mirror of
https://github.com/shadow1ng/fscan.git
synced 2025-09-14 14:06:44 +08:00
120bd9f341
将所有29个services插件从RegisterPlugin()转换为高效的RegisterPluginWithPorts()注册方式： 核心优化： - 消除启动时1200+无用插件实例创建（25插件×47次调用） - 统一插件注册机制，移除性能较差的旧接口 - 优化插件存在性检查，使用O(1)查询替代实例化检查 技术改进： - 移除旧RegisterPlugin()函数，简化代码路径 - 所有service插件使用统一高效注册方式 - 保持业务逻辑和外部接口完全不变 性能提升： - 显著减少启动时间和内存占用 - 消除重复的"加载了175个AV产品信息"日志输出 - 插件系统响应更快，扫描启动更迅速 影响范围：29个services插件全部完成转换 向后兼容：保持所有现有功能和接口不变
125 lines
2.8 KiB
Go
125 lines
2.8 KiB
Go
package services
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"time"
|
|
|
|
"github.com/IBM/sarama"
|
|
"github.com/shadow1ng/fscan/common"
|
|
)
|
|
|
|
type KafkaPlugin struct {
|
|
name string
|
|
ports []int
|
|
}
|
|
|
|
func NewKafkaPlugin() *KafkaPlugin {
|
|
return &KafkaPlugin{
|
|
name: "kafka",
|
|
ports: []int{9092, 9093, 9094},
|
|
}
|
|
}
|
|
|
|
func (p *KafkaPlugin) GetName() string {
|
|
return p.name
|
|
}
|
|
|
|
func (p *KafkaPlugin) GetPorts() []int {
|
|
return p.ports
|
|
}
|
|
|
|
func (p *KafkaPlugin) Scan(ctx context.Context, info *common.HostInfo) *ScanResult {
|
|
target := fmt.Sprintf("%s:%s", info.Host, info.Ports)
|
|
|
|
if common.DisableBrute {
|
|
return p.identifyService(ctx, info)
|
|
}
|
|
|
|
credentials := GenerateCredentials("kafka")
|
|
if len(credentials) == 0 {
|
|
return &ScanResult{
|
|
Success: false,
|
|
Service: "kafka",
|
|
Error: fmt.Errorf("没有可用的测试凭据"),
|
|
}
|
|
}
|
|
|
|
for _, cred := range credentials {
|
|
if client := p.testCredential(ctx, info, cred); client != nil {
|
|
client.Close()
|
|
common.LogSuccess(fmt.Sprintf("Kafka %s %s:%s", target, cred.Username, cred.Password))
|
|
return &ScanResult{
|
|
Success: true,
|
|
Service: "kafka",
|
|
Username: cred.Username,
|
|
Password: cred.Password,
|
|
}
|
|
}
|
|
}
|
|
|
|
return &ScanResult{
|
|
Success: false,
|
|
Service: "kafka",
|
|
Error: fmt.Errorf("未发现弱密码"),
|
|
}
|
|
}
|
|
|
|
|
|
func (p *KafkaPlugin) testCredential(ctx context.Context, info *common.HostInfo, cred Credential) sarama.Client {
|
|
target := fmt.Sprintf("%s:%s", info.Host, info.Ports)
|
|
timeout := time.Duration(common.Timeout) * time.Second
|
|
|
|
config := sarama.NewConfig()
|
|
config.Net.DialTimeout = timeout
|
|
config.Net.ReadTimeout = timeout
|
|
config.Net.WriteTimeout = timeout
|
|
config.Version = sarama.V2_0_0_0
|
|
|
|
if cred.Username != "" || cred.Password != "" {
|
|
config.Net.SASL.Enable = true
|
|
config.Net.SASL.Mechanism = sarama.SASLTypePlaintext
|
|
config.Net.SASL.User = cred.Username
|
|
config.Net.SASL.Password = cred.Password
|
|
config.Net.SASL.Handshake = true
|
|
}
|
|
|
|
brokers := []string{target}
|
|
client, err := sarama.NewClient(brokers, config)
|
|
if err != nil {
|
|
return nil
|
|
}
|
|
return client
|
|
}
|
|
|
|
|
|
|
|
func (p *KafkaPlugin) identifyService(ctx context.Context, info *common.HostInfo) *ScanResult {
|
|
target := fmt.Sprintf("%s:%s", info.Host, info.Ports)
|
|
|
|
emptyCred := Credential{Username: "", Password: ""}
|
|
client := p.testCredential(ctx, info, emptyCred)
|
|
if client == nil {
|
|
return &ScanResult{
|
|
Success: false,
|
|
Service: "kafka",
|
|
Error: fmt.Errorf("无法连接到Kafka服务"),
|
|
}
|
|
}
|
|
defer client.Close()
|
|
|
|
banner := "Kafka"
|
|
common.LogSuccess(fmt.Sprintf("Kafka %s %s", target, banner))
|
|
return &ScanResult{
|
|
Success: true,
|
|
Service: "kafka",
|
|
Banner: banner,
|
|
}
|
|
}
|
|
|
|
func init() {
|
|
// 使用高效注册方式：直接传递端口信息，避免实例创建
|
|
RegisterPluginWithPorts("kafka", func() Plugin {
|
|
return NewKafkaPlugin()
|
|
}, []int{9092, 9093, 9094})
|
|
} |