Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/ffffffff0x/ones

可用于多个网络资产测绘引擎 API 的命令行查询工具
https://github.com/ffffffff0x/ones

ffffffff0x fofa fofa-cli hunter osint quake shodan zoomeye

Last synced: 29 days ago
JSON representation

可用于多个网络资产测绘引擎 API 的命令行查询工具

Host: GitHub
URL: https://github.com/ffffffff0x/ones
Owner: ffffffff0x
License: apache-2.0
Created: 2022-02-01T10:44:04.000Z (almost 3 years ago)
Default Branch: main
Last Pushed: 2023-09-14T08:27:03.000Z (about 1 year ago)
Last Synced: 2024-08-05T17:30:16.482Z (4 months ago)
Topics: ffffffff0x, fofa, fofa-cli, hunter, osint, quake, shodan, zoomeye
Language: Go
Homepage:
Size: 436 KB
Stars: 179
Watchers: 5
Forks: 18
Open Issues: 1
Metadata Files:
- Readme: README.md
- License: LICENSE

Awesome Lists containing this project

awesome-hacking-lists - ffffffff0x/ones - 可用于多个网络资产测绘引擎 API 的命令行查询工具 (Go)

README

可用于多个网络资产测绘引擎 API 的命令行查询工具,写个2个版本,一个 go 版本,一个 bash shell 脚本的版本

---

## 开始

### go 版本使用

**1. 下载**
- 从 [releases](https://github.com/ffffffff0x/ones/releases) 进行下载

**2. 创建配置文件**

将下方字段中的 key 改为你自己的,如果不填就保留默认的 xxxx
```bash
tee ones-config.json <<-'EOF'
{
"fofa_key": [
"[email protected]:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
],
"zoom_key": [
"xxxxxxxx-xxxx-xxxxx-xxxx-xxxxxxxxxx"
],
"shodan_key": [
"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
],
"quake_key": [
"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxx"
],
"hunter_key": [
"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
],
"chaos_key": [
"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
]
}
EOF
```

ones 支持加载多密钥配置,格式如下
```bash
{
"fofa_key": [
"[email protected]:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
"[email protected]:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
],
"zoom_key": [
"xxxxxxxx-xxxx-xxxxx-xxxx-xxxxxxxxxx",
"xxxxxxxx-xxxx-xxxxx-xxxx-xxxxxxxxxx"
],
"shodan_key": [
"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
],
"quake_key": [
"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxx",
"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxx"
],
"hunter_key": [
"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
],
"chaos_key": [
"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
]
}
```

**3. 支持选项**

```bash
ones -help
```

ones 支持以下选项
```bash
Usage:
ones [flags]

INPUT:
-fofa string fofa 查询
-quake string quake 查询
-zoom string zoomeye 查询 (不支持json导出)
-shodan string shodan 查询 (不支持json导出)
-hunter string huneter 查询
-chaos string chaos 查询

OUTPUT:
-json string 导出 json 格式 (源格式,无处理)
-txt string 导出 txt 格式 (ip:port 格式,经过处理)

CONFIGURATIONS:
-num int 查询数量 (默认100)
```

**4. 使用**

查询案例,fofa 查询 tomcat,只查询20个,默认输出
```bash
./ones -fofa 'app="APACHE-Tomcat"' -num 20
```

![](./img/11.png)

fofa 查询 tomcat,只查询15个,输出 json 格式的数据到 output123.json 中
```bash
./ones -fofa 'app="APACHE-Tomcat"' -num 15 -json output123.json
```

![](./img/12.png)

quake 查询 shiro ,查询10个,输出 txt 格式的数据到 output321.txt 中,输出 json 格式的数据到 output123.json 中
```bash
./ones -quake 'app:"Shiro权限管理系统"' -num 10 -txt output321.txt -json output123.json
```

![](./img/13.png)

同时查询 fofa 和 quake 的 shiro ,输出 txt 到 all.txt 中 (注意: 查询多个引擎时,不可导出为 json)
```bash
./ones -fofa 'app="APACHE-Shiro"' -quake 'app:"Shiro权限管理系统"' -txt all.txt
```

![](./img/14.png)

---

### bash shell 版本使用

**1. 下载**
```bash
wget -O ones https://f8x.io/ones && mv --force ones /usr/local/bin/ones && chmod +x /usr/local/bin/ones
```

**2. 创建配置文件**

将下方字段中的 key 改为你自己的,如果不填就保留默认的 xxxx
```bash
tee /root/ones.conf <<-'EOF'
{
"fofa_email": "[email protected]",
"fofa_key": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
"zoom_key": "xxxxxxxx-xxxx-xxxxx-xxxx-xxxxxxxxxx",
"shodan_key": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
"quake_key": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxx",
"hunter_key": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
"chaos_key": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
}
EOF
```

**3. 初始化环境**
```bash
ones -init
```

> 注意 : 初始化不会安装 [chaos](https://github.com/projectdiscovery/chaos-client) ,请自行安装

**4. 使用**

```bash
ones -help

ones -fofa 'app="tomcat"' 100
ones -quake 'tomcat' 100
ones -zoom 'tomcat' 100
ones -shodan 'tomcat' 100
ones -hunter 'tomcat' 100
ones -chaos 'ffffffff0x.com'
```

---

## API-KEY 的获取

- fofa API-KEY
- https://fofa.info/api
- ![](./img/10.png)

- zoomeye API-KEY
- https://www.zoomeye.org/profile
- ![](./img/6.png)

- shodan API-KEY
- https://account.shodan.io/
- ![](./img/7.png)

- quake API-KEY
- https://quake.360.cn/quake/#/personal
- ![](./img/8.webp)

- hunter API-KEY
- https://hunter.qianxin.com/home/userInfo
- ![](./img/9.png)

- chaos API-KEY
- https://chaos.projectdiscovery.io/

---

## License

[Apache License 2.0](https://github.com/ffffffff0x/name-fuzz/blob/main/LICENSE)

---

## Special Thanks

Special thanks to [JetBrains](https://www.jetbrains.com) for their support to this project.

[![](./img/JetBrains.png)](https://www.jetbrains.com)

---

> create by ffffffff0x