安全工具 | CMSeeK [指纹识别]

阳光穿透心脏的1/2处 2024-03-17 10:08 70阅读 0赞

#### 0x00 免责声明 ####

本文仅限于学习讨论与技术知识的分享，不得违反当地国家的法律法规。对于传播、利用文章中提供的信息而造成的任何直接或者间接的后果及损失，均由使用者本人负责，本文作者不为此承担任何责任，一旦造成后果请自行承担！

#### 0x01 工具简介 ####

![f6a2f594f27c45f0804267fa4a7ce65d.png][]

>  CMSeeK 是使用 python3 构建的，你需要 python3 来运行这个工具，并且目前可以与基于 Unix 的系统兼容。稍后将添加 Windows 支持。 CMSeeK 依靠 git 进行自动更新，因此请确保安装了 git 。

#### **0x02 项目说明** ####

**项目作者：**r3dhax0r

**项目许可：**GNU General Public License v3.0

**项目地址：**https://github.com/Tuhinshubhra/CMSeeK

#### 0x03 安装使用 ####

**Ⅰ**工具安装

![2d75ec7d132c42bcb6ab2fa8d9a208e8.png][]

git clone https://github.com/Tuhinshubhra/CMSeeK

**Ⅱ**安装依赖库

![4468e1bf10f0429fabd7a88967af4b35.png][]

pip install -r requirements.txt

**Ⅲ**使用说明

<table> 
 <tbody> 
  <tr> 
   <td><strong>使用方法：</strong></td> 
  </tr> 
  <tr> 
   <td colspan="1">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;python3 cmseek.py（进行引导式扫描） 或者<br> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;python3 cmseek.py [选项] &lt;目标说明&gt;</td> 
  </tr> 
  <tr> 
   <td><strong>指定目标：</strong></td> 
  </tr> 
  <tr> 
   <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-u URL, --url URL &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;目标 URL</td> 
  </tr> 
  <tr> 
   <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-l LIST, --list LIST &nbsp; &nbsp; &nbsp; &nbsp; 包含要进行多站点扫描的站点列表文件的路径（逗号分隔）</td> 
  </tr> 
  <tr> 
   <td><strong>扫描控制：</strong></td> 
  </tr> 
  <tr> 
   <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-i cms, --ignore-cms cms &nbsp; &nbsp; 指定要跳过的 CMS ID，以避免误报，以逗号分隔</td> 
  </tr> 
  <tr> 
   <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;--strict-cms cms &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 对目标进行与提供的 CMS ID 列表进行对比，以逗号分隔</td> 
  </tr> 
  <tr> 
   <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;--skip-scanned &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 如果之前检测到目标的 CMS，则跳过该目标</td> 
  </tr> 
  <tr> 
   <td><strong>重定向：</strong></td> 
  </tr> 
  <tr> 
   <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;--follow-redirect &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;跟随所有/任何重定向</td> 
  </tr> 
  <tr> 
   <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;--no-redirect &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;跳过所有重定向，并测试输入的目标</td> 
  </tr> 
  <tr> 
   <td><strong>用户代理：</strong></td> 
  </tr> 
  <tr> 
   <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-r, --random-agent &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 使用随机用户代理</td> 
  </tr> 
  <tr> 
   <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;--googlebot &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;使用 Google bot 用户代理</td> 
  </tr> 
  <tr> 
   <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;--user-agent USER_AGENT &nbsp; &nbsp; &nbsp;指定自定义用户代理</td> 
  </tr> 
  <tr> 
   <td><strong>输出：</strong></td> 
  </tr> 
  <tr> 
   <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-v, --verbose &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;增加输出详细程度</td> 
  </tr> 
  <tr> 
   <td><strong>版本和更新：</strong></td> 
  </tr> 
  <tr> 
   <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;--update &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 更新 CMSeeK（需要 git）</td> 
  </tr> 
  <tr> 
   <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;--version &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;显示 CMSeeK 版本并退出</td> 
  </tr> 
  <tr> 
   <td><strong>帮助和其他：</strong></td> 
  </tr> 
  <tr> 
   <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-h, --help &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 显示此帮助消息并退出</td> 
  </tr> 
  <tr> 
   <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;--clear-result &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 删除所有扫描结果</td> 
  </tr> 
  <tr> 
   <td>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;--batch &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;在扫描完列表中的每个站点后不要求按回车键</td> 
  </tr> 
 </tbody> 
</table>

#### 0x04 运行效果 ####

![c9ccb84bae684a90985728ca961370a9.png][] 程序主页

![7336fc847495479292ee243c20d52e72.png][] CMS检测和深度扫描

![b158bea89f304df0a2a399cbbf3d4548.png][] 扫描多个网站

![1da199cc798c44b99926e011e72ca1a7.png][] CMS暴力破解

#### 0x05 总结 ####

由于作者水平有限，文中若有错误与不足欢迎留言，便于及时更正。

[f6a2f594f27c45f0804267fa4a7ce65d.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/17/440ab703007142e3a54f25cb8aa1cf37.png
[2d75ec7d132c42bcb6ab2fa8d9a208e8.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/17/5011aeff38744781bf681d5597f428d8.png
[4468e1bf10f0429fabd7a88967af4b35.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/17/e87ddd39e56e451abe0d9f2f084a7896.png
[c9ccb84bae684a90985728ca961370a9.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/17/b68903b7265d4a5eb4fa457030d36ea2.png
[7336fc847495479292ee243c20d52e72.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/17/21d383164b5a478598546c0fa57c714f.png
[b158bea89f304df0a2a399cbbf3d4548.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/17/2690533a5901472b8b7bd5027ee903f1.png
[1da199cc798c44b99926e011e72ca1a7.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/17/54600a89bcb549938a091affe1f14feb.png