4

开源的漏洞扫描-QingScan

 2 years ago
source link: http://osp.io/archives/7218
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.

开源的漏洞扫描-QingScan – 开源派

QingScan一款开源的漏洞扫描工具,遵守GPL开源协议。QingScan集多个功能于一体,支持 Web 扫描、系统扫描、子域名收集、主机发现、组件识别、URL 爬虫、XRAY 扫描、POC 批量验证,SSH 批量测试、vulmap 等功能。当添加一个目标后,自动调用各种扫描器对目标进行安全扫描,并将扫描结果录入到QingScan平台中进行聚合展示。

h0_152927.jpg@596w_1l.jpg

  1. 环境要求docker、docker-compose
  2. 下载代码后,启动容器cd QingScan/docker/latest && docker-compose up -d
  3. 首次启动需要更新容器内代码docker exec qingscan sh -c 'cd /root/qingscan && git fetch && git reset --hard origin/main && rm code/public/install/install.lock'
  4. 浏览器访问 http://127.0.0.1:8000/ 自动进入安装界面

https://github.com/78778443/QingScan


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK