你好 @zan8in,
对于大规模外部攻击面管理(ASM),单节点afrog可能无法覆盖全部资产。建议支持分布式扫描。
建议:增加afrog-agent模式
架构:
-
中央控制器(Controller)
-
扫描代理(Agent)
afrog agent --controller grpc://controller.example.com:50051
- 通过gRPC双向流接收
ScanJob
- 本地执行扫描
- 实时回传
VulnResult
-
通信协议(Protobuf)
message ScanJob {
string target = 1;
repeated string pocs = 2;
int32 priority = 3;
}
message VulnResult {
string target = 1;
string poc_id = 2;
bool confirmed = 3;
string proof = 4;
}
扩展能力:
- 支持1000+ agent同时工作
- 自动任务分片(按目标/按PoC)
- 断点续扫
- 结果去重
这是afrog从单机工具向企业级平台进化的关键。
[English Translation / 英文摘要]
Hi maintainers, this issue is a feature / architecture / security suggestion for 14_afrog.
The Chinese text above contains the detailed proposal with technical context and implementation ideas.
In summary: we are requesting the enhancement described above and would be happy to provide PRs or further discussion in either Chinese or English.
Thank you for the excellent work on this project!
你好 @zan8in,
对于大规模外部攻击面管理(ASM),单节点afrog可能无法覆盖全部资产。建议支持分布式扫描。
建议:增加
afrog-agent模式架构:
中央控制器(Controller)
扫描代理(Agent)
ScanJobVulnResult通信协议(Protobuf)
扩展能力:
这是afrog从单机工具向企业级平台进化的关键。
[English Translation / 英文摘要]
Hi maintainers, this issue is a feature / architecture / security suggestion for 14_afrog.
The Chinese text above contains the detailed proposal with technical context and implementation ideas.
In summary: we are requesting the enhancement described above and would be happy to provide PRs or further discussion in either Chinese or English.
Thank you for the excellent work on this project!