D:\Code\Golang\fscan>go build -ldflags="-s -w " -trimpath

runtime/cgo

cgo: C compiler "gcc" not found: exec: "gcc": executable file not found in %PATH%

下载昨天更新go.mod之后的版本出现了这个问题，3天前那版可以正常编译。

师傅，我直接下载git源码，编译失败 go run main.go -h 提示 go: updates to go.mod needed; to update it: go mod tidy 然后我又运行go mod tidy 再次编译提示

github.com/shadow1ng/fscan/Plugins

Plugins/base.go:54:14: undefined: aes Plugins/base.go:60:15: undefined: cipher Plugins/base.go:65:9: undefined: base64 Plugins/base.go:69:19: undefined: base64 Plugins/base.go:72:14: undefined: aes Plugins/base.go:76:15: undefined: cipher Plugins/base.go:90:13: undefined: bytes

师傅，根据你的更新修改了相应的代码，但是报了这些错误。师傅知道怎么修改吗？ 报错如下：

[-] poc-yaml-metinfo-cve-2019-17418-sqli environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-minio-default-password environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-metinfo-lfi-cnvd-2018-13393 environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-apache-httpd-cve-2021-40438-ssrf environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-apache-httpd-cve-2021-41773-rce environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-apache-httpd-cve-2021-41773-path-traversal environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-laravel-debug-info-leak environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-laravel-improper-webdir environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-nextjs-cve-2017-16877 environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-msvod-sqli environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-myucms-lfr environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-nagio-cve-2018-10735 environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-nagio-cve-2018-10738 environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-natshell-arbitrary-file-read environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-netentsec-icg-default-password environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-netentsec-ngfw-rce environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-netgear-cve-2017-5521 environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-maccms-rce environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-nagio-cve-2018-10737 environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-bash-cve-2014-6271 environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-airflow-unauth environment creation error: unsupported type: *lib.UrlType [-] poc-yaml-nagio-cve-2018-10736 environment creation error: unsupported type: *lib.UrlType ……

参考https://github.com/tomatome/grdp/ 可以很容易实现，代码太丑陋就不放了，给师傅个建议

func RdpScan(info *common.HostInfo) (tmperr error) {
	if common.IsBrute {
		return
	}
	starttime := time.Now().Unix()
	for _, user := range common.Userdict["rdp"] {
		for _, pass := range common.Passwords {
			pass = strings.Replace(pass, "{user}", user, -1)
			port, err := strconv.Atoi(info.Ports)
			flag, err := RdpConn(info.Host, info.Domain, user, pass, port)
			if flag == true && err == nil {
				result := fmt.Sprintf("[+] RDP:%v:%v:%v %v", info.Host, info.Ports, user, pass)
				common.LogSuccess(result)
				return err
			} else {
				errlog := fmt.Sprintf("[-] rdp %v:%v %v %v %v", info.Host, info.Ports, user, pass, err)
				common.LogError(errlog)
				tmperr = err
				if common.CheckErrs(err) {
					return err
				}
				if time.Now().Unix()-starttime > (int64(len(common.Userdict["rdp"])*len(common.Passwords)) * info.Timeout) {
					return err
				}
			}
		}
	}
	return tmperr
}

func RdpConn(ip, domain, login, password string, port int) (bool, error) {
	target := fmt.Sprintf("%s:%d", ip, port)
	err := grdp.Login(target, domain, login, password)

	if err != nil {
		return false, err
	}
	return true, err
}

A: 你之前说最新的fscan有什么问题了？

XXXXXX: 还是有乱码

A: 还有其他吗

XXXXXX: 指result.txt里面的乱码

A:

A: 他只处理了这三种编码 ISO也很常见 没加进去

XXXXXX: 原来如此，给他提个issue

A: 自己改还快些

A:

