ice-doom / eyejo Goto Github PK
View Code? Open in Web Editor NEWEyeJo是一款自动化资产风险评估平台,可以协助甲方安全人员或乙方安全人员对授权的资产中进行排查,快速发现存在的薄弱点和攻击面。
EyeJo是一款自动化资产风险评估平台,可以协助甲方安全人员或乙方安全人员对授权的资产中进行排查,快速发现存在的薄弱点和攻击面。
为什么需要加http前缀?
另外如果一次执行过多域名 shodan&fofa 会很慢,我等待了10个小时左右还在执行shodan&fofa,大约900子域名
it would be really awesome if you add Nuclei-Engine Integration to scan with nuclei yaml templates for vulnerabilties.
使用docker pull 下之后 在使用docker run。启动会发现无法访问, 内部服务未安装
扫描完成后 支持xray报告导出
老哥们有没有人遇到400错误? 我本地和服务器实验了一下都是400
fofa接口不能用了,师傅可以更新一下嘛
其中访问为https ,非http
请问,在进行项目添加时添加如127.0.0.1这类型IP地址,总是出现域名格式错误的提示,是不是现在不能进行单IP地址的扫描
Traceback (most recent call last):
File "/tmp/pip-install-vde1inbu/pycurl/setup.py", line 223, in configure_unix
stdout=subprocess.PIPE, stderr=subprocess.PIPE)
File "/usr/local/python3/lib/python3.7/subprocess.py", line 775, in init
restore_signals, start_new_session)
File "/usr/local/python3/lib/python3.7/subprocess.py", line 1522, in _execute_child
raise child_exception_type(errno_num, err_msg, err_filename)
FileNotFoundError: [Errno 2] No such file or directory: 'curl-config': 'curl-config'
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "<string>", line 1, in <module>
File "/tmp/pip-install-vde1inbu/pycurl/setup.py", line 913, in <module>
ext = get_extension(sys.argv, split_extension_source=split_extension_source)
File "/tmp/pip-install-vde1inbu/pycurl/setup.py", line 582, in get_extension
ext_config = ExtensionConfiguration(argv)
File "/tmp/pip-install-vde1inbu/pycurl/setup.py", line 99, in __init__
self.configure()
File "/tmp/pip-install-vde1inbu/pycurl/setup.py", line 227, in configure_unix
raise ConfigurationError(msg)
__main__.ConfigurationError: Could not run curl-config: [Errno 2] No such file or directory: 'curl-config': 'curl-config'
----------------------------------------
Command "python setup.py egg_info" failed with error code 1 in /tmp/pip-install-vde1inbu/pycurl/
You are using pip version 19.0.3, however version 21.1.1 is available.
You should consider upgrading via the 'pip install --upgrade pip' command.
请问不使用docker方式部署应该怎么部署谢谢
IP信息收集方式里面的两种方式,请问可以解释一下吗
漏洞确定存在,但是在使用poc检测的时候无法检测,后台有这个报错
[2021-05-10 17:35:55,225: ERROR/ForkPoolWorker-2] Task exception was never retrieved
future: <Task finished name='Task-20' coro=<run_pocsuite() done, defined at /root/eyejo/plugin/poc_verify.py:27> exception=UnboundLocalError("local variable 'result' referenced before assignment")>
Traceback (most recent call last):
File "/root/eyejo/plugin/poc_verify.py", line 39, in run_pocsuite
new_results = []
UnboundLocalError: local variable 'result' referenced before assignment
[2021-05-10 17:35:55,226: INFO/ForkPoolWorker-2] EyeJoTask[2074aefb-3940-4c72-b4d5-d40a8e2c26fb]: finish poc_scan time: 0.21214699745178223
[2021-05-10 17:35:55,229: INFO/ForkPoolWorker-2] Task EyeJoTask[2074aefb-3940-4c72-b4d5-d40a8e2c26fb] succeeded in 0.24784187402110547s: None
dokcer部署很顺利,但有些环境不方便docker,想问下,普通部署可以按照django部署进行吗,有哪些坑需要规避。
想加个证书
如何更改用户名密码
建议增加暂停后出现启动扫描的功能,并且增加导出全部站点漏洞信息的功能
增加xray集成
老的pocsuite poc太少
你好,项目是前后端分离的吗?仓库中好像没有看到前端代码
某些安全设备检测到端口扫描后会给所有SYN包回复ACK确认(比如阿里云),不管端口是否开放,导致eyejo认为扫描的主机所有端口均开放,直接把浏览器卡死。。。并且导致后续任务无法继续。如果开放的端口大于一定数量,应放弃对这个IP的扫描,以免影响扫描进度。
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.