p1-team / allin Goto Github PK
View Code? Open in Web Editor NEWA flexible scanner
A flexible scanner
In the current version v2.2.1, can the author add vhost collision module? :)
one:https://github.com/pmiaowu/HostCollision
two:https://github.com/fofapro/Hosts_scan
我是该项目的忠实粉丝,极高的自由度和近乎完美的功能。
1.但是突然我发现如果目标太多 给他一个所有目标根域名的列表就不能调用模块去批量查询
python3 Allin.py -f y111.txt -m sfscan
这一点在红蓝对抗中比较节省时间
2.hunter平台也可以弄一个模式出来跟fscan 模式一样就好,如果能优化一些哪就更完美了
3.能否支持输出csv和xslx格式的文件呢
不管更不更新都先谢谢大佬写出这么好用的工具
填写了Riskiqkey之后为什么依然搜索不到?是格式不对吗?
keylist = ["8f4778b8a661702019c304f3a2f13696b2b36d49729aa34fa060bfxxxxxxxxxx"]
rt
socks5://root:[email protected]:8081
我在运行端口扫描,保存结果文件时提示以下错误
Exception in thread Thread-2:
Traceback (most recent call last):
File "/usr/lib/python3.8/threading.py", line 932, in _bootstrap_inner
self.run()
File "AlliN-2.1.8-in.py", line 7807, in run
args[2], origin,
UnboundLocalError: local variable 'origin' referenced before assignment
我在7807行找到了他,发现这个当端口不是443时,origin和n变量未被赋予值;
if JSONFILE:
wpinfo = ("{\"%s\":{"
"\"certs_origin\": \"%s\","
"\"certs\": \"%s\","
"\"port\": \"%s\","
"\"host\": \"%s\","
"\"type\": \"%s\"}}" % (
args[2], origin,
n, certs,
args[2], service(int(n))
))
我将这个if判断调整至上方for循环中,程序可以正常运转。
for n in port_list:
if open_ports[n] == "open":
if n == "443":
certs , origin = getHttpCert(ip, 443)
print("[ %s open %s %d/tcp CertDomain:%s %s]" % (service(int(n)), ip, int(n), certs, origin) + " "*30 + "\n")
wpinfo = "[" + service(int(n)) + " | open | " + ip + " | " + str(n) + " | " + certs + " | " + origin + "]\n"
if JSONFILE:
wpinfo = ("{\"%s\":{"
"\"certs_origin\": \"%s\","
"\"certs\": \"%s\","
"\"port\": \"%s\","
"\"host\": \"%s\","
"\"type\": \"%s\"}}\n" % (
args[2], origin,
n, certs,
args[2], service(int(n))
))
else:
print("[ %s open %s %d/tcp ]" % (service(int(n)), ip,int(n)) + " "*40 + "\n")
wpinfo = "[" + service(int(n)) + " | open | " + ip + " | " + str(n)+ "]\n"
if JSONFILE:
wpinfo = ("{\"%s\":{"
"\"port\": \"%s\","
"\"host\": \"%s\","
"\"type\": \"%s\"}}\n" % (
args[2], n,
args[2], service(int(n))
))
Maybe AlliN add Favicon Hash modle.
Source:https://github.com/devanshbatham/FavFreak
使用AlliN v2.4.0进行全端口扫描无法扫出数据库端口
命令:python AlliN.py --host 127.0.0.1 -p- -t 500
开放redis 6379端口但是没有扫描出来。
运行环境python 3.9报错如下:
Waiting for fofa ...
[ - ] KeyError('size')
xxxxxx(手动码) | PASSIVE Request error | CERT Request 1 | VTS Request error |
[ >>>>>>>>>>>>>>>>>>>>>>>>>>>>>> ] 2/2 (100%) 0 to Go
Task completed
师傅们好,上次可能没描述清楚,-f选项的需求是 python allin.py -f host.txt -m fscan 或者调用其他的扫描模块,感觉实现确实有点麻烦,感觉可以把title和host查询分开或者只做txt里一列host的fofa查询语句,师傅们没时间实现也没关系,这个项目已经很好了!!还有一个问题是二进制的allin怎么配置key呢。。谢谢各位师傅
9:39:29 › sudo python3 AlliN.py -p 80 -f 1.txt -m tscan,dpscan,nbscan,t3scan,0708scan,pscan,17scan,gtscan,bakscan --dd --nocert
█████╗ ██╗ ██╗ ██╗███╗ ██╗
██╔══██╗██║ ██║ ██║████╗ ██║
███████║██║ ██║ ██║██╔██╗ ██║
██╔══██║██║ ██║ ██║██║╚██╗██║ v2.4.2 #3.7.7
██║ ██║███████╗███████╗██║██║ ╚████║
╚═╝ ╚═╝╚══════╝╚══════╝╚═╝╚═╝ ╚═══╝
Timelocal: Mon Sep 11 09:39:59 2023 | Threads: 200
[+] tscan,dpscan,nbscan,t3scan,0708scan,pscan,17scan,gtscan,bakscan mode
Traceback (most recent call last):
File "AlliN.py", line 9564, in <module>
AG3(args.f, args.m, listPort, args.t, "file", args.o, args.u)
File "AlliN.py", line 9201, in AG3
hr, task_list, method, listPort, threadnum, outfile, urlpath
File "AlliN.py", line 9125, in aliveThreadControl
progress.dones()
File "AlliN.py", line 4783, in dones
self()
File "AlliN.py", line 4761, in __call__
percent = self.current / float(self.total)
ZeroDivisionError: float division by zero
请问为什么端口扫描的timeout
设置为3.0
时(默认),则切换为0.5
秒?
Line 5870 in dedd237
请问如何添加favicon.ico指纹hash信息,让allin进行指纹识别
师傅AlinN指纹识别的方式能否考虑一下加入主动探测的方式
fofa 提示 - KeyError('size',)然后就自动退出了,默认数值没生效 ?
端口范围的写法处理有bug,仅录入到最后一处的端口范围。
举例,使用-p 80-90,443,8000,8080-8088时,会变成仅扫描最后一处使用横杠的8080-8088和443,8000端口。而前面的80-90端口会被忽略掉。
jdwp scan plz!
打包的exe运行后,如果站点标题为中文,显示为乱码
使用py运行不存在该问题
建议在后续版本中将标红的高危指纹单独统计并在最后的结果中显示出来,方便用户查看当前结果是否存在标红的高危指纹。
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.