Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

修改转发逻辑,一些优化 #46

Open
wants to merge 5 commits into
base: master
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
### Java template
# Compiled class file
*.class
.idea

# Log file
*.log
Expand Down
4 changes: 1 addition & 3 deletions .idea/compiler.xml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

This file was deleted.

3 changes: 2 additions & 1 deletion .idea/misc.xml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

8 changes: 0 additions & 8 deletions .idea/modules.xml

This file was deleted.

122 changes: 60 additions & 62 deletions .idea/workspace.xml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

20 changes: 20 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,25 @@ Q3: ......

![流程图](./doc/process.png)

配置参数
- Host、port 指定被动扫描器地址
- Username、Password、Header 为被动扫描器的 Basic 认证相关
- Timeout 指流量代理到被动扫描器的访问超时时间
- Interval Time 指获取的每个流量直接转发给被动扫描器的间隔时间
- BlackList 不转发的黑名单域名
- Domain 限制只转发的域名
- Exclude suffix 限制转发的流量后缀(ps:插件默认设置了 js、css不转发,但对于被动来说这一块还是要进行敏感信息匹配的)
- Proxy、Repeater、Intruder 要转发流量的模块,默认只转发 Proxy 模块的流量

如果想要转发到多个扫描器,host,port,Username、Pasword、Header 输入中分别以 `,` 分割,并且一一对应
比如
Host 中 输入 127.0.0.1,192.168.1.1
Port 中 输入 9081,9082
这样就会将流量分别转发到 `127.0.0.1:9081` 和 `192.168.1.1:9082`


效果图
![效果图.png](doc/img.png)
## 0x02 插件编译

```
Expand All @@ -26,6 +45,7 @@ mvn package
![动图演示](./doc/show.gif)

## 0x04 一些被动式漏洞扫描器
* [Jie](https://github.com/yhy0/Jie) 一款开源的全面而强大的漏洞扫描和利用工具。
* [GourdScanV2](https://github.com/ysrc/GourdScanV2) 由ysrc出品的基于sqlmapapi的被动式漏洞扫描器
* [xray](https://github.com/chaitin/xray) 由长亭科技出品的一款被动式漏洞扫描器
* [w13scan](https://github.com/boy-hack/w13scan) Passive Security Scanner (被动安全扫描器)
Expand Down
Binary file added doc/img.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
16 changes: 0 additions & 16 deletions passive-scan-client.iml

This file was deleted.

6 changes: 3 additions & 3 deletions pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@

<groupId>me.gv7.tools.burpextend</groupId>
<artifactId>passive-scan-client</artifactId>
<version>0.3.1</version>
<version>0.5</version>

<dependencies>
<!-- https://mvnrepository.com/artifact/net.portswigger.burp.extender/burp-extender-api -->
Expand Down Expand Up @@ -41,8 +41,8 @@
<artifactId>maven-compiler-plugin</artifactId>
<version>3.1</version>
<configuration>
<source>1.7</source>
<target>1.7</target>
<source>8</source>
<target>8</target>
<encoding>utf-8</encoding>
</configuration>
</plugin>
Expand Down
Loading