fscan/Core/Registry.go

package Core

import (
	"github.com/shadow1ng/fscan/Common"
	"github.com/shadow1ng/fscan/Plugins"
	"sort"
)

// init 初始化并注册所有扫描插件
// 包括标准端口服务扫描、特殊扫描类型和本地信息收集等
func init() {
	// 1. 标准网络服务扫描插件
	// 文件传输和远程访问服务
	Common.RegisterPlugin("ftp", Common.ScanPlugin{
		Name:     "FTP",
		Ports:    []int{21},
		ScanFunc: Plugins.FtpScan,
	})

	Common.RegisterPlugin("ssh", Common.ScanPlugin{
		Name:     "SSH",
		Ports:    []int{22, 2222},
		ScanFunc: Plugins.SshScan,
	})

	Common.RegisterPlugin("telnet", Common.ScanPlugin{
		Name:     "Telnet",
		Ports:    []int{23},
		ScanFunc: Plugins.TelnetScan,
	})

	// Windows网络服务
	Common.RegisterPlugin("findnet", Common.ScanPlugin{
		Name:     "FindNet",
		Ports:    []int{135},
		ScanFunc: Plugins.Findnet,
	})

	Common.RegisterPlugin("netbios", Common.ScanPlugin{
		Name:     "NetBIOS",
		Ports:    []int{139},
		ScanFunc: Plugins.NetBIOS,
	})

	Common.RegisterPlugin("smb", Common.ScanPlugin{
		Name:     "SMB",
		Ports:    []int{445},
		ScanFunc: Plugins.SmbScan,
	})

	// 数据库服务
	Common.RegisterPlugin("mssql", Common.ScanPlugin{
		Name:     "MSSQL",
		Ports:    []int{1433, 1434},
		ScanFunc: Plugins.MssqlScan,
	})

	Common.RegisterPlugin("oracle", Common.ScanPlugin{
		Name:     "Oracle",
		Ports:    []int{1521, 1522, 1526},
		ScanFunc: Plugins.OracleScan,
	})

	Common.RegisterPlugin("mysql", Common.ScanPlugin{
		Name:     "MySQL",
		Ports:    []int{3306, 3307, 13306, 33306},
		ScanFunc: Plugins.MysqlScan,
	})

	// 中间件和消息队列服务
	Common.RegisterPlugin("elasticsearch", Common.ScanPlugin{
		Name:     "Elasticsearch",
		Ports:    []int{9200, 9300},
		ScanFunc: Plugins.ElasticScan,
	})

	Common.RegisterPlugin("rabbitmq", Common.ScanPlugin{
		Name:     "RabbitMQ",
		Ports:    []int{5672, 5671, 15672, 15671},
		ScanFunc: Plugins.RabbitMQScan,
	})

	Common.RegisterPlugin("kafka", Common.ScanPlugin{
		Name:     "Kafka",
		Ports:    []int{9092, 9093},
		ScanFunc: Plugins.KafkaScan,
	})

	Common.RegisterPlugin("activemq", Common.ScanPlugin{
		Name:     "ActiveMQ",
		Ports:    []int{61613},
		ScanFunc: Plugins.ActiveMQScan,
	})

	// 目录和认证服务
	Common.RegisterPlugin("ldap", Common.ScanPlugin{
		Name:     "LDAP",
		Ports:    []int{389, 636},
		ScanFunc: Plugins.LDAPScan,
	})

	// 邮件服务
	Common.RegisterPlugin("smtp", Common.ScanPlugin{
		Name:     "SMTP",
		Ports:    []int{25, 465, 587},
		ScanFunc: Plugins.SmtpScan,
	})

	Common.RegisterPlugin("imap", Common.ScanPlugin{
		Name:     "IMAP",
		Ports:    []int{143, 993},
		ScanFunc: Plugins.IMAPScan,
	})

	Common.RegisterPlugin("pop3", Common.ScanPlugin{
		Name:     "POP3",
		Ports:    []int{110, 995},
		ScanFunc: Plugins.POP3Scan,
	})

	// 网络管理和监控服务
	Common.RegisterPlugin("snmp", Common.ScanPlugin{
		Name:     "SNMP",
		Ports:    []int{161, 162},
		ScanFunc: Plugins.SNMPScan,
	})

	Common.RegisterPlugin("modbus", Common.ScanPlugin{
		Name:     "Modbus",
		Ports:    []int{502, 5020},
		ScanFunc: Plugins.ModbusScan,
	})

