GoEnumerator

. <(GoEnumerator completion)

# ~/.bashrc 或 ~/.profile
echo '. <(GoEnumerator completion)' >> ~/.bashrc

  yay -S postgresql 

sudo -u postgres -i
initdb --locale en_US.UTF-8 -E UTF8 -D '/var/lib/postgres/data'   # 初始化主数据库集群

  systemctl start postgresql

  createuser --interactive --pwprompt    # 所有问题都回答 no，因为你不想给将要使用此应用程序的用户授予权限
  createdb GoEnumerator -U <上面创建的用户名>

  psql -d GoEnumerator
  \c #GoEnumerator  # 连接到特定数据库
  \du #列出所有用户及其权限级别
  \dt #列出数据库中所有表的信息

  rm ~/.psql_history

[blackarch files ]$ GoEnumerator project addOp hackthebox
Using config file: /home/rek2/.GoEnumerator.yaml
hackthebox

[blackarch files ]$ GoEnumerator project addHost -i 10.10.10.105 -p hackthebox
Using config file: /home/rek2/.GoEnumerator.yaml
hackthebox 10.10.10.105
[ blackarch files ]$ GoEnumerator project showHosts -p hackthebox
Using config file: /home/rek2/.GoEnumerator.yaml
--- Operation hackthebox ---
Hosts:
- 10.10.10.105

[blackarch ~ ]$ GoEnumerator project -h
Adds, Modify or Remove operations
Usage:
  GoEnumerator project [flags]
  GoEnumerator project [command]
Available Commands:
  addDomain    Add hostname or domain to a project IP/host
  addHost      Add new IP to a project or operation
  addOp        Add new operations/project name to database
  removeDomain Remove a domain from the list of domain names
  removeHost   Remove a HOST IP from a project or operation
  removeOp     Remove your operation or project from the database
  showDomains  Show domain names
  showHosts    Show all hosts for a project
  showOps      List all Ops and Projects
Flags:
  -h, --help   help for project
Global Flags:
      --config string   config file (default is $HOME/.GoEnumerator.yaml)
Use "GoEnumerator project [command] --help" for more information about a command.

[ blackarch ~ ]$ GoEnumerator portscan -h
Diferent types of port scan to select. For example:
Usage:
  GoEnumerator portscan [flags]
  GoEnumerator portscan [command]
Available Commands:
  getBanners  gets ports found on database and try's to get the banner of what is running
  showBanners Show saved banners for each host
  showPorts   Show ports
  tcpScan     Simple tcp port scan
Flags:
  -h, --help   help for portscan
Global Flags:
      --config string   config file (default is $HOME/.GoEnumerator.yaml)
Use "GoEnumerator portscan [command] --help" for more information about a command.

 blackarch ~ ]$ GoEnumerator portscan showBanners -p cia
Using config file: /home/rek2/.GoEnumerator.yaml
Banners for Host: 104.236.237.78
-  80,Apache/2.4.18 (Ubuntu)
-  22,SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.4
-  443,Apache/2.4.18 (Ubuntu)
Banners for Host: 165.227.62.19
-  22,SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.4
-  443,nginx/1.10.3 (Ubuntu)
Banners for Host: 10.8.0.1
-  22,SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.4

GoEnumerator exploitDB search  -f 10 Nginx
Using config file: /home/rek2/.GoEnumerator.yaml
____________________________________________________
+ ID: 32277
+ Description: Nginx 1.4.0 (Generic Linux x64) - Remote Overflow
+ Type: linux_x86-64
+ https://www.exploit-db.com/exploits/32277
____________________________________________________
+ ID: 25775
+ Description: Nginx 1.3.9 < 1.4.0 - Chuncked Encoding Stack Buffer Overflow (Metasploit)
+ Type: linux
+ https://www.exploit-db.com/exploits/25775
____________________________________________________
+ ID: 40768
+ Description: Nginx (Debian Based Distros + Gentoo) - 'logrotate' Local Privilege Escalation
+ Type: linux
+ https://www.exploit-db.com/exploits/40768
____________________________________________________
+ ID: 9901
+ Description: Nginx 0.7.0 < 0.7.61 / 0.6.0 < 0.6.38 / 0.5.0 < 0.5.37 / 0.4.0 < 0.4.14 - Denial of Service (PoC)
+ Type: linux
+ https://www.exploit-db.com/exploits/9901
Showing entries 11-20 of 14. Completed in 299.778µs

make

make darwin

make windows

make install

export $PATH:$PATH:$PATH/bin