observer_ward(Zhen Cha Shou Wei )
Fu Wu He WebYing Yong Zhi Wen Shi Bie Gong Ju
View Demo
*
Report Bug
*
Request Feature
Guan Yu Zhe Ge Xiang Mu
- Zheng Zhong Sheng Ming :Wen Zhong Suo She Ji De Ji Zhu , Si Lu He Gong Ju Jin Gong Yi An Quan Wei Mu De De Xue Xi Jiao Liu Shi Yong ,Ren He Ren Bu De Jiang Qi Yong Yu Fei Fa Yong Tu Yi Ji Ying Li Deng Mu De ,Fou Ze Hou Guo Zi Xing Cheng Dan .
| Lei Bie | Shuo Ming |
|---|---|
| Zuo Zhe | San Mi Qian You Jiao Pi |
| Tuan Dui | 0x727 Wei Lai Yi Duan Shi Jian Jiang Lu Xu Kai Yuan Gong Ju |
| Ding Wei | She Qu Hua Zhi Wen Ku Shi Bie Gong Ju . |
| Yu Yan | Rust |
| Gong Neng | Fu Wu He WebYing Yong Zhi Wen Shi Bie Gong Ju |
- Ji Yu yamlBian Xie Tan Zhen ,Pi Pei Gui Ze He Ti Qu Qi
- Zhi Chi Fu Wu He WebYing Yong Ban Ben Shi Bie
- Shi Yong nvdBiao Zhun Tong Yong Ping Tai Mei Ju (CPE) Ming Ming Gui Fan
- She Qu Hua Zhi Wen Ku He nmapFu Wu Tan Zhen
- Ji Cheng Nuclei Yan Zheng Lou Dong
(back to top)
An Zhuang
Yuan Ma An Zhuang
- Cong Yuan Ma Bian Yi An Zhuang ,Geng Duo Ke Yi Cha Kan githubDe actionGong Zuo Liu Wen Jian workflow
Er Jin Zhi An Zhuang
- Cong Fa Bu Ye Mian Xia Zai release
- Ru Guo Shi MacXi Tong Ke Yi Tong Guo brewAn Zhuang
Shi Yong MacXi Tong brewAn Zhuang
DockerJing Xiang
- dockerJing Xiang ,
observer_wardZhi You Zhi Wen Shi Bie Gong Neng
[INFO ] probes loaded: 2223
[INFO ] optimized probes: 7
[INFO ] target loaded: 1
|_uri:[ http://172.17.0.2/ [apache-http] <> (200 OK) ]
|_uri:[ http://172.17.0.2/ [thinkphp] <> (200 OK) ]
kaliteam/observer_ward:nucleiShi Nei Zhi nuclei,Zai Mo Ren Pei Zhi Wen Jian Jia YoupluginsMu Lu ,Dan Shi Geng Xin Shi Jian Bu Hui Zui Xin Liao ,Shi Gou Jian dockerShi De Ban Ben
[INFO ] probes loaded: 2223
[INFO ] optimized probes: 7
[INFO ] target loaded: 1
|_uri:[ http://172.17.0.2/ [apache-http] <> (200 OK) ]
|_uri:[ http://172.17.0.2/ [thinkphp] <> (200 OK) ]
|_exploitable: [Critical] thinkphp-5023-rce: ThinkPHP 5.0.23 - Remote Code Execution
|_matched_at: http://172.17.0.2/index.php?s=captcha
|_shell: curl -X 'POST' -d '_method=__construct&filter[]=phpinfo&method=get&server[REQUEST_METHOD]=1' -H 'Accept: */*' -H 'Accept-Language: en' -H 'Content-Type: application/x-www-form-urlencoded' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.3.23' 'http://172.17.0.2/index.php?s=captcha'
Ru Men
~ ./observer_ward -t http://httpbin.org/
[INFO ] probes loaded: 6183
[INFO ] target loaded: 1
[INFO ] optimized probes: 8
:[ http://httpbin.org/ [0example,swagger] <httpbin.org> (200 OK) ]
- Shi Yong Bang Zhu
Usage: observer_ward [-l <list>] [-t <target...>] [-p <probe-path>] [--probe-dir <probe-dir...>] [--ua <ua>] [--mode <mode>] [--timeout <timeout>] [--thread <thread>] [--proxy <proxy>] [--ir] [--ic] [--plugin <plugin>] [-o <output>] [--format <format>] [--no-color] [--nuclei-args <nuclei-args...>] [--silent] [--debug] [--config-dir <config-dir>] [--update-self] [-u] [--update-plugin] [--daemon] [--token <token>] [--webhook <webhook>] [--webhook-auth <webhook-auth>] [--api-server <api-server>] [--mitm <mitm>] [--mcp] [--prompt-path <prompt-path>] [--asynq-redis <asynq-redis>] [--asynq-mode <asynq-mode>]
observer_ward
Options:
-l, --list multiple targets from file path
-t, --target the target (required)
-p, --probe-path customized fingerprint file path
--probe-dir customized fingerprint yaml file dir
--ua customized ua
--mode mode probes option[tcp,http,all] default: all
--timeout set request timeout.
