chaitin / xpoc

为供应链漏洞扫描设计的快速应急响应工具 [快速应急] [漏洞扫描] [端口扫描] [xray2.0进行时] A fast emergency response tool designed for supply chain vulnerability scanning.
https://docs.xray.cool/#/xpoc/QuickStart
Other
991 stars 38 forks source link

执行报错"panic interface conversion"失败 #43

Open HugoWw opened 1 month ago

HugoWw commented 1 month ago

本地环境: Ubuntu 22.04 LTS

执行工具报错: $./xpoc -t http://xxxx -o result.html

[INF] 24-08-28 15:25:45 poc:reverse-client-dnslog: DNSLOG.CN不可用 原因: Get "http://dnslog.cn/getdomain.php": dial tcp: lookup dnslog.cn: i/o timeout [dnslogcn.go:39]
[INF] 24-08-28 15:25:45 poc:reverse-client-new: 新反连客户端不可用 原因: 没有开启新反连平台 [client.go:18]
GET http://192.168.3.210
[WRN] 24-08-28 15:25:45 poc:poc-go-yonyou-u8-cloud-servicedispatcherservlet-rce: no vulnerability: request error [value.go:596]
[INF] 24-08-28 15:25:55 [1] website: [200 OK] http://testphp.vulnweb.com
[ERR] 24-08-28 15:25:55 poc:reverse-client-dnslog: panic: interface conversion: reverse.ClientIface is nil, not *reverse.DNSLogCNClient [dnslogcn.go:31]
[INF] 24-08-28 15:25:55 poc:reverse-registry: 反连 CLIENT 没有按照预期等待 [registry.go:147]
[INF] 24-08-28 15:25:55 poc:reverse-registry: 将默认等待 5 秒后退出 [registry.go:148]
4ra1n commented 1 month ago

dial tcp: lookup dnslog.cn: i/o timeout 看起来没有连通 dnslog.cn

可以加入参数 --disable reverse-client-dnslog 禁用 dnslog.cn