github地址:https://github.com/ysrc/GourdScanV2
Gourdscan 是一款開源由國人寫的被動式漏洞掃描系統
<h4>Installation</h4>
有多種安裝方式,這里使用docker部署
<h6>為了大家獲取鏡像方便這里給出百度云盤的地址:https://pan.baidu.com/s/1miDOr8W</h6>
注:這個鏡像的ssh帳號是root
密碼是gourdscan_admin123>-<
</br>
<h5>Linux用戶使用wget下載百度云可以這樣寫命令:</h5>
$~ wget -c --referer=https://pan.baidu.com/s/1miDOr8W -O ubuntu14.04.tar.gz "https://xxxxxxxxxxxxxxxxxxxx"(這是你的實際下載地址)
注:此處-c 為斷點續傳,--referer為百度云分享地址,-O為指定輸出文件,后面接瀏覽器下載文件的下載地址。
</br>
<h5>
下載完成后,導入鏡像
$~ cat ubuntu14.04.tar.gz | docker import - gourdscan:v2.0
</h5>
<h5>
運行容器
$~ docker run -d --name gourdscan -p 10022:22 -p 10086:10086 -p 10080:80 gourdscan:v2.0 /usr/sbin/sshd -D
然后需要打開多個終端,使用ssh登錄先
$~ ssh -p 10022 root@192.168.xx.xx
如:ssh -p 10022 root@192.168.1.100
</h5>
可以在每個命令開頭加上nohup ,結尾加上& 使進程在后臺進行
<h6>第一個終端:</h6>
root@a38a955e4119:/# redis-server ~/GourdScan_v2/redis.conf
<h6>第二個終端:</h6>
root@a38a955e4119:~# cd ~/GourdScanV2/gdscan_scapy/ && python ~/GourdScanV2/gdscan_scapy/proxy_io.py 10086
<h6>第三個終端:</h6>
root@a38a955e4119:~# cd ~/GourdScanV2/ScanerUI && python app.py --address=0.0.0.0 --port=80
<h6>第四個終端:</h6>
root@a38a955e4119:~# cd ~/sqlmap/ && python sqlmapapi.py -s -H 127.0.0.1 -p 8776
<h6>第五個終端:</h6>
root@a38a955e4119:~# cd ~/GourdScanV2/gdscan_worker/ && python selfscan.py
<h1>搭建完成:View on http://yourip:10080</h1>
</br></br>
<h4>或者你也可以自行構建鏡像</h4>
$~ git clone https://github.com/ysrc/GourdScanV2
$~ cd GourdScanV2
$~ vim Dockerfile #修改dockerfile文件,更換源
修改處一:更換ubuntu源
- RUN mv /etc/apt/sources.list /etc/apt/sources.list.bak
RUN echo "deb http://mirrors.aliyun.com/ubuntu/ trusty main restricted universe multiverse">/etc/apt/sources.list
RUN echo "deb http://mirrors.aliyun.com/ubuntu/ trusty-security main restricted universe multiverse">>/etc/apt/sources.list
RUN echo "deb http://mirrors.aliyun.com/ubuntu/ trusty-updates main restricted universe multiverse">>/etc/apt/sources.list
RUN echo "deb http://mirrors.aliyun.com/ubuntu/ trusty-proposed main restricted universe multiverse">>/etc/apt/sources.list
RUN echo "deb http://mirrors.aliyun.com/ubuntu/ trusty-backports main restricted universe multiverse">>/etc/apt/sources.list
RUN echo "deb-src http://mirrors.aliyun.com/ubuntu/ trusty main restricted universe multiverse">>/etc/apt/sources.list
RUN echo "deb-src http://mirrors.aliyun.com/ubuntu/ trusty-security main restricted universe multiverse">>/etc/apt/sources.list
RUN echo "deb-src http://mirrors.aliyun.com/ubuntu/ trusty-updates main restricted universe multiverse">>/etc/apt/sources.list
RUN echo "deb-src http://mirrors.aliyun.com/ubuntu/ trusty-proposed main restricted universe multiverse">>/etc/apt/sources.list
RUN echo "deb-src http://mirrors.aliyun.com/ubuntu/ trusty-backports main restricted universe multiverse">>/etc/apt/sources.list
<h4>如:</h4>
修改處二:添加豆瓣源
添加 -i https://pypi.tuna.tsinghua.edu.cn/simple
<h4>如:</h4>
<h3>開始構建</h3>
$~ docker build -t gourdscan:2.1 .
<h5>運行容器</h5>
$~ docker run -d -p 10000:22 -p 8000:8000 -p 10086:10086 -p 10806:10806 gourdscan:2.1 /usr/sbin/sshd -D
<h4>登入服務器,修改相關操作</h4>
$ ssh root@localhost -p 10000
用戶名: root,密碼: Y3rc_admin
這個密碼在dockerfile可以進行修改,但是需要重新構建噢:
執行
(這個步驟會報錯,貌似是因為redis-server的版本與redis.conf的版本不一致導致的,反正我暫時是沒有解決的,望redis開發者能夠在評論區解答)
$~ redis-server ~/gourdscan/conf/redis.conf
$~ gourdscan
</br>
<h2>使用打包好的鏡像,更容易成功進入容器噢~</h2>