{"id":13841044,"url":"https://github.com/er10yi/MagiCude","last_synced_at":"2025-07-11T10:30:54.391Z","repository":{"id":41269609,"uuid":"267356181","full_name":"er10yi/MagiCude","owner":"er10yi","description":"分布式端口（漏洞）扫描、资产安全管理、实时威胁监控与通知、高效漏洞闭环、漏洞wiki、邮件报告通知、poc框架","archived":false,"fork":false,"pushed_at":"2023-03-24T02:24:02.000Z","size":19509,"stargazers_count":561,"open_issues_count":3,"forks_count":98,"subscribers_count":13,"default_branch":"main","last_synced_at":"2024-08-05T17:26:31.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/er10yi.png","metadata":{"files":{"readme":"README.md","changelog":"ChangeLog.md","contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2020-05-27T15:26:23.000Z","updated_at":"2024-07-31T07:23:35.000Z","dependencies_parsed_at":"2024-04-18T23:35:04.637Z","dependency_job_id":null,"html_url":"https://github.com/er10yi/MagiCude","commit_stats":null,"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/er10yi%2FMagiCude","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/er10yi%2FMagiCude/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/er10yi%2FMagiCude/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/er10yi%2FMagiCude/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/er10yi","download_url":"https://codeload.github.com/er10yi/MagiCude/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225713061,"owners_count":17512544,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T17:01:01.917Z","updated_at":"2024-11-21T10:31:25.888Z","avatar_url":"https://github.com/er10yi.png","language":"Python","funding_links":[],"categories":["Java","Java (504)","Python"],"sub_categories":[],"readme":"# 魔方-MagiCude\n\n## slogan\n\n赋予数据无限可能\n\n## 起名来源\n\n三阶魔方的变化有`(8!*3^8*12!*2^12)/(3*2*2)=43,252,003,274,489,856,000` 约等于4.3*10^19，即4325亿亿种变化，寓意数据也有无限种使用方式，与slogan**赋予数据无限可能**相呼应。\n\n## 项目说明\n\n魔方-MagiCude，基于Spring Boot微服务架构的系统；具有分布式端口（漏洞）扫描、资产安全管理、实时威胁监控与通知、自动漏洞闭环、漏洞wiki、邮件报告通知、poc框架等功能。\n\n1. 手动资产管理：应用系统-域名-ip-端口-负责人-标签等信息关联\n2. 自动资产管理：ip、端口(协议、状态、服务、版本)、域内DNS反解析域名、web页面及链接抓取\n3. 高危资产及漏洞实时推送：钉钉群机器人、企微群机器人实时推送\n4. 资产报告和漏洞报告定时推送：邮件汇总报告到默认邮箱、项目负责人只收到自己相关的报告，可配置定时周期\n5. 资产、漏洞统计：折线图、饼图展示相关信息\n6. 漏洞wiki：漏洞原理和修复方案等相关信息，需要持续维护和管理\n7. 基于Python3的自定义插件：方便应急响应\n8. 标签分类：分类可任意添加，可对ip、端口、应用系统手动加标签\n9. 扫描任务管理：实时任务状态，便捷的任务操作\n10. 白名单机制：项目组端口白名单、ip端口扫描白名单、提醒白名单、页面标题白名单、链接域名白名单\n\n这个项目能解决什么[需求和痛点](https://github.com/er10yi/MagiCude/wiki/Best-Practice#%E9%9C%80%E6%B1%82%E5%8F%8A%E7%97%9B%E7%82%B9 )\n\n## 简述\n\ncenter：数据库、redis、MQ、[管理前端](https://github.com/er10yi/MagiCude-admin )、任务控制和分发；任务进redis，并由MQ发送。\n\nagent：端口扫描任务、插件任务、http页面抓取任务执行；从redis中取任务，结果通过MQ返回。\n\n端口扫描基于nmap和masscan；主机发现基于nmap ping扫描；安全扫描基于nse脚本和自定义插件，自定义插件包括Java、Python3、基于HTTP/HTTPS访问的json插件，无回显命令执行可使用DNS或HTTP方式辅助确认；web页面抓取基于自定义爬虫。\n\n实时推送：钉钉群机器人、企微群机器人。\n\n## 安装指南\n### 可尝试最新版的预览版4（docker版）\n[2.2 Preview4](https://github.com/er10yi/MagiCude/releases/tag/v2.2-preview4)，**预览版与当前正式版有较大区别，readme和wiki中部分文档已过时。**\n\n以下为2.1版本的内容【**已过时，可根据预览版4的reame安装体验最新版**】\n\n如需部署2.1版本，请参考[旧分支的readme](https://github.com/er10yi/MagiCude/tree/v2.1)\n\n### 快速上手指南\n\n[快速上手指南](https://github.com/er10yi/MagiCude/wiki/Getting-Started-Guide )，快速了解系统的基本功能。\n\n### 最佳实践\n\n[最佳实践](https://github.com/er10yi/MagiCude/wiki/Best-Practice )，了解系统后，合理使用系统功能并发挥系统最大价值。