508 lines
17 KiB
Go
508 lines
17 KiB
Go
package pkg
|
||
|
||
import (
|
||
"archive/zip"
|
||
"errors"
|
||
"fmt"
|
||
"github.com/antchfx/htmlquery"
|
||
"github.com/schollz/progressbar/v3"
|
||
"github.com/xuri/excelize/v2"
|
||
"golang.org/x/net/html"
|
||
"io"
|
||
"regexp"
|
||
"strconv"
|
||
"strings"
|
||
)
|
||
|
||
func RsasInit() *RsasScanner {
|
||
return &RsasScanner{}
|
||
}
|
||
|
||
func (RsasScanner *RsasScanner) AnalyseZip(zipFile string) bool {
|
||
//var filenames []string
|
||
print("解析zip: " + zipFile)
|
||
r, err := zip.OpenReader(zipFile)
|
||
if err != nil {
|
||
return false
|
||
}
|
||
defer r.Close()
|
||
var htmlAllVulnInfos []HtmlAllVulnInfo
|
||
for _, f := range r.File {
|
||
//println(f.Name)
|
||
re := regexp.MustCompile(`host/.*?.html`)
|
||
htmlFilename := re.FindAllString(f.Name, -1)
|
||
if len(htmlFilename) >= 1 {
|
||
|
||
htmlContent := GetHtmlContent(f)
|
||
if htmlContent != "" {
|
||
htmlAllVulnInfo := QueryHtmlInfo(htmlContent)
|
||
//for _, vuln := range htmlAllVulnInfo.HtmlVulnInfos {
|
||
// fmt.Printf(vuln.Solution)
|
||
//}
|
||
htmlAllVulnInfos = append(htmlAllVulnInfos, htmlAllVulnInfo)
|
||
}
|
||
}
|
||
|
||
}
|
||
for _, eachHtmlVuln := range htmlAllVulnInfos {
|
||
for _, eachVuln := range eachHtmlVuln.HtmlVulnInfos {
|
||
RsasScanner.AllVulnInfos = append(RsasScanner.AllVulnInfos, eachVuln)
|
||
}
|
||
}
|
||
|
||
return true
|
||
}
|
||
|
||
func MergeRsasVulnToExcel(zipFile string, outputFilename string) error {
|
||
//print("执行中")
|
||
if zipFile == "" {
|
||
return errors.New("请输入压缩文件文件名, -h 弹出帮助菜单")
|
||
}
|
||
rsas := RsasInit()
|
||
rsas.AnalyseZip(zipFile)
|
||
rsas.GenerateXlsx(outputFilename)
|
||
//fmt.Printf("%v", rsas.AllVulnInfos)
|
||
|
||
return nil
|
||
}
|
||
|
||
func GetHtmlContent(filename *zip.File) string {
|
||
//println("打印..")
|
||
htmlContent, err := filename.Open()
|
||
if err != nil {
|
||
println("解析html有问题")
|
||
}
|
||
//io流转string
|
||
if b, err := io.ReadAll(htmlContent); err == nil {
|
||
return string(b)
|
||
}
|
||
return ""
|
||
}
|
||
|
||
func QueryHtmlInfo(content string) (htmlAllVulnInfo HtmlAllVulnInfo) {
|
||
//var htmlAllVulnInfo HtmlAllVulnInfo
|
||
|
||
doc, err := htmlquery.Parse(strings.NewReader(content))
|
||
if err != nil {
|
||
println(err)
|
||
}
|
||
|
||
//println(htmlquery.InnerText(ip)) //ip
|
||
ip := htmlquery.FindOne(doc, "//*[@id=\"content\"]/div[2]/table[2]/tbody/tr/td[1]/table/tbody/tr[1]/td")
|
||
|
||
if strings.Contains(content, "非常安全（0分）") {
|
||
println(htmlquery.InnerText(ip) + " 无漏洞")
|
||
} else {
|
||
vulnDetail := htmlquery.FindOne(doc, "//*[@id=\"vuln_list\"]/tbody")
|
