Utils

Documentation

Index

• Constants
• Variables
• func AUTOTYPE_DETECT_FACTORY(dnsurl string) string
• func DEPENDENCY_ERR_DETECT_FACTORY() map[string]string
• func InitResult(result Result)
• func NET_DETECT_FACTORY() (string, string)
• func SCAN_RESULTS_OUTPUT_FACTORY(result Result) string
• func TIME_DETECT_FACTORY(count int) []string
• type DNSPayloads
  • func DNS_DETECT_FACTORY() (DNSPayloads, string)
• type FS_VERSION
• type Option
• type Payload
• type Result
• type ResultFomat

Constants

const FJ_BETWEEN_48_68 string = "1.2.48 ≤ Fastjson ≤ 1.2.68"

const FJ_BETWEEN_69_80 string = "1.2.69 ≤ Fastjson ≤ 1.2.80"

const FJ_BEYOND_48 string = "Fastjson ≥ 1.2.48"

const FJ_NOT_DETECT string = "Fastjson isn't detected or network isn't achieve"

const FJ_UNDER_48 string = "Fastjson < 1.2.48"

const FS_BETWEEN_36_62 = "1.2.37 ≤ Fastjson ≤ 1.2.61 (来自延迟探测，受网络因素影响，有一定误报率)"

const FS_BEYOND_80 = "fastjson = 1.2.83"

const NETWORK_NOT_ACCESS = "Network is Unreachable"

const NOT_FS = "target isn't fastjson"

Variables

var AUTOTYPE_CHECK = `[{"@type":"java.net.CookiePolicy"},{"@type":"java.net.Inet4Address","val":"{{.Variables.DNS}}"}]`

var DEPENDENCY_DETECT_BY_ERR = `
{
    "@type":"java.lang.Character"{
        "@type":"java.lang.Class",
        "val":"{{.Variables.Dependency}}"
}
`

var DNS_DETECT_48 = `` /* 209-byte string literal not displayed */

var DNS_DETECT_68 = `` /* 259-byte string literal not displayed */

var DNS_DETECT_80 = `` /* 436-byte string literal not displayed */

var DependencyList = []string{
	"org.springframework.web.bind.annotation.RequestMapping",
	"org.apache.shiro.jndi.JndiObjectFactory",
	"org.apache.catalina.startuo.Tomcat",
	"groovy.lang.GroovyShell",
	"com.mysql.jdbc.Driver",
	"java.net.http.HttpClient",
}

var FS_ERR_DETECT = `{"@type": "java.lang.AutoCloseable"`

var RESULT_OUTPUT = `` /* 294-byte string literal not displayed */

var TAR_NET_DETECT = `{"name":{"@type":"java.net.Inet4Address","val":"{{.Variables.DNS}}"}}`

var TIME_DETECT = `{"regex":{"$ref":"$[blue rlike '^[a-zA-Z]+(([a-zA-Z ])?[a-zA-Z]*)*$']"},"blue":"aaaaaaaaaaaa{{.Variables.Value}}!"}`

Functions

func AUTOTYPE_DETECT_FACTORY

func AUTOTYPE_DETECT_FACTORY(dnsurl string) string

func DEPENDENCY_ERR_DETECT_FACTORY

func DEPENDENCY_ERR_DETECT_FACTORY() map[string]string

func InitResult

func InitResult(result Result)

func NET_DETECT_FACTORY

func NET_DETECT_FACTORY() (string, string)

func SCAN_RESULTS_OUTPUT_FACTORY

func SCAN_RESULTS_OUTPUT_FACTORY(result Result) string

func TIME_DETECT_FACTORY

func TIME_DETECT_FACTORY(count int) []string

Types

type DNSPayloads

type DNSPayloads struct {
	Dns_48 string
	Dns_68 string
	Dns_80 string
}

func DNS_DETECT_FACTORY

func DNS_DETECT_FACTORY() (DNSPayloads, string)

type FS_VERSION

type FS_VERSION string // fastjson版本号

type Option

type Option struct {
	Url     string
	Targets string
	Result  string
}

type Payload

type Payload struct {
	Variables map[string]string
}

type Result

type Result struct {
	Url        string
	Type       string
	Version    string
	Payload    string
	AutoType   bool
	Netout     bool
	Dependency []string
}

type ResultFomat

type ResultFomat struct {
	Variables  map[string]string
	Dependency []string
}