Skip to content
KitploitKITPLOIT
๋„๊ตฌ๋ธ”๋กœ๊ทธ
์ œ์ถœ
๋„๊ตฌ๋ธ”๋กœ๊ทธ
์ œ์ถœ

ํ•ดํ‚น, ์นจํˆฌ ํ…Œ์ŠคํŠธ ๋ฐ ์‚ฌ์ด๋ฒ„ ๋ณด์•ˆ ๋„๊ตฌ๋ฅผ ๋‹น์‹ ์˜ ๋ณด์•ˆ ๋ฌด๊ธฐ๊ณ ์—!

Kitploit์€ ํ•ดํ‚น, ์‚ฌ์ด๋ฒ„ ๋ณด์•ˆ ๋ฐ ์นจํˆฌ ํ…Œ์ŠคํŠธ ๋„๊ตฌ ๋””๋ ‰ํ† ๋ฆฌ์ž…๋‹ˆ๋‹ค. ์ตœ์‹  ํ”„๋กœ์ ํŠธ ์—…๋ฐ์ดํŠธ๋ฅผ ๋ฐœ๊ฒฌํ•˜์—ฌ ์ทจ์•ฝ์ ์„ ์ฐพ๊ณ , ์‹œ์Šคํ…œ์„ ๋ถ„์„ํ•˜๊ณ , ํ…Œ์ŠคํŠธ๋ฅผ ์ž๋™ํ™”ํ•˜๊ณ , ๋ณด์•ˆ์„ ๊ฐ•ํ™”ํ•˜์„ธ์š”.

ยทยทํ”ผ๋“œยท๋ฌธ์˜ยท๊ฐœ์ธ์ •๋ณดยทยฉ 2026 Kitploit

๋„๊ตฌ ๋””๋ ‰ํ† ๋ฆฌ

์นดํ…Œ๊ณ ๋ฆฌ

๋ชจ๋“  ์นดํ…Œ๊ณ ๋ฆฌ ๋ณด๊ธฐ
Loading categories
๋„๊ตฌ/GitHubGitHub/sensepost/gowitness
ReconnaissanceInformation GatheringWeb SecurityCrawlerCrawler #11์œ„Information Gathering #20์œ„Reconnaissance #19์œ„
GitHubsensepost/gowitness

gowitness

๐Ÿ” gowitness - golang, Chrome Headless๋ฅผ ์‚ฌ์šฉํ•œ ์›น ์Šคํฌ๋ฆฐ์ƒท ์œ ํ‹ธ๋ฆฌํ‹ฐ

์ €์žฅ์†Œ ๋ณด๊ธฐ
4.5k443218์‹œ๊ฐ„ 7๋ถ„ ์ „Kitploit ๊ฒ€ํ†  ์™„๋ฃŒ

์ธ๊ธฐ

๋ชจ๋‘ ๋ณด๊ธฐ โ†’

์ปค๋ฎค๋‹ˆํ‹ฐ์—์„œ ๊ฐ€์žฅ ๋งŽ์ด ์‚ฌ์šฉ๋˜๋Š” ๋„๊ตฌ๋ฅผ ์ฐพ์•„๋ณด์„ธ์š”.

๋ชจ๋“  ๋„๊ตฌ ํƒ์ƒ‰

๋„๊ตฌ ์ปฌ๋ ‰์…˜์„ ๋‘˜๋Ÿฌ๋ณด์„ธ์š”

๋ชจ๋“  ๋„๊ตฌ ๋ณด๊ธฐ โ†’
๊ณต์œ 


gowitness

Chrome Headless๋ฅผ ์‚ฌ์šฉํ•˜๋Š” Golang ์›น ์Šคํฌ๋ฆฐ์ƒท ์œ ํ‹ธ๋ฆฌํ‹ฐ.

