youki992 / VscanPlus

[VscanPlus内外网漏洞扫描工具]已更新HW热门漏洞检测POC。基于veo师傅的漏扫工具vscan二次开发的版本,端口扫描、指纹检测、目录fuzz、漏洞扫描功能工具,批量快速检测网站安全隐患。An open-source, cross-platform website vulnerability scanning tool that helps you quickly detect website security vulnerabilities.
BSD 3-Clause "New" or "Revised" License
218 stars 20 forks source link

老铁你程序关于空指针异常的处理逻辑是不是缺失了 #4

Open CrazyDave619 opened 7 months ago

CrazyDave619 commented 7 months ago

panic: runtime error: invalid memory address or nil pointer dereference [signal 0xc0000005 code=0x0 addr=0x18 pc=0x9a02c9]

goroutine 389957 [running]: github.com/youki992/VscanPlus/pocs_go/shiro.aES_CBC_Encrypt({0xc007cc1970?, 0x1bcd949?, 0x16?}, {0xc0064d2100, 0x70, 0x72}) C:/Users/13740/Downloads/vscan-main/vscan-main/pocs_go/shiro/CVE_2016_4437.go:45 +0x49 github.com/youki992/VscanPlus/pocs_go/shiro.CVE_2016_4437({0xc00d642840, 0x1c}) C:/Users/13740/Downloads/vscan-main/vscan-main/pocs_go/shiro/CVE_2016_4437.go:85 +0x125 github.com/youki992/VscanPlus/pocs_go.POCcheck({0xc002d290c0, 0x2, 0x4?}, {0xc003904fc0, 0x1c}, {0xc00d642840, 0x1c}, 0x0) C:/Users/13740/Downloads/vscan-main/vscan-main/pocs_go/go_poccheck.go:42 +0x450 github.com/youki992/VscanPlus/pkg/httpx/runner.(*Runner).analyze(, , {, }, {, }, {, _}, {0xc003ea86c0, 0x1c}, ...) C:/Users/13740/Downloads/vscan-main/vscan-main/pkg/httpx/runner/runner.go:1296 +0x57d9 github.com/youki992/VscanPlus/pkg/httpx/runner.(Runner).process.func1({0xc003ea86c0?, 0xc0061c3200?}, {0x136cb27?, 0x990f6b?}, {0x1388662, 0xa}) C:/Users/13740/Downloads/vscan-main/vscan-main/pkg/httpx/runner/runner.go:695 +0xf1 created by github.com/youki992/VscanPlus/pkg/httpx/runner.(Runner).process in goroutine 1 C:/Users/13740/Downloads/vscan-main/vscan-main/pkg/httpx/runner/runner.go:693 +0x70b

youki992 commented 7 months ago

是不是请求网站的证书是不安全的,这个后续我看修复一下