{"id":14637820,"url":"https://github.com/lemonlove7/EHole_magic","last_synced_at":"2025-09-07T06:31:02.514Z","repository":{"id":177752168,"uuid":"660852882","full_name":"lemonlove7/EHole_magic","owner":"lemonlove7","description":"EHole(棱洞)魔改。可对路径进行指纹识别；支持识别出来的重点资产进行漏洞检测(支持从hunter和fofa中提取资产)支持对ftp服务识别及爆破","archived":false,"fork":false,"pushed_at":"2024-03-06T09:29:38.000Z","size":3049,"stargazers_count":822,"open_issues_count":5,"forks_count":51,"subscribers_count":10,"default_branch":"main","last_synced_at":"2025-01-02T10:37:46.231Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/lemonlove7.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-07-01T03:08:03.000Z","updated_at":"2024-12-29T13:55:02.000Z","dependencies_parsed_at":"2023-11-23T08:23:11.418Z","dependency_job_id":"5e6f4c24-078e-40df-bdde-82dee2bab99e","html_url":"https://github.com/lemonlove7/EHole_magic","commit_stats":null,"previous_names":["lemonlove7/ehole_magic"],"tags_count":5,"template":false,"template_full_name":null,"purl":"pkg:github/lemonlove7/EHole_magic","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lemonlove7%2FEHole_magic","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lemonlove7%2FEHole_magic/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lemonlove7%2FEHole_magic/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lemonlove7%2FEHole_magic/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/lemonlove7","download_url":"https://codeload.github.com/lemonlove7/EHole_magic/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lemonlove7%2FEHole_magic/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":274005341,"owners_count":25205934,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-07T02:00:09.463Z","response_time":67,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-09-10T02:01:16.930Z","updated_at":"2025-09-07T06:31:02.014Z","avatar_url":"https://github.com/lemonlove7.png","language":"Go","funding_links":[],"categories":["Go"],"sub_categories":[],"readme":"# EHole_magic\n在进行web打点时，信息收集中对目标进行指纹识别是必不可少的一个环节，使用EHole识别出来的重点资产还要用其他漏洞利用工具去检测，非常的不方便，在原本的基础上加了个漏洞检测功能。提打点的效率。（不影响原版功能的使用）\n\n\n\n# 运行流程\n对资产进行指纹识别--\u003e重点资产进行漏洞检测--\u003e如：http://www.xxx.com存在通达OA--\u003e 对通达OA漏洞进行扫描-\u003e对ftp服务进行暴力破解\n\u003cimg width=\"679\" alt=\"image\" src=\"https://github.com/lemonlove7/EHole_magic/assets/56328995/86acca48-90af-4a47-b197-7e4ef5df8a4b\"\u003e\n\n\n\n# 使用\n默认不开启，在poc.ini中将poc=no改为poc=yes开启\n\nftp爆破默认不开启，在poc.ini中将brute=no改为brute=yes开启\n\n\n### fofa识别\n注意：从FOFA识别需要配置FOFA 密钥以及邮箱，在config.ini内配置好密钥以及邮箱即可使用。\n\n搜索无结果 解决方案：如：将domain=\"baidu.com\"改为domain='\"baidu.com\"'\n```\nehole finger -s domain=\"baidu.com\"  // 支持所有fofa语法\n```\n### hunter识别\n注意：从hunter识别需要配置hunter 密钥，在config.ini内配置好密钥即可使用。