mirror of
https://github.com/shadow1ng/fscan.git
synced 2025-09-14 05:56:46 +08:00
ecc79aa9b8
新增功能: - 基于STOMP协议的ActiveMQ弱密码检测 - 完整的多语言i18n支持(中英文) - 自动信息收集和权限识别 - 队列枚举和管理权限检测 - 优化的Docker测试环境配置 技术特性: - 支持端口61613(STOMP)和61614(STOMP+SSL) - 智能用户权限分析 - 异步利用执行机制 - 统一的插件架构设计 - 完善的错误处理和日志记录 测试环境: - 简化的ActiveMQ Docker配置 - 预配置多种测试凭据 - 专注STOMP协议，提升性能
55 lines
2.9 KiB
XML
55 lines
2.9 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<beans xmlns="http://www.springframework.org/schema/beans"
|
|
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xmlns:amq="http://activemq.apache.org/schema/core"
|
|
xsi:schemaLocation="
|
|
http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans.xsd
|
|
http://activemq.apache.org/schema/core http://activemq.apache.org/schema/core/activemq-core.xsd">
|
|
|
|
<!-- 专注于STOMP协议的ActiveMQ配置 -->
|
|
<broker xmlns="http://activemq.apache.org/schema/core" useJmx="false" persistent="false">
|
|
<!-- 安全认证配置 -->
|
|
<plugins>
|
|
<simpleAuthenticationPlugin>
|
|
<users>
|
|
<!-- 主要测试账户 -->
|
|
<authenticationUser username="admin" password="Aa123456789" groups="admins,publishers,consumers"/>
|
|
<authenticationUser username="admin" password="admin" groups="admins,publishers,consumers"/>
|
|
<authenticationUser username="test" password="test123" groups="publishers,consumers"/>
|
|
<authenticationUser username="root" password="root123" groups="admins"/>
|
|
<authenticationUser username="system" password="admin123" groups="admins"/>
|
|
<authenticationUser username="guest" password="guest" groups="consumers"/>
|
|
<authenticationUser username="activemq" password="activemq" groups="publishers,consumers"/>
|
|
</users>
|
|
</simpleAuthenticationPlugin>
|
|
|
|
<!-- 简化的授权配置 -->
|
|
<authorizationPlugin>
|
|
<map>
|
|
<authorizationMap>
|
|
<authorizationEntries>
|
|
<authorizationEntry queue=">" read="consumers,admins" write="publishers,admins" admin="admins"/>
|
|
<authorizationEntry topic=">" read="consumers,admins" write="publishers,admins" admin="admins"/>
|
|
</authorizationEntries>
|
|
</authorizationMap>
|
|
</map>
|
|
</authorizationPlugin>
|
|
</plugins>
|
|
|
|
<!-- 仅启用STOMP传输连接器 -->
|
|
<transportConnectors>
|
|
<transportConnector name="stomp" uri="stomp://0.0.0.0:61613?maximumConnections=500&wireFormat.maxFrameSize=104857600"/>
|
|
<transportConnector name="stomp+ssl" uri="stomp+ssl://0.0.0.0:61614?maximumConnections=500&wireFormat.maxFrameSize=104857600"/>
|
|
</transportConnectors>
|
|
|
|
<!-- 禁用JMX和Web控制台以简化配置 -->
|
|
<managementContext>
|
|
<managementContext createConnector="false"/>
|
|
</managementContext>
|
|
|
|
<!-- 简化的持久化配置 -->
|
|
<persistenceAdapter>
|
|
<memoryPersistenceAdapter/>
|
|
</persistenceAdapter>
|
|
</broker>
|
|
</beans> |