{"id":14638022,"url":"https://github.com/z-bool/Venom-Transponder","last_synced_at":"2025-09-07T06:32:08.396Z","repository":{"id":188867924,"uuid":"672557960","full_name":"z-bool/Venom-Transponder","owner":"z-bool","description":"毒液流量转发器：自动化捡洞/打点/跳板必备神器，支持联动URL爬虫、各种被动扫描器。","archived":false,"fork":false,"pushed_at":"2025-03-03T02:01:26.000Z","size":19065,"stargazers_count":157,"open_issues_count":6,"forks_count":13,"subscribers_count":6,"default_branch":"main","last_synced_at":"2025-03-03T03:19:06.020Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/z-bool.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-07-30T13:48:23.000Z","updated_at":"2025-03-03T02:01:29.000Z","dependencies_parsed_at":"2025-01-02T10:45:13.951Z","dependency_job_id":null,"html_url":"https://github.com/z-bool/Venom-Transponder","commit_stats":null,"previous_names":["z-bool/venom-transponder"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/z-bool/Venom-Transponder","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/z-bool%2FVenom-Transponder","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/z-bool%2FVenom-Transponder/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/z-bool%2FVenom-Transponder/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/z-bool%2FVenom-Transponder/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/z-bool","download_url":"https://codeload.github.com/z-bool/Venom-Transponder/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/z-bool%2FVenom-Transponder/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":274005341,"owners_count":25205934,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-07T02:00:09.463Z","response_time":67,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-09-10T02:01:33.078Z","updated_at":"2025-09-07T06:32:08.384Z","avatar_url":"https://github.com/z-bool.png","language":null,"funding_links":[],"categories":["红队\u0026渗透测试","Others"],"sub_categories":[],"readme":"# Venom流量转发 - 自动化捡洞/打点必备神器\n\n**郑重声明：文中所涉及的技术、思路和工具仅供以安全为目的的学习交流使用，\u003cu\u003e任何人不得将其用于非法用途以及盈利等目的，否则后果自行承担\u003c/u\u003e** 。\n\n2025年6、7月再更新，更新内容包括流量并发控制、包含用户名/密码的代理配置、白名单域名\n\u003cp align=\"center\"\u003e\u003ca href=\"https://opensource.org/licenses/MIT\"\u003e\u003cimg src=\"https://img.shields.io/badge/license-MIT-_red.svg\"\u003e\u003c/a\u003e\u003ca href=\"https://github.com/z-bool/Venom\"\u003e\u003cimg  src=\"https://goreportcard.com/badge/github.com/projectdiscovery/httpx\"\u003e\u003c/a\u003e\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\u003ca href=\"#install\"\u003e工具介绍\u003c/a\u003e · \u003ca href=\"#tall\"\u003e使用说明\u003c/a\u003e · \u003ca href=\"#notice\"\u003e注意事项\u003c/a\u003e · \u003ca href=\"#communicate\"\u003e技术交流\u003c/a\u003e\u003c/p\u003e\n\n\u003cdiv id=\"install\"\u003e\u003c/div\u003e\n\n\u003ch3\u003e工具介绍\u003c/h3\u003e\n\n该流量转发器诞生背景：\n\n- 鉴于平时挖洞打点时用到被动扫描器，在挖洞时又喜欢在多台服务器上部署不同的代理扫描器，总会有捡洞的那一天，在使用Burp做流量转发的时候发现流量只能转发到置于首个的扫描器，于是又使用了https://github.com/c0ny1/passive-scan-client 该工具进行流量转发，但是还是不得我意，就花了一天上手搓了一个流量转发器出来，又花了一天调试和优化。