mirror of
https://github.com/SickleSec/SnowEyes.git
synced 2026-10-28 19:30:50 +00:00
v0.2.3.6
This commit is contained in:
1 parent
03c0f19a9b
commit
7b77aa63d1
9 files changed
+182
-57
No files matched your search
@@ -74,7 +74,7 @@
|
||||
<img src="icons/white.png" alt="白名单" width="80%">
|
||||
</div>
|
||||
|
||||
### 指纹嗅探页面(静态,开发中)
|
||||
### 指纹嗅探页面
|
||||
<div style="text-align:center">
|
||||
<img src="icons/xiutan.png" alt="指纹嗅探" width="80%">
|
||||
</div>
|
||||
@@ -163,7 +163,10 @@
|
||||
- 完善ID密钥的匹配,增加过滤集
|
||||
### 2025-01-27
|
||||
- 完善一些过滤细节
|
||||
|
||||
### 2025-02-05
|
||||
- 完善指纹嗅探功能
|
||||
- 完善响应包处理
|
||||
- 增加更多的第三方库
|
||||
---
|
||||
|
||||
**雪瞳——洞悉无形,守护无界。**
|
||||
@@ -109,6 +109,14 @@ function parseServerHeader(serverHeader) {
|
||||
name: name,
|
||||
version: part.includes('/') ? part.split('/')[1] : null
|
||||
};
|
||||
|
||||
// 如果是 IIS,直接判定为 Windows 系统
|
||||
if (serverName.includes('microsoft-iis') && !components.os) {
|
||||
components.os = {
|
||||
name: 'Windows',
|
||||
version: 'windows'
|
||||
};
|
||||
}
|
||||
}
|
||||
}
|
||||
// 处理其他组件
|
||||
|
||||
@@ -14,24 +14,24 @@ const SCANNER_CONFIG = {
|
||||
// 需要跳过的第三方JS库正则匹配规则
|
||||
SKIP_JS_PATTERNS: [
|
||||
// jQuery相关
|
||||
/jquery([.-]?\d*\.?\d*\.?\d*)?(?:[\.-]cookie)?(?:[\.-]fancybox)?(?:[\.-]validate)?(?:[\.-]artDialog)?(?:[\.-]blockui)?(?:[\.-]pack)?(?:[\.-]base64)?(?:[\.-]md5)?(?:[\.-]min)?\.js$/i,
|
||||
/(?:vue|vue-router|vuex)[.-]?\d*\.?\d*\.?\d*(?:\.min)?\.js$/i,
|
||||
/^jquery([.-]?\d*\.?\d*\.?\d*)?(?:[\.-]cookie)?(?:[\.-]fancybox)?(?:[\.-]validate)?(?:[\.-]artDialog)?(?:[\.-]blockui)?(?:[\.-]pack)?(?:[\.-]base64)?(?:[\.-]md5)?(?:[\.-]min)?\.js$/i,
|
||||
/^(?:vue|vue-router|vuex)[.-]?\d*\.?\d*\.?\d*(?:\.min)?\.js$/i,
|
||||
// React相关
|
||||
/(react|react-dom)[.-]?\d*\.?\d*\.?\d*(?:\.min)?\.js$/i,
|
||||
/^(react|react-dom)[.-]?\d*\.?\d*\.?\d*(?:\.min)?\.js$/i,
|
||||
// Bootstrap相关
|
||||
/bootstrap(?:\.bundle)?[.-]?\d*\.?\d*\.?\d*(?:\.min)?\.js$/i,
|
||||
/^bootstrap(?:\.bundle)?[.-]?\d*\.?\d*\.?\d*(?:[\.-]datepicker|datetimepicker)?(?:[\.-]zh-CN)?(?:[\.-]min)?\.js$/i,
|
||||
// UI框架相关
|
||||
/(layui|lay|layer|liger|h-ui|element-ui|ueditor|kindeditor|ant-design)[.-]?\d*\.?\d*\.?\d*(?:[\.-]all)?(?:\.admin)?(?:[\.-]config)?(?:[\.-]min)?\.js$/i,
|
||||
/^(layui|lay|layer|liger|h-ui|element-ui|ueditor|kindeditor|ant-design)[.-]?\d*\.?\d*\.?\d*(?:[\.-]all)?(?:\.admin)?(?:[\.-]config)?(?:[\.-]min)?\.js$/i,
|
||||
// 图表相关
|
||||
/(echarts|chart|highcharts)[.-]?\d*\.?\d*\.?\d*(?:\.min)?\.js$/i,
|
||||
/^(echarts|chart|highcharts)[.-]?\d*\.?\d*\.?\d*(?:\.min)?\.js$/i,
|
||||
// 工具库相关
|
||||
/(lodash|moment|tableexport|axios|plupload|pqgrid)[.-]?\d*\.?\d*\.?\d*(?:\.full)?(?:\.min)?\.js$/i,
|
||||
/^(lodash|moment|tableexport|axios|plupload|pqgrid)[.-]?\d*\.?\d*\.?\d*(?:\.full)?(?:\.min)?\.js$/i,
|
||||
// 其他常用库
|
||||
