1.options

Examples: ./vscan -l hosts.txt -top-ports http -o out.txt Usage:  ./vscan [flags]INPUT:   -host string                Host to scan ports for   -list, -l string            File containing list of hosts to scan ports   -exclude-hosts, -eh string  Specifies a comma-separated list of targets to be excluded from the scan (ip, cidr)   -exclude-file, -ef string   Specifies a newline-delimited file with targets to be excluded from the scan (ip, cidr)PORT:   -port, -p string            Ports to scan (80, 80,443, 100-200   -top-ports, -tp string      Top Ports to scan (default top 100)   -exclude-ports, -ep string  Ports to exclude from scan   -ports-file, -pf string     File containing ports to scan for   -exclude-cdn, -ec           Skip full port scans for CDNs (only checks for 80,443)RATE-LIMIT:   -c int     General internal worker threads (default 25)   -rate int  Rate of port scan probe request (default 1000)OUTPUT:   -o, -output string  File to write output to (optional)   -json               Write output in JSON lines FormatCONFIGURATION:   -proxy                 Httpx Proxy, eg (http://127.0.0.1:8080|socks5://127.0.0.1:1080)      -skip-waf              Not FileFuzz scan to prevent interception by WAF   -ceyeapi               ceye.io api key   -ceyedomain            ceye.io subdomain   -no-color              Don't Use colors in output   -scan-all-ips          Scan all the ips   -scan-type, -s string  Port scan type (SYN/CONNECT) (default s)   -source-ip string      Source Ip   -interface-list, -il   List available interfaces and public ip   -interface, -i string  Network Interface to use for port scan   -nmap                  Invoke nmap scan on targets (nmap must be installed)   -nmap-cli string       nmap command to run on found results (example: -nmap-cli 'nmap -sV')OPTIMIZATION:   -retries int       Number of retries for the port scan probe (default 3)   -timeout int       Millisecond to wait before timing out (default 1000)   -warm-up-time int  Time in seconds between scan phases (default 2)   -ping              Use ping probes for verification of host   -verify            Validate the ports again with TCP verificationDEBUG:   -debug          Enable debugging information   -no-color, -nc  Don't Use colors in output   -silent         Show found ports only in output   -version        Show version of naabu   -stats          Display stats of the running scan

2.Build

git clone https://github.com/veo/vscan.gitcd vscango build

3.功能

3.1 端口扫描，站点访问

3.2 指纹识别

3.3 漏洞检测

自行添加POC方式:

go文件添加POC：

func CVE_2017_12615(url string) bool {if req, err := pkg.HttpRequset(url+"/vtset.txt", "PUT", "test", false, nil); err == nil {if req.StatusCode == 204 || req.StatusCode == 201 {pkg.POClog(fmt.Sprintf("Found vuln Tomcat CVE_2017_12615|--\"%s/vtest.txt\"\n", url))return true}}return false}

case "Apache Tomcat":   if tomcat.CVE_2017_12615(URL) {technologies = append(technologies, "exp-Tomcat|CVE_2017_12615")    }

yml文件添加POC：

3.4 智能后台弱口令扫描，中间件弱口令扫描

3.5 敏感文件扫描

Licenses