A: 除了443 其他都用http协议访问 难怪会漏报

XXXXXX: 继续提issue

XXXXXX: 让他两种都试试

A: 我先看完吧 他后面有个函数好像能识别https的 另外还有处理

A: 还真的是只识别443端口，另外就是302跳转他也只跳一次，昨天我爆破好几个站点都是跳三次的，虽然第一次登陆可能一般只会有一次跳转

XXXXXX: 给他提issuse

A: 你去啊

A: 我不做伸手党

环境MAC(windows下正常)

辛苦作者大大

正常情况下：

go run main.go -h 172.20.10.1/24

(Ping) Target '172.20.10.15' is alive
(Ping) Target '172.20.10.1' is alive
(Ping) Target '172.20.10.3' is alive
icmp alive hosts len is: 3
172.20.10.1:21 open

在-np下扫描导致错误，并且无法自动结束。

go run main.go -h 172.20.10.1/24 -np

172.20.10.63:21 open
172.20.10.29:21 open
172.20.10.62:21 open
open result.txt: too many open files
open result.txt: too many open files
172.20.10.64:21 open
open result.txt: too many open files
172.20.10.54:21 open
open result.txt: too many open files
...

PS D:\0000\20211012\kill-free\fscan\2021-10-12\fscan-main\fscan-main> go env -w GOPROXY=https://goproxy.cn,direct PS D:\0000\20211012\kill-free\fscan\2021-10-12\fscan-main\fscan-main> go mod tidy PS D:\0000\20211012\kill-free\fscan\2021-10-12\fscan-main\fscan-main> go build -ldflags="-s -w " -trimpath

github.com/shadow1ng/fscan/Plugins

Plugins\ms17010.go:133:4: undefined: MS17010EXP Plugins\scanner.go:16:28: not enough arguments in call to "github.com/shadow1ng/fscan/common".ParseIP have (string, string) want (string, string, string)

目前在公司对一个B段进行内部安全排查，发现更新后的版本似乎SSH与SMB爆破结果都是空的。默认线程600，为了准确性我们将线程为100，依然获取不想预期的结果。账号，口令 (其中账号口令是已经确认的) 是通过参数指定，命令如下： ./fscan_amd64_upx -h 10.x.0.1/16 -user xxx -pwd xxx -t 100

大概是这样的，虽然有userf pwdf两个参数，可以以字典格式添加账号密码。但是如果这么做，那就只能使用用户提供的账密字典，我感觉Fscan提供的默认账密字典还是非常好用的。

但是如果要用usera 和 pwda这两个添加额外账号密码的参数，似乎只能指定一个？而且我自己试了一下似乎不支持导入txt字典，如果我想在Fscan原有的账密字典上添加多个用户名或多个密码，就会非常麻烦。

所以希望作者大大能强化一下usera和pwda，让他们支持字典导入，或者直接新设参数，比如什么useraf、pwdaf啥的。

~/Desktop
❯ file fscan_darwin
fscan_darwin: Mach-O 64-bit executable x86_64

~/Desktop
❯ md5 ./fscan_darwin
MD5 (./fscan_darwin) = 702fc712074669bdae02e1092bcac785

~/Desktop
❯ ./fscan_darwin -h
[1]    7075 segmentation fault  ./fscan_darwin -h

处理器：Intel Core

./fscan1 ./fscan1: line 1: !DOCTYPE: No such file or directory ./fscan1: line 2: syntax error near unexpected token newline' ./fscan1: line 2: "http://www.w3.org/TR/html4/strict.dtd">'

使用 fscan64.exe -h 192.168.2.128 -m mysql -p 38080 -pwdf top100password.txt -userf top10W.txt 命令 结果为 [*] Icmp alive hosts len is: 1 192.168.2.128:38080 open [*] alive ports len is: 1 start vulscan [+] mysql:192.168.2.128:38080:test test 已完成 1/1 [*] 扫描结束,耗时: 440.2911ms

仅使用了top100password.txt与top10W.txt的第一行用户名+密码就显示扫描完成并输出结果，而结果并不正确，尝试多个环境均出现这种情况，mysql版本为5.7