||
|
||
//ip := htmlquery.FindOne(doc, "//*[@id=\"content\"]/div[2]/table[2]/tbody/tr/td[1]/table/tbody/tr[1]/td")
|
||
|
||
nodes := htmlquery.Find(vulnDetail, "//tr")
|
||
htmlAllVulnInfo = FindVulnDetails(nodes, ip)
|
||
//htmlVulnInfo.IpAddress = htmlquery.InnerText(ip)
|
||
//htmlAllVulnInfo.HtmlVulnInfos = append(htmlAllVulnInfo.HtmlVulnInfos, htmlVulnInfo)
|
||
vulnSolutionNode := htmlquery.FindOne(doc, "//*[@id=\"vul_detail\"]/table")
|
||
solutionVulnInfos := FindVulnSolution(vulnSolutionNode)
|
||
for _, solutionVulnInfo := range solutionVulnInfos {
|
||
for i, htmlVulnInfo := range htmlAllVulnInfo.HtmlVulnInfos {
|
||
if htmlVulnInfo.VulnInfos == solutionVulnInfo.VulnInfos {
|
||
//println("找到解决方法：" + htmlVulnInfo.VulnInfos)
|
||
|
||
htmlAllVulnInfo.HtmlVulnInfos[i].Solution = solutionVulnInfo.Solution
|
||
htmlAllVulnInfo.HtmlVulnInfos[i].CVENumber = solutionVulnInfo.CVENumber
|
||
htmlAllVulnInfo.HtmlVulnInfos[i].Details = solutionVulnInfo.Details
|
||
htmlAllVulnInfo.HtmlVulnInfos[i].RiskLevel = solutionVulnInfo.RiskLevel
|
||
|
||
}
|
||
}
|
||
}
|
||
}
|
||
|
||
return htmlAllVulnInfo
|
||
}
|
||
|
||
func FindVulnDetails(nodes []*html.Node, ip *html.Node) HtmlAllVulnInfo {
|
||
var htmlAllVulnInfo HtmlAllVulnInfo
|
||
var htmlVulnInfo HtmlVulnInfo
|
||
filterFirstLine := false
|
||
for _, node := range nodes {
|
||
if !filterFirstLine {
|
||
filterFirstLine = true
|
||
continue
|
||
}
|
||
|
||
td := htmlquery.Find(node, "//td")
|
||
htmlVulnInfo.IpAddress = htmlquery.InnerText(ip)
|
||
htmlVulnInfo.Port = htmlquery.InnerText(td[0])
|
||
htmlVulnInfo.Protocol = htmlquery.InnerText(td[1])
|
||
htmlVulnInfo.Service = htmlquery.InnerText(td[2])
|
||
if JudgeMutiVulnName(td[3]) {
|
||
vulnInfos := AddMutiVulnName(td[3], htmlVulnInfo)
|
||
for _, vulnInfo := range vulnInfos {
|
||
htmlAllVulnInfo.HtmlVulnInfos = append(htmlAllVulnInfo.HtmlVulnInfos, vulnInfo)
|
||
}
|
||
} else {
|
||
htmlVulnInfo.VulnInfos = htmlquery.InnerText(htmlquery.FindOne(td[3], "//span"))
|
||
htmlVulnInfo.VulnInfos = strings.Replace(htmlVulnInfo.VulnInfos, "\r", "", -1)
|
||
htmlVulnInfo.VulnInfos = strings.Replace(htmlVulnInfo.VulnInfos, "\n", "", -1)
|
||
htmlVulnInfo.VulnInfos = strings.Replace(htmlVulnInfo.VulnInfos, " ", "", -1)
|
||
versionDiv, _ := htmlquery.QueryAll(td[3], "//div/div")
|
||
if len(versionDiv) == 0 {
|
||
htmlVulnInfo.ServiceDetail = ""
|
||
} else {
|
||
//println("端口" + htmlVulnInfo.Port)
|
||
//println(len(versionDiv))
|
||
htmlVulnInfo.ServiceDetail = TrimString(htmlquery.InnerText(versionDiv[0]))
|
||
|
||
//println("单漏洞版本号: " + htmlVulnInfo.ServiceDetail)
|
||
}
|
||
|
||
