ip段的处理

Author: SummerSec

cmd/commons/attack/attack.go

@@ -49,7 +49,6 @@ func attack(url string, pocs map[string]interface{}, hashmap map[string]interfac
 		log.Debugf("[*] 分割字符串 %s", v)
 		ps = append(ps, v)
 	}
-
 	// 如果没有选定字符串 则默认所有pocs
 	if len(ps) == 0 {
 		log.Debugln("[*] attack all pocs")

cmd/commons/core/runner.go

@@ -39,7 +39,7 @@ func (r *Runner) Run() {
 	} else if r.options.File != "" {
 		urls, _ = utils.ReadFile(r.options.File)
 	} else if r.options.IP != "" {
-		urls = append(urls, r.options.IP)
+		urls = utils.GetIPToUrlsLinks(r.options.IP, urls)
 	} else {
 		log.Error("No file or url or ips specified")
 		return
@@ -81,7 +81,12 @@ func Start(u string, hashmap map[string]interface{}, i int, c chan int) {
 		log.Errorln(err)
 		return
 	}
-	target := r.Scheme + "://" + r.Host + r.Path
+	var target string
+	if r.Path == "" {
+		target = r.Scheme + "://" + r.Host + "/"
+	} else {
+		target = r.Scheme + "://" + r.Host + r.Path
+	}
 
 	attack.Sevice(target, hashmap)
 

cmd/commons/utils/ips.go

@@ -0,0 +1,13 @@
+package utils
+
+import "github.com/projectdiscovery/mapcidr"
+
+func GetIPToUrlsLinks(ip string, urls []string) []string {
+
+	subnets, _ := mapcidr.IPAddresses(ip)
+	for _, subnet := range subnets {
+		link := "http://" + subnet + "/"
+		urls = append(urls, link)
+	}
+	return urls
+}

cmd/test/Strings.go

@@ -3,6 +3,7 @@ package main
 import (
 	"fmt"
 	"github.com/SummerSec/SpringExploit/cmd/commons/utils"
+	"strings"
 )
 
 func main() {
@@ -24,4 +25,8 @@ func main() {
 	c := fmt.Sprintf(b, "qaz", "qwe")
 	fmt.Println(c)
 
+	d := ""
+	ds := strings.Split(d, ",")
+	fmt.Println(ds)
+
 }

cmd/test/ip.go

@@ -1 +1,12 @@
 package main
+
+import "github.com/projectdiscovery/mapcidr"
+
+func main() {
+	ip := "192.168.1.2/32"
+	subnets, _ := mapcidr.IPAddresses(ip)
+
+	for _, subnet := range subnets {
+		println("http://" + subnet)
+	}
+}

cmd/test/url.go

@@ -2,13 +2,21 @@ package main
 
 import (
 	"fmt"
-	"github.com/imroc/req/v3"
+	"net/url"
+	"strings"
 )
 
 func main() {
-	u := "https://sumsec.me/ads.txt"
-	c := req.C()
-	resp, _ := c.R().EnableDump().Get(u)
-	s := resp.Dump()
-	fmt.Println("--->" + s)
+	u := "https://sumsec.me/"
+	//c := req.C()
+	//resp, _ := c.R().EnableDump().Get(u)
+	//s := resp.Dump()
+	//fmt.Println("--->" + s)
+
+	r, _ := url.Parse(u)
+	fmt.Println(r.Scheme + "://" + r.Host + r.Path)
+	d := ""
+	ds := strings.Split(d, ",")
+	fmt.Println(ds)
+
 }

go.mod

@@ -1,12 +1,21 @@
 module github.com/SummerSec/SpringExploit
 
-go 1.13
+go 1.17
 
 require (
 	github.com/corpix/uarand v0.1.1
 	github.com/fatih/structs v1.1.0
-	github.com/imroc/req/v3 v3.10.0
+	github.com/imroc/req/v3 v3.11.0
+	github.com/projectdiscovery/mapcidr v0.0.9
 	github.com/sirupsen/logrus v1.8.1
 	golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c // indirect
 
 )
+
+require (
+	github.com/hashicorp/errwrap v1.0.0 // indirect
+	github.com/hashicorp/go-multierror v1.1.1 // indirect
+	github.com/projectdiscovery/blackrock v0.0.0-20210415162320-b38689ae3a2e // indirect
+	golang.org/x/net v0.0.0-20220111093109-d55c255bac03 // indirect
+	golang.org/x/text v0.3.7 // indirect
+)