X-Scan
2022-4-22 15:45:23 Author: github.com(查看原文) 阅读量:34 收藏

__   __      _____
\ \ / /     /  ___|
 \ V /______\ `--.  ___ __ _ _ __
 /   \______|`--. \/ __/ _` | '_ \
/ /^\ \     /\__/ / (_| (_| | | | |
\/   \/     \____/ \___\__,_|_| |_|

Version 1.0
Design By XTeam

Host is none
Usage of ./Xscan-Mac:
  -addr string
    	s5|http server addr (default "0.0.0.0:50000")
  -debug
    	open debug mode
  -domain string
    	rootkit.org
  -finger
    	Scab Web Finger
  -h string
    	IP ADDR: 10.0.0.1,10.0.0.5-10,192.168.1.*,192.168.10.1/24
  -hf string
    	-hf ip.txt
  -http-pass string
    	HttpPassword (default "qax")
  -http-user string
    	HttpUsername (default "qax")
  -httpdir string
    	http directory (default ".")
  -m string
    	-m portscan|-m ssh|-m all|-m title (default "all")
  -noping
    	no ping
  -o string
    	Scan OutPutFile (default "result.txt")
  -p string
    	Ports: 22,443|1-65535|3389 (default "21,22,23,80,81,88,135,139,468,443,445,1433,1523,3306,5432,7001,8001,8000,8080,8089,9200,11211,27017,1080,1214,13306,5000,5222,5900,5938,5984,6000,6379,7000,7070,8888,8088,8090,8222,8443,8545,8686,9000,9180,9200,9418,9999,10000,11115,8448,8484,8848,10183,15778,19313,8008,8009,8890,8891")
  -pass string
    	crack password
  -passfile string
    	password file
  -ping
    	using ping replace icmp
  -poc string
    	-poc weblogic,shiro
  -pocscanproxy string
    	-proxy http://127.0.0.1:8080
  -pocthread int
    	poc rate (default 20)
  -proxy string
    	vulnscan proxy
  -redisfile string
    	-redisfile id_rsa.pub
  -redisshell string
    	-redisshell 192.168.1.1:6666
  -shiro
    	Scan Shiro
  -skipportscan
    	Skip Port Scan-Scan Web Title
  -socks5-pass string
    	Socks5Password (default "qax")
  -socks5-user string
    	Socks5Username (default "qax")
  -sshcmd string
    	exec ssh cmd
  -t int
    	Thread nums (default 20)
  -timeout int
    	scan timeout (default 10)
  -urlfile string
    	url list
  -user string
    	crack username
  -userfile string
    	username file
  -vulnscan
    	Scan for web vulnerabilities(True|False)
  -webtimeout int
    	webscan timeout (default 20)
  -xscan string 
  		XScan Start password!
./xscan -h 192.168.123.22/24,192.168.123.1-255,192.168.122.1-192.168.123.254 -finger -vulnscan -shiro -xscan 360 -t 100
./xscan -hf ip.txt -finger -vulnscan -xscan 360 -t 100
./xscan -h 192.168.123.22/24,192.168.123.1-255,192.168.122.1-192.168.123.254 -finger -vulnscan -xscan 360 -t 100 -user admin,root -pass 123456,root

./xscan -h 192.168.123.22/24,192.168.123.1-255,192.168.122.1-192.168.123.254 -finger -vulnscan -xscan 360 -t 100 -userfile user.txt -passfile pass.txt
./xscan -h 192.168.123.22/24,192.168.123.1-255,192.168.122.1-192.168.123.254 -finger -vulnscan -xscan 360 -t 100 -m Web
All 所有模块All In
Web 核心功能,可以扫描title和指纹以及shiro
MS17010 
SSH
SMB
MSSQL
MYSQL
FINDNET 
REDIS
ServerScan
urlscan 

进入大内网以后,支持探测指定网段存活(ping .1和.255) ./xscan -h 192.168.123.22/24,192.168.123.1-255,192.168.122.1-192.168.123.254 -finger -vulnscan -xscan 360 -t 100 -m Spy


文章来源: https://github.com/y35uishere/X-Scan
如有侵权请联系:admin#unsafe.sh