diff --git a/configs/banner.go b/configs/banner.go index f7e6a89..ea7a2b3 100644 --- a/configs/banner.go +++ b/configs/banner.go @@ -13,7 +13,7 @@ func Banner() { "/ /_/ / _ / _(__ )_ / / / / / /_/ /__ /_/ /\n" + "\\__,_/ /_/ /____/ /_/ /_/ /_/\\__,_/ _ .___/\n" + " /_/" - s := " dismap version: 0.3 release\n" + + s := " dismap version: 0.4 release\n" + " author: zhzyker && Nemophllist\n" + " from: https://github.com/zhzyker/dismap\n" fmt.Println(logger.Purple(b)) diff --git a/configs/config.go b/configs/config.go index 267e81a..c6d6ece 100644 --- a/configs/config.go +++ b/configs/config.go @@ -1,11 +1,9 @@ package configs - - -var DefaultPorts = []int{21,22,25,53,69,79,80,81,82,83,84,85,86,87,88,89,110,135,137,138,139,143,389,443,445,554,587,631,800,801,808,880,888,1000,1024,1025,1080,1099,1389,1433,1521,2000,2001,2222,2601,3306,3307,3388,3389,3443,5800,5900,6379,7000,7001,7007,7010,7788,8000,8001,8002,8003,8004,8005,8006,8007,8008,8009,8010,8011,8030,8060,8070,8080,8081,8082,8083,8084,8085,8086,8087,8088,8089,8090,8091,8092,8093,8094,8095,8096,8097,8098,8099,8161,8175,8188,8189,8443,8445,8448,8554,8800,8848,8880,8881,8888,8899,8983,8989,9000,9001,9002,9008,9010,9043,9060,9080,9081,9082,9083,9084,9085,9086,9087,9088,9089,9090,9091,9092,9093,9094,9095,9096,9097,9099,9443,9448,9600,9628,9800,9899,9981,9986,9988,9998,9999,11001,13443,15000,20000,33890,45554,49155,49156,50050,61616} +var DefaultPorts = []int{21, 22, 23, 25, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 110, 135, 137, 138, 139, 143, 389, 443, 445, 587, 631, 800, 801, 808, 880, 888, 1000, 1024, 1025, 1080, 1099, 1389, 1433, 1521, 3306, 3307, 3388, 3389, 3443, 5800, 5900, 6379, 7000, 7001, 7007, 7010, 7788, 8000, 8001, 8002, 8003, 8004, 8005, 8006, 8007, 8008, 8009, 8010, 8011, 8030, 8060, 8070, 8080, 8081, 8082, 8083, 8084, 8085, 8086, 8087, 8088, 8089, 8090, 8091, 8092, 8093, 8094, 8095, 8096, 8097, 8098, 8099, 8161, 8175, 8188, 8189, 8443, 8445, 8448, 8554, 8800, 8848, 8880, 8881, 8888, 8899, 8983, 8989, 9000, 9001, 9002, 9008, 9010, 9043, 9060, 9080, 9081, 9082, 9083, 9084, 9085, 9086, 9087, 9088, 9089, 9090, 9091, 9092, 9093, 9094, 9095, 9096, 9097, 9099, 9443, 9600, 9628, 9800, 9999, 11001, 13443, 49155, 50050, 61616} var DefaultHeader = map[string]string{ "Accept-Language": "zh,zh-TW;q=0.9,en-US;q=0.8,en;q=0.7,zh-CN;q=0.6", - "User-agent": "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1468.0 Safari/537.36", - "Cookie": "rememberMe=int", -} \ No newline at end of file + "User-agent": "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1468.0 Safari/537.36", + "Cookie": "rememberMe=int", +} diff --git a/configs/rule.go b/configs/rule.go index 867105f..252d737 100644 --- a/configs/rule.go +++ b/configs/rule.go @@ -2,13 +2,13 @@ package configs type ReqHttp struct { ReqMethod string - ReqPath string + ReqPath string ReqHeader []string - ReqBody string + ReqBody string } type InStr struct { - InBody string + InBody string InHeader string InIcoMd5 string } @@ -26,7 +26,7 @@ var RuleData = []RuleLab{ {1, "EnterCRM", "body", "", InStr{"(Ent.base.js)", "", ""}, ReqHttp{"", "", nil, ""}}, {1, "MeterSphere", "body", "", InStr{"(MeterSphere)", "", ""}, ReqHttp{"", "", nil, ""}}, {3, "Apache Druid", "body", "", InStr{"(Apache Druid|content=\"Apache Druid console\")", "", ""}, ReqHttp{"", "", nil, ""}}, - {2, "Alibaba Druid", "body", "", InStr{"(\n(.