banner
andrewji8

Being towards death

Heed not to the tree-rustling and leaf-lashing rain, Why not stroll along, whistle and sing under its rein. Lighter and better suited than horses are straw sandals and a bamboo staff, Who's afraid? A palm-leaf plaited cape provides enough to misty weather in life sustain. A thorny spring breeze sobers up the spirit, I feel a slight chill, The setting sun over the mountain offers greetings still. Looking back over the bleak passage survived, The return in time Shall not be affected by windswept rain or shine.
telegram
twitter
github

一款综合且强大的信息收集工具

项目地址#

https://github.com/niudaii/zpscan/releases#

工具介绍
该工具集成 domainscan、webscan、ipscan、crack、dirscan、pocscan、expscan 直接一键启动开启信息收集省去了其他步骤。

功能简介#

domainscan#

调用 subfinder 被动收集,调用 ksubdoamin 进行 dns 验证

泛解析、CDN 判断

获取 domain 相关的 web(host)资产,使用 webscan 扫描

image

webscan#

支持 http/https scheme 自动判断

获取 statusCode、contentLength、favicon、iconHash、title、wappalyzer、finger

title 自动中文解码

js 静态分析跳转

favicon 自动分析获取 iconhash

指纹自定义 tags 用来过滤和标记,pocTags 与 pocscan 对应

联动模块(webscan -> pocscan)

image

ipscan#

支持多种输入格式(192.168.1.1-128)(192.168.1.0/24)

先端口开放扫描(tcp),使用 nmap 指纹识别协议

获取地理位置

操作系统识别

联动模块(ipscan -> webscan -> crack)

image

crack

支持默认端口协议和自定义协议爆破(127.0.0.1:3306)(127.0.01:3307|mysql)

支持常见服务口令爆破、未授权检测( ftp,ssh,wmi,wmihash,smb,mssql,oracle,mysql,rdp,postgres,redis,memcached,mongodb)

image

全部模块测试用例(爆破成功、失败、超时)

Loading...
Ownership of this post data is guaranteed by blockchain and smart contracts to the creator alone.