youki992/VscanPlus

Fork: 20 Star: 229 (更新于 2025-01-14 16:39:30)

license: BSD-3-Clause

Language: Go .

[VscanPlus内外网漏洞扫描工具]已更新HW热门漏洞检测POC。基于veo师傅的漏扫工具vscan二次开发的版本，端口扫描、指纹检测、目录fuzz、漏洞扫描功能工具，批量快速检测网站安全隐患。An open-source, cross-platform website vulnerability scanning tool that helps you quickly detect website security vulnerabilities.

最后发布版本： v1.0.5.1 ( 2024-11-14 15:13:12)

GitHub网址

介绍
版本
相关

VscanPlus

VscanPlus is a second development version of Vscan, an open-source, lightweight, fast, cross-platform website vulnerability scanning tool that helps you quickly detect website security vulnerabilities.

中文文档 • Compilation/Installation/Running • Parameter Description • Usage •

Features

Updates

Updated ehole fingerprint
Updated nuclei detection scripts
Updated xray detection scripts
Fixed missing field error when reading nuclei templates
Standardized fingerprint names, nuclei, xray detection script naming format

Commits

According to the original vscan development documentation, users can customize fingerprints and pocs. The calling relationship between the two is: first detect the fingerprint, then call the corresponding poc, similar to the recently updated -ac command line detection feature in nuclei, both based on fingerprints to detect vulnerabilities

According to the original vscan development documentation, the xray poc naming format corresponding to the fingerprint is: fingerprint-xxxx-yml, so the format of the newly added pocs has been standardized, including: Weaver-OA Yonyou-OA Tongda-OA Jinhe-OA ThinPHP Spring-Boot Spring-Blade Apache-Tomcat Drupal Microsoft-Exchange Sangfor
Nuclei loads pocs through tags

Based on the xray rule detection of the original vscan, the logic of loading multiple rules in yml v2 similar to nuclei templates has been rewritten, which can achieve multi-expression detection functionality
The fuzzy detection feature for subdomain name takeover vulnerabilities is added

Based on the detection rules in the https://github.com/EdOverflow/can-i-take-over-xyz project, the corresponding domain name is determined to have a subdomain name takeover vulnerability by comparing the domain name CNAME resolution and the request return information. After the detection is complete, a matched_domains.txt file is generated in the current directory.