添加参数ParseSSl，控制默认不深度分析SSL中的DNS信息，默认不对SSL中dns进行扫描

GhostTroops · Jun 23, 2022 · ee171e2 · ee171e2
1 parent 1766d8a
commit ee171e2
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 8 deletions.
diff --git a/config/config.json b/config/config.json
@@ -48,6 +48,7 @@
   "HydraUser": "",
   "HydraPass": "",
   "UrlPrecise": true,
+  "ParseSSl": false,
   "EnableSubfinder": false,
   "naabu_dns": {},
   "naabu": {"TopPorts": "1000","ScanAllIPS":true},

diff --git a/pkg/naabu/v2/pkg/runner/targets.go b/pkg/naabu/v2/pkg/runner/targets.go
@@ -98,16 +98,20 @@ func (r *Runner) PreProcessTargets() error {
 		func(target string) {
 			defer wg.Done()
 			// 处理ssl 数字证书中包含的域名信息，深度挖掘漏洞
-			aH, err := pkg.DoDns(target)
-			if nil == err && 0 < len(aH) {
-				for _, x := range aH {
-					gologger.Debug().Msg("add " + x)
-					if err := r.AddTarget(x); err != nil {
-						gologger.Warning().Msgf("%s\n", err)
+			if "true" == pkg.GetVal("ParseSSl") {
+				aH, err := pkg.DoDns(target)
+				if nil == err && 0 < len(aH) {
+					for _, x := range aH {
+						gologger.Debug().Msg("add " + x)
+						if err := r.AddTarget(x); err != nil {
+							gologger.Warning().Msgf("%s\n", err)
+						}
+						r.DoDns(x)
 					}
-					r.DoDns(x)
+					return
 				}
-			} else if err := r.AddTarget(target); err != nil {
+			}
+			if err := r.AddTarget(target); err != nil {
 				gologger.Warning().Msgf("%s\n", err)
 			}
 		}(s.Text())