/(polyfill|modernizr|device|less|isotope.pkgd|lhgdialog|kendo.web|seajs-style|seajs-text|tinymce|jsencrypt|backbone|select2|underscore|ext-all|ext-unigui-min|exporter|v5_float_4)[.-]?\d*\.?\d*\.?\d*(?:[\.-]dev)?(?:[\.-]min)?\.js$/i,
|
||||
/^(polyfill|modernizr|device|less|isotope.pkgd|lhgdialog|kendo.web|dataTables|editor|seajs-style|seajs-text|tinymce|jsencrypt|backbone|select2|underscore|ext-all|ext-unigui-min|exporter|buttons|v5_float_4)[.-]?\d*\.?\d*\.?\d*(?:[\.-]dev)?(?:[\.-]html5|bootstrap|print|full)?(?:[\.-]min)?\.js$/i,
|
||||
// 日期选择器
|
||||
/(datepicker|datetimepicker|wdatepicker|laydate)[.-]?\d*\.?\d*\.?\d*(?:\.min)?\.js$/i,
|
||||
/^(datepicker|datetimepicker|wdatepicker|laydate)[.-]?\d*\.?\d*\.?\d*(?:\.min)?\.js$/i,
|
||||
// 语言包
|
||||
/(?:zh|en|zh-cn|zh-tw|ja|ko)[.-]?\d*\.?\d*\.?\d*(?:\.min)?\.js$/i,
|
||||
/^(?:zh|en|zh-cn|zh-tw|ja|ko)[.-]?\d*\.?\d*\.?\d*(?:\.min)?\.js$/i,
|
||||
],
|
||||
// 需要过滤的内容类型
|
||||
FILTERED_CONTENT_TYPES: [
|
||||
@@ -139,6 +139,31 @@ const SCANNER_CONFIG = {
|
||||
}
|
||||
},
|
||||
|
||||
// 统一的黑名单配置
|
||||
BLACKLIST: {
|
||||
// 值黑名单 - 从 ID_KEY 配置中移出
|
||||
VALUES: new Set([
|
||||
'input', 'about', 'video', 'null', 'top', 'gener', 'charlendar', 'met',
|
||||
'login', 'read', 'black', 'hand', 'next', 'nect', 'system', 'panel', 'body',
|
||||
'load', 'red', 'green', 'shift', 'item', 'init', 'print','button','left',
|
||||
'finger', 'mark', 'down', 'up', 'ctrl', 'play', 'row', 'ntal', 'header',
|
||||
'has', 'range', 'new', 'json', 'url', 'uri', 'long', 'big','right', 'slider',
|
||||
'html', 'tion', 'default', 'set', 'serve','select', 'view', 'false', 'expect',
|
||||
'broad', 'status', 'dom', 'use', 'rect', 'guard', 'index', 'link',
|
||||
'opera', 'main', 'tech','insert', 'char', 'core', 'turn', 'number', 'atom',
|
||||
'visual','get', 'type','write','error','array','parse','inter', 'size',
|
||||
'statis','card','extract','full','white','refer', 'wrap', 'emp', 'this',
|
||||
'crypt','normal','single','double','triple','more', 'message', 'profile',
|
||||
'tool','tance','popper', 'radio', 'area', 'tip', 'color', 'hid',
|
||||
'old', 'place', 'parm', 'axis', 'high', 'true', 'simple', 'bool', 'pick',
|
||||
'date', 'cancel', 'croll', 'late', 'note', 'length', 'class', 'light',
|
||||
'param','tend', 'title', 'work','lang', 'func', 'variable', 'dark',
|
||||
'data', 'object', 'brac', 'beare', 'string', 'self', 'void',
|
||||
'opts', 'token', 'result', 'text', 'con', 'stor', 'sup', 'pun',
|
||||
'key', 'com', 'ent', 'case', 'pare', 'dent', 'reg', 'invalid'
|
||||
])
|
||||
},
|
||||
|
||||
// ID密钥相关配置
|
||||
ID_KEY: {
|
||||
PATTERNS: [
|
||||
@@ -158,25 +183,7 @@ const SCANNER_CONFIG = {
|
||||
],
|
||||
// 关键词黑名单
|
||||
KEY_BLACKLIST: new Set([
|
||||
'size', 'row', 'dict', 'up', 'highlight', 'cabin'
|
||||
]),
|
||||
// 值黑名单
|
||||
VALUE_BLACKLIST: new Set([
|
||||
