http://k8gege.org/Ladon/LadonGo.html
LadonGo一款开源内网渗透扫描器框架,使用它可轻松一键探测C段、B段、A段存活主机、指纹识别、端口扫描、密码爆破、远程执行、高危漏洞检测等。3.2版本包含24个模块功能,高危漏洞检测MS17010、SmbGhost,远程执行SshCmd、WinrmCmd,密码爆破SmbScan、SshScan、FtpScan、MysqlScan、MssqlScan、OracleScan、SqlplusScan、WinrmScan、HttpBasicScan,存活探测/信息收集/指纹识别OnlinePC、Ping、Icmp、SnmpScan,HttpBanner、HttpTitle、TcpBanner、WeblogicScan、OxidScan,端口扫描PortScan、服务探测PortScanBanner。
OS: Kali 2019 X64
IDE: 记事本Mousepad
Go: 1.13 Linux
. | . |
---|---|
OnlinePC | (Using ICMP/SNMP/Ping detect Online hosts) |
PingScan | (Using system ping to detect Online hosts) |
IcmpScan | (Using ICMP Protocol to detect Online hosts) |
SnmpScan | (Using Snmp Protocol to detect Online hosts) |
HttpBanner | (Using HTTP Protocol Scan Web Banner) |
HttpTitle | (Using HTTP protocol Scan Web titles) |
T3Scan | (Using T3 Protocol Scan Weblogic hosts) |
PortScan | (Scan hosts open ports using TCP protocol) |
TcpBanner | (Scan hosts open ports using TCP protocol) |
OxidScan | (Using dcom Protocol enumeration network interfaces) |
. | . |
---|---|
MS17010 | (Using SMB Protocol to detect MS17010 hosts) |
SmbGhost | (Using SMB Protocol to detect SmbGhost hosts) |
. | . |
---|---|
SmbScan | (Using SMB Protocol to Brute-For 445 Port) |
SshScan | (Using SSH Protocol to Brute-For 22 Port) |
FtpScan | (Using FTP Protocol to Brute-For 21 Port) |
401Scan | (Using HTTP BasicAuth to Brute-For web Port) |
MysqlScan | (Using Mysql Protocol to Brute-For 3306 Port) |
MssqlScan | (Using Mssql Protocol to Brute-For 1433 Port) |
OracleScan | (Using Oracle Protocol to Brute-For 1521 Port) |
WinrmScan | (Using Winrm Protocol to Brute-For 5985 Port) |
SqlplusScan | (Using Oracle Sqlplus Brute-For 1521 Port) |
. | . |
---|---|
SshCmd | (SSH Remote command execution Default 22 Port) |
WinrmCmd | (Winrm Remote command execution Default 5985 Port) |
. | . |
---|---|
PhpStudyDoor | (PhpStudy 2016 & 2018 BackDoor Exploit) |
go get github.com/k8gege/LadonGo
go build Ladon.go
Ladon FuncList
Ladon Detection
Ladon VulDetection
adon BruteFor
Ladon RemoteExec
Ladon Exploit
Ladon Example
Ladon IP/机器名/CIDR/URL/txt 扫描模块
IP Ladon 192.168.1.8 MS17010
C段 Ladon 192.168.1.8/24 MS17010
C段 Ladon 192.168.1/c MS17010
B段 Ladon 192.168/b MS17010
A段 Ladon 192/a MS17010
C段(1-5) Ladon 192.168.1-192.168.5 MS17010
URL Ladon http://192.168.1.8:8080 BasicAuthScan
IP列表 Ladon ip.txt MS17010
URL列表 Ladon url.txt HttpBanner
Ping扫描C段存活主机(任意权限)
Ladon 192.168.1.8/24 PingScan
ICMP扫描C段存活主机(管理员权限)
Ladon 192.168.1.8/24 IcmpScan
SNMP扫描C段存活主机、设备信息
Ladon 192.168.1.8/24 SnmpScan
SMB扫描C段永恒之蓝MS17010漏洞主机
Ladon 192.168.1.8/24 MS17010
SMB扫描C段永恒之黑SmbGhost漏洞主机
Ladon 192.168.1.8/24 SmbGhost
T3扫描C段开放WebLogic的主机
Ladon 192.168.1.8/24 T3Scan
HTTP扫描C段开放Web站点Banner
Ladon 192.168.1.8/24 BannerScan
HTTP扫描C段开放Web站点标题
Ladon 192.168.1.8/24 HttpTitle
TCP扫描C段开放端口服务信息
Ladon 192.168.1.8/24 TcpBanner
TCP扫描C段主机常见开放端口
Ladon 192.168.1.8/24 PortScan
扫描C段445端口Windows机器弱口令
Ladon 192.168.1.8/24 SmbScan
扫描C段22端口Linux机器SSH弱口令
Ladon 192.168.1.8/24 SshScan
扫描C段21端口FTP服务器弱口令
Ladon 192.168.1.8/24 FtpScan
扫描C段3306端口Mysql服务器弱口令
Ladon 192.168.1.8/24 MysqlScan
扫描C段1521端口Oracle服务器弱口令
Ladon 192.168.1.8/24 OracleScan
扫描C段1521端口Oracle服务器弱口令
Ladon 192.168.1.8/24 SqlplusScan
扫描C段5985端口Winrm服务器弱口令
Ladon 192.168.1.8/24 WinrmScan
Ladon SshCmd host port user pass cmd
Ladon WinrmCmd host port user pass cmd
. | . | . |
---|---|---|
ICMP | 3毫秒 | 1/20秒 |
WebTitle | 10毫秒 | 1/6秒 |
T3Scan | 15毫秒 | 1/4秒 |
EthScan | 2毫秒 | 1/30秒 |
. | . | . |
---|---|---|
EthScan | 23分钟 | 1个端口 |
T3Scan | 1小时 | 4个端口 |
WebTitle | 40分钟 | 1个端口 |
MS17010 | 12分钟 | 1个端口 |
Snmp | 20分钟 | 1个端口 |
PS:扫描速度实际上和Ladon .net版速度也差不多,只是没专门记录,因为重写测试过程中顺便记录一下GO版速度
ID | OS |
---|---|
0 | WinXP |
1 | Win 2003 |
2 | Win 7 |
3 | Win 8.1 |
4 | Win 10 |
5 | Win 2008 R2 |
6 | Win 2012 R2 |
7 | Win 2019 |
8 | Kali 1.0.2 |
9 | Kali 2018 |
10 | Kali 2019 |
11 | SUSE 10 |
12 | CentOS 5.8 |
13 | CentOS 6.3 |
14 | CentOS 6.8 |
15 | Fedora 5 |
16 | RedHat 5.7 |
17 | BT5-R3 |
18 | MacOS 10.15 |
19 | Ubuntu 8 |
20 | Ubuntu 18 |
以上系统测试成功,其它系统未测,若不支持可自行编译
https://github.com/k8gege/LadonGo/releases
http://k8gege.org/Download/LadonGo.rar
历史版本: https://github.com/k8gege/Ladon/releases
7.0版本:http://k8gege.org/Download
7.5版本:K8小密圈