htmlVulnInfo.ServiceDetail = TrimString(htmlVulnInfo.ServiceDetail)
|
||
htmlAllVulnInfo.HtmlVulnInfos = append(htmlAllVulnInfo.HtmlVulnInfos, htmlVulnInfo)
|
||
}
|
||
|
||
//for _, n := range td {
|
||
//
|
||
// //text := strings.Replace(htmlquery.InnerText(n), "\r", "", -1)
|
||
// //text = strings.Replace(text, "\n", "", -1)
|
||
// //text = strings.Replace(text, " ", "", -1)
|
||
// println(text)
|
||
//}
|
||
}
|
||
return htmlAllVulnInfo
|
||
}
|
||
|
||
func JudgeMutiVulnName(td *html.Node) bool {
|
||
span := htmlquery.Find(td, "//span")
|
||
if len(span) > 1 {
|
||
return true
|
||
}
|
||
return false
|
||
}
|
||
|
||
func AddMutiVulnName(td *html.Node, vulnInfo HtmlVulnInfo) (vulnInfos []HtmlVulnInfo) {
|
||
|
||
spans := htmlquery.Find(td, "//span")
|
||
|
||
for i, span := range spans {
|
||
eachVulnInfo := HtmlVulnInfo{
|
||
IpAddress: vulnInfo.IpAddress,
|
||
Port: vulnInfo.Port,
|
||
Service: vulnInfo.Service,
|
||
Protocol: vulnInfo.Protocol,
|
||
}
|
||
//println("端口" + vulnInfo.Port)
|
||
|
||
versionDiv, _ := htmlquery.QueryAll(td, "//ul/li["+strconv.Itoa(i+1)+"]/div/div") ///html/body/div/div[4]/div[4]/div[2]/table/tbody/tr[8]/td[4]/ul/li[1]/div/div
|
||
if len(versionDiv) == 0 {
|
||
|
||
eachVulnInfo.ServiceDetail = ""
|
||
} else {
|
||
|
||
eachVulnInfo.ServiceDetail = TrimString(htmlquery.InnerText(versionDiv[0]))
|
||
//eachVulnInfo.ServiceDetail = htmlquery.SelectAttr(versionDiv, "class")
|
||
//println("多漏洞 版本号:" + eachVulnInfo.ServiceDetail)
|
||
}
|
||
|
||
eachVulnInfo.VulnInfos = htmlquery.InnerText(span)
|
||
eachVulnInfo.VulnInfos = strings.Replace(eachVulnInfo.VulnInfos, "\r", "", -1)
|
||
eachVulnInfo.VulnInfos = strings.Replace(eachVulnInfo.VulnInfos, "\n", "", -1)
|
||
eachVulnInfo.VulnInfos = strings.Replace(eachVulnInfo.VulnInfos, " ", "", -1)
|
||
vulnInfos = append(vulnInfos, eachVulnInfo)
|
||
}
|
||
return
|
||
}
|
||
|
||
//先提取所有漏洞修复，再根据漏洞名称分配至每个漏洞内。
|
||
func FindVulnSolution(vulnSolutionNode *html.Node) (solutionVulninfos []HtmlVulnInfo) {
|
||
var count int
|
||
var solutionVulnInfo HtmlVulnInfo
|
||
nodes := htmlquery.Find(vulnSolutionNode, "//tr")
|
||
for _, node := range nodes {
|
||
//匹配修复表格中漏洞名称
|
||
trClass := htmlquery.SelectAttr(node, "data-id")
|
||
if trClass != "" {
|
||
vulnName := htmlquery.InnerText(htmlquery.FindOne(node, "//td//span"))
|
||
vulnName = strings.Replace(vulnName, "\r", "", -1)
|
||
vulnName = strings.Replace(vulnName, "\n", "", -1)
|
||
vulnName = strings.Replace(vulnName, " ", "", -1)
|
||
solutionVulnInfo.VulnInfos = vulnName
|
||
//println(vulnName)
|
||
//漏洞等级
|
||
spanClass := htmlquery.FindOne(node, "//span")
|
||