@leonjza Go Report Card Docker build & Push


์†Œ๊ฐœ

gowitness๋Š” Golang์œผ๋กœ ์ž‘์„ฑ๋œ ์›น์‚ฌ์ดํŠธ ์Šคํฌ๋ฆฐ์ƒท ์œ ํ‹ธ๋ฆฌํ‹ฐ๋กœ, Chrome Headless๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ๋ช…๋ น์ค„์—์„œ ์›น ์ธํ„ฐํŽ˜์ด์Šค์˜ ์Šคํฌ๋ฆฐ์ƒท์„ ์ƒ์„ฑํ•˜๊ณ , ๊ฒฐ๊ณผ๋ฅผ ์ฒ˜๋ฆฌํ•  ์ˆ˜ ์žˆ๋Š” ํŽธ๋ฆฌํ•œ ๋ณด๊ณ ์„œ ๋ทฐ์–ด๋ฅผ ์ œ๊ณตํ•ฉ๋‹ˆ๋‹ค. Linux์™€ macOS๊ฐ€ ์ง€์›๋˜๋ฉฐ, Windows๋„ ๋Œ€๋ถ€๋ถ„ ์ž‘๋™ํ•ฉ๋‹ˆ๋‹ค.

๊ธฐ๋Šฅ

gowitness์˜ ์ฃผ์š” ๋ชฉํ‘œ๋Š” ์›น์‚ฌ์ดํŠธ ์Šคํฌ๋ฆฐ์ƒท์„ (๊ทธ๋ฆฌ๊ณ  ์ž˜ ์ฐ๋Š” ๊ฒƒ!) ์ฐ๋Š” ๋™์‹œ์—, ๊ทธ ๊ณผ์ •์—์„œ ์ˆ˜์ง‘ํ•œ ๋ชจ๋“  ์ •๋ณด๋ฅผ ์„ ํƒ์ ์œผ๋กœ ์ €์žฅํ•˜๋Š” ๊ฒƒ์ž…๋‹ˆ๋‹ค. ์ฃผ์š” ๊ธฐ๋Šฅ ๋ชฉ๋ก์€ ๋‹ค์Œ๊ณผ ๊ฐ™์Šต๋‹ˆ๋‹ค:

  • ์›น์‚ฌ์ดํŠธ ์Šคํฌ๋ฆฐ์ƒท ์ดฌ์˜ (๋‹น์—ฐํ•˜์ง€๋งŒ ๋น ๋ฅด๊ณ  ์ •ํ™•ํ•˜๊ฒŒ!)
  • URL ๋ชฉ๋ก, CIDR, Nmap ๊ฒฐ๊ณผ, Nessus ๊ฒฐ๊ณผ ๋“ฑ์„ ์Šค์บ”
  • ๋ฐ์ดํ„ฐ ์บก์ฒ˜ ๋ฐ ์ €์žฅ (์š”์ฒญ ๋กœ๊ทธ, ์ฝ˜์†” ๋กœ๊ทธ, ํ—ค๋”, ์ฟ ํ‚ค ๋“ฑ)
  • ๋‹ค์–‘ํ•œ ํ˜•์‹์œผ๋กœ ๋ฐ์ดํ„ฐ ์ €์žฅ (sqlite ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค, jsonlines, csv ๋“ฑ)
  • (SQLite์— ๋ฐ์ดํ„ฐ๋ฅผ ์ €์žฅํ•œ ๊ฒฝ์šฐ) ์™„์ „ํ•œ ๊ธฐ๋Šฅ์˜ API๋ฅผ ํฌํ•จํ•œ ๋ฉ‹์ง„ ์›น ๊ธฐ๋ฐ˜ ๊ฒฐ๊ณผ ๋ทฐ์–ด!
  • ๊ทธ๋ฆฌ๊ณ  ํ›จ์”ฌ ๋” ๋งŽ์ด!