*)Welcome|click(druid.login.login)|druid monitor|druid.common.buildHead|druid.index.init())", "", ""}, ReqHttp{"", "", nil, ""}}, + {2, "Alibaba Druid", "body", "", InStr{"(click(druid.login.login)|druid monitor|druid.common.buildHead|druid.index.init())", "", ""}, ReqHttp{"", "", nil, ""}}, {3, "Sunlogin", "body|header", "and", InStr{"(\"msg\":\"Verification failure\")", "(application/json|text/html)", ""}, ReqHttp{"", "", nil, ""}}, {1, "08CMS", "body", "", InStr{"(content=\"08cms|typeof(_08cms))", "", ""}, ReqHttp{"", "", nil, ""}}, @@ -231,7 +231,7 @@ var RuleData = []RuleLab{ {1, "Apahce-Guacamole", "body", "", InStr{"(images/guacamole-logo|guacamole - clientless remote desktop|scripts/guac-ui.js)", "", ""}, ReqHttp{"", "", nil, ""}}, {1, "Apahce-hadoop-YARN", "body", "", InStr{"(yarn.dt.plugins.js)", "", ""}, ReqHttp{"", "", nil, ""}}, {1, "Apache-Haus", "body", "", InStr{"(href=\"/apachehaus.ico|copyright © 2008-2017 the apache haus)", "", ""}, ReqHttp{"", "", nil, ""}}, - {1, "Apache", "header", "", InStr{"", "(Server: Apache(.*))", ""}, ReqHttp{"", "", nil, ""}}, + {1, "Apache", "header", "", InStr{"", "(Server: Apache)", ""}, ReqHttp{"", "", nil, ""}}, {3, "Apahce-Kylin", "body", "", InStr{"(href=\"/kylin/\")", "", ""}, ReqHttp{"", "", nil, ""}}, {1, "Apache-Mesos", "body", "", InStr{"(href=\"/static/css/mesos.css|\"apache)", "", ""}, ReqHttp{"", "", nil, ""}}, {3, "Apache-OFBiz", "body|header", "", InStr{"(Apache OFBiz|apache.ofbiz)", "(Set-Cookie: OFBiz.Visitor=)", ""}, ReqHttp{"GET", "/myportal/control/main", nil, ""}}, @@ -239,10 +239,10 @@ var RuleData = []RuleLab{ {1, "Apache-on-Mac_OS_X", "ico", "", InStr{"", "", "(73778a17b0d22ffbb7d6c445a7947b92)"}, ReqHttp{"", "", nil, ""}}, {1, "Apache-on-Red-Hat/Fedora", "ico", "", InStr{"", "", "(d99217782f41e71bcaa8e663e6302473)"}, ReqHttp{"", "", nil, ""}}, {1, "Apahce-Oozie-Web-Console", "body", "", InStr{"(oozie-console|href=\"/oozie\">oozie console)", "", ""}, ReqHttp{"", "", nil, ""}}, - {3, "Apache-RocketMQ", "body|header", "or", InStr{"(title>RocketMq(.*))", "(X-Application-Context: rocketmq-console(.*))", ""}, ReqHttp{"", "", nil, ""}}, + {3, "Apache-RocketMQ", "body|header", "or", InStr{"(title>RocketMq)", "(X-Application-Context: rocketmq-console)", ""}, ReqHttp{"", "", nil, ""}}, {3, "Apache-Shiro", "header|body", "or", InStr{"( shiro)", "(rememberMe=|=deleteMe|shiro-cas)", ""}, ReqHttp{"", "", nil, ""}}, {3, "Apache-Solr", "body|ico", "or", InStr{"(SolrCore Initialization Failures|ng-app=\"solrAdminApp\")", "", "(69acfcb2659952bc37c54108d52fca70|ffc05799dee87a4f8901c458f7291d73)"}, ReqHttp{"", "", nil, ""}}, - {1, "Apache-Spark ", "body|ico", "or", InStr{"(src=\"/static/spark-logo(.*)\\.png\"|spark://)", "", "\""}, ReqHttp{"", "", nil, ""}}, + {1, "Apache-Spark", "body", "", InStr{"(src=\"/static/spark-logo(.*)\\.png\")", "", ""}, ReqHttp{"", "", nil, ""}}, {3, "Apache-Struts2", "body|header", "and", InStr{"(struts problem report|there is no action mapped for namespace|no result defined for action and result input||
|(.*)\\.action|(.*)\\.do)", "(jsessionid)", ""}, ReqHttp{"", "", nil, ""}}, {3, "Apache-Tomcat", "body|ico", "or", InStr{"(href=\"tomcat.css|tomcat.apache.org|this is the default tomcat home page|

apache tomcat|Tomcat Setup|If you're seeing this, you've successfully installed Tomcat. Congratulations!|this is the default tomcat home page|tomcat.apache.org|href=\\\"tomcat.css)", "", "(d80e364c0d3138c7ecd75bf9896f2cad|4644f2d45601037b8423d45e13194c93)"}, ReqHttp{"", "", nil, ""}}, {1, "Apache-Traffic-Server", "header", "", InStr{"", "(apachetrafficserver)", ""}, ReqHttp{"", "", nil, ""}}, @@ -544,7 +544,7 @@ var RuleData = []RuleLab{ {1, "brother-8510DN", "body", "", InStr{"(id=\"modelname\">

mfc-8510dn)", "", ""}, ReqHttp{"", "", nil, ""}}, {1, "Brother-Printer", "body", "", InStr{"(|href=\"http://www.bt.cn/bbs/thread-1172-1-1.html|宝塔linux面板|src=\"/static/js/validform_v5.3.2_min.js|请使用正确的入口登录面板|rm -f /www/server/panel/data/admin_path.pl|宝塔(.*)面板)", "(set-cookie: bt_panel=|Set-Cookie: BT_COLL=)", "(9637ebd168435de51fea8193d2d89e39)"}, ReqHttp{"", "", nil, ""}}, + {1, "BT-Linux-Control-Pane", "body|header|ico", "or", InStr{"(|href=\"http://www.bt.cn/bbs/thread-1172-1-1.html|宝塔linux面板|src=\"/static/js/validform_v5.3.2_min.js|请使用正确的入口登录面板|rm -f /www/server/panel/data/admin_path.pl)", "(set-cookie: bt_panel=|Set-Cookie: BT_COLL=)", "(9637ebd168435de51fea8193d2d89e39)"}, ReqHttp{"", "", nil, ""}}, {1, "Buffalo-TeraStation", "body", "", InStr{"(value=\"view terastation manual|value=\"terastation handbuch lesen)", "", ""}, ReqHttp{"", "", nil, ""}}, {1, "BugFree", "body", "", InStr{"(id=\"logo\" alt=bugfree|class=\"loginbgimage\" alt=\"bugfree|name=\"buguserpwd)", "", ""}, ReqHttp{"", "", nil, ""}}, {1, "BugScan", "body", "", InStr{"(bugscan memos|powered by bugscan)", "", ""}, ReqHttp{"", "", nil, ""}}, @@ -1221,7 +1221,7 @@ var RuleData = []RuleLab{ {1, "Dreambox WebControl", "ico", "", InStr{"", "", "(d9aa63661d742d5f7c7300d02ac18d69)"}, ReqHttp{"", "", nil, ""}}, {1, "Dr.Rui-Cloud-office-system", "body", "", InStr{"(/studentsign/tologin.di|/user/toupdatepasswordpage.di)", "", ""}, ReqHttp{"", "", nil, ""}}, {1, "DrugPak", "body", "", InStr{"(powered by drugpak|/dplimg/dpstyle.css)", "", ""}, ReqHttp{"", "", nil, ""}}, - {3, "Drupal", "header|body|ico", "or", InStr{"(href=\"https://www.drupal.org\"|data-drupal-link-system-path=\"(.*)\")", "(x-generator: drupal)", "(f0ee98b4394dfdab17c16245dd799204|b6341dfc213100c61db4fb8775878cec|a4819787db1dabe1a6b669d5d6df3bfd|e6a9dc66179d8c9f34288b16a02f987e|a4819787db1dabe1a6b669d5d6df3bfd|b6341dfc213100c61db4fb8775878cec|f0ee98b4394dfdab17c16245dd799204)"}, ReqHttp{"", "", nil, ""}}, + {3, "Drupal", "header|body|ico", "or", InStr{"(href=\"https://www.drupal.org\"|data-drupal-link-system-path=)", "(x-generator: drupal)", "(f0ee98b4394dfdab17c16245dd799204|b6341dfc213100c61db4fb8775878cec|a4819787db1dabe1a6b669d5d6df3bfd|e6a9dc66179d8c9f34288b16a02f987e|a4819787db1dabe1a6b669d5d6df3bfd|b6341dfc213100c61db4fb8775878cec|f0ee98b4394dfdab17c16245dd799204)"}, ReqHttp{"", "", nil, ""}}, {3, "Drupal CMS", "ico", "", InStr{"", "", "(e6a9dc66179d8c9f34288b16a02f987e)"}, ReqHttp{"", "", nil, ""}}, {1, "DrWebAntiVirus", "body", "", InStr{"(/avdesk/includes/system/templates/images/logo_en.png)", "", ""}, ReqHttp{"", "", nil, ""}}, {1, "DrWebAntiVirus", "header", "", InStr{"", "(server: drwebserver|drweb_personal_office=)", ""}, ReqHttp{"", "", nil, ""}}, @@ -1266,7 +1266,7 @@ var RuleData = []RuleLab{ {1, "ebrigade-ERP", "body", "", InStr{"(class='btn btn-ebrigade btn-lg')", "", ""}, ReqHttp{"", "", nil, ""}}, {1, "ebug-http", "ico", "", InStr{"", "", "(171429057ae2d6ad68e2cd6dcfd4adc1)"}, ReqHttp{"", "", nil, ""}}, {1, "ECash-System", "body", "", InStr{"(
欢迎使用e-cash系统)", "", ""}, ReqHttp{"", "", nil, ""}}, - {3, "E-cology-OA", "body|header|ico", "or", InStr{"(