mirror of https://github.com/qwqdanchun/fscan.git
82 lines
2.0 KiB
Go
82 lines
2.0 KiB
Go
package Plugins
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"example.com/fxscan/common"
|
|
"github.com/stacktitan/smb/smb"
|
|
"strings"
|
|
"time"
|
|
)
|
|
|
|
func SmbScan(info *common.HostInfo) (tmperr error) {
|
|
if common.IsBrute {
|
|
return nil
|
|
}
|
|
starttime := time.Now().Unix()
|
|
for _, user := range common.Userdict["smb"] {
|
|
for _, pass := range common.Passwords {
|
|
pass = strings.Replace(pass, "{user}", user, -1)
|
|
flag, err := doWithTimeOut(info, user, pass)
|
|
if flag == true && err == nil {
|
|
var result string
|
|
if common.Domain != "" {
|
|
result = fmt.Sprintf("[+] SMB:%v:%v:%v\\%v %v", info.Host, info.Ports, common.Domain, user, pass)
|
|
} else {
|
|
result = fmt.Sprintf("[+] SMB:%v:%v:%v %v", info.Host, info.Ports, user, pass)
|
|
}
|
|
common.LogSuccess(result)
|
|
return err
|
|
} else {
|
|
errlog := fmt.Sprintf("[-] smb %v:%v %v %v %v", info.Host, 445, user, pass, err)
|
|
errlog = strings.Replace(errlog, "\n", "", -1)
|
|
common.LogError(errlog)
|
|
tmperr = err
|
|
if common.CheckErrs(err) {
|
|
return err
|
|
}
|
|
if time.Now().Unix()-starttime > (int64(len(common.Userdict["smb"])*len(common.Passwords)) * common.Timeout) {
|
|
return err
|
|
}
|
|
}
|
|
}
|
|
}
|
|
return tmperr
|
|
}
|
|
|
|
func SmblConn(info *common.HostInfo, user string, pass string, signal chan struct{}) (flag bool, err error) {
|
|
flag = false
|
|
Host, Username, Password := info.Host, user, pass
|
|
options := smb.Options{
|
|
Host: Host,
|
|
Port: 445,
|
|
User: Username,
|
|
Password: Password,
|
|
Domain: common.Domain,
|
|
Workstation: "",
|
|
}
|
|
|
|
session, err := smb.NewSession(options, false)
|
|
if err == nil {
|
|
session.Close()
|
|
if session.IsAuthenticated {
|
|
flag = true
|
|
}
|
|
}
|
|
signal <- struct{}{}
|
|
return flag, err
|
|
}
|
|
|
|
func doWithTimeOut(info *common.HostInfo, user string, pass string) (flag bool, err error) {
|
|
signal := make(chan struct{})
|
|
go func() {
|
|
flag, err = SmblConn(info, user, pass, signal)
|
|
}()
|
|
select {
|
|
case <-signal:
|
|
return flag, err
|
|
case <-time.After(time.Duration(common.Timeout) * time.Second):
|
|
return false, errors.New("time out")
|
|
}
|
|
}
|