className := htmlquery.SelectAttr(spanClass, "class")
|
||
if className != "" {
|
||
className = strings.Split(className, "_")[2]
|
||
solutionVulnInfo.RiskLevel = GetChineseRiskLevel(className)
|
||
//println(solutionVulnInfo.RiskLevel)
|
||
}
|
||
count += 1
|
||
}
|
||
|
||
trsolutionClass := htmlquery.SelectAttr(node, "class")
|
||
if trsolutionClass == "solution" || trsolutionClass == "solution hide" {
|
||
trsolutionTable := htmlquery.FindOne(node, "//table")
|
||
GetSolutionInfo(trsolutionTable, &solutionVulnInfo)
|
||
count += 1
|
||
}
|
||
if count == 2 {
|
||
count = 0
|
||
solutionVulninfos = append(solutionVulninfos, solutionVulnInfo)
|
||
solutionVulnInfo = HtmlVulnInfo{}
|
||
}
|
||
}
|
||
return
|
||
}
|
||
|
||
func GetChineseRiskLevel(level string) (chineseLevel string) {
|
||
if level == "low" {
|
||
return "低"
|
||
}
|
||
if level == "middle" {
|
||
return "中"
|
||
}
|
||
if level == "high" {
|
||
return "高"
|
||
}
|
||
return "未定级"
|
||
}
|
||
|
||
func GetSolutionInfo(htmlTable *html.Node, solutionVulnInfo *HtmlVulnInfo) {
|
||
tr := htmlquery.Find(htmlTable, "//tr")
|
||
for _, line := range tr {
|
||
th := htmlquery.FindOne(line, "//th")
|
||
|
||
if htmlquery.InnerText(th) == "详细描述" {
|
||
td := htmlquery.FindOne(line, "//td")
|
||
text := htmlquery.InnerText(td)
|
||
text = strings.Replace(text, "\r", "", -1)
|
||
text = strings.Replace(text, "\n", "", -1)
|
||
text = strings.Replace(text, " ", "", -1)
|
||
solutionVulnInfo.Details = text
|
||
}
|
||
|
||
if htmlquery.InnerText(th) == "解决办法" {
|
||
td := htmlquery.FindOne(line, "//td")
|
||
text := htmlquery.InnerText(td)
|
||
text = strings.Replace(text, "\r", "", -1)
|
||
text = strings.Replace(text, "\n", "", -1)
|
||
text = strings.Replace(text, " ", "", -1)
|
||
solutionVulnInfo.Solution = text
|
||
}
|
||
if htmlquery.InnerText(th) == "CVE编号" {
|
||
td := htmlquery.FindOne(line, "//td")
|
||
text := htmlquery.InnerText(td)
|
||
text = strings.Replace(text, "\r", "", -1)
|
||
text = strings.Replace(text, "\n", "", -1)
|
||
text = strings.Replace(text, " ", "", -1)
|
||
solutionVulnInfo.CVENumber = text
|
||
}
|
||
}
|
||
if solutionVulnInfo.CVENumber == "" {
|
||
solutionVulnInfo.CVENumber = "无cve编号"
|
||
}
|
||
}
|
||
|
||
func (RsasScanner RsasScanner) GenerateXlsx(output string) {
|
||
filename := output + ".xlsx"
|
||
|
||
line := len(RsasScanner.AllVulnInfos)
|
||
bar := progressbar.Default(int64(line))
|
||
excel := excelize.NewFile()
|
||
excel.NewSheet("主机漏洞清单")
|
||
excel.SetSheetRow("主机漏洞清单", "A1", &[]string{"序号", "漏洞名称", "风险等级", "漏洞描述", "整改建议", "IP地址", "端口", "协议", "服务", "漏洞CVE编号", "版本"})
|
||
|
||