\n\n### 说明文档\n\n[说明文档](https://github.com/er10yi/MagiCude/wiki/User-Guide )，详细说明文档。\n\n### 开发说明\n\n[开发说明](https://github.com/er10yi/MagiCude/wiki/Develop-Guide )，简要的开发说明。\n\n### 更多\n\n请查看[wiki](https://github.com/er10yi/MagiCude/wiki )中的相关内容。\n\n## 微信讨论组\n\n如有任何问题，欢迎群里反馈。\n\n扫描下方二维码，关注公众号，回复**自己的微信号+魔方**，即刻拥有！\n\n![公众号二维码](https://github.com/er10yi/MagiCude/raw/v2.1/%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8E%E5%9B%BE1/qrcode_for_Septemberend.jpg)\n\n## 部分功能截图\n\n### 首页\n\n![首页](https://github.com/er10yi/MagiCude/raw/v2.1/%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8E%E5%9B%BE/1%E9%A6%96%E9%A1%B5.png)\n\n### 统计\n\n资产统计1\n\n![资产统计1](https://github.com/er10yi/MagiCude/raw/v2.1/%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8E%E5%9B%BE/3%E8%B5%84%E4%BA%A7%E7%BB%9F%E8%AE%A1.png)\n\n资产统计2\n\n![资产统计2](https://github.com/er10yi/MagiCude/raw/v2.1/%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8E%E5%9B%BE/3%E8%B5%84%E4%BA%A7%E7%BB%9F%E8%AE%A12.png)\n\n高危统计\n\n![高危](https://github.com/er10yi/MagiCude/raw/v2.1/%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8E%E5%9B%BE/4%E9%AB%98%E5%8D%B1.png)\n\n### 任务\n\n![任务](https://github.com/er10yi/MagiCude/raw/v2.1/%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8E%E5%9B%BE/2%E4%BB%BB%E5%8A%A1.png)\n\n### 资产\n\n资产ip所有信息\n\n![ip所有信息](https://github.com/er10yi/MagiCude/raw/v2.1/%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8E%E5%9B%BE1/%E8%B5%84%E4%BA%A7ip.png)\n\n资产端口\n\n![资产端口](https://github.com/er10yi/MagiCude/raw/v2.1/%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8E%E5%9B%BE1/%E8%B5%84%E4%BA%A7%E7%AB%AF%E5%8F%A3.png)\n\n### 检测结果、提醒日志\n\nweb信息\n\n![webinfo](https://github.com/er10yi/MagiCude/raw/v2.1/%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8E%E5%9B%BE/7_1webinfo.png)\n\nweb信息和url\n\n![webinfo和url](https://github.com/er10yi/MagiCude/raw/v2.1/%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8E%E5%9B%BE/7_webinfo%E5%92%8Curl.png)\n\n检测结果和提醒日志\n\n![检测结果和提醒日志](https://github.com/er10yi/MagiCude/raw/v2.1/%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8E%E5%9B%BE/8%E6%A3%80%E6%B5%8B%E7%BB%93%E6%9E%9C%E5%92%8C%E6%8F%90%E9%86%92%E6%97%A5%E5%BF%97.png)\n\n### 邮件报告及钉钉群推送\n\n邮件所有资产报告（默认提醒邮箱），项目负责人只会收到属于自己项目的资产报告\n\n![邮件资产报告](https://github.com/er10yi/MagiCude/raw/v2.1/%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8E%E5%9B%BE/%E9%82%AE%E4%BB%B6%E8%B5%84%E4%BA%A7%E6%8A%A5%E5%91%8A.png)\n\n邮件所有漏洞报告（默认提醒邮箱），项目负责人只会收到属于自己项目的漏洞报告\n\n![邮件漏洞报告](https://github.com/er10yi/MagiCude/raw/v2.1/%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8E%E5%9B%BE/%E9%82%AE%E4%BB%B6%E6%BC%8F%E6%B4%9E%E6%8A%A5%E5%91%8A.png)\n\n钉钉群推送\n\n电脑客户端\n\n![钉钉群推送2](https://github.com/er10yi/MagiCude/raw/v2.1/%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8E%E5%9B%BE/%E9%92%89%E9%92%89%E7%BE%A4%E6%8E%A8%E9%80%812.png)\n\n手机端\n\n![钉钉群推送1](https://github.com/er10yi/MagiCude/raw/v2.1/%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8E%E5%9B%BE/%E9%92%89%E9%92%89%E7%BE%A4%E6%8E%A8%E9%80%811.png)\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fer10yi%2FMagiCude","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fer10yi%2FMagiCude","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fer10yi%2FMagiCude/lists"}