chainreactors / gogo

面向红队的, 高度可控可拓展的自动化引擎
https://chainreactors.github.io/wiki/gogo/
GNU General Public License v3.0
1.46k stars 144 forks source link

主动指纹识别不了 #66

Closed HiIkll closed 6 months ago

HiIkll commented 6 months ago

主动指纹识别不了 image image

[] gogo:=v2.12.1 , 2024-04-24 16:43.55 [] Current goroutines: 1000, Version Level: 1,Exploit: auto, PortSpray: false , 2024-04-24 16:43.55 [] Start task 39.98.123.211 ,total ports: 1 , mod: default , 2024-04-24 16:43.55 [] ports: 8170 , 2024-04-24 16:43.55 [] Default Scan is expected to take 4 seconds , 2024-04-24 16:43.55 [debug] springboot finger hit, body: "no message available" [debug] active detect: http://39.98.123.211:8170/info [debug] active detect: http://39.98.123.211:8170/v2/keys/ [debug] active detect: http://39.98.123.211:8170/zabbix [debug] active detect: http://39.98.123.211:8170/nacos/ [debug] active detect: http://39.98.123.211:8170/eosmgr/eos/EventDispatcher [debug] active detect: http://39.98.123.211:8170/console/login/LoginForm.jsp [debug] active detect: http://39.98.123.211:8170/ueditor [debug] active detect: http://39.98.123.211:8170/swagger-ui.html [debug] active detect: http://39.98.123.211:8170/druid/index.html [debug] active detect: http://39.98.123.211:8170/functionRouter [debug] active detect: http://39.98.123.211:8170/tmui/login.jsp [debug] active detect: http://39.98.123.211:8170/login/img/product_logo.png [debug] active detect: http://39.98.123.211:8170/WebReport/ReportServer [debug] active detect: http://39.98.123.211:8170/ReportServer [debug] active detect: http://39.98.123.211:8170/webroot/ReportServer [debug] active detect: http://39.98.123.211:8170/solr [debug] active detect: http://39.98.123.211:8170/axis2/services/testunknown [debug] active detect: http://39.98.123.211:8170/OAapp [debug] active detect: http://39.98.123.211:8170/jenkins [debug] active detect: http://39.98.123.211:8170/xxl-job-admin [debug] active detect: http://39.98.123.211:8170/login/login.php [debug] active detect: http://39.98.123.211:8170/poserver.zz [debug] active detect: http://39.98.123.211:8170/emm-api [debug] active detect: http://39.98.123.211:8170/vision/index.jsp [debug] active detect: http://39.98.123.211:8170/smartbi/index.jsp [debug] active detect: http://39.98.123.211:8170/smartbi/ [debug] active detect: http://39.98.123.211:8170/ht-login.jsp [debug] request favicon http://39.98.123.211:8170/favicon.ico 200 [debug] http://39.98.123.211:8170/favicon.ico favicon 0488faca4c19046b94d07c3ee83cf9d6 116323821 [debug] neutron scan http://39.98.123.211:8170 with springboot-h2-db-rce [debug] request POST http://39.98.123.211:8170/actuator/env map[] [debug] neutron scan http://39.98.123.211:8170 with springboot-h2-db-rce error: [debug] neutron scan http://39.98.123.211:8170 with springboot-actuators-jolokia-rce [debug] request GET http://39.98.123.211:8170/jolokia/exec map[] [debug] request GET http://39.98.123.211:8170/actuator/jolokia/exec map[] [debug] neutron scan http://39.98.123.211:8170 with springboot-actuators-jolokia-rce error: [debug] neutron scan http://39.98.123.211:8170 with CVE-2021-21234 [debug] request GET http://39.98.123.211:8170/manage/log/view?filename=/windows/win.ini&base=../../../../../../../../../../ map[] [debug] request GET http://39.98.123.211:8170/log/view?filename=/windows/win.ini&base=../../../../../../../../../../ map[] [debug] request GET http://39.98.123.211:8170/manage/log/view?filename=/etc/passwd&base=../../../../../../../../../../ map[] [debug] request GET http://39.98.123.211:8170/log/view?filename=/etc/passwd&base=../../../../../../../../../../ map[] [debug] neutron scan http://39.98.123.211:8170 with CVE-2021-21234 error: [debug] neutron scan http://39.98.123.211:8170 with springboot-actuator [debug] payloads: path:info [debug] request GET http://39.98.123.211:8170/info map[path:info] [debug] payloads: path:info [debug] request GET http://39.98.123.211:8170/actuator/info map[path:info] [debug] payloads: path:env [debug] request GET http://39.98.123.211:8170/info map[path:env] [debug] payloads: path:env [debug] request GET http://39.98.123.211:8170/actuator/info map[path:env] [debug] neutron scan http://39.98.123.211:8170 with springboot-actuator error: [debug] neutron scan http://39.98.123.211:8170 with shiro-detect [debug] request GET http://39.98.123.211:8170 map[] [debug] neutron scan http://39.98.123.211:8170 with shiro-detect error: [+] http://39.98.123.211:8170 focus:springboot:(finger ico) [404] HTTP/1.1 404 [] Alived: 1, Total: 1 , 2024-04-24 16:43.59 [*] Time consuming: 3.5599506s , 2024-04-24 16:43.59

M09Ic commented 6 months ago

我测试了下新的release是正常的. 可以试试 https://github.com/chainreactors/gogo/releases/tag/v2.12.1

image

HiIkll commented 6 months ago

我下载了最新的release win版本amd64,还是不行 image

M09Ic commented 6 months ago

确实存在问题, 已在https://github.com/chainreactors/gogo/releases/tag/v2.12.2 中修复. 感谢你的反馈