for i, infos := range RsasScanner.AllVulnInfos {
|
||
bar.Add(1)
|
||
axis := fmt.Sprintf("A%d", i+2)
|
||
err := excel.SetSheetRow("主机漏洞清单", axis, &[]interface{}{
|
||
i + 1,
|
||
infos.VulnInfos,
|
||
infos.RiskLevel,
|
||
infos.Details,
|
||
infos.Solution,
|
||
infos.IpAddress,
|
||
infos.Port,
|
||
infos.Protocol,
|
||
infos.Service,
|
||
infos.CVENumber,
|
||
infos.ServiceDetail,
|
||
})
|
||
if err != nil {
|
||
println(err)
|
||
}
|
||
}
|
||
|
||
excel.DeleteSheet("Sheet1")
|
||
|
||
err := excel.SaveAs(filename)
|
||
if err != nil {
|
||
println(err.Error())
|
||
} else {
|
||
println("保存为：" + filename + ".xlsx")
|
||
}
|
||
}
|
||
|
||
//
|
||
////检查是否有漏报情况
|
||
//func CheckVulnHasAssetInfo() {}
|
||
//
|
||
////根据基线规则匹配是否排除漏洞 true 为满足基线
|
||
//func JudgeWithBaseLine(vulnWithAsset VulnInfoWithAssetInfo) (bool, string) {
|
||
//
|
||
// if JudgeNginx(vulnWithAsset) {
|
||
// return true, "nginx版本为 " + vulnWithAsset.HtmlVulnInfo.ServiceDetail + " ,符合基线要求,暂不处理"
|
||
// }
|
||
// if JudgeTomcat(vulnWithAsset) {
|
||
// return true, "tomcat版本为 " + vulnWithAsset.HtmlVulnInfo.ServiceDetail + " ,符合基线要求,暂不处理"
|
||
// }
|
||
// if JudgeSql(vulnWithAsset) {
|
||
// return true, vulnWithAsset.HtmlVulnInfo.VulnInfos + " 为数据库漏洞,暂不处理"
|
||
// }
|
||
// if JudgeRedis(vulnWithAsset) {
|
||
// return true, "redis版本为 " + vulnWithAsset.HtmlVulnInfo.ServiceDetail + " ,符合基线要求,暂不处理"
|
||
// }
|
||
// if JudgeRabbitMQ(vulnWithAsset) {
|
||
// return true, "RabbitMQ版本为 " + vulnWithAsset.HtmlVulnInfo.ServiceDetail + " ,符合基线要求,暂不处理"
|
||
// }
|
||
// if JudgeOpenSSL(vulnWithAsset) {
|
||
// return true, vulnWithAsset.HtmlVulnInfo.VulnInfos + " 为openssl漏洞,暂不处理"
|
||
// }
|
||
//
|
||
|
||
// if JudgeTls(vulnWithAsset) {
|
||
// return true, vulnWithAsset.HtmlVulnInfo.VulnInfos + " 为ssl/tls漏洞,暂不处理"
|
||
// }
|
||
// return false, ""
|
||
//}
|
||
//
|
||
////检查ng基线 true为符合基线
|
||
//func JudgeNginx(vulnWithAsset VulnInfoWithAssetInfo) bool {
|
||
// vulnBanner := strings.ToLower(vulnWithAsset.HtmlVulnInfo.ServiceDetail)
|
||
// if strings.Contains(vulnBanner, "nginx/") {
|
||
// ngBanner := strings.Replace(vulnBanner, "nginx/", "", 1)
|
||
// ngbaseInt, err := strconv.Atoi(strings.Replace(nginxVersion, ".", "", -1))
|
||
// if err != nil {
|
||
// println("nginx基线常量有问题: " + nginxVersion)
|
||
// return false
|
||
// }
|
||
// ngBannerInt, err := strconv.Atoi(strings.Replace(ngBanner, ".", "", -1))
|
||
// if err != nil {
|
||
// println("nginx版本获取有问题！漏洞名称:" + vulnWithAsset.HtmlVulnInfo.VulnInfos + " ip: " + vulnWithAsset.HtmlVulnInfo.IpAddress + "ng信息: " + vulnWithAsset.HtmlVulnInfo.ServiceDetail)
|
||
// return false
|
||
// }
|
||