\n\n搜索无结果 与fofa解决方案相同\n\n```\nehole finger -b ip=\"180.140.20.182\"  // 支持所有hunter语法\n```\n\n### 本地识别\n\n```\nehole finger -l 1.txt  // 从文件中加载url扫描\n```\n\n### 单个目标识别\n```\nehole finger -u http://www.baidu.com // 单个url检测\n```\n\n# 使用截图\n\u003cimg width=\"930\" alt=\"image\" src=\"https://github.com/lemonlove7/EHole_magic/assets/56328995/e4064f38-6458-4778-a2f5-b7db2de54b1d\"\u003e\n\n# 更新日志\n\n### 2023年7月5日\n\n1、修复mac版报错segmentation fault\n\n\n2、增加从hunter提取资产，进行指纹识别\n\n\u003cimg width=\"892\" alt=\"image\" src=\"https://github.com/lemonlove7/EHole_magic/assets/56328995/f2c733d8-6bf6-4d56-b31b-61015421fd7c\"\u003e\n\u003cimg width=\"807\" alt=\"image\" src=\"https://github.com/lemonlove7/EHole_magic/assets/56328995/dfb7b200-4938-41b1-88c3-9756c6970ebc\"\u003e\n\n### 2023年7月7日\n1、增加常用poc数量\n\n2、对ftp服务进行检测，将poc.ini中的brute设置为yes可进行密码爆破\n\n\u003cimg width=\"536\" alt=\"image\" src=\"https://github.com/lemonlove7/EHole_magic/assets/56328995/d28ca59b-3eab-4ef8-a19a-d8726ed274f2\"\u003e\n\u003cimg width=\"672\" alt=\"image\" src=\"https://github.com/lemonlove7/EHole_magic/assets/56328995/2fe41884-dd51-48ce-8651-b20e3a4a8139\"\u003e\n\n### 2023年7月13日\n\n1、更新指纹数量，1w+\n\n2、修复fofa -f或者-s 后没有具体资产显示\n\n3、增加宏景eHR人力资源信息管理系统sql注入检测\n\n\u003cimg width=\"1408\" alt=\"image\" src=\"https://github.com/lemonlove7/EHole_magic/assets/56328995/98c7590d-0dce-4b10-a329-5db313c5e484\"\u003e\n\u003cimg width=\"1132\" alt=\"image\" src=\"https://github.com/lemonlove7/EHole_magic/assets/56328995/78af3d01-7c23-4058-9071-402e07dbea6a\"\u003e\n\n### 2023年7月26日\n\n1、更新最近出的day(用友、金蝶云、大华)\n\n2、优化指纹识别\n\n### 2023年11月24日\n\n添加路径指纹识别（有些网站需要添加特定路径才能显示页面）感谢[G0mini](https://github.com/G0mini)师傅给的建议\n\n在poc.ini中设置参数route=yes开启\n路径字典 在dict目录下的path.txt中\n\n\u003cimg width=\"891\" alt=\"image\" src=\"https://github.com/lemonlove7/EHole_magic/assets/56328995/31db58ff-0bb2-4e68-b6ab-a9c824db13b5\"\u003e\n\n\u003cimg width=\"830\" alt=\"image\" src=\"https://github.com/lemonlove7/EHole_magic/assets/56328995/9dfd2db0-de44-4769-b4c1-11355055310c\"\u003e\n\n\u003cimg width=\"1127\" alt=\"image\" src=\"https://github.com/lemonlove7/EHole_magic/assets/56328995/35abd894-a6f6-44c8-bae6-f983ab0daae7\"\u003e\n\n### 2023年12月1日\n\n添加指纹至2w+\n\n\u003cimg width=\"1060\" alt=\"image\" src=\"https://github.com/lemonlove7/EHole_magic/assets/56328995/98ca03f0-c8e5-4da9-b916-bf5f3afbacf9\"\u003e\n\n### 2024年1月27日\n\n\n修复：对一些使用 JavaScript 跳转到新 URL 的站点存在问题\n\n感谢[mewhz](https://github.com/mewhz)师傅给出的修复方案：[补全JS匹配正则，并修复JS匹配URL路径丢失的问题](https://github.com/lemonlove7/EHole_magic/pull/20)\n\n\n### 2024年3月6日\n\n修复：有些网站能正常访问 使用此工具无法访问的问题\n\n\n\n## 参考优秀项目\nPOC-bomber：https://github.com/tr0uble-mAker/POC-bomber\n\npeiqi文库：https://peiqi.wgpsec.org\n\nEHole：https://github.com/EdgeSecurityTeam/EHole\n\nEHole-modify：https://github.com/A10nggg/EHole-modify/\n\n### Star历史\n\n![Star History Chart](https://api.star-history.com/svg?repos=lemonlove7/EHole_magic\u0026type=Date)\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flemonlove7%2FEHole_magic","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Flemonlove7%2FEHole_magic","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flemonlove7%2FEHole_magic/lists"}