mirror of
https://github.com/lunchcat/sif.git
synced 2026-06-12 19:11:25 -07:00
vmfunc
ce3075ad91
- make the four wordlist base urls (dirlist/dnslist/git/ports) package vars instead of consts so tests can repoint them at a local fixture; the default values are byte-for-byte unchanged - add internal/scan/integration_test.go behind a //go:build integration tag: it stands up a local "vulnerable app" httptest server with planted artifacts and runs git/dirlist/cms/headers/sql/lfi/ports against it, asserting real findings - go.yml runs them via `go test -tags=integration`; the default test run is untouched (the tag keeps them out) - document the integration run in docs/development.md
116 lines
3.5 KiB
Go
116 lines
3.5 KiB
Go
/*
|
|
·━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━·
|
|
: :
|
|
: █▀ █ █▀▀ · Blazing-fast pentesting suite :
|
|
: ▄█ █ █▀ · BSD 3-Clause License :
|
|
: :
|
|
: (c) 2022-2026 vmfunc, xyzeva, :
|
|
: lunchcat alumni & contributors :
|
|
: :
|
|
·━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━·
|
|
*/
|
|
|
|
package scan
|
|
|
|
import (
|
|
"bufio"
|
|
"context"
|
|
"fmt"
|
|
"net"
|
|
"net/http"
|
|
"strconv"
|
|
"sync"
|
|
"time"
|
|
|
|
charmlog "github.com/charmbracelet/log"
|
|
"github.com/dropalldatabases/sif/internal/logger"
|
|
"github.com/dropalldatabases/sif/internal/output"
|
|
)
|
|
|
|
// commonPorts is a var so integration tests can repoint it at a fixture.
|
|
var commonPorts = "https://raw.githubusercontent.com/dropalldatabases/sif-runtime/main/ports/top-ports.txt"
|
|
|
|
func Ports(ctx context.Context, scope string, url string, timeout time.Duration, threads int, logdir string) ([]string, error) {
|
|
log := output.Module("PORTS")
|
|
log.Start()
|
|
|
|
sanitizedURL := stripScheme(url)
|
|
if logdir != "" {
|
|
if err := logger.WriteHeader(sanitizedURL, logdir, scope+" port scanning"); err != nil {
|
|
log.Error("Error creating log file: %v", err)
|
|
return nil, err
|
|
}
|
|
}
|
|
|
|
var ports []int
|
|
switch scope {
|
|
case "common":
|
|
req, err := http.NewRequestWithContext(context.TODO(), http.MethodGet, commonPorts, http.NoBody)
|
|
if err != nil {
|
|
log.Error("Error creating request: %s", err)
|
|
return nil, err
|
|
}
|
|
resp, err := http.DefaultClient.Do(req)
|
|
if err != nil {
|
|
log.Error("Error downloading ports list: %s", err)
|
|
return nil, err
|
|
}
|
|
defer resp.Body.Close()
|
|
scanner := bufio.NewScanner(resp.Body)
|
|
scanner.Split(bufio.ScanLines)
|
|
for scanner.Scan() {
|
|
if port, err := strconv.Atoi(scanner.Text()); err == nil {
|
|
ports = append(ports, port)
|
|
}
|
|
}
|
|
case "full":
|
|
ports = make([]int, 65536)
|
|
for i := range ports {
|
|
ports[i] = i
|
|
}
|
|
}
|
|
|
|
progress := output.NewProgress(len(ports), "scanning")
|
|
|
|
var openPorts []string
|
|
var mu sync.Mutex
|
|
var wg sync.WaitGroup
|
|
wg.Add(threads)
|
|
|
|
for thread := 0; thread < threads; thread++ {
|
|
go func(thread int) {
|
|
defer wg.Done()
|
|
|
|
for i, port := range ports {
|
|
if i%threads != thread {
|
|
continue
|
|
}
|
|
|
|
progress.Increment(strconv.Itoa(port))
|
|
|
|
charmlog.Debugf("Looking up: %d", port)
|
|
addr := fmt.Sprintf("%s:%d", sanitizedURL, port)
|
|
tcp, err := (&net.Dialer{Timeout: timeout}).DialContext(ctx, "tcp", addr)
|
|
if err != nil {
|
|
charmlog.Debugf("Error %d: %v", port, err)
|
|
} else {
|
|
progress.Pause()
|
|
log.Success("open: %s:%s [tcp]", sanitizedURL, output.Highlight.Render(strconv.Itoa(port)))
|
|
progress.Resume()
|
|
|
|
mu.Lock()
|
|
openPorts = append(openPorts, strconv.Itoa(port))
|
|
mu.Unlock()
|
|
_ = tcp.Close()
|
|
}
|
|
}
|
|
}(thread)
|
|
}
|
|
wg.Wait()
|
|
progress.Done()
|
|
|
|
log.Complete(len(openPorts), "open")
|
|
|
|
return openPorts, nil
|
|
}
|