xtls / realitlscanner Goto Github PK

View Code? Open in Web Editor NEW

1.1K 12.0 95.0 27 KB

A TLS server scanner for Reality

License: Mozilla Public License 2.0

Go 100.00%

realitlscanner's Introduction

Reality - TLS - Scanner

Building

Requirement: Go 1.21+

go build

Usage

It is recommended to run this tool locally, as running the scanner in the cloud may cause the VPS to be flagged.

# Show help
./RealiTLScanner

# Scan a specific IP, IP CIDR or domain:
./RealiTLScanner -addr 1.2.3.4
# Note: infinity mode will be enabled automatically if `addr` is an IP or domain

# Scan a list of targets from a file (targets should be divided by line break):
./RealiTLScanner -in in.txt

# Crawl domains from a URL and scan:
./RealiTLScanner -url https://launchpad.net/ubuntu/+archivemirrors

# Specify a port to scan, default: 443
./RealiTLScanner -addr 1.1.1.1 -port 443

# Show verbose output, including failed scans and infeasible targets:
./RealiTLScanner -addr 1.2.3.0/24 -v

# Save results to a file, default: out.csv
./RealiTLScanner -addr www.microsoft.com -out file.csv

# Set a thread count, default: 1
./RealiTLScanner -addr wiki.ubuntu.com -thread 10

# Set a timeout for each scan, default: 10 (seconds)
./RealiTLScanner -addr 107.172.1.1/16 -timeout 5

Enable Geo IP

To enable Geo IP information, place a MaxMind GeoLite2/GeoIP2 Country Database in the executing folder with the exact name Country.mmdb. You can download one from here.

Demo

Example stdout:

2024/02/08 20:51:10 INFO Started all scanning threads time=2024-02-08T20:51:10.017+08:00
2024/02/08 20:51:10 INFO Connected to target feasible=true host=107.172.103.9 tls=1.3 alpn=h2 domain=rocky-linux.tk issuer="Let's Encrypt"
2024/02/08 20:51:10 INFO Connected to target feasible=true host=107.172.103.11 tls=1.3 alpn=h2 domain=rn.allinai.dev issuer="Let's Encrypt"
2024/02/08 20:51:13 INFO Connected to target feasible=true host=107.172.103.16 tls=1.3 alpn=h2 domain=san.hiddify01.foshou.vip issuer="Let's Encrypt"
2024/02/08 20:51:13 INFO Connected to target feasible=true host=107.172.103.19 tls=1.3 alpn=h2 domain=mgzx19.cnscholar.top issuer="Let's Encrypt"
2024/02/08 20:51:13 INFO Connected to target feasible=true host=107.172.103.22 tls=1.3 alpn=h2 domain=hy2.znull.top issuer=ZeroSSL
2024/02/08 20:51:21 INFO Connected to target feasible=true host=107.172.103.37 tls=1.3 alpn=h2 domain=c1.webgenbd.com issuer="Let's Encrypt"
2024/02/08 20:51:23 INFO Connected to target feasible=true host=107.172.103.46 tls=1.3 alpn=h2 domain=racknerd.myideal.xyz issuer="Let's Encrypt"
2024/02/08 20:51:38 INFO Scanning completed time=2024-02-08T20:51:38.988+08:00 elapsed=28.97043s

Example output file:

IP,ORIGIN,CERT_DOMAIN,CERT_ISSUER,GEO_CODE
202.70.64.2,ntc.net.np,*.ntc.net.np,"GlobalSign nv-sa",NP
196.200.160.70,mirror.marwan.ma,mirror.marwan.ma,"Let's Encrypt",MA
103.194.167.213,mirror.i3d.net,*.i3d.net,"Sectigo Limited",JP
194.127.172.131,nl.mirrors.clouvider.net,nl.mirrors.clouvider.net,"Let's Encrypt",NL
202.36.220.86,mirror.2degrees.nz,mirror.2degrees.nz,"Let's Encrypt",NZ
202.36.220.86,ubuntu.mirrors.theom.nz,mirror.2degrees.nz,"Let's Encrypt",NZ
158.37.28.65,ubuntu.hi.no,alma.hi.no,"Let's Encrypt",NO
193.136.164.6,ftp.rnl.tecnico.ulisboa.pt,ftp.rnl.ist.utl.pt,"Let's Encrypt",PT
75.2.60.5,cesium.di.uminho.pt,cesium.di.uminho.pt,"Let's Encrypt",US
195.14.50.21,mirror.corbina.net,ftp.corbina.net,"Let's Encrypt",RU

realitlscanner's People

Contributors

Stargazers

Watchers

Forkers

dumpmemory capxax jovidong nirvanatin rb-tech-byte alishoor mojmoj20 saeedazizii babytall mrdiabloo rajabitr eamon-cai 7alva7 signingup enriquephl ghggn limour-dev sitsaz windstander raptorizer68 0xrustlang mahyadnet ertebateweb iq-scm youmuyou wawnnzxd thetansinsin marynaosokina dd0072 hajilouali 00adreno00f23 xcode75 rxei mahakalaya xsy521hr xiefengshang moeloli mozhijun szliting 716c master88wi yasbija ayoonesi philve newliex gtzirun winterxg bonkcity bandpzy 11118 josh778899 sukyz lingganwu jartool peter2186668355 nilofari700 reza3723 monicamox angelholl xtls-fork1 xiaobu009 eadechan podipod dmitrysln r2d2-robo pantigon sakurafisch cppbeliever erickong1985 achiles727 josbu gjzxyb vesnindev pengzhang018 anyoneyo aeboyaci r53127 juzeon zdr1000zdr2000 mygithub1981 sohu96480 ugegkonst lovelygfj padre-chi blackluny lexwdex yuji01 jiayunpower sss333rl noskovii ackn0wl3dgm3nt szliyang boomzero vincentlin7 asd807

realitlscanner's Issues

Ubuntu 22.0.4

I can't build it on Ubuntu 22.0.4
My go version is 1.18.1
But i give this error:go.mod file note found in current directory

Client version for reality

Do client versions such as v2rayng and nekoray need to be updated to the latest version for use with reality?

show error when wanna open this script

hi my friend
I wanna start RealiTLScanner in win 10 but show error
I install go language but cant start RealiTLScanner

能否加一个控制v4或v6的参数？

addr后为网址时，如 -addr domain.com。
如果本地有ipv6，程序后续扫描的网址就都是ipv6了，这样是不是就扫不到只有ipv4的网址了？这个能手动控制吗？

erorr the target machine actively refused it.

hi when i run windows app this error is appare
Reality TLS Scanner running: 127.0.0.1:443 start scan at : 2023-07-23T19:56:31+03:30
Dial failed: dial tcp 127.0.0.1:443: connectex: No connection could be made because the target machine actively refused it.

HTTP Status, Allowed domains, Verbose output file

Hi,

Please add an option to show/save each feasible target's HTTP Status (when connected to IP without SNI)
Then we can know if we can use that domain as fallback of our reality or not

option to paste list of 'Allowed domains' for each domain like xray-core tls ping

ability to Parse ASN of each IP

option to make output file more detailed

Thank you.