自动化漏洞检测平台-解放劳动力

https://github.com/Soufaker/laoyue

通过百度网盘分享的文件：laoyue-main.rar链接：https://pan.baidu.com/s/1lIg1uLtPy4M1CVwP7jVDSg 提取码：s6f7

#docker安装yum updatesudo yum install -y yum-utils device-mapper-persistent-data lvm2sudo yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.reposudo yum install docker-cesudo systemctl start dockersudo systemctl enable docker#docker-composeyum install wegtsudo wget -P /usr/local/bin https://github.com/docker/compose/releases/download/1.27.4/docker-compose-Linux-x86_64cd /usr/local/bin/sudo mv docker-compose-Linux-x86_64 docker-composesudo chmod +x /usr/local/bin/docker-composedocker-compose -v

docker: Error response from daemon: Get "https://registry-1.docker.io/v2/": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers).

首先进入/etc/docker/daemon.json文件然后在里面加入下面的配置{  "registry-mirrors": ["https://docker.registry.cyou","https://docker-cf.registry.cyou","https://dockercf.jsdelivr.fyi","https://docker.jsdelivr.fyi","https://dockertest.jsdelivr.fyi","https://mirror.aliyuncs.com","https://dockerproxy.com","https://mirror.baidubce.com","https://docker.m.daocloud.io","https://docker.nju.edu.cn","https://docker.mirrors.sjtug.sjtu.edu.cn","https://docker.mirrors.ustc.edu.cn","https://mirror.iscas.ac.cn","https://docker.rainbond.cc"]}然后在终端重新启动一下dockersystemctl daemon-reloadsystemctl restart docker

安装Docker-CE时报错，Requires: container-selinux ＞= 2:2.74

wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repoyum install epel-release -yyum install container-selinux -y # 安装最新的contain-selinu

cd /usr/localyum install zlib-devel bzip2-devel openssl-devel ncurses-devel sqlite-devel readline-devel tk-devel gcc make libffi-develwget https://www.python.org/ftp/python/3.9.0/Python-3.9.0.tgztar -zxvf Python-3.9.0.tgzcd Python-3.9.0./configure prefix=/usr/local/python3make && make installln -s /usr/local/python3/bin/python3.9 /usr/bin/python3ln -s /usr/local/python3/bin/pip3.9 /usr/bin/pip3python3 -V#注意:更改yum配置（非必须）#因为其要用到python2才能执行，否则会导致yum不能正常使用（不管安装 python3的哪个版本，都必须要做的）vi /usr/bin/yum把 #! /usr/bin/python 修改为 #! /usr/bin/python2vi /usr/libexec/urlgrabber-ext-down把 #! /usr/bin/python 修改为 #! /usr/bin/python2vi /usr/bin/yum-config-manager#!/usr/bin/python 改为 #!/usr/bin/python2

git clone https://github.com/Soufaker/laoyue.git cd laoyuechmod 777 ./build_centos7.sh #如果是ubutu环境就chmod 777 ./build_ubutu.sh./build_centos7.sh

sudo systemctl start docker.servicedocker pull dockermi3aka/awvs:latestdocker run -it -d -p 3443:3443 --name my-awvs dockermi3aka/awvs:latest

[awvs]awvs_url = https://X.X.X.X:3443awvs_key = 1986ad8c0a5b3df4d7028d5f3c06e936c5d133333333434a0883d4da84b006fca5

vi /laoyue-main/config/config.ini

[webhook]下即可如:[webhook]webhook_key = 2a3798d4-6111111111-99b0-8c59c0b6e223

[dingding]access_token = d6fe340ac0e0f4f4c5e1fa74837e28bb41111111eaa1a318f3dcc9b4f9324b0dsecret = SEC808449753d4b6e45da8c4263afc5a3333333333aaa0c2b6a0e750e70a10fb16

from dingtalkchatbot.chatbot import DingtalkChatbotdef dingtalk(c):    dingding_hook = '6468cb8da42de8fa6a60d5a00xxxxxxxxxxxxxxxx1c23936d95bbbbb1'        Dsecret = 'SEC558210df194b1dc02f62c66a5xxxxxxxxxxxxxxxcd468b080f709a0f2bc'  # 可选：创建机器人勾选“加签”选项时使用        # 钉钉WebHook地址        DWebHook = 'https://oapi.dingtalk.com/robot/send?access_token=' + str(dingding_hook)        # 初始化机器人小丁        # xiaoding = DingtalkChatbot(webhook)      # 方式一：通常初始化方式        xiaoding = DingtalkChatbot(DWebHook, secret=Dsecret)      # 方式二：勾选“加签”选项时使用（v1.5以上新功能）        # xiaoding = DingtalkChatbot(webhook, pc_slide=True)      # 方式三：设置消息链接在PC端侧边栏打开（v1.5以上新功能）        # Text消息@所有人        xiaoding.send_text(msg=c, is_at_all=True)dingtalk('123')

python3 laoyue.py -h

-h, --help  : 显示帮助信息-d, --domain: 指定单个域名或包含多个域名的文件（如：src.txt）。-m, --ml    : 使用ffuf扫描目录。可在./inifile/dict目录下添加字典。-n, --nl    : 使用nuclei进行漏洞扫描。-f, --fs    : 使用fscan进行漏洞扫描。-a, --av    : 使用awvs进行漏洞扫描。-z, --hostz : 进行host碰撞。-N, --notauto: 启用被动扫描模式，手动收集URL资产后使用(资产放在./result/notautolist/notautolist.txt里)。

 单域名扫描: nohup python3 laoyue.py -d example.com  -m -f -n -z -a  > laoyue.out 2>&1 & 多域名扫描: nohup python3 laoyue.py -d "SRC.txt"  -m -f -n -z -a  > laoyue.out 2>&1 &

nohup python3 laoyue.py -m -n -f -a -N &