// ngBannerIntPrefix, err := strconv.Atoi(strings.Split(ngBanner, ".")[0] + strings.Split(ngBanner, ".")[1])
|
||
// ngBaseIntPrefix, err := strconv.Atoi(strings.Split(nginxVersion, ".")[0] + strings.Split(nginxVersion, ".")[1])
|
||
// if ngBannerInt >= ngbaseInt && ngBannerIntPrefix >= ngBaseIntPrefix {
|
||
// return true
|
||
// }
|
||
// }
|
||
//
|
||
// return false
|
||
//}
|
||
//
|
||
//func JudgeTomcat(vulnWithAsset VulnInfoWithAssetInfo) bool {
|
||
// vulnBanner := strings.ToLower(vulnWithAsset.HtmlVulnInfo.ServiceDetail)
|
||
// if strings.Contains(vulnBanner, "tomcat/") {
|
||
// tomcatBanner := strings.Replace(vulnBanner, "tomcat/", "", 1)
|
||
// tomcatBanner = strings.Replace(tomcatBanner, ".tar", "", 1)
|
||
// tomcatBanner = strings.Replace(tomcatBanner, " ", "", -1)
|
||
// tomcatBaseInt, err := strconv.Atoi(strings.Replace(tomcatVersion, ".", "", -1))
|
||
// if err != nil {
|
||
// println("tomcat版本常量有问题: " + tomcatVersion)
|
||
// return false
|
||
// }
|
||
// tomcatBannerInt, err := strconv.Atoi(strings.Replace(tomcatBanner, ".", "", -1))
|
||
// if err != nil {
|
||
// println("tomcat版本获取有问题！漏洞名称:" + vulnWithAsset.HtmlVulnInfo.VulnInfos + " ip: " + vulnWithAsset.HtmlVulnInfo.IpAddress + "ng信息: " + vulnWithAsset.HtmlVulnInfo.ServiceDetail)
|
||
// return false
|
||
// }
|
||
// tomcatBannerIntPrefix, err := strconv.Atoi(strings.Split(tomcatBanner, ".")[0] + strings.Split(tomcatBanner, ".")[1])
|
||
// tomcatBaseIntPrefix, err := strconv.Atoi(strings.Split(tomcatVersion, ".")[0] + strings.Split(tomcatVersion, ".")[1])
|
||
// if tomcatBannerInt >= tomcatBaseInt && tomcatBannerIntPrefix >= tomcatBaseIntPrefix {
|
||
// return true
|
||
// }
|
||
// }
|
||
// return false
|
||
//}
|
||
//
|
||
////数据库类型匹配到就不修复
|
||
//func JudgeSql(vulnWithAsset VulnInfoWithAssetInfo) bool {
|
||
// vulnBanner := strings.ToLower(vulnWithAsset.HtmlVulnInfo.ServiceDetail)
|
||
// if strings.Contains(vulnBanner, "mysql/") {
|
||
// return true
|
||
// }
|
||
// if strings.Contains(vulnBanner, "mariadb/") {
|
||
// return true
|
||
// }
|
||
// if strings.Contains(vulnBanner, "mongodb/") {
|
||
// return true
|
||
// }
|
||
//
|
||
// return false
|
||
//}
|
||
//
|
||
//func JudgeRedis(vulnWithAsset VulnInfoWithAssetInfo) bool {
|
||
// vulnBanner := strings.ToLower(vulnWithAsset.HtmlVulnInfo.ServiceDetail)
|
||
// if strings.Contains(vulnBanner, "redis/") {
|
||
// redisBanner := strings.Replace(vulnBanner, "redis/", "", 1)
|
||
// redisBaseInt, err := strconv.Atoi(strings.Replace(redisVersion, ".", "", -1))
|
||
// if err != nil {
|
||
// println("redis版本常量有问题: " + redisVersion)
|
||
// return false
