All Projects → jjf012 → Gopoc

jjf012 / Gopoc

用cel-go重现了长亭xray的poc检测功能的轮子

Programming Languages

go
31211 projects - #10 most used programming language

Projects that are alternatives of or similar to Gopoc

Poc
Proofs-of-concept
Stars: ✭ 467 (+276.61%)
Mutual labels:  poc, proof-of-concept
Proof Of Concepts
A little collection of fun and creative proof of concepts to demonstrate the potential impact of a security vulnerability.
Stars: ✭ 148 (+19.35%)
Mutual labels:  poc, proof-of-concept
Kunpeng
kunpeng是一个Golang编写的开源POC框架/库,以动态链接库的形式提供各种语言调用,通过此项目可快速开发漏洞检测类的系统。
Stars: ✭ 1,242 (+901.61%)
Mutual labels:  security-testing, proof-of-concept
safelog4j
Safelog4j is an instrumentation-based security tool to help teams discover, verify, and solve log4shell vulnerabilities without scanning or upgrading
Stars: ✭ 38 (-69.35%)
Mutual labels:  vulnerability-scanner, security-testing
financial
POC de uma aplicação de domínio financeiro.
Stars: ✭ 62 (-50%)
Mutual labels:  proof-of-concept, poc
iota-mqtt-poc
IOTA Proof of Concept, store MQTT messages on the tangle.
Stars: ✭ 40 (-67.74%)
Mutual labels:  proof-of-concept, poc
poc-github-actions
Various proofs of concept examples using Github Actions 🤖
Stars: ✭ 103 (-16.94%)
Mutual labels:  proof-of-concept, poc
Umbraco-RCE
Umbraco CMS 7.12.4 - (Authenticated) Remote Code Execution
Stars: ✭ 61 (-50.81%)
Mutual labels:  proof-of-concept, poc
Xray
一款完善的安全评估工具,支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
Stars: ✭ 6,218 (+4914.52%)
Mutual labels:  poc, vulnerability-scanner
Angelsword
Python3编写的CMS漏洞检测框架
Stars: ✭ 1,223 (+886.29%)
Mutual labels:  poc
Nothing Private
Do you think you are safe using private browsing or incognito mode?. 😄 👿 This will prove that you're wrong.
Stars: ✭ 1,375 (+1008.87%)
Mutual labels:  proof-of-concept
Radio Hackbox
PoC tool to demonstrate vulnerabilities in wireless input devices
Stars: ✭ 74 (-40.32%)
Mutual labels:  proof-of-concept
Middleware Vulnerability Detection
CVE、CMS、中间件漏洞检测利用合集 Since 2019-9-15
Stars: ✭ 1,378 (+1011.29%)
Mutual labels:  poc
Brandis
Brandis: End-to-end encryption for everyone
Stars: ✭ 77 (-37.9%)
Mutual labels:  proof-of-concept
Spectreexploit
SpectreExploit POC
Stars: ✭ 115 (-7.26%)
Mutual labels:  poc
Cve 2017 0781
Blueborne CVE-2017-0781 Android heap overflow vulnerability
Stars: ✭ 74 (-40.32%)
Mutual labels:  poc
Nrf24 Playset
Software tools for Nordic Semiconductor nRF24-based devices like wireless keyboards, mice, and presenters
Stars: ✭ 73 (-41.13%)
Mutual labels:  proof-of-concept
Cve 2018 11776 Python Poc
Working Python test and PoC for CVE-2018-11776, includes Docker lab
Stars: ✭ 118 (-4.84%)
Mutual labels:  poc
Nailgun
Nailgun attack on ARM devices.
Stars: ✭ 114 (-8.06%)
Mutual labels:  proof-of-concept
Hisilicon Dvr Telnet
PoC materials for article https://habr.com/en/post/486856/
Stars: ✭ 101 (-18.55%)
Mutual labels:  poc

Chinese

xray 提供了很多优秀简洁直观的POC,但是xray并不开源,无法进行二次开发改造。

于是根据xray文档中的检测poc的思路,用cel-go 写了个轮子,方便批量检测。

目前只支持ceye.io作为反连的验证平台,适合小规模批量验证。我不知道怎么实现类型注入

另外,如果双方只能在同个内网才能互通,估计得用http路径来分辨了,这个后期再完善。

支持四种检测方式 一对一,单个目标执行单个poc

gopoc -t http://www.test.com -p poc.yaml

一对多,单个目标执行多个poc

gopoc -t http://www.test.com -P "poc/*"

多对一,多个目标执行单个poc

gopoc -l urls.txt -p poc.yaml

多对多,多个目标执行多个poc

gopoc -l urls.txt -P "pocs/*"

其他几个参数说明如下

-t 请求超时设置
-n 总并发数
-proxy 代理服务器,目前只测试了http代理

使用-h查看所有参数

English (by google)

xray provides many excellent concise and intuitive POC, but xray is not open source and cannot be redeveloped.

So according to the idea of detecting poc in the chaitin xray document, I wrote a wheel with cel-go to facilitate batch detection.

Currently using ceye.io as the verification platform for reverse connection, suitable for small-scale batch verification.

One-to-one, a single target performs a single poc

gopoc -t http://www.test.com -p poc.yaml

One-to-many, a single target performs multiple poc

gopoc -t http://www.test.com -P "poc/*"

Many to one, multiple targets execute a single poc

gopoc -l urls.txt -p poc.yaml

Many-to-many, multiple targets execute multiple poc

gopoc -l urls.txt -P "pocs/*"

Several other parameters are described below

-t request timeout setting
-n total number of concurrent
-proxy proxy server, currently only tested http proxy

Use -h to view all parameters

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].