1

三个使用简单的扫描工具

  • Kscan跑指纹/爆破
  • afrog跑poc
  • fscan一起跑

1、termux安装

【termux官网】
【ZeroTermux】
【ZeroTermux 安卓5】

  • ZeroTermux换源(可跳过)

    sed -i 's@^\(deb.*stable main\)$@#\1\ndeb https://mirrors.tuna.tsinghua.edu.cn/termux/termux-packages-24 stable main@' $PREFIX/etc/apt/sources.list && apt update && apt upgrade

    2、termux安装Linux发行版Alpine

  • 安装

    curl -LO https://raw.githubusercontents.com/Hax4us/TermuxAlpine/master/TermuxAlpine.sh
    bash TermuxAlpine.sh
    
    
  • 启动alpine

    startalpine
    
  • alpine环境初始化

    set -x \
    && echo -e "\n\
    export LANG=zh_CN.UTF-8\n\
    export TERMUX_APK_RELEASE=F-DROID\n\
    export SHELL=/bin/bash\n" \
    >> /etc/profile.d/diy_env.sh \
    && source /etc/profile \
    && echo -e "nameserver 119.29.29.29\n\
    nameserver 8.8.8.8" > /etc/resolv.conf \
    && sed -i 's/dl-cdn.alpinelinux.org/mirrors.ustc.edu.cn/g' /etc/apk/repositories \
    && apk update -f \
    && apk upgrade

3、Alpine安装漏扫工具

wget https://download.fastgit.org/shadow1ng/fscan/releases/download/1.8.1/fscan_arm64
wget https://download.fastgit.org/zan8in/afrog/releases/download/v1.3.6/afrog_arm.tar.gz
wget https://download.fastgit.org/lcvvvv/kscan/releases/download/v1.76/kscan_linux_arm.zip

unzip kscan_linux_arm.zip
tar -xzf afrog_arm.tar.gz
chmod +x afrog_arm kscan_linux_arm fscan_arm64

工具简单使用命令

  • Kscan是一款纯go开发的全方位扫描器,具备端口扫描、协议检测、指纹识别,暴力破解等功能。

    https://hub.fastgit.xyz/lcvvv...
    ./kscan_linux_arm --threads 50 -t 192.168.1.1/24
    ./kscan_linux_arm -t http://127.0.0.1
    ./kscan_linux_arm -t 文件路径
    爆破:--hydra
  • afrog 是一款性能卓越、快速稳定、PoC 可定制化的漏洞扫描工具

    https://hub.fastgit.xyz/zan8i...
    ./afrog_arm -t http://127.0.0.1
    ./afrog_arm -T URL文件路径
    
    ## 更新poc
    ./afrog_arm --up 
    # 禁用指纹识别,直接漏扫 
    afrog --nf -t http://127.0.0.1
  • fscan是一款内网综合扫描工具,方便一键自动化、全方位漏扫扫描。

    https://hub.fastgit.xyz/shado...
    ./fscan_arm64 -h 192.168.1.1/24
    ./fscan_arm64 -u http://127.0.0.1
    ./fscan_arm64 -hf IP文件路径
    ./fscan_arm64 -uf URL文件路径

二毛erma0
52 声望56 粉丝

业余爱好