	// 数据同步和备份服务
	Common.RegisterPlugin("rsync", Common.ScanPlugin{
		Name:     "Rsync",
		Ports:    []int{873},
		ScanFunc: Plugins.RsyncScan,
	})

	// NoSQL数据库
	Common.RegisterPlugin("cassandra", Common.ScanPlugin{
		Name:     "Cassandra",
		Ports:    []int{9042},
		ScanFunc: Plugins.CassandraScan,
	})

	Common.RegisterPlugin("neo4j", Common.ScanPlugin{
		Name:     "Neo4j",
		Ports:    []int{7687},
		ScanFunc: Plugins.Neo4jScan,
	})

	// 远程桌面和显示服务
	Common.RegisterPlugin("rdp", Common.ScanPlugin{
		Name:     "RDP",
		Ports:    []int{3389, 13389, 33389},
		ScanFunc: Plugins.RdpScan,
	})

	Common.RegisterPlugin("postgres", Common.ScanPlugin{
		Name:     "PostgreSQL",
		Ports:    []int{5432, 5433},
		ScanFunc: Plugins.PostgresScan,
	})

	Common.RegisterPlugin("vnc", Common.ScanPlugin{
		Name:     "VNC",
		Ports:    []int{5900, 5901, 5902},
		ScanFunc: Plugins.VncScan,
	})

	// 缓存和键值存储服务
	Common.RegisterPlugin("redis", Common.ScanPlugin{
		Name:     "Redis",
		Ports:    []int{6379, 6380, 16379},
		ScanFunc: Plugins.RedisScan,
	})

	Common.RegisterPlugin("memcached", Common.ScanPlugin{
		Name:     "Memcached",
		Ports:    []int{11211},
		ScanFunc: Plugins.MemcachedScan,
	})

	Common.RegisterPlugin("mongodb", Common.ScanPlugin{
		Name:     "MongoDB",
		Ports:    []int{27017, 27018},
		ScanFunc: Plugins.MongodbScan,
	})

	// 2. 特殊漏洞扫描插件
	Common.RegisterPlugin("ms17010", Common.ScanPlugin{
		Name:     "MS17010",
		Ports:    []int{445},
		ScanFunc: Plugins.MS17010,
	})

	Common.RegisterPlugin("smbghost", Common.ScanPlugin{
		Name:     "SMBGhost",
		Ports:    []int{445},
		ScanFunc: Plugins.SmbGhost,
	})

	// 3. Web应用扫描插件
	Common.RegisterPlugin("webtitle", Common.ScanPlugin{
		Name:     "WebTitle",
		Ports:    Common.ParsePortsFromString(Common.WebPorts),
		ScanFunc: Plugins.WebTitle,
	})

	Common.RegisterPlugin("webpoc", Common.ScanPlugin{
		Name:     "WebPoc",
		Ports:    Common.ParsePortsFromString(Common.WebPorts),
		ScanFunc: Plugins.WebPoc,
	})

	// 4. Windows系统专用插件
	Common.RegisterPlugin("smb2", Common.ScanPlugin{
		Name:     "SMBScan2",
		Ports:    []int{445},
		ScanFunc: Plugins.SmbScan2,
	})

	// 5. 本地信息收集插件
	Common.RegisterPlugin("localinfo", Common.ScanPlugin{
		Name:     "LocalInfo",
		Ports:    []int{},
		ScanFunc: Plugins.LocalInfoScan,
	})

	Common.RegisterPlugin("dcinfo", Common.ScanPlugin{
		Name:     "DCInfo",
		Ports:    []int{},
		ScanFunc: Plugins.DCInfoScan,
	})

	Common.RegisterPlugin("minidump", Common.ScanPlugin{
		Name:     "MiniDump",
		Ports:    []int{},
		ScanFunc: Plugins.MiniDump,
	})
}

// GetAllPlugins 返回所有已注册插件的名称列表
// 当用户未指定特定插件或使用"All"模式时使用
func GetAllPlugins() []string {
	pluginNames := make([]string, 0, len(Common.PluginManager))

	// 遍历插件管理器，获取所有插件名称
	for name := range Common.PluginManager {
		pluginNames = append(pluginNames, name)
	}

	// 对插件名称进行排序，使输出更加一致
	sort.Strings(pluginNames)

	return pluginNames
}