-
Notifications
You must be signed in to change notification settings - Fork 1
Expand file tree
/
Copy pathconfig.yaml
More file actions
74 lines (60 loc) · 3.03 KB
/
Copy pathconfig.yaml
File metadata and controls
74 lines (60 loc) · 3.03 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
# 服务器配置
server:
port: 8678
host: "0.0.0.0"
read_timeout: 60s
write_timeout: 60s
# 扫描配置
concurrency: 50
timeout: 30s
port_ranges: "21,22,23,25,80,81,82,83,84,85,86,87,88,89,90,91,92,98,99,110,135,139,143,162,389,443,445,465,502,587,636,800,801,808,873,880,888,889,993,995,1000,1010,1080,1081,1082,1099,1118,1433,1521,1888,2008,2020,2100,2222,2375,2379,3000,3008,3128,3306,3389,3505,5020,5432,5555,5671,5672,6080,6379,6648,6868,7000,7001,7002,7003,7004,7005,7007,7008,7070,7071,7074,7078,7080,7088,7200,7680,7687,7688,7777,7890,8000,8001,8002,8003,8004,8005,8006,8008,8009,8010,8011,8012,8016,8018,8020,8028,8030,8038,8042,8044,8046,8048,8053,8060,8069,8070,8080,8081,8082,8083,8084,8085,8086,8087,8088,8089,8090,8091,8092,8093,8094,8095,8096,8097,8098,8099,8100,8101,8108,8118,8161,8172,8180,8181,8200,8222,8244,8258,8280,8288,8300,8360,8443,8448,8484,8800,8834,8838,8848,8858,8868,8879,8880,8881,8888,8899,8983,8989,9000,9001,9002,9008,9010,9042,9043,9060,9080,9081,9082,9083,9084,9085,9086,9087,9088,9089,9090,9091,9092,9093,9094,9095,9096,9097,9098,9099,9100,9200,9443,9448,9800,9981,9986,9988,9998,9999,10000,10001,10002,10004,10008,10010,10051,10250,11211,12018,12443,14000,15671,15672,16080,18000,18001,18002,18004,18008,18080,18082,18088,18090,18098,19001,20000,20720,20880,21000,21501,21502,27017,28018,61613,61616"
max_depth: 3
# HTTP配置
http_timeout: 3s
http_user_agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
http_retry_max: 3
http_concurrent: 50
# 爆破配置
brute_force_threads: 10
brute_force_timeout: 5s
# 字典文件路径
dir_wordlist: "dict/dir/dir.txt"
user_wordlist_file: "dict/wordlists/common_usernames.txt"
pass_wordlist_file: "dict/wordlists/common_passwords.txt"
# 目录扫描配置
dir_scan_config:
concurrency: 50
timeout: 2s
max_depth: 2
valid_status_codes: [200, 301, 302, 401, 403]
enable_dir_scan: true
# 漏洞扫描配置
vuln_scan_severity: "info,low,medium,high,critical"
vuln_scan_tags: []
# 子域名配置
subdomain_wordlist: "dict/wordlists/subdomains.txt"
# 是否开启子域名扫描
enable_subdomain_scan: false
enable_subdomain_brute: false
# 白名单配置，白名单中的域名和ip才会被扫描，配置为*则代表全部允许扫描
whitelist_ips: [*]
whitelist_domains: [*]
# 子域名爆破配置
subdomain_brute_config:
concurrency: 100
timeout: 5s
retry_times: 3
wordlist_file: "dict/subdomain/subdomains.txt"
resolvers:
- "8.8.8.8:53"
- "1.1.1.1:53"
- "223.5.5.5:53"
- "119.29.29.29:53"
# 域名扫描配置
domain_scan_config:
resolve_ip: false # 是否将域名解析为IP进行扫描
scan_internal_ip: false # 是否扫描解析到内网IP的域名
scan_subdomains: false # 是否扫描二级域名的子域名
scanner:
# 跳过漏洞扫描的文件后缀，使用逗号分隔
skip_extensions: ".js,.css,.png,.jpg,.jpeg,.gif,.svg,.ico,.webp,.woff,.woff2,.ttf,.eot,.otf,.json,.xml,.txt,.md,.yaml,.yml,.toml,.lock,.lock.json,.lock.yaml,.lock.yml,.lock.toml,.pdf,.docx,.xls,.xlsx,.doc,.ppt,.pptx,.zip,.rar,.7z,.tar,.gz,.bz2"