'input', 'about', 'video', 'null', 'top', 'gener', 'charlendar', 'content',
|
||||
'login', 'read', 'black', 'hand', 'next', 'nect', 'system', 'panel', 'body',
|
||||
'load', 'red', 'green', 'shift', 'item', 'init', 'print','button','left',
|
||||
'finger', 'mark', 'down', 'up', 'ctrl', 'play', 'row', 'ntal', 'header','contain',
|
||||
'has', 'range', 'new', 'json', 'url', 'uri', 'long', 'big','right', 'slider',
|
||||
'html', 'event', 'tion', 'comp', 'default', 'set', 'serve','select', 'view',
|
||||
'broad', 'status', 'dom', 'use', 'rect', 'ment', 'guard', 'index', 'link',
|
||||
'dentified', 'opera', 'main', 'tech','insert', 'char','command', 'core',
|
||||
'visual','get', 'type','write','error','array','parse','inter', 'size',
|
||||
'statis','discard','extract','full','white','refer','parent', 'wrap',
|
||||
'convert','crypt','normal','single','double','triple','more', 'message',
|
||||
'tool','tance','popper','region', 'radio', 'area', 'tip', 'color', 'hid',
|
||||
'old', 'place', 'parm', 'axis', 'high', 'ture', 'simple', 'bool', 'pick',
|
||||
'date', 'cancel', 'croll', 'late', 'note', 'confirm', 'length', 'class',
|
||||
'param','tend', 'title', 'work','lang'
|
||||
'size', 'row', 'dict', 'up', 'highlight', 'cabin', 'cross'
|
||||
])
|
||||
}
|
||||
};
|
||||
|
||||
@@ -1,3 +1,11 @@
|
||||
// 在文件开头添加动态扫描状态变量
|
||||
let dynamicScanEnabled = true;
|
||||
|
||||
// 在初始化时获取设置
|
||||
chrome.storage.local.get(['dynamicScan'], (result) => {
|
||||
dynamicScanEnabled = result.dynamicScan !== false;
|
||||
});
|
||||
|
||||
// 等待依赖加载 - 简化检查
|
||||
const waitForDependencies = () => {
|
||||
const deps = [
|
||||
@@ -280,6 +288,9 @@ async function initScan() {
|
||||
|
||||
// 使用 MutationObserver 监听 DOM 变化
|
||||
const observer = new MutationObserver((mutations) => {
|
||||
// 如果动态扫描被禁用,直接返回
|
||||
if (!dynamicScanEnabled) return;
|
||||
|
||||
// 过滤掉不重要的变化
|
||||
const significantChanges = mutations.filter(mutation => {
|
||||
// 忽略文本内容的微小变化
|
||||
@@ -344,6 +355,7 @@ async function collectAndScanResources() {
|
||||
// 检查是否是第三方库
|
||||
const isThirdPartyLib = (url) => {
|
||||
const fileName = url.split('/').pop()?.split('?')[0]?.toLowerCase() || '';
|
||||
// console.log('fileName', fileName);
|
||||
return SCANNER_CONFIG.API.SKIP_JS_PATTERNS.some(pattern => pattern.test(fileName));
|
||||
};
|
||||
|
||||
@@ -507,6 +519,9 @@ chrome.runtime.onMessage.addListener((request, sender, sendResponse) => {
|
||||
WHITELIST: SCANNER_CONFIG.DOMAIN.WHITELIST
|
||||
}
|
||||
});
|
||||
} else if (request.type === 'UPDATE_DYNAMIC_SCAN') {
|
||||
dynamicScanEnabled = request.enabled;
|
||||
sendResponse({ success: true });
|
||||
}
|
||||
} catch (e) {
|
||||
// 扩展上下文失效时忽略错误
|
||||
|
||||
@@ -276,19 +276,22 @@ const SCANNER_FILTER = {
|
||||
if (!value.length||key==value) {
|
||||
return false;
|
||||
}
|
||||
if (regexCache.keywordPattern.test(value)) return false;
