Skip to content

在执行sudo fscan -h 192.168.1.0/24 -p all -log ALL -dns -pg时出现 #536

@MC0183

Description

@MC0183

yunyu@yunyu-X550CC:~$ sudo fscan -h 192.168.1.0/24 -p all -dns -log ALL -pg
┌──────────────────────────────────────────────┐
│ ___ _ │
│ / _ \ ___ ___ _ __ __ _ | | __ │
│ / /
/
/ |/ | '/ ` |/ __| |/ / │
│ / /
\
____
\ (__| | | (
| | (| < │
│ _
/ |/_|| _,|___||_\ │
└──────────────────────────────────────────────┘
Fscan Version: 2.0.1

[2.5s] 已选择服务扫描模式
[2.5s] 开始信息扫描
[2.5s] CIDR范围: 192.168.1.0-192.168.1.255
[2.5s] generate_ip_range_full
[2.5s] 解析CIDR 192.168.1.0/24 -> IP范围 192.168.1.0-192.168.1.255
[2.5s] 最终有效主机数量: 256
[2.5s] 开始主机扫描
[2.5s] 使用服务插件: activemq, cassandra, elasticsearch, findnet, ftp, imap, kafka, ldap, memcached, modbus, mongodb, ms17010, mssql, mysql, neo4j, netbios, oracle, pop3, postgres, rabbitmq, rdp, redis, rsync, smb, smb2, smbghost, smtp, snmp, ssh, telnet, vnc, webpoc, webtitle
[2.5s] [] 目标 192.168.1.14 存活 (ICMP)
[2.5s] [
] 目标 192.168.1.17 存活 (ICMP)
[2.5s] [] 目标 192.168.1.254 存活 (ICMP)
[2.5s] [
] 目标 192.168.1.1 存活 (ICMP)
[3.5s] [] 目标 192.168.1.19 存活 (ICMP)
[5.5s] 存活主机数量: 5
[5.5s] 有效端口数量: 65535
[5.6s] [
] 端口开放 192.168.1.14:1053
[5.6s] [] 端口开放 192.168.1.14:3390
[5.6s] [
] 端口开放 192.168.1.14:3389
[5.8s] [] 端口开放 192.168.1.14:7890
[5.9s] [
] 端口开放 192.168.1.14:9090
[7.5s] [] 端口开放 192.168.1.14:45477
[7.7s] [
] 端口开放 192.168.1.14:52789
[8.2s] [*] 端口开放 192.168.1.17:53

[5m17s] [] 端口开放 192.168.1.254:22
[5m17s] [
] 端口开放 192.168.1.254:53
[5m17s] [] 端口开放 192.168.1.254:80
[5m27s] [
] 端口开放 192.168.1.254:1900
[6m57s] [] 端口开放 192.168.1.254:20002
[10m45s] [
] 端口开放 192.168.1.1:53
[10m45s] [] 端口开放 192.168.1.1:21
[10m45s] [
] 端口开放 192.168.1.1:80
[10m46s] [] 端口开放 192.168.1.1:5080
[10m49s] [
] 端口开放 192.168.1.1:17998
[10m59s] [] 端口开放 192.168.1.19:53
[16m29s] 扫描完成, 发现 19 个开放端口
[16m29s] 存活端口数量: 19
[16m29s] 开始漏洞扫描
扫描进度: 0% [ ] (0/11) [0s:0s][16m29s] [
] 网站标题 http://192.168.1.14:7890 状态码:400 长度:0 标题:无标题
扫描进度: 0% [ ] (0/11) [0s:0s][16m29s] [] 网站标题 http://192.168.1.14:9090 状态码:200 长度:19 标题:无标题
[16m29s] [
] 网站标题 http://192.168.1.14:7890 状态码:400 长度:0 标题:无标题
panic: runtime error: slice bounds out of range [4294967288:16]

goroutine 847084 [running]:
github.com/tomatome/grdp/protocol/nla.(*ChallengeMessage).getTargetName(...)
github.com/tomatome/[email protected]/protocol/nla/ntlm.go:175
github.com/tomatome/grdp/protocol/nla.(*NTLMv2).GetAuthenticateMessage(0xc008c86e00, {0xc004d92340, 0xc8, 0xc8})
github.com/tomatome/[email protected]/protocol/nla/ntlm.go:386 +0x1258
github.com/tomatome/grdp/protocol/tpkt.(*TPKT).recvChallenge(0xc00adbbce0, {0xc00a6ce800, 0xdf, 0x400})
github.com/tomatome/[email protected]/protocol/tpkt/tpkt.go:89 +0x2c5
github.com/tomatome/grdp/protocol/tpkt.(*TPKT).StartNLA(0xc00adbbce0)
github.com/tomatome/[email protected]/protocol/tpkt/tpkt.go:74 +0x30a
github.com/tomatome/grdp/protocol/x224.(*X224).recvConnectionConfirm(0xc008c94af0, {0xc00a795a60, 0xf, 0xf})
github.com/tomatome/[email protected]/protocol/x224/x224.go:257 +0x3dc
reflect.Value.call({0xf470c0?, 0xc003b61cc0?, 0x44ea96?}, {0x10f78fa, 0x4}, {0xc008d1c360, 0x1, 0x1?})
reflect/value.go:586 +0xb07
reflect.Value.Call({0xf470c0?, 0xc003b61cc0?, 0xc008f30ea0?}, {0xc008d1c360?, 0x10f6800?, 0xc00a795a60?})
reflect/value.go:370 +0xbc
github.com/tomatome/grdp/emission.(*Emitter).callListeners.func1({0xf470c0?, 0xc003b61cc0?, 0xc00a795a46?})
github.com/tomatome/[email protected]/emission/emitter.go:226 +0x468
created by github.com/tomatome/grdp/emission.(*Emitter).callListeners
github.com/tomatome/[email protected]/emission/emitter.go:201 +0x85

Metadata

Metadata

Assignees

Labels

RDP问题RDP问题缺陷某些功能无法正常工作

Projects

Status

难搞

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions