AUTO-EARN
AUTO-EARN copied to clipboard
一个利用OneForAll进行子域收集、Shodan API端口扫描、Xray漏洞Fuzz、Server酱的自动化漏洞扫描、即时通知提醒的漏洞挖掘辅助工具
Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.25.9 to 1.26.5. Release notes Sourced from urllib3's releases. 1.26.5 :warning: IMPORTANT: urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap Fixed...
Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.25.9 to 1.26.5. Release notes Sourced from urllib3's releases. 1.26.5 :warning: IMPORTANT: urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap Fixed...
Bumps [pygments](https://github.com/pygments/pygments) from 2.6.1 to 2.7.4. Release notes Sourced from pygments's releases. 2.7.4 Updated lexers: Apache configurations: Improve handling of malformed tags (#1656) CSS: Add support for variables (#1633, #1666)...
Bumps [jinja2](https://github.com/pallets/jinja) from 2.11.2 to 2.11.3. Release notes Sourced from jinja2's releases. 2.11.3 This contains a fix for a speed issue with the urlize filter. urlize is likely to be...
Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.6.2 to 3.7.4. Release notes Sourced from aiohttp's releases. aiohttp 3.7.3 release Features Use Brotli instead of brotlipy [#3803](https://github.com/aio-libs/aiohttp/issues/3803) <https://github.com/aio-libs/aiohttp/issues/3803>_ Made exceptions pickleable. Also changed the repr...
前面python3 autoearn,py 1-3顺着执行下来都没问题,到第四步爬虫爬取+漏洞扫描+消息通知这一步貌似爬虫爬完就没继续了(但后续看日志好像是扫了,但是server酱没推送信息) 看到文档上的这段话: 漏洞扫描时运行如下命令 python3 server.py ./tools/xray/xray_linux_amd64 webscan --listen 127.0.0.1:7777 --webhook-output http://127.0.0.1:2333/webhook 但是在autoearn.py交互式命令行下没办法输入指令和打开xray,请问是要另开一个窗口两个同时进行吗?
正在进行CDN检测 CDN检测失败,请检查输入格式
执行端口扫描报错
先执行sh start.sh后,再执行autoearn.py,shodan秘钥还是验证失败 subdomin表中有数据,TASK表为空 1 sa.baidu.com 2020_06_05_13_40_45 2 dns.baidu.com 2020_06_05_13_40_45 3 ns3.baidu.com 2020_06_05_13_40_45 4 ns4.baidu.com 2020_06_05_13_40_45 5 ns7.baidu.com 2020_06_05_13_40_45 6 ns2.baidu.com 2020_06_05_13_40_45 ..... 请输入要执行的参数ID:1-6 > 1 正在后台进行子域收集 请输入要执行的参数ID:1-6 > 2 Shodan密钥验证失败
 秘钥是我在shodan那里生成的,后来以为失效了又重新生成了一遍。在子域名收集过以后,进行端口探测的时候还是这样。 除此之外,子域名收集完以后server酱并没有通知。在配置的时候,我特意用那个server酱测试是否可以发送消息。还请大佬尽快回复一下。
wafw00f感觉优点老了,推荐whatwaf