{"id":25405989,"url":"https://github.com/P001water/P1soda","last_synced_at":"2025-10-31T01:31:53.665Z","repository":{"id":256150555,"uuid":"854350764","full_name":"P001water/P1soda","owner":"P001water","description":"一款常规内网渗透场景下的全方位漏洞扫描工具","archived":false,"fork":false,"pushed_at":"2025-01-15T09:29:44.000Z","size":15121,"stargazers_count":204,"open_issues_count":1,"forks_count":8,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-01-15T11:01:22.702Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/P001water.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-09-09T02:26:41.000Z","updated_at":"2025-01-15T09:29:45.000Z","dependencies_parsed_at":"2025-01-15T10:22:36.067Z","dependency_job_id":"0bfe8309-5b3a-4ad4-9482-32b3ff644c4d","html_url":"https://github.com/P001water/P1soda","commit_stats":null,"previous_names":["p001water/p1soda"],"tags_count":5,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/P001water%2FP1soda","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/P001water%2FP1soda/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/P001water%2FP1soda/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/P001water%2FP1soda/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/P001water","download_url":"https://codeload.github.com/P001water/P1soda/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":239088379,"owners_count":19579434,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-02-16T05:04:05.441Z","updated_at":"2025-10-31T01:31:53.660Z","avatar_url":"https://github.com/P001water.png","language":"Go","funding_links":[],"categories":["Go"],"sub_categories":[],"readme":"![image-20240829092224067](./img/image-20240829092224067.png)\n\n\u003ch3 align=\"center\"\u003eP1soda 一款更高、更快、更强的全方位内网扫描工具\u003c/h3\u003e\n\n---\n\n\n\nP1soda （苏打水）是一款常规内网渗透场景下的全方位漏洞扫描工具，Powered by P001water\n\n\n\n## Version\n\n当前最新版本 `v0.0.6` （2025/6/08更新）[更新日志参见](https://github.com/P001water/P1soda/blob/master/更新日志.md)\n\n\n\n# 功能特色\n\n* 主机存活探测\n\n充分适应内网场景，支持多种格式输入\n\n例如`[-t 10.0.10.60/24]; [-t 10.0.10.60]; [-t 10.0.10.60-255]; [-t 10.0.10.60,10.0.10.61]`\n\n支持ping命令探测（ version \u003e 0.0.5 默认选择ping命令探测），ICMP echo发包探测\n\n* 内网网段探测\n\n快速探测内网可达网段，参考插件模式调用\n\n例子：探测B段，`[-plg netspy -cidr 192.168.8.10/16]`\n\n* 端口指纹识别\n\n基于nmap-service-probes指纹实现的Mini nmap端口指纹识别引擎，出于工具体积和最小化请求原则只是从全部指纹中提取关键指纹\n\n如下14条nmap Probe，支持指纹识别如下协议服务：\n\n```\nftp、monetdb、mysql、ssh、postgresql、\nsocks5、socks4、JDWP、mssql、memcached\nredis、adb、VNC\n```\n\n* web 侧信息探测\n\nhttp请求时User-Agent头随机化，基本web信息探测，http响应状态码，webTitle标题等\n\n* web 重点资产指纹识别\n\n从P1finger中精简的内网常见系统的指纹\n\n* web 漏洞检测\n\n从头实现的Mini Nuclei引擎，体积小于 2 M，支持nuclei的POC\n\n* OXID Resolver DCOM接口未授权网卡探测\n\nsocket Raw连接发包解决，避免调包，最小化工具体积\n\n* NetBIOS 137 139 主机信息探测\n\n137 NBNS、139 NTLMSSP协议中的主机信息提取，137 NBNS协议域控识别\n\n* 常见服务爆破功能，例如ssh、ftp、mysql、vnc等等\n\n根据返回报文更加智能化的服务爆破，减少无用的爆破，目前支持爆破模块\n\n```\nFtp\nmysql\nssh\nvnc\n```\n\n* socks5、http代理使用\n\n支持socks5、http代理使用\n\n* MS-17010检测，redis未授权，vnc未授权检测等等\n\n\n\n# 基本使用\n\n工具参数如下图，默认情况下不开启服务爆破功能\n\n![image-20250115172430938](./img/image-20250115172430938.png)\n\n* 入门使用\n\n单个、多个目标探测，支持CIDR网段输入\n\n```\nP1soda.exe -t 192.168.110.235 \t// 单个目标\nP1soda.exe -t 192.168.110.2-235 // 多个目标\nP1soda.exe -t 192.168.110.143,192.168.110.251 // 多个目标\nP1soda.exe -t 192.168.110.235/24 // 扫描110 C段\n```\n\n![image-20240908233120141](./img/image-20240908233120141.png)\n\n* 内网网段探测\n\n```\n.\\P1soda.exe -plg netspy -cidr 192.168.0.0/16\n```\n\n![image-20250115164812928](./img/image-20250115164812928.png)\n\n* 指定用户名密码爆破\n\n```\n.\\P1soda.exe -t 127.0.0.1 -br -user root,admin -pwd 123456 // -br 开启爆破模式，默认情况不开启\n```\n\n![image-20240908233510469](./img/image-20240908233510469.png)\n\n* 输出保存文件\n\n```\n.\\P1soda.exe -t 127.0.0.1 -br -nc -o // -br开启爆破模式, -o输出重定向到p1.txt, -nc取消颜色输出\n```\n\n![image-20240908233701996](./img/image-20240908233701996.png)\n\n* 针对url的检测\n\n单个url目标\n\n```\n.\\P1soda.exe -u http://192.168.110.251\n```\n\n![image-20240909000500045](./img/image-20240909000500045.png)\n\n多个目标\n\n```\n.\\P1soda.exe -uf .\\targets.txt\n```\n\n![image-20240908235659706](./img/image-20240908235659706.png)\n\n* Debug 测试信息\n\n```\n.\\P1soda.exe -u http://192.168.110.143:8888 -dbg\n```\n\ndebug显示一些poc信息，http请求信息\n\n![image-20240909005651301](./img/image-20240909005651301.png)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FP001water%2FP1soda","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FP001water%2FP1soda","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FP001water%2FP1soda/lists"}