itsMe Posted August 4, 2022 Share Posted August 4, 2022 This is the hidden content, please Sign In or Sign Up Vulnerabilities Scan: 15000+PoCs; 20 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty… What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent。red team tools Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. In principle, do not repeat the wheel, unless there are bugs, problems Cross-platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc. Support [20] password blasting, support custom dictionary, open by “priorityNmap”: true RDP SSH rsh-spx Mysql MsSql Oracle Postgresql Redis FTP Mongodb SMB, also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), SmbGhost (CVE- 2020-0796) Telnet Snmp Wap-wsp (Elasticsearch) RouterOS HTTP BasicAuth Weblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detection Tomcat Jboss Winrm(wsman) By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual intervention Detect whether there is nmap in the system, and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan Disadvantages of using nmap: Is the network bad, because the traffic network packet is too large, which may lead to incomplete results Using nmap additionally requires setting the root password to an environment variable This is the hidden content, please Sign In or Sign Up Link to comment Share on other sites More sharing options...
Recommended Posts