๋น ๋ฅธ ์‹œ์ž‘

gowitness๋ฅผ ์„ค์น˜ํ•˜๋Š” ๋ช‡ ๊ฐ€์ง€ ๋ฐฉ๋ฒ•์ด ์žˆ์Šต๋‹ˆ๋‹ค. ๊ฐ€์žฅ ๊ฐ„๋‹จํ•œ ๋ฐฉ๋ฒ•์€ ($GOBIN ๊ฒฝ๋กœ๊ฐ€ ์…ธ $PATH์— ์žˆ๋‹ค๊ณ  ๊ฐ€์ •) go install์„ ์‚ฌ์šฉํ•˜๋Š” ๊ฒƒ์ž…๋‹ˆ๋‹ค:

root@kitploit:~
go install github.com/sensepost/gowitness@latest

๋˜๋Š” ํ”Œ๋žซํผ๋ณ„ ๋ฆด๋ฆฌ์Šค ๋ฐ”์ด๋„ˆ๋ฆฌ๋ฅผ ๋‹ค์šด๋กœ๋“œํ•˜๊ฑฐ๋‚˜ ์†Œ์Šค์—์„œ ์ปดํŒŒ์ผํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค. ๊ทธ๋Ÿฐ ๋‹ค์Œ, ์ฒซ ๋ฒˆ์งธ ๋Œ€์ƒ์„ ์Šค์บ”ํ•˜์—ฌ ๊ฒฐ๊ณผ๋ฅผ SQLite ๋ฐ์ดํ„ฐ๋ฒ ์ด์Šค์— ์ €์žฅํ•˜๊ณ  ์Šคํฌ๋ฆฐ์ƒท์„ ./screenshots ๋””๋ ‰ํ† ๋ฆฌ์— ์ €์žฅํ•˜๋ ค๋ฉด ๋‹ค์Œ ๋ช…๋ น์„ ์‚ฌ์šฉํ•˜์„ธ์š”:

root@kitploit:~
gowitness scan single --url "https://sensepost.com" --write-db

gowitness์—๋Š” ์ •๋ง ๋งŽ์€ ํ”Œ๋ž˜๊ทธ์™€ ์Šค์บ” ์œ ํ˜•์ด ์žˆ์Šต๋‹ˆ๋‹ค. ์•„๋ฌด ๊ณณ์—๋‚˜ -h๋ฅผ ์ถ”๊ฐ€ํ•˜๋ฉด ๋ชจ๋“  ์ •๋ณด๋ฅผ ์ฝ์„ ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค!

๋ฌธ์„œ

๊ณ ๊ธ‰ ์„ค์น˜ ์ •๋ณด ๋ฐ ๊ธฐํƒ€ ๋ฌธ์„œ๋Š” ์œ„ํ‚ค ์—ฌ๊ธฐ๋ฅผ ์ฐธ์กฐํ•˜์„ธ์š”.

์Šคํฌ๋ฆฐ์ƒท

๊ฐค๋Ÿฌ๋ฆฌ

์ƒ์„ธ

ํ„ฐ๋ฏธ๋„

ํฌ๋ ˆ๋”ง

gowitness๋Š” ๋‹ค์Œ์˜ ๋ฉ‹์ง„ ํ”„๋กœ์ ํŠธ๋“ค ์—†์ด๋Š” ๋ถˆ๊ฐ€๋Šฅํ–ˆ์„ ๊ฒƒ์ž…๋‹ˆ๋‹ค: chi, chromedp, go-rod, cobra, gorm, glamour, go-nmap, wappalyzergo, goimagehash.

๋ผ์ด์„ ์Šค

gowitness๋Š” GNU General Public v3 License์— ๋”ฐ๋ผ ๋ผ์ด์„ ์Šค๊ฐ€ ๋ถ€์—ฌ๋ฉ๋‹ˆ๋‹ค. ์ด ๋ผ์ด์„ ์Šค ๋ฒ”์œ„๋ฅผ ์ดˆ๊ณผํ•˜๋Š” ๊ถŒํ•œ์€ http://sensepost.com/contact/์—์„œ ํ™•์ธํ•  ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

๋„๊ตฌ ๋‹ค์šด๋กœ๋“œ