针对使用过程中可能存在的问题已经做了处理，如：流量去重、无参静态文件过滤(这个还是针对黑名单个性化来的)、并发发包等。\n\n该工具的应用场景是什么：\n\n- 联动被动扫描器：将流量转发至被动扫描器进行漏扫，不限制扫描器数量，只需在启动命令行处设置转发地址即可\n- 联动爬虫工具：将爬虫工具的流量转发到Venom监听的端口上，由Venom给多个扫描器进行分发，工具：Rad、Crawlergo、Katana、URLFinder等\n\n为什么不开源出来：\n\n- 这里是因为后续我要出款被动扫描器，设置下悬念。\n\n测试期间产出（周末未审）：\n\n![image-20230730234231808](https://cdn.jsdelivr.net/gh/z-bool/images@master/img/image-20230730234231808.png)\n\n\u003cdiv id= \"tall\"\u003e\u003c/div\u003e\n\n\u003ch3\u003e使用说明\u003c/h3\u003e\n\n![image-20230730224644910](https://cdn.jsdelivr.net/gh/z-bool/images@master/img/image-20230730224644910.png)\n\n参数说明：\n\n```bash\n-blackdomain     使用根域名进行禁用（如果公有域名时请使用-mustblackdomain），如：aa.gov.cn(根域名)/gov.cn(公有域名)\n-mustblackdomain 禁用公有域名（只要带该内容的域名都会被无条件禁用，为了防止扫到不该扫的），不能为空\n-blackfiletype   文件后缀黑名单，那种静态文件就直接拦截了，没必要进行转发混淆流量增加漏扫发包，但是不拦截有参数的情况，比如a.css?index=0此时是不拦截的\n-port            监听的本地端口号，默认9090\n-proxy           如果访问的站点需要连接外网才能加载的，使用该参数配置代理，默认直连，tcp上的代理只支持socks5\n-turnproxy       转发的地址集合，以,分割，以下面的联动端口为例：http://127.0.0.1:1234,http://127.0.0.1:65530,http://127.0.0.1:65531\n-workgroup       线程数，默认10，根据自己电脑配置往上加即可 \n```\n\n**证书安装：**\n\n正常配置好参数启动时，当前目录下会出现`cert.key`和`cert.crt`文件。\n\n![image-20230730225718581](https://cdn.jsdelivr.net/gh/z-bool/images@master/img/image-20230730225718581.png)\n\n然后按正常装Burp证书一样装到受信任的凭证里的**根证书**里就可以了，然后把浏览器代理设置到监听的端口即可（默认9090）。\n\n**操作示范：**\n\n这里仅示范联动Burp、Xray、Yakit的使用教程（以顺丰为例）：\n\nBurp（65530端口）：\n\n![image-20230730224204767](https://cdn.jsdelivr.net/gh/z-bool/images@master/img/image-20230730224204767.png)\n\nYakit（65531端口）：\n\n![image-20230730224236034](https://cdn.jsdelivr.net/gh/z-bool/images@master/img/image-20230730224236034.png)\n\nXray（12345端口）：\n\n![image-20230730224350820](https://cdn.jsdelivr.net/gh/z-bool/images@master/img/image-20230730224350820.png)\n\nVenom联动展示：\n\n```bash\n.\\Venom -turnproxy \"http://127.0.0.1:12345,http://127.0.0.1:65530,http://127.0.0.1:65531\"\n```\n\n![image-20230730230143496](https://cdn.jsdelivr.net/gh/z-bool/images@master/img/image-20230730230143496.png)\n\n![image-20230730230957971](https://cdn.jsdelivr.net/gh/z-bool/images@master/img/image-20230730230957971.png)\n\n关于为什么没配置其他参数，因为这里面黑名单里默认加了我喜欢屏蔽的一些接口，有其他的新增，请复制全之后加入即可，然后线程别开太大，容易吹风扇。关于效果上，上图已经全部包含。\n\n这里仅示范联动Crawlergo：\n\n![image-20230730233328793](https://cdn.jsdelivr.net/gh/z-bool/images@master/img/image-20230730233328793.png)\n\n\n\n**支持系统：**\n\n全支持，支持mac/windows/linux，但mac在家，后续到家打包好再上传更新。\n\n\u003cdiv id=\"notice\"\u003e\u003c/div\u003e\n\n\u003ch3\u003e注意事项\u003c/h3\u003e\n\n黑名单不能为空，基本除`-turnproxy`外基本默认即可，黑名单是命令行输入的，如果替换了还需保留原有的内容请复制后往后加入。\n\n\u003cdiv id=\"communicate\"\u003e\u003c/div\u003e\n\n\u003ch3\u003e技术交流\u003c/h3\u003e\n\n\u003cimg src=\"https://cdn.jsdelivr.net/gh/z-bool/images@master/img/qrcode_for_gh_c90beef1e2e7_258.jpg\" alt=\"阿呆攻防公众号\" style=\"zoom:100%;\" /\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fz-bool%2FVenom-Transponder","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fz-bool%2FVenom-Transponder","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fz-bool%2FVenom-Transponder/lists"}