mirrors/fscan
1
0
Fork 0
mirror of https://github.com/shadow1ng/fscan.git synced 2025-09-14 14:06:44 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

refactor: 为MS17010插件添加包控制功能

Browse Source 
- 在checkMS17010Vulnerability和checkDoublePulsar方法中添加包控制检查
- 统一错误处理和包计数逻辑
- 确保所有TCP连接遵循发包限制
This commit is contained in:
ZacharyZcR 2025-09-02 12:04:26 +00:00
parent 2385a730eb
commit 4054c767dd
1 changed files with 16 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
plugins/services/ms17010.go
View File

@ -296,11 +296,18 @@ func init() {
// checkMS17010Vulnerability 检测MS17-010漏洞 (从原始MS17010.go复制和适配) // checkMS17010Vulnerability 检测MS17-010漏洞 (从原始MS17010.go复制和适配)
func (p *MS17010Plugin) checkMS17010Vulnerability(ip string) (bool, string, error) { func (p *MS17010Plugin) checkMS17010Vulnerability(ip string) (bool, string, error) {
// 检查发包限制
if canSend, reason := common.CanSendPacket(); !canSend {
return false, "", fmt.Errorf("发包受限: %s", reason)
}
// 连接目标 // 连接目标
conn, err := net.DialTimeout("tcp", ip+":445", time.Duration(common.Timeout)*time.Second) conn, err := net.DialTimeout("tcp", ip+":445", time.Duration(common.Timeout)*time.Second)
if err != nil { if err != nil {
common.IncrementTCPFailedPacketCount()
return false, "", fmt.Errorf("连接错误: %v", err) return false, "", fmt.Errorf("连接错误: %v", err)
} }
common.IncrementTCPSuccessPacketCount()
defer conn.Close() defer conn.Close()
if err = conn.SetDeadline(time.Now().Add(time.Duration(common.Timeout) * time.Second)); err != nil { if err = conn.SetDeadline(time.Now().Add(time.Duration(common.Timeout) * time.Second)); err != nil {
@ -401,10 +408,17 @@ func (p *MS17010Plugin) checkMS17010Vulnerability(ip string) (bool, string, erro
// checkDoublePulsar 检测DOUBLEPULSAR后门 // checkDoublePulsar 检测DOUBLEPULSAR后门
func (p *MS17010Plugin) checkDoublePulsar(ip string) bool { func (p *MS17010Plugin) checkDoublePulsar(ip string) bool {
conn, err := net.DialTimeout("tcp", ip+":445", time.Duration(common.Timeout)*time.Second) // 检查发包限制
if err != nil { if canSend, _ := common.CanSendPacket(); !canSend {
return false return false
} }
conn, err := net.DialTimeout("tcp", ip+":445", time.Duration(common.Timeout)*time.Second)
if err != nil {
common.IncrementTCPFailedPacketCount()
return false
}
common.IncrementTCPSuccessPacketCount()
defer conn.Close() defer conn.Close()
// 简化的后门检测逻辑 // 简化的后门检测逻辑