README_中文 • Compile/Install/Run • @@ -149,7 +149,7 @@ where 92.168.0.111 is the target to query Using Help ```bash go build -# Precise scan url list UrlPrecise=true +# Precise scan szUrl list UrlPrecise=true UrlPrecise=true ./scan4all -l xx.txt # Disable adaptation to nmap and use naabu port to scan its internally defined http-related Ports priorityNmap=false ./scan4all -tp http -list allOut.txt -v diff --git a/README_CN.md b/README_CN.md index 4e28c7faf..dd0f3f2f5 100644 --- a/README_CN.md +++ b/README_CN.md @@ -1,4 +1,4 @@ -[](https://twitter.com/intent/follow?screen_name=Hktalent3135773) [](https://twitter.com/intent/follow?screen_name=Hktalent3135773) [](https://github.com/hktalent/) +[](https://twitter.com/intent/follow?screen_name=Hktalent3135773) [](https://twitter.com/intent/follow?screen_name=Hktalent3135773) [](https://github.com/hktalent/)
README_EN • 编译/安装/运行 • diff --git a/brute/dicts/filedic.txt b/brute/dicts/filedic.txt index 4bab15d42..eaa25c377 100644 --- a/brute/dicts/filedic.txt +++ b/brute/dicts/filedic.txt @@ -2134,7 +2134,7 @@ $metadata /api/payment?id= /api/prod/services /api/proxy -/api/proxy?url= +/api/proxy?szUrl= /api/saved_objects/_find?type=index-pattern&per_page=100 /api/search /api/sessions @@ -7658,7 +7658,7 @@ api/payment?id= api/product/toprank api/profile api/proxy -api/proxy?url= +api/proxy?szUrl= api/put api/quiet api/reload @@ -15448,9 +15448,9 @@ gotdotnet gotemp.php gotest.sh goto -gotoURL.asp?url=google.com&id=43569 +gotoURL.asp?szUrl=google.com&id=43569 goto_step.sh -gotourl.asp?url=google.com&id=43569 +gotourl.asp?szUrl=google.com&id=43569 gpg.sh gphotos gpl.txt @@ -22706,10 +22706,10 @@ plugins/editors/fckeditor plugins/fckeditor plugins/filemanager/filemanager/js plugins/servlet/gadgets/makeRequest -plugins/servlet/gadgets/makeRequest?url=https://google.com +plugins/servlet/gadgets/makeRequest?szUrl=https://google.com plugins/servlet/gadgets/makerequest -plugins/servlet/gadgets/makerequest?url=https -plugins/servlet/gadgets/makerequest?url=https://google.com +plugins/servlet/gadgets/makerequest?szUrl=https +plugins/servlet/gadgets/makerequest?szUrl=https://google.com plugins/servlet/oauth/users/icon plugins/sfSWFUploadPlugin/web/sfSWFUploadPlugin/swf/swfupload.swf plugins/sfSWFUploadPlugin/web/sfSWFUploadPlugin/swf/swfupload_f9.swf @@ -27943,9 +27943,9 @@ ur-admin/ urban uresk uri -url -url.jsp -url.php +szUrl +szUrl.jsp +szUrl.php url_1.sql url_2.sql urlList. @@ -29929,7 +29929,7 @@ wp-content/plugins/elementor-pro/assets/css/frontend.min.css wp-content/plugins/google-sitemap-generator/sitemap-core.php wp-content/plugins/hello.php wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/util/php/eval-stdin.php -wp-content/plugins/jrss-widget/proxy.php?url= +wp-content/plugins/jrss-widget/proxy.php?szUrl= wp-content/plugins/master-slider/public/assets/css/masterslider.main.css?ver=2.9.8 wp-content/plugins/master-slider/public/assets/js/jquery.easing.min.js?ver=2.9.8 wp-content/plugins/master-slider/public/assets/js/masterslider.min.js?ver=2.9.8 @@ -30040,9 +30040,9 @@ wp-includes/rss-functions.php wp-includes/wlwmanifest.xml wp-json wp-json/ -wp-json/oembed/1.0/embed?url=http:/172.105.71.142 -wp-json/oembed/1.0/embed?url=http:/lovi.studio -wp-json/oembed/1.0/embed?url=http:/onestopsla.com +wp-json/oembed/1.0/embed?szUrl=http:/172.105.71.142 +wp-json/oembed/1.0/embed?szUrl=http:/lovi.studio +wp-json/oembed/1.0/embed?szUrl=http:/onestopsla.com wp-json/wp/v2/users wp-json/wp/v2/users/ wp-license.php diff --git a/config/config.json b/config/config.json index b733dc30b..473cdb8c0 100644 --- a/config/config.json +++ b/config/config.json @@ -73,7 +73,7 @@ "naabu": {"TopPorts": "1000","ScanAllIPS": true,"Threads": 50,"EnableProgressBar": false}, "priorityNmap": true, "noScan": false, - "enableMultNuclei": true, + "enableMultNuclei": false, "enableNuclei": true, "nuclei": { "Severities": [5,4,3], diff --git a/config/databases/db_dictionary b/config/databases/db_dictionary index 6c3d9fe75..0d27bb566 100644 --- a/config/databases/db_dictionary +++ b/config/databases/db_dictionary @@ -1683,7 +1683,7 @@ upfiles upload uploader uploads -url +szUrl urls us usa diff --git a/config/databases/db_server_msgs b/config/databases/db_server_msgs index c7e330967..c52dd9745 100644 --- a/config/databases/db_server_msgs +++ b/config/databases/db_server_msgs @@ -118,7 +118,7 @@ "800098","jakarta-tomcat-4.0.1","0","Server will reveal path" "800099","JavaWebServer","0","Probably Sun Microsystem's servlet interface. May have default code which is exploitable. Try admin/admin for id/password." "800100","JetAdmin","0","HP Printer" -"800101","Jeus WebContainer\/([0-3]\.[0-2]\..*)","0","JEUS below 3.2.2 is vulnerable to XSS if a nonexistent url is requested, i.e. [victim site]/[javascript].jsp" +"800101","Jeus WebContainer\/([0-3]\.[0-2]\..*)","0","JEUS below 3.2.2 is vulnerable to XSS if a nonexistent szUrl is requested, i.e. [victim site]/[javascript].jsp" "800102","Jigsaw\/([0-1].*|2\.([0-1].*|2\.0))","0","Jigsaw 2.1.0 or below may be vulnerable to XSS if a nonexistent host name is requested, i.e. nosuchhost.domain.com/","GET","","GET","","GET","","GET","","GET","","GET","","GET","","GET","","GET","","GET","","GET","","GET","","GET","","GET","&op=browse","GET","","GET","","GET","