|
||
// }
|
||
// redisBannerInt, err := strconv.Atoi(strings.Replace(redisBanner, ".", "", -1))
|
||
// if err != nil {
|
||
// println("redis版本获取有问题！漏洞名称:" + vulnWithAsset.HtmlVulnInfo.VulnInfos + " ip: " + vulnWithAsset.HtmlVulnInfo.IpAddress + "ng信息: " + vulnWithAsset.HtmlVulnInfo.ServiceDetail)
|
||
// return false
|
||
// }
|
||
// redisBannerIntPrefix, err := strconv.Atoi(strings.Split(redisBanner, ".")[0] + strings.Split(redisBanner, ".")[1])
|
||
// redisBaseIntPrefix, err := strconv.Atoi(strings.Split(redisVersion, ".")[0] + strings.Split(redisVersion, ".")[1])
|
||
// if redisBannerInt >= redisBaseInt && redisBannerIntPrefix >= redisBaseIntPrefix {
|
||
// return true
|
||
// }
|
||
// }
|
||
// return false
|
||
//
|
||
//}
|
||
//
|
||
//func JudgeRabbitMQ(vulnWithAsset VulnInfoWithAssetInfo) bool {
|
||
// vulnBanner := strings.ToLower(vulnWithAsset.HtmlVulnInfo.ServiceDetail)
|
||
// if strings.Contains(vulnBanner, "rabbitmq/") {
|
||
// rabbitmqBanner := strings.Replace(vulnBanner, "rabbitmq/", "", 1)
|
||
// rabbitmqBaseInt, err := strconv.Atoi(strings.Replace(RabbitMQ, ".", "", -1))
|
||
// if err != nil {
|
||
// println("RabbitMQ版本常量有问题: " + RabbitMQ)
|
||
// return false
|
||
// }
|
||
// rabbitmqBannerInt, err := strconv.Atoi(strings.Replace(rabbitmqBanner, ".", "", -1))
|
||
// if err != nil {
|
||
// println("RabbitMQ版本获取有问题！漏洞名称:" + vulnWithAsset.HtmlVulnInfo.VulnInfos + " ip: " + vulnWithAsset.HtmlVulnInfo.IpAddress + "ng信息: " + vulnWithAsset.HtmlVulnInfo.ServiceDetail)
|
||
// return false
|
||
// }
|
||
// rabbitmqBannerIntPrefix, err := strconv.Atoi(strings.Split(rabbitmqBanner, ".")[0] + strings.Split(rabbitmqBanner, ".")[1])
|
||
// rabbitmqBaseIntPrefix, err := strconv.Atoi(strings.Split(RabbitMQ, ".")[0] + strings.Split(RabbitMQ, ".")[1])
|
||
// if rabbitmqBannerInt >= rabbitmqBaseInt && rabbitmqBannerIntPrefix >= rabbitmqBaseIntPrefix {
|
||
// return true
|
||
// }
|
||
// }
|
||
// return false
|
||
//
|
||
//}
|
||
//
|
||
//func JudgeOpenSSL(vulnWithAsset VulnInfoWithAssetInfo) bool {
|
||
// vulnBanner := strings.ToLower(vulnWithAsset.HtmlVulnInfo.ServiceDetail)
|
||
// if strings.Contains(vulnBanner, "openssl/") && strings.Contains(strings.ToLower(vulnWithAsset.HtmlVulnInfo.VulnInfos), "openssl") {
|
||
// return true
|
||
// }
|
||
// return false
|
||
//}
|
||
//
|
||
//func JudgeTls(vulnWithAsset VulnInfoWithAssetInfo) bool {
|
||
// vulnName := strings.ToLower(vulnWithAsset.HtmlVulnInfo.VulnInfos)
|
||
// if strings.Contains(vulnName, "ssl/tls") || strings.Contains(vulnName, "tlsclient") {
|
||
// return true
|
||
// }
|
||
// return false
|
||
//}
|