base on dddd是一款使用简单的批量信息收集,供应链漏洞探测工具，旨在优化红队工作流，减少伤肝的机械性操作。支持从Hunter、Fofa批量拉取目标 # 工具简介  ## 特点 * 自动识别输入类型，无需手动分类 * 便于拓展的主动/被动指纹识别 * 指纹支持复杂 与/或/非/括号 逻辑运算。人类友好。 * Nuclei v3支持 * 便于拓展的指纹漏洞映射数据库，尽量避免无效发包 * 高效的子域名枚举/爆破，精准的泛解析过滤 * Hunter、Fofa、Quake支持 * Hunter 低感知模式 * 低依赖，多系统开箱即用 * 高效的HTML报表，包含漏洞请求响应 * 审计日志，敏感环境必备 # 快速开始 ### 安装 Release中下载config.zip与您操作系统对应的二进制文件。直接命令行运行即可。 PS: dddd v2.0起，可以独立于config文件夹运行。 ### 最简使用 扫描IP `dddd -t 192.168.0.1` 扫描网段 `dddd -t 192.168.0.1/24` `dddd -t 192.168.0.0-192.168.0.12` 扫描网站 `dddd -t http://test.com` ### 输出文件 dddd存在三种文件输出 1. txt格式输出（默认选择） 2. html格式（默认选择） 3. 审计日志（可选） 所有结果默认输出在 `result.txt`，可通过`-o`参数更改输出文件，`-ot`参数更改输出格式(json)，默认为text。 默认HTML格式漏洞输出为 `当前时间戳.html`，可通过`-ho`参数更改输出文件。 **-a** 参数开启审计日志功能，日志保存在 `audit.log`，记录详细扫描行为。 **扫描可以随时终止**，当有指纹识别、漏扫结果等输出时，会实时保存在文件内。 ### 应用场景命令速查 红队外网 (Hunter) `dddd -t 'icp.name="xxxx有限公司"' -hunter -oip` 红队外网 (Hunter查询备案,Fofa补充端口）高效梳理资产 `dddd -t 'icp.name="xxxx有限公司"' -hunter -fofa -oip` 红队外网 (本机枚举子域名) `dddd -t xxx.com -sd` 红队内网 `./dddd -t 172.16.100.0/24` 安服测试/敏感环境 (开启审计日志~~，便于事后甩锅~~) `./dddd -t 172.16.100.1 -a` 仅指纹识别 `./dddd -t http://www.xxx.com -npoc` `./dddd -t 172.16.100.11 -npoc` `./dddd -t 172.16.120.11:3307 -npoc` ### 更多信息 若您想知道如何**添加指纹**，**添加Poc**，更多用法或漏洞报表截图。请点击下边的链接。 [更多信息](details.md) # 更新历史 [更新历史](Update.md) # 免责声明 本工具仅面向**合法授权**的企业安全建设行为，如您需要测试本工具的可用性，请自行搭建靶机环境。 在使用本工具进行检测时，您应确保该行为符合当地的法律法规，并且已经取得了足够的授权。**请勿对非授权目标进行扫描。** 如您在使用本工具的过程中存在任何非法行为，您需自行承担相应后果，我们将不承担任何法律及连带责任。 在安装并使用本工具前，请您**务必审慎阅读、充分理解各条款内容**，限制、免责条款或者其他涉及您重大权益的条款可能会以加粗、加下划线等形式提示您重点注意。 除非您已充分阅读、完全理解并接受本协议所有条款，否则，请您不要安装并使用本工具。您的使用行为或者您以其他任何明示或者默示方式表示接受本协议的，即视为您已阅读并同意本协议的约束。 # 参考链接 https://github.com/shadow1ng/fscan https://github.com/lcvvvv/kscan https://github.com/lcvvvv/gonmap https://github.com/projectdiscovery/nuclei https://github.com/projectdiscovery/subfinder https://github.com/projectdiscovery/httpx https://github.com/projectdiscovery/naabu https://github.com/chainreactors/gogo https://github.com/zan8in/afrog ## Star History Chart [](https://star-history.com/#SleepingBag945/dddd&Date) <img align='right' src="https://profile-counter.glitch.me/neo-regeorg/count.svg" width="200"> ", Assign "at most 3 tags" to the expected json: {"id":"8616","tags":[]} "only from the tags list I provide: [{"id":77,"name":"3d"},{"id":89,"name":"agent"},{"id":17,"name":"ai"},{"id":54,"name":"algorithm"},{"id":24,"name":"api"},{"id":44,"name":"authentication"},{"id":3,"name":"aws"},{"id":27,"name":"backend"},{"id":60,"name":"benchmark"},{"id":72,"name":"best-practices"},{"id":39,"name":"bitcoin"},{"id":37,"name":"blockchain"},{"id":1,"name":"blog"},{"id":45,"name":"bundler"},{"id":58,"name":"cache"},{"id":21,"name":"chat"},{"id":49,"name":"cicd"},{"id":4,"name":"cli"},{"id":64,"name":"cloud-native"},{"id":48,"name":"cms"},{"id":61,"name":"compiler"},{"id":68,"name":"containerization"},{"id":92,"name":"crm"},{"id":34,"name":"data"},{"id":47,"name":"database"},{"id":8,"name":"declarative-gui "},{"id":9,"name":"deploy-tool"},{"id":53,"name":"desktop-app"},{"id":6,"name":"dev-exp-lib"},{"id":59,"name":"dev-tool"},{"id":13,"name":"ecommerce"},{"id":26,"name":"editor"},{"id":66,"name":"emulator"},{"id":62,"name":"filesystem"},{"id":80,"name":"finance"},{"id":15,"name":"firmware"},{"id":73,"name":"for-fun"},{"id":2,"name":"framework"},{"id":11,"name":"frontend"},{"id":22,"name":"game"},{"id":81,"name":"game-engine "},{"id":23,"name":"graphql"},{"id":84,"name":"gui"},{"id":91,"name":"http"},{"id":5,"name":"http-client"},{"id":51,"name":"iac"},{"id":30,"name":"ide"},{"id":78,"name":"iot"},{"id":40,"name":"json"},{"id":83,"name":"julian"},{"id":38,"name":"k8s"},{"id":31,"name":"language"},{"id":10,"name":"learning-resource"},{"id":33,"name":"lib"},{"id":41,"name":"linter"},{"id":28,"name":"lms"},{"id":16,"name":"logging"},{"id":76,"name":"low-code"},{"id":90,"name":"message-queue"},{"id":42,"name":"mobile-app"},{"id":18,"name":"monitoring"},{"id":36,"name":"networking"},{"id":7,"name":"node-version"},{"id":55,"name":"nosql"},{"id":57,"name":"observability"},{"id":46,"name":"orm"},{"id":52,"name":"os"},{"id":14,"name":"parser"},{"id":74,"name":"react"},{"id":82,"name":"real-time"},{"id":56,"name":"robot"},{"id":65,"name":"runtime"},{"id":32,"name":"sdk"},{"id":71,"name":"search"},{"id":63,"name":"secrets"},{"id":25,"name":"security"},{"id":85,"name":"server"},{"id":86,"name":"serverless"},{"id":70,"name":"storage"},{"id":75,"name":"system-design"},{"id":79,"name":"terminal"},{"id":29,"name":"testing"},{"id":12,"name":"ui"},{"id":50,"name":"ux"},{"id":88,"name":"video"},{"id":20,"name":"web-app"},{"id":35,"name":"web-server"},{"id":43,"name":"webassembly"},{"id":69,"name":"workflow"},{"id":87,"name":"yaml"}]" returns me the "expected json"