knownsec / pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
https://pocsuite.org
Other
3.66k stars 783 forks source link

pocsuite3如何进行分布式部署 #339

Closed longfeide2008 closed 1 year ago

longfeide2008 commented 2 years ago

对于大批量的扫描,单机肯定是不够的, pocsuite3如何进行分布式部署,有没有对应的参考案例!

13ph03nix commented 2 years ago

可以把 Pocsuite3 当成一个 Python 模块来用,传递 PoC 和 target,然后调用 Pocsuite3 获取扫描结果。分布式任务调度需要自己实现,比如从队列获取任务,然后运行获取结果并入库。

调用示例:

from pocsuite3.api import init_pocsuite
from pocsuite3.api import start_pocsuite
from pocsuite3.api import get_results

def run_pocsuite():
    config = {
    'url': ['http://127.0.0.1:8080', 'http://127.0.0.1:21'],
    'poc': ['ecshop_rce', 'ftp_burst']
    }

    init_pocsuite(config)
    start_pocsuite()
    result = get_results()