mirror of
https://github.com/lunchcat/sif.git
synced 2026-07-28 14:37:01 -07:00
TigahandGitHub
41f35acd66
* fix(scan): honour the caller context when downloading the ports list the common-scope ports fetch built its request with context.TODO(), so a cancelled run or -max-time deadline could not abort a hung list download even though the dialer already used the passed context. * test(scan): drop redundant comment restating release channel receive
105 lines
3.3 KiB
Go
105 lines
3.3 KiB
Go
/*
|
|
·━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━·
|
|
: :
|
|
: █▀ █ █▀▀ · Blazing-fast pentesting suite :
|
|
: ▄█ █ █▀ · BSD 3-Clause License :
|
|
: :
|
|
: (c) 2022-2026 vmfunc, xyzeva, :
|
|
: lunchcat alumni & contributors :
|
|
: :
|
|
·━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━·
|
|
*/
|
|
|
|
package scan
|
|
|
|
import (
|
|
"bufio"
|
|
"context"
|
|
"fmt"
|
|
"net"
|
|
"net/http"
|
|
"strconv"
|
|
"sync"
|
|
"time"
|
|
|
|
charmlog "github.com/charmbracelet/log"
|
|
"github.com/vmfunc/sif/internal/httpx"
|
|
"github.com/vmfunc/sif/internal/logger"
|
|
"github.com/vmfunc/sif/internal/output"
|
|
"github.com/vmfunc/sif/internal/pool"
|
|
)
|
|
|
|
// commonPorts is a var so integration tests can repoint it at a fixture.
|
|
var commonPorts = "https://raw.githubusercontent.com/vmfunc/sif-runtime/main/ports/top-ports.txt"
|
|
|
|
func Ports(ctx context.Context, scope string, url string, timeout time.Duration, threads int, logdir string) ([]string, error) {
|
|
log := output.Module("PORTS")
|
|
log.Start()
|
|
|
|
sanitizedURL := stripScheme(url)
|
|
if logdir != "" {
|
|
if err := logger.WriteHeader(sanitizedURL, logdir, scope+" port scanning"); err != nil {
|
|
log.Error("Error creating log file: %v", err)
|
|
return nil, err
|
|
}
|
|
}
|
|
|
|
var ports []int
|
|
switch scope {
|
|
case "common":
|
|
req, err := http.NewRequestWithContext(ctx, http.MethodGet, commonPorts, http.NoBody)
|
|
if err != nil {
|
|
log.Error("Error creating request: %s", err)
|
|
return nil, err
|
|
}
|
|
resp, err := httpx.Client(timeout).Do(req)
|
|
if err != nil {
|
|
log.Error("Error downloading ports list: %s", err)
|
|
return nil, err
|
|
}
|
|
defer resp.Body.Close()
|
|
scanner := bufio.NewScanner(resp.Body)
|
|
scanner.Split(bufio.ScanLines)
|
|
for scanner.Scan() {
|
|
if port, err := strconv.Atoi(scanner.Text()); err == nil {
|
|
ports = append(ports, port)
|
|
}
|
|
}
|
|
case "full":
|
|
ports = make([]int, 65536)
|
|
for i := range ports {
|
|
ports[i] = i
|
|
}
|
|
}
|
|
|
|
progress := output.NewProgress(len(ports), "scanning")
|
|
|
|
var openPorts []string
|
|
var mu sync.Mutex
|
|
|
|
pool.Each(ports, threads, func(port int) {
|
|
progress.Increment(strconv.Itoa(port))
|
|
|
|
charmlog.Debugf("Looking up: %d", port)
|
|
addr := fmt.Sprintf("%s:%d", sanitizedURL, port)
|
|
tcp, err := (&net.Dialer{Timeout: timeout}).DialContext(ctx, "tcp", addr)
|
|
if err != nil {
|
|
charmlog.Debugf("Error %d: %v", port, err)
|
|
} else {
|
|
progress.Pause()
|
|
log.Success("open: %s:%s [tcp]", sanitizedURL, output.Highlight.Render(strconv.Itoa(port)))
|
|
progress.Resume()
|
|
|
|
mu.Lock()
|
|
openPorts = append(openPorts, strconv.Itoa(port))
|
|
mu.Unlock()
|
|
_ = tcp.Close()
|
|
}
|
|
})
|
|
progress.Done()
|
|
|
|
log.Complete(len(openPorts), "open")
|
|
|
|
return openPorts, nil
|
|
}
|