A comprehensive and powerful information collection tool

Jul 17, 2024355

AI Translation

This post is translated from Chinese into English through AI.View Original

AI-generated summary

The tool integrates various scanning functions such as domain scanning, web scanning, IP scanning, cracking, directory scanning, and more, allowing for easy information gathering without the need for additional steps. It includes features such as passive domain collection, DNS verification, detecting CDNs, analyzing web assets, scanning for open ports, identifying operating systems, and cracking common service passwords.

Project Address#

https://github.com/niudaii/zpscan/releases #

Tool Introduction
This tool integrates domainscan, webscan, ipscan, crack, dirscan, pocscan, expscan to start information collection with one click, eliminating the need for other steps.

Function Introduction#

domainscan#

Passive collection using subfinder, DNS verification using ksubdoamin

Wildcard resolution, CDN detection

Obtain web-related assets of the domain (host), and scan using webscan

webscan#

Support for http/https scheme automatic detection

Obtain statusCode, contentLength, favicon, iconHash, title, wappalyzer, finger

Automatically decode Chinese in title

Static analysis of js redirection

Automatically analyze favicon to obtain iconhash

Custom fingerprints tags for filtering and marking, pocTags corresponding to pocscan

Linkage module (webscan -> pocscan)

ipscan#

Support for multiple input formats (192.168.1.1-128) (192.168.1.0/24)

Port scan first (tcp), use nmap fingerprint recognition protocol

Obtain geographical location

Operating system identification

Linkage module (ipscan -> webscan -> crack)

crack

Support default port protocol and custom protocol cracking (127.0.0.1:3306) (127.0.01:3307|mysql)

Support common service password cracking, unauthorized detection (ftp,ssh,wmi,wmihash,smb,mssql,oracle,mysql,rdp,postgres,redis,memcached,mongodb)

All module test cases (cracking success, failure, timeout)