mirror of
https://github.com/shadow1ng/fscan.git
synced 2025-09-14 14:06:44 +08:00
95497da8ca
主要改进： 1. 修复Services插件端口数据重复问题 - 删除插件结构体中的ports字段和GetPorts()方法 - 系统统一使用注册时的端口信息 2. 引入BasePlugin基础结构体 - 消除51个插件中重复的name字段和Name()方法 - 统一插件基础功能，简化代码维护 3. 统一插件接口设计 - 保持向后兼容，功能完全不变 - 代码更简洁，符合工程最佳实践 影响范围： - services插件：29个文件简化 - web插件：2个文件简化 - local插件：21个文件简化 - 总计删除约150行重复代码
110 lines
2.2 KiB
Go
110 lines
2.2 KiB
Go
package services
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"time"
|
|
|
|
ftplib "github.com/jlaffaye/ftp"
|
|
"github.com/shadow1ng/fscan/common"
|
|
"github.com/shadow1ng/fscan/plugins"
|
|
)
|
|
|
|
type FTPPlugin struct {
|
|
plugins.BasePlugin
|
|
}
|
|
|
|
func NewFTPPlugin() *FTPPlugin {
|
|
return &FTPPlugin{
|
|
BasePlugin: plugins.NewBasePlugin("ftp"),
|
|
}
|
|
}
|
|
|
|
|
|
|
|
func (p *FTPPlugin) Scan(ctx context.Context, info *common.HostInfo) *ScanResult {
|
|
target := fmt.Sprintf("%s:%s", info.Host, info.Ports)
|
|
|
|
if common.DisableBrute {
|
|
return p.identifyService(info)
|
|
}
|
|
|
|
credentials := GenerateCredentials("ftp")
|
|
if len(credentials) == 0 {
|
|
return &ScanResult{
|
|
Success: false,
|
|
Service: "ftp",
|
|
Error: fmt.Errorf("没有可用的测试凭据"),
|
|
}
|
|
}
|
|
|
|
for _, cred := range credentials {
|
|
if conn := p.testCredential(ctx, info, cred); conn != nil {
|
|
conn.Quit()
|
|
common.LogSuccess(fmt.Sprintf("FTP %s %s:%s", target, cred.Username, cred.Password))
|
|
return &ScanResult{
|
|
Success: true,
|
|
Service: "ftp",
|
|
Username: cred.Username,
|
|
Password: cred.Password,
|
|
}
|
|
}
|
|
}
|
|
|
|
return &ScanResult{
|
|
Success: false,
|
|
Service: "ftp",
|
|
Error: fmt.Errorf("未发现弱密码"),
|
|
}
|
|
}
|
|
|
|
|
|
func (p *FTPPlugin) testCredential(ctx context.Context, info *common.HostInfo, cred Credential) *ftplib.ServerConn {
|
|
target := fmt.Sprintf("%s:%s", info.Host, info.Ports)
|
|
timeout := time.Duration(common.Timeout) * time.Second
|
|
|
|
conn, err := ftplib.DialTimeout(target, timeout)
|
|
if err != nil {
|
|
return nil
|
|
}
|
|
|
|
err = conn.Login(cred.Username, cred.Password)
|
|
if err != nil {
|
|
conn.Quit()
|
|
return nil
|
|
}
|
|
|
|
return conn
|
|
}
|
|
|
|
|
|
|
|
func (p *FTPPlugin) identifyService(info *common.HostInfo) *ScanResult {
|
|
target := fmt.Sprintf("%s:%s", info.Host, info.Ports)
|
|
timeout := time.Duration(common.Timeout) * time.Second
|
|
|
|
conn, err := ftplib.DialTimeout(target, timeout)
|
|
if err != nil {
|
|
return &ScanResult{
|
|
Success: false,
|
|
Service: "ftp",
|
|
Error: err,
|
|
}
|
|
}
|
|
defer conn.Quit()
|
|
|
|
banner := "FTP"
|
|
common.LogSuccess(fmt.Sprintf("FTP %s %s", target, banner))
|
|
return &ScanResult{
|
|
Success: true,
|
|
Service: "ftp",
|
|
Banner: banner,
|
|
}
|
|
}
|
|
|
|
func init() {
|
|
// 使用高效注册方式：直接传递端口信息，避免实例创建
|
|
RegisterPluginWithPorts("ftp", func() Plugin {
|
|
return NewFTPPlugin()
|
|
}, []int{21, 2121, 990})
|
|
} |