注意:从FOFA识别需要配置FOFA 密钥以及邮箱,在config.ini内配置好密钥以及邮箱即可使用。
搜索无结果 解决方案:如:将domain="baidu.com"改为domain='"baidu.com"'
ehole finger -s domain="baidu.com" // 支持所有fofa语法
注意:从hunter识别需要配置hunter 密钥,在config.ini内配置好密钥即可使用。
搜索无结果 与fofa解决方案相同
ehole finger -b ip="180.140.20.182" // 支持所有hunter语法
ehole finger -l 1.txt // 从文件中加载url扫描
ehole finger -u http://www.baidu.com // 单个url检测
![image](https://private-user-images.githubusercontent.com/56328995/250366651-e4064f38-6458-4778-a2f5-b7db2de54b1d.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Hnjw-oxpb01uENbt85IM2IxvjXpZdJIiwMODcWrXWrQ)
1、修复mac版报错segmentation fault
2、增加从hunter提取资产,进行指纹识别
![image](https://private-user-images.githubusercontent.com/56328995/251018087-f2c733d8-6bf6-4d56-b31b-61015421fd7c.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.231zb2O2ClGr99KLUpg7aAZwy4CXSJ1X3FvvP_0WIA0)
![image](https://private-user-images.githubusercontent.com/56328995/251017738-dfb7b200-4938-41b1-88c3-9756c6970ebc.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.0zxcUVOBHCrF2k0hghk0UHsLcc6KzseE9yvP-1EV6-c)
1、增加常用poc数量
2、对ftp服务进行检测,将poc.ini中的brute设置为yes可进行密码爆破
![image](https://private-user-images.githubusercontent.com/56328995/251691661-d28ca59b-3eab-4ef8-a19a-d8726ed274f2.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.q36waISqUHZGsT30ne9--htIcTEQ2khaRDRT5LbWODM)
![image](https://private-user-images.githubusercontent.com/56328995/251692247-2fe41884-dd51-48ce-8651-b20e3a4a8139.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.JG4w9PqggCrAfM2c_Urkc7VKOE07yXPM_PANALS3YWE)
1、更新指纹数量,1w+
2、修复fofa -f或者-s 后没有具体资产显示
3、增加宏景eHR人力资源信息管理系统sql注入检测
![image](https://private-user-images.githubusercontent.com/56328995/253150036-98c7590d-0dce-4b10-a329-5db313c5e484.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MjQ2MTkxNzEsIm5iZiI6MTcyNDYxODg3MSwicGF0aCI6Ii81NjMyODk5NS8yNTMxNTAwMzYtOThjNzU5MGQtMGRjZS00YjEwLWEzMjktNWRiMzEzYzVlNDg0LnBuZz9YLUFtei1BbGdvcml0aG09QVdTNC1ITUFDLVNIQTI1NiZYLUFtei1DcmVkZW50aWFsPUFLSUFWQ09EWUxTQTUzUFFLNFpBJTJGMjAyNDA4MjUlMkZ1cy1lYXN0LTElMkZzMyUyRmF3czRfcmVxdWVzdCZYLUFtei1EYXRlPTIwMjQwODI1VDIwNDc1MVomWC1BbXotRXhwaXJlcz0zMDAmWC1BbXotU2lnbmF0dXJlPTM2ZTQ3ZTRlNmQ3OTgyN2MxYmYwMWRiNWNlZWQwMmViNjUyOTY4ZTIzMmFiOTk4ODRmMTZjMDVlOWQ4OWQzNDEmWC1BbXotU2lnbmVkSGVhZGVycz1ob3N0JmFjdG9yX2lkPTAma2V5X2lkPTAmcmVwb19pZD0wIn0.IrIpJ8fwhFAEeDRSUF2H1FVuCmlE2NaRel1QMwxAwhA)
![image](https://private-user-images.githubusercontent.com/56328995/253208339-78af3d01-7c23-4058-9071-402e07dbea6a.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.alP7O-9klFOS0wbmms2HaYYtBDkj6EKMqdDPxvRELwU)
1、更新最近出的day(用友、金蝶云、大华)
2、优化指纹识别
添加路径指纹识别(有些网站需要添加特定路径才能显示页面)感谢G0mini师傅给的建议
在poc.ini中设置参数route=yes开启 路径字典 在dict目录下的path.txt中
![image](https://private-user-images.githubusercontent.com/56328995/285266194-31db58ff-0bb2-4e68-b6ab-a9c824db13b5.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MjQ2MTkxNzEsIm5iZiI6MTcyNDYxODg3MSwicGF0aCI6Ii81NjMyODk5NS8yODUyNjYxOTQtMzFkYjU4ZmYtMGJiMi00ZTY4LWI2YWItYTljODI0ZGIxM2I1LnBuZz9YLUFtei1BbGdvcml0aG09QVdTNC1ITUFDLVNIQTI1NiZYLUFtei1DcmVkZW50aWFsPUFLSUFWQ09EWUxTQTUzUFFLNFpBJTJGMjAyNDA4MjUlMkZ1cy1lYXN0LTElMkZzMyUyRmF3czRfcmVxdWVzdCZYLUFtei1EYXRlPTIwMjQwODI1VDIwNDc1MVomWC1BbXotRXhwaXJlcz0zMDAmWC1BbXotU2lnbmF0dXJlPTY0YTEyZTliODI5YjY3YzkyYTIyYWVmN2ZjZDRiYzM0YzJkYmMwNTJjMWYxNzM4YjRiZjc1MTRmZjk5ZTMxMDgmWC1BbXotU2lnbmVkSGVhZGVycz1ob3N0JmFjdG9yX2lkPTAma2V5X2lkPTAmcmVwb19pZD0wIn0.xzdLEmZka4S8CP49-3XvgyRswQXbJ1z2MSowOeX6Mho)
![image](https://private-user-images.githubusercontent.com/56328995/285266548-9dfd2db0-de44-4769-b4c1-11355055310c.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.3IpEKioQPG7OapZXtsJCy3shPWUVSKGuDTsHX_n3FMQ)
![image](https://private-user-images.githubusercontent.com/56328995/285266705-35abd894-a6f6-44c8-bae6-f983ab0daae7.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.B0_AgIfhXc8DViY5xZPAa-z6WroT3Y67g_XEkBCrGzI)
添加指纹至2w+
![image](https://private-user-images.githubusercontent.com/56328995/287116847-98ca03f0-c8e5-4da9-b916-bf5f3afbacf9.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.zQ9hR7PaiLKzzb7crBAQLj6HRTU22T0u1zOwqhQZA2s)
POC-bomber:https://github.com/tr0uble-mAker/POC-bomber
peiqi文库:https://peiqi.wgpsec.org
EHole:https://github.com/EdgeSecurityTeam/EHole
EHole-modify:https://github.com/A10nggg/EHole-modify/