yscan是一款基于go写的端口扫描工具,masscan+nmap+wappalyzer+证书于一体,适用大网测绘。
top50 tcp扫描然后做waf判断,减少端口膨胀带来扫描压力->top1000无状态扫描(-port参数可调端口范围)->开放的端口做tcp扫描扫描
go mod tidy
go build yscan.go
//服务端监听
sudo ./yscan -rpcaddr localhost:10000
//客户端下发扫描并等待返回
//端口rpc
curl --location --request POST 'http://localhost:10000/rpc' \
--header 'Content-Type: application/json' \
--data-raw '{"method":"PortScanService.Scan","params":[{"ip":"192.168.10.1/24"}], "id":1}'
//指纹rpc
curl --location --request POST 'http://localhost:10000/rpc' \
--header 'Content-Type: application/json' \
--data-raw '{"method":"PortScanService.Wap","params":[{"url":"http://www.baidu.com"}], "id":1}'