【红队】一个辅助平常渗透测试项目或者攻防项目快速打点的综合工具

Options:--version             show program's version number and exit  -h, --help            show this help message and exit--host=host           example: 192.168.1.1 /192.168.1.1-192.168.1.254--domain=DOMAIN       example: baidu.com in hostscan or vhostscan--proxy=PROXY         use a proxy to connect, example: http://127.0.0.1:8001                        socks5://127.0.0.1:1081--timeout=TIMEOUT     Set timeout--ctimeout=CTIMEOUT   Set timeout of port scan  -p 80,443 or 8080-9000                        Enter Scan Port  -t thread 200         Set threads  -f F                  Input a file  -u U                  Urlpath--project=PROJECT     Project name--uf=UF               Url path from file--sip=SIP             Server IP--cip=CIP             Connect IP--cport=CPORT         Connect Port  -e E                  method ofencodeordecode                        ————————————————                        pw -> powershell encode                        bh -> bash encode                        f5 -> f5 decode                        ————————————————  -s S                  Stringof decide--hidden=HIDDEN       Hide http code for urlpath--only-show=ONLY_SHOWOnlyshow the specified status code--fs=FS               Size of each result number of fofa scan--dd                  Open head request--tp                  Title plus mode, add an extra favicon.ico scan--nocert              Close show cert url--nobar               Close the ProcessBar--uninstall           Uninstall for doublepulsar--verbose             Version for doublepulsar--hiddensize=HIDDENSIZE                        Hidden size  -q Q                  Domainfor fofa example: domain="baidu.com"  -H H                  set header, example: -H "key: value"  -m M                  scan method                        ————————————————                        tscan -> title                        pscan -> port scan                        bakscan -> bak file17scan -> MS17-010scan                        nbscan -> nbtscan                        gtscan -> smb ghost scan                        subscan -> domainscan                        sscan -> safescan(no rememberMe)                        fscan -> fofa scan                        uncd -> unicode0708scan -> o7o8 scan                        sfscan -> subscan and fofascan (for one command)                        oxid -> multi-NIC                        hostscan -> hostscan                        vhostscan -> url travserse based hostscan                        icmp tunnel -> icmpt                        dpscan -> doublepulsar backdoor check                        shscan -> shiro scan                        t3scan -> weblogic information scanningdefaultis tscan                        ————————————————  -o O                  Output a file,defaultoutfilein res_alivedomain.txt--oJ=OJ               Ouput a json file, default in res_alivedomain.json

Usage: "usage:AlliN.py [options] arg1,arg2"pythonAlliN.py --host 10.1.1.1 -p 80 -t 100 -o asd.txt --proxy http://127.0.0.1:8888pythonAlliN.py --host 10.1.1.1-10.2.2.2 -p 80 -t 100 -o asd.txtpythonAlliN.py --host 10.1.1.1-10.2.2.2 -p 80,443,8080 -t 100 -o asd.txtpythonAlliN.py --host 10.1.1.1-10.2.2.2 -p 80,443,8000-9000 -t 100 -o asd.txtpythonAlliN.py --host [2001:4860:4860::8888] -p 80,443pythonAlliN.py --host [2001:4860:4860::8888]/126 -p 80,443pythonAlliN.py --host 2001:db8::/126 -p 80,443pythonAlliN.py --host 2001:db8::1-2001:db8::5 -p 80,443pythonAlliN.py -f url.list -p 80,443,8000-9000 -t 100 -o asd.txtpythonAlliN.py -u "/login/index.jsp" -p 80,443,8000-9000 -t 100pythonAlliN.py -f xxx.list -t 100 # xxx.list 192.168.1.1:80pythonAlliN.py --host 10.1.1.1/24 /16 /8 -p 80 -t 100 --tp # CIDRpythonAlliN.py --host 10.1.1.1/24 -p 80 -m pscan # port scanpythonAlliN.py --host 10.1.1.1/24 -m 17scan # MS17-010 scanpythonAlliN.py --host 10.1.1.1/24 -m gtscan # SMBGhost scanpythonAlliN.py -m uncd -e f5 -s 185903296.21520.0000pythonAlliN.py -q domain='example.com' -m fscan # fofa scanpythonAlliN.py -q domain='example.com' -m fscan --fs 200 # fofa scan with sizepythonAlliN.py -m icmpt (establish a server conncat in your vps)pythonAlliN.py -m icmpt --sip vps --cip 127.0.0.1 --cport 80 (forward you connect to your vps network)pythonAlliN.py --host ww[fuzz].xxx.com -m ddscan (subdomain fuzz)pythonAlliN.py --host ww[fuzz].xxx.com -m ddscan --dd (head scan)pythonAlliN.py --host 192.168.1.1/24 -p 443 --nocertpythonAlliN.py --host 192.168.1.1/24 -p 443 --hiddensize 0,7pythonAlliN.py --host 192.168.1.1/24 -p 443 -m bakscan (bak file fuzz)pythonAlliN.py --host 192.168.1.1/24 -p 443 -m bakscan --dd (head scan)pythonAlliN.py --host 192.168.1.1/24 --nobarpythonAlliN.py -q "domain='xx.com'" --host xxx.com -m sfscanpythonAlliN.py --host 192.168.1.1/24 -p 7001 -m t3scan