|
||||
|
||||
for (const blackWord of SCANNER_CONFIG.BLACKLIST.VALUES) {
|
||||
if (value.includes(blackWord)) {
|
||||
return false;
|
||||
}
|
||||
}
|
||||
resultsSet?.cookies?.add(match);
|
||||
return true;
|
||||
},
|
||||
|
||||
id_key: (match, resultsSet) => {
|
||||
if (match.match(/[:=]/)) {
|
||||
// 检查是否是空值
|
||||
const valueMatch = match.replace(/\s+/g,'').split(/[:=]/);
|
||||
var key = valueMatch[0].replace(/['"]/g,'');
|
||||
var value = valueMatch[1].replace(/['"]/g,'');
|
||||
|
||||
// 转换为小写进行检查
|
||||
const keyLower = key.toLowerCase();
|
||||
const valueLower = value.toLowerCase();
|
||||
|
||||
@@ -303,8 +306,8 @@ const SCANNER_FILTER = {
|
||||
}
|
||||
}
|
||||
|
||||
// 检查value是否包含黑名单词
|
||||
for (const blackWord of SCANNER_CONFIG.ID_KEY.VALUE_BLACKLIST) {
|
||||
// 检查value是否在统一黑名单中
|
||||
for (const blackWord of SCANNER_CONFIG.BLACKLIST.VALUES) {
|
||||
if (valueLower.includes(blackWord)) {
|
||||
return false;
|
||||
}
|
||||
|
||||
Binary file not shown.
|
Before Width: | Height: | Size: 58 KiB After Width: | Height: | Size: 63 KiB |
@@ -676,4 +676,59 @@ body {
|
||||
font-family: monospace;
|
||||
word-break: break-all;
|
||||
}
|
||||
|
||||
/* 开关按钮样式 */
|
||||
.switch-wrapper {
|
||||
display: flex;
|
||||
align-items: center;
|
||||
cursor: pointer;
|
||||
margin-bottom: 8px;
|
||||
}
|
||||
|
||||
.switch-input {
|
||||
position: relative;
|
||||
width: 40px;
|
||||
height: 20px;
|
||||
margin: 0;
|
||||
margin-right: 8px;
|
||||
background: #e9ecef;
|
||||
border-radius: 20px;
|
||||
border: none;
|
||||
outline: none;
|
||||
cursor: pointer;
|
||||
-webkit-appearance: none;
|
||||
transition: all 0.3s;
|
||||
}
|
||||
|
||||
.switch-input:checked {
|
||||
background: #228be6;
|
||||
}
|
||||
|
||||
.switch-input::before {
|
||||
content: '';
|
||||
position: absolute;
|
||||
top: 2px;
|
||||
left: 2px;
|
||||
width: 16px;
|
||||
height: 16px;
|
||||
background: white;
|
||||
border-radius: 50%;
|
||||
transition: all 0.3s;
|
||||
}
|
||||
|
||||
.switch-input:checked::before {
|
||||
transform: translateX(20px);
|
||||
}
|
||||
|
||||
.switch-label {
|
||||
font-size: 14px;
|
||||
color: #495057;
|
||||
}
|
||||
|
||||
.config-desc {
|
||||
font-size: 12px;
|
||||
color: #868e96;
|
||||
margin-top: 4px;
|
||||
margin-left: 48px;
|
||||
}
|
||||
|
||||
+27
-1
@@ -68,7 +68,33 @@
|
||||
|
||||
<!-- 配置页面 -->
|
||||
<div class="page config-page">
|
||||
<div class="container"></div>
|
||||
<div class="container">
|
||||
<div class="config-section">
|
||||
<div class="config-group">
|
||||
<h3>扫描白名单</h3>
|
||||
<div class="config-content">
|
||||
以下域名将不会被扫描:
|
||||
</div>
|
||||
<div class="whitelist-domains">
|
||||
<!-- 白名单域名将在这里动态显示 -->
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- 添加动态扫描控制 -->
|
||||
<div class="config-group">
|
||||
<h3>扫描设置</h3>
