Documentation
¶
Index ¶
Constants ¶
View Source
const Version = "1.0.2"
View Source
const Website = "https://github.com/yhy0/Jie"
Variables ¶
View Source
var Banner = `` /* 301-byte string literal not displayed */
View Source
var ConfigFile string
View Source
var DangerHeaders = []string{
"X-Client-IP",
"X-Remote-IP",
"X-Remote-Addr",
"X-Forwarded-For",
"X-Originating-IP",
"Referer",
"CF-Connecting_IP",
"True-Client-IP",
"X-Forwarded-For",
"Originating-IP",
"X-Real-IP",
"X-Client-IP",
"Forwarded",
"Client-IP",
"Contact",
"X-Wap-Profile",
"X-Api-Version",
}
DangerHeaders 一些危险的请求头, 用来测试 sql 注入、ssrf,有的谜一样的业务逻辑可能会被命中
View Source
var FileName = "Jie_config.yaml"
View Source
var FilePath string
FilePath 一些配置文件的默认位置
View Source
var GlobalConfig = &Config{}
View Source
var Parallelism = 10
Parallelism 同时 10 插件运行
View Source
var ( // Plugin 插件单独从配置文件中读取出来,方便使用 Plugin = map[string]bool{ "xss": false, "sql": false, "sqlmap": false, "cmd": false, "xxe": false, "ssrf": false, "brute": false, "hydra": false, "bypass403": false, "jsonp": false, "crlf": false, "log4j": false, "fastjson": false, "portScan": false, "poc": false, "nuclei": false, "bbscan": false, "archive": false, "nginx-alias-traversal": false, } )
Functions ¶
func ReadPlugin ¶ added in v1.0.0
func ReadPlugin()
ReadPlugin 插件读取出来方便使用,之后所有的插件运行都是看 Plugin 中对应的是否开启
func WriteYamlConfig ¶ added in v1.0.0
func WriteYamlConfig() error
WriteYamlConfig 生成写入默认配置文件, 这里就不通过 viper 写入了, viper 写入的没有注释
Types ¶
type Collection ¶ added in v1.0.0
type Collection struct {
Domain []string `json:"domain"`
IP []string `json:"ip"`
Phone []string `json:"phone"`
Email []string `json:"email"`
IDCard []string `json:"idCard"`
API []string `json:"api"`
Url []string `json:"url"`
UrlFilter []string `json:"urlFilter"`
Other []string `json:"other"`
}
Collection 信息收集中的正则
type Config ¶
type Config struct {
Debug bool `json:"debug"`
Options Options `json:"options"`
Passive Passive `json:"passive"`
Http Http `json:"http"`
Plugins Plugins `json:"plugins"`
WebScan WebScan `json:"webScan"`
Reverse Reverse `json:"reverse"`
SqlmapApi Sqlmap `json:"sqlmapApi"`
Mitmproxy Mitmproxy `json:"mitmproxy"`
Collection Collection `json:"collection"`
}
type Http ¶ added in v1.0.0
type Http struct {
Proxy string `json:"proxy"` // http/socks5 proxy to use
Timeout int `json:"timeout"` // Timeout is the seconds to wait for a response from the server.
MaxConnsPerHost int `json:"maxConnsPerHost"`
RetryTimes int `json:"retryTimes"`
AllowRedirect int `json:"allowRedirect"`
VerifySSL bool `json:"verifySSL"`
MaxQps int `json:"maxQps"` // MaxQps is the maximum number of queries per second.
Headers map[string]string `json:"headers"`
ForceHTTP1 bool `json:"forceHTTP1"` // 强制指定使用 http/1.1
}
type Mitmproxy ¶ added in v1.0.0
type Mitmproxy struct {
BasicAuth struct {
Username string `json:"username"`
Password string `json:"password"`
Header string `json:"header"`
} `json:"basicAuth"`
Exclude []string `json:"exclude"` // Exclude 排除扫描的域名
Include []string `json:"include"` // Include 只扫描的域名
FilterSuffix string `json:"filterSuffix"` // 排除的后缀
}
type Plugins ¶ added in v1.0.0
type Plugins struct {
BruteForce struct {
Web bool `json:"web"`
Service bool `json:"service"`
UsernameDictionary string `json:"usernameDict"`
PasswordDictionary string `json:"passwordDict"`
} `json:"bruteForce"`
CmdInjection struct {
Enabled bool `json:"enabled"`
} `json:"cmdInjection"`
CrlfInjection struct {
Enabled bool `json:"enabled"`
} `json:"crlfInjection"`
XSS struct {
Enabled bool `json:"enabled"`
DetectXssInCookie bool `json:"detectXssInCookie"`
} `json:"xss"`
Sql struct {
Enabled bool `json:"enabled"`
BooleanBasedDetection bool `json:"booleanBasedDetection"`
TimeBasedDetection bool `json:"timeBasedDetection"`
ErrorBasedDetection bool `json:"errorBasedDetection"`
DetectInCookie bool `json:"detectInCookie"`
} `json:"sql"`
SqlmapApi Sqlmap `json:"sqlmapApi"`
XXE struct {
Enabled bool `json:"enabled"`
} `json:"xxe"`
SSRF struct {
Enabled bool `json:"enabled"`
} `json:"ssrf"`
BBscan struct {
Enabled bool `json:"enabled"`
} `json:"bbscan"`
Jsonp struct {
Enabled bool `json:"enabled"`
} `json:"jsonp"`
Log4j struct {
Enabled bool `json:"enabled"`
} `json:"log4j"`
ByPass403 struct {
Enabled bool `json:"enabled"`
} `json:"bypass403"`
Fastjson struct {
Enabled bool `json:"enabled"`
} `json:"fastjson"`
NginxAliasTraversal struct {
Enabled bool `json:"enabled"`
} `json:"nginxAliasTraversal"`
Poc struct {
Enabled bool `json:"enabled"`
} `json:"poc"`
Nuclei struct {
Enabled bool `json:"enabled"`
} `json:"nuclei"`
Archive struct {
Enabled bool `json:"enabled"`
} `json:"archive"`
IIS struct {
Enabled bool `json:"enabled"`
} `json:"iis"`
PortScan struct {
Enabled bool `json:"enabled"`
} `json:"portScan"`
}
Plugins 插件配置
type Reverse ¶
Reverse dnslog 配置,使用 dig.pm https://github.com/yumusb/DNSLog-Platform-Golang
Click to show internal directories.
Click to hide internal directories.