该扫描器直接运行于Python,无需Docker依赖,适用于没有Docker或更倾向不使用Docker的环境。
pip install -r requirements-standalone.txt
手动安装:
pip install requests urllib3
python standalone_scanner.py scan http://localhost/
创建targets.txt:
http://localhost/
http://localhost:8080
http://localhost:3000
执行批量扫描:
python standalone_scanner.py batch --file targets.txt
python standalone_scanner.py batch --file targets.txt --output results.json
python standalone_scanner.py interactive
🔍 Scanning: http://localhost/
⏰ Time: 2025-01-27 15:30:45
------------------------------------------------------------
✅ VULNERABLE - Database credentials found!
📊 Database Info:
Host: localhost
Port: 3306
Database: root
Username: root
Password: secret123
🔗 Connection String: root:secret123@localhost:3306/root
✅ VULNERABLE - App configuration found!
📊 App Config:
App Key: base64:your_secret_key_here
Cipher: AES-256-CBC
Debug: false
Environment: production
App Name: Pterodactyl
App URL: http://localhost
Timezone: UTC
Locale: en
🔔 SECURITY WARNING: APP_KEY exposed!
This key is used for encryption/decryption
Can be used to decrypt sensitive data
🔍 Scanning: http://localhost/
⏰ Time: 2025-01-27 15:30:45
------------------------------------------------------------
❌ NOT VULNERABLE (Status: 404)
pip install requests
SSL警告已自动抑制,无需额外配置。
默认超时为10秒。如需修改,请在源代码中调整timeout参数。
# Install dependencies
pip install requests urllib3
# Perform test scan
python standalone_scanner.py scan http://localhost/
# Execute batch analysis
python standalone_scanner.py batch --file targets.txt --output results.json
Target Input → HTTP Request → Response Analysis → Vulnerability Detection → Output Generation
本工具设计用于:
注意:在扫描任何目标系统之前,请务必获得适当授权。
| 特性 | 独立版 | 容器版 |
|---|
| 设置复杂度 | 最小 | 依赖Docker |
| 依赖项 | Python包 | Docker + Python |
| 性能 | 优化 | 相当 |
| 进程隔离 | 无 | 完全隔离 |
| 部署可移植性 | 高 | 中 |