hysia
commented
5 years ago 这个PR 非常适合 pocusite3中的 目标插件
在pocsuite3中 定义了3种类型的插件，分别是：
- 检测目标插件
- 检测脚本（PoC）插件
- 检测结果插件
等
pocsuite3 beta测试完对外公布的时候欢迎再次提交PR
这里贴一下 pocsuite3 将包含的特性：
Features
- PoC scripts can running with
attack,verify,shellmode in different way - Plugin ecosystem
- Dynamic loading PoC script from any where (local file, redis , database, Seebug ...)
- Load multi-target from any where (CIDR, local file, redis , database, Zoomeye ...)
- Results can be easily exported
- Dynamic patch and hook requests
- Both command line tool and python package import to use
- IPV6 support
- Global HTTP/HTTPS/SOCKS proxy support
- Simple spider API for PoC script to use
- Integrate with Seebug (for load PoC from Seebug website)
- Integrate with ZoomEye (for load target from ZoomEye
Dork) - Integrate with Shodan (for load target from Shodan
Dork) - Integrate with Ceye (for verify blind DNS and HTTP request)
- Friendly debug PoC scripts with IDEs
- More ...
Screenshots
pocsuite3 shell mode
pocsuite3 load PoC from Seebug
pocsuite3 load multi-target from ZoomEye
pocsuite3 load multi-target from Shodan
Requirements
- Python 3.4+
- Works on Linux, Windows, Mac OSX, BSD
zer0yu
模块借助pychrome使用chrome headless对搜索引擎的搜索结果进行抓取
使用简介如下: -u 参数对应的是搜索引擎的语法，比如使用site:i.mi.com就可以对i.mi.com的子域名进行采集，采集结果会进行保存并输出在output目录下。 python pocsuite.py -r modules/bing-dork.py -u site:i.mi.com --verify
模块基本是实现对达成特定条件的目标URL进行采集，如果想实现特定功能只需稍作修改即可。