|
||||
<div class="config-item">
|
||||
<label class="switch-wrapper">
|
||||
<input type="checkbox" id="dynamicScan" class="switch-input">
|
||||
<span class="switch-label">动态扫描</span>
|
||||
</label>
|
||||
<div class="config-desc">
|
||||
启用后将自动扫描页面动态变化的内容,适用于单页应用等动态渲染的页面
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<script src="popup.js"></script>
|
||||
|
||||
+28
-20
@@ -22,31 +22,18 @@ function switchPage(pageName) {
|
||||
|
||||
// 显示配置信息
|
||||
function displayConfig(config) {
|
||||
const container = document.querySelector('.config-page .container');
|
||||
const whitelistDomains = document.querySelector('.whitelist-domains');
|
||||
if (!config) {
|
||||
container.innerHTML = '<div class="error">无法获取配置信息</div>';
|
||||
whitelistDomains.innerHTML = '<div class="error">无法获取配置信息</div>';
|
||||
return;
|
||||
}
|
||||
|
||||
let html = `
|
||||
<div class="config-section">
|
||||
<div class="config-group">
|
||||
<h3>扫描白名单</h3>
|
||||
<div class="config-content">
|
||||
以下域名将不会被扫描:
|
||||
</div>
|
||||
<div class="whitelist-domains">
|
||||
${config.WHITELIST ? config.WHITELIST.map(domain => `
|
||||
<div class="domain-item">
|
||||
<span class="domain-text">${domain}</span>
|
||||
</div>
|
||||
`).join('') : ''}
|
||||
</div>
|
||||
</div>
|
||||
// 显示白名单域名
|
||||
whitelistDomains.innerHTML = config.WHITELIST ? config.WHITELIST.map(domain => `
|
||||
<div class="domain-item">
|
||||
<span class="domain-text">${domain}</span>
|
||||
</div>
|
||||
`;
|
||||
|
||||
container.innerHTML = html;
|
||||
`).join('') : '';
|
||||
}
|
||||
|
||||
// 显示扫描结果的函数
|
||||
@@ -322,6 +309,7 @@ function handleLongText() {
|
||||
function initConfigPage() {
|
||||
chrome.tabs.query({active: true, currentWindow: true}, (tabs) => {
|
||||
if (tabs[0]) {
|
||||
// 获取配置信息
|
||||
chrome.tabs.sendMessage(tabs[0].id, {type: 'GET_CONFIG'}, response => {
|
||||
if (chrome.runtime.lastError || !response || !response.config) {
|
||||
const container = document.querySelector('.config-page .container');
|
||||
@@ -329,6 +317,26 @@ function initConfigPage() {
|
||||
return;
|
||||
}
|
||||
displayConfig(response.config);
|
||||
|
||||
// 获取动态扫描设置
|
||||
chrome.storage.local.get(['dynamicScan'], (result) => {
|
||||
const dynamicScanCheckbox = document.getElementById('dynamicScan');
|
||||
if (dynamicScanCheckbox) {
|
||||
dynamicScanCheckbox.checked = result.dynamicScan !== false; // 默认开启
|
||||
|
||||
// 添加变更监听
|
||||
dynamicScanCheckbox.addEventListener('change', (e) => {
|
||||
const enabled = e.target.checked;
|
||||
chrome.storage.local.set({ dynamicScan: enabled });
|
||||
|
||||
// 通知 content script 更新设置
|
||||
chrome.tabs.sendMessage(tabs[0].id, {
|
||||
type: 'UPDATE_DYNAMIC_SCAN',
|
||||
enabled: enabled
|
||||
});
|
||||
});
|
||||
}
|
||||
});
|
||||
});
|
||||
}
|
||||
});
|
||||
|
||||
Reference in new issue
Block a user