test502git / awvs14-scan Goto Github PK

View Code? Open in Web Editor NEW

1.0K 1.0K 202.0 501 KB

针对 Acunetix AWVS扫描器开发的批量扫描脚本，支持log4j漏洞、SpringShell、SQL注入、XSS、弱口令等专项，支持联动xray、burp、w13scan等被动批量

Python 100.00%

awvs14-scan's People

Contributors

Stargazers

Watchers

Forkers

gdbingo lidahan underwood12 test2504 luckxiao520 chillimeat wooluo blackstarkk devsecops-src kenanat poyhub freefv netsecli ruanzy506 d0gman fadinglr aleffine dskho geekmc dennyx kangd1w2 p0p0p0 13957166977 haoirui 1f3lse hcjcn thinkergod candy-kk cream-sec lanjianchun dar3n1y hhhhelix sobinge liufuqin0922 bravery9 paladin1412 n1f2c3 sec-nux ggg4566 cuizhiwei1995 lazylee007 zmylml getc2 ycc1746582381 kzaopa fiveaourthe gkfnf kaka77 espboxx pwnt2pwn luwikes huangzccn dk47os3r worwick kenuosec rdpmind ximiluliyi xiju2003 willie-lin fengzihk afwu zhuanyedecainiao qianniaoge harris2015 lily110 z0edff0x3d invoke888 rustxj yshdxm polinload zzhsec mrawb weicheng19 lsr00ter jeromeyoung wgetnz chenjianlong01 secjia rebootorz fsocietyon ggliks klinklinklin chentanghang nanaao kenuoseclab huayanqiaq huifeidebaba junanc ztohacker be-gay-security-team 61ue1azy sms2056 liutufang 1oa trevor3000 adwn rank0 rainbow2972 lhdbxyq minofmax

awvs14-scan's Issues

请问出现 Object of type KeyError is not JSON serializable 怎么解决？

请问出现 Object of type KeyError is not JSON serializable 怎么解决？谢谢

hi

Object of type KeyError is not JSON serializabl

It's a very good project. I wanted to point that out.

Really good project. It was the tool I was looking for for a long time.
I give you my thanks. My only request is that you add English language support so that this code can reach more people. It would be really nice if something like that happened.
Can you add english as language?

全部失败

批量导入了一批致远A8的资产，手工测试很多存在漏洞，联动AWVS全部失败。

一键删除扫描器内的所有目标无法实现

一键删除扫描器内的所有目标的功能无法实现，一直卡在那里，加入目标可以，但就是删除目标不可以

支持这个版本的AWVS吗？”24.1.240111130“

批量添加任务NewConnectionError错误

HTTPSConnectionPool(host='192.168.248.128', port=3443): Max retries exceeded with url: //api/v1/scans (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x00000167C5A70610>: Failed to establish a new connection: [WinError 10048] 通常每个套接字地址(协议/网络地址/端口)只允许使用一次。'))

出现这个错误后，任务只能添加不会开始

是否支持awvs15

增加一个url添加速度控制

AWVS SCAN Report Export

Hello,

This tool really works for me. Sometimes I have to scan 400 domains. Is there a way to get a report of them through this script? Do we have a chance to get an export in HTML or csv format?

Have a nice day!

配置代理有问题

配置了本地http代理的话，实际扫描没有走该htto代理出去

添加url扫描报错Object of type KeyError is not JSON serializable

关于爬虫被动扫描代理用户名密码认证需求

你好，公司采购了洞鉴，洞鉴的被动扫描代理必须设置代理用户名密码才能使用，所以直接使用脚本被动代理扫描无法将awvs爬虫流量转发到洞鉴，因为目前脚本没有设置用户密码认证的功能只有设置代理地址和代理端口功能入口。如果方便这个需求点希望能完善一下

批量扫描会卡住不动了

批量扫描会卡住不动了这个如何解决

调整队列

建议添加每一次任务数量, vps 大批量扫描, 会导致vps 崩溃

The docker image has been deleted.

This command: docker pull vouu/acunetix

aws + burp

Hello can you tell plz how configure burp as proxy passive(or maybe active ) scanner to recheck requests from url wich scanned by acunetix? Especially i inserted in sqli checks

Sorry for English ( i am not English native speaker too, but dont know Chinese)
Thx
Best regards

报错

输入本次要扫描的资产标签（可空）:
Object of type KeyError is not JSON serializable
https://xxxx.cn/www/app/ 添加扫描失败 'NoneType' object is not subscriptable

添加扫描任务失败

大佬可以更新下吗

目前还停留在0401的版本

能不能控制同时扫描的个数，和扫描速度，把机子cpu跑满了

速度问题

导入url的速度特别慢，不知道什么原因，别的机子是没问题，新买的一台就不行.......

脚本优化

能否控制同时下发的任务数量，控制在3个到5个之间。具体实现可参考：https://github.com/Soufaker/laoyue/blob/main/awvs_monitor.py

脚本导入url失败

Links Acunetix

Of course, I understand everything, but can I make not only the link available to Chinese residents? I can't download acunetix from that link, can you upload it to MEGA, anonfiles?

希望提供多线程功能

资产太多的话，提交有点慢

是否支持awvs v20

是否支持awvs v20版本

Custom profile

Hello! How to add scan to custom profile - 12. If i enter name of Scan profile - it not work.. Maybe neet to restart (not test yet) .
What id should i specify to awvs14-scan, or where i can found it (for example my custom scan named -sqli).
Thanks for you api wrapper!

你好！如何将扫描添加到自定义配置文件 - 12. 如果我输入扫描配置文件的名称 - 它不起作用.. 可能需要重新启动（尚未测试）。
我应该为 awvs14-scan 指定什么 ID，或者我可以在哪里找到它（例如我的自定义扫描名为 -sqli）。
感谢您的 api 包装器！