一款面向紅隊的高度可控可拓展的自動化引擎工具

特點

• 自由的端口配置
• 支持主動/被動指紋識別
• 關鍵信息提取, 如title, cert 以及自定義提取信息的正則
• 支持nuclei poc, poc目錄: https://chainreactors.github.io/wiki/gogo/detail/#_6
• 無害的掃描, 每個添加的poc都經過人工審核
• 可控的啟發式掃描
• 超強的性能, 最快的速度, 盡可能小的內存與CPU占用.
• 最小發包原則, 盡可能少地發包獲取最多的信息
• 支持DSL, 可以通過簡單的配置自定義自己的gogo
• 完善的輸出與輸出設計
• 幾乎不依賴第三方庫, 純原生go編寫, 在windows 2003上也可以使用完整的漏洞/指紋識別功能

最簡使用

端口配?置

• -p - 等于-p 1-65535
• -p 1-1000 端口范圍
• -p common tag: common 表示內網常用端口
• -p top2,top3 可以同時選擇多個tag. 外網常見web端口
• -p all 表示所有預設的tag的合集.

當前已有端口配置: (根據端口類型分類)
         top1 :  80,443,8080
         top2 :  70,80,81,82,83,84,85,86,87,88,89,90,443,1080,2000,2001,3000,3001,1443,4443,4430,5000,5001,5601,6000,6001,6002,6003,7000,7001,7002,7003,9000,9001,9002,9003,8080,8081,8082,8083,8084,8085,8086,8087,8088,8089,8090,8091,8000,8001,8002,8003,8004,8005,8006,8007,8008,8009,8010,8011,8012,8013,8014,8015,8016,8017,8018,8019,8020,8820,6443,8443,9443,8787,7080,8070,7070,7443,9080,9081,9082,9083,5555,6666,7777,7788,9999,6868,8888,8878,8889,7890,5678,6789,9090,9091,9092,9093,9094,9095,9096,9097,9098,9099,9100,9988,9876,8765,8099,8763,8848,8161,8060,8899,800,801,888,10000,10001,10002,10003,10004,10005,10006,10007,10008,10009,10010,1081,1082,10080,10443,18080,18000,18088,18090,19090,19091,50070
         top3 :  444,9443,6080,6443,9070,9092,9093,7003,7004,7005,7006,7007,7008,7009,7010,7011,9003,9004,9005,9006,9007,9008,9009,9010,9011,8100,8101,8102,8103,8104,8105,8106,8107,8108,8109,8110,8111,8161,8021,8022,8023,8024,8025,8026,8027,8028,8029,8030,8880,8881,8882,8883,8884,8885,8886,8887,8888,8889,8890,8010,8011,8012,8013,8014,8015,8016,8017,8018,8019,8020,8090,8091,8092,8093,8094,8095,8096,8097,8098,8099,8180,8181,8983,1311,8363,8800,8761,8873,8866,8900,8282,8999,8989,8066,8200,8040,8060,10800,18081
         docker :  2375,2376,2377,2378,2379,2380
         lotus :  1352
         dubbo :  18086,20880,20881,20882
         oracle :  1158,1521,11521,210
         ...
         ...
         ...

啟發式掃描

workflow