--thread number of concurrent threads.
--proxy proxy to use for requests
(ex:[http(s)|socks5(h)]://host:port)
--ir include request/response pairs in output
--ic include certificate pairs in output
--plugin customized template dir
-o, --output export to the file
--format output format option[json,csv,txt] default: txt
--no-color disable output content coloring
--nuclei-args poc nuclei engine additional args
--silent silent mode
--debug debug mode
--config-dir customized template dir
--update-self update self
-u, --update-fingerprint
update fingerprint
--update-plugin update plugin
--daemon api background service
--token api Bearer authentication
--webhook send results to webhook server
(ex:https://host:port/webhook)
--webhook-auth the auth will be set to the webhook request header
AUTHORIZATION
--api-server start a web API service (ex:127.0.0.1:8080)
--mitm start a MITM proxy server (ex:127.0.0.1:1080)
--mcp enable stdio mcp server
--prompt-path read the path file and customize the LLM to generate prompt
--asynq-redis redis URI for asynq task queue (ex:redis://127.0.0.1:6379)
--asynq-mode asynq mode option[receive,send,both] default: receive
--help, help display usage information
| Can Shu Ming | Zuo Yong He Miao Shu |
|---|---|
| -l,--list | Cong Wen Jian Zhong Du Qu Mu Biao Lie Biao ,Yi Xing Yi Ge Mu Biao |
| -t,--target | Dan Ge Huo Zhe Duo Ge Mu Biao |
| -p,--probe | jsonTan Zhen Lu Jing (Ru Guo He --probe-dirYi Qi Shi Yong ,Gai Can Shu Wei Zhuan Huan jsonHou De Shu Chu Wen Jian Lu Jing ) |
| --probe-dir | yamlTan Zhen Mu Lu (Ru Guo He --probeYi Qi Shi Yong ,Hui Du Qu Gai Mu Lu Xia De Quan Bu yamlWen Jian Zhuan Huan Wei Yi Ge jsonWen Jian ) |
| --ua | She Zhi Qing Qiu Tou |
| --mode | Shi Bie Mo Shi :[tcp,http,all],Mo Ren http,Ye Jiu Shi Dang Mu Biao Mei You Xie Yi De Shi Hou Hui Chang Shi Tian Jia webXie Yi Zai Qu Shi Bie |
| --timeout | Qing Qiu He Lian Jie Chao Shi ,Dan Wei Wei Miao |
| --thread | Tong Shi Shi Bie De Xian Cheng Shu ,Mo Ren Wei cpuDe He Shu |
| --proxy | She Zhi Dai Li Fu Wu Qi ,Zhi Chi httpHe socks5,Li Ru :https://username:password@your-proxy.com:port |
| --ir | Zai jsonJie Guo Zhong Bao Cun Qing Qiu He Xiang Ying ,Bao Cun Qing Qiu Xiang Ying Ke Neng Bi Jiao Xiao Hao Nei Cun |
| --ic | Zai jsonJie Guo Zhong Bao Cun Zheng Shu Shu Ju |
| --plugin | Zhi Ding nucleiCha Jian Lu Jing ,Hui Kai Qi nucleiYan Zheng Lou Dong ,Ru Guo Lu Jing Wei defaultMo Ren Diao Yong Pei Zhi Wen Jian Jia Xia De pluginsMu Lu |
| -o,--output | Jiang Jie Guo Bao Cun Dao Wen Jian ,Ru Guo Wen Jian Hou Zhui Ming Shi Xia Mian Ge Shi Zhi Chi De Ke Yi Sheng Lue --formatCan Shu |
| --format | Shu Chu Ge Shi :Zhi Chi json,csvHe txt,Zai Bao Cun Wen Jian De Shi Hou Hui Gen Ju Wen Jian Hou Zhui Zi Dong Shi Bie |
| --no-color | Jin Yong Yan Se Shu Chu |
| --nuclei-args | nucleiDe E Wai Can Shu ,Hui An Zhao Kong Ge Fen Ge Zhui Jia Dao Diao Yong nucleiCan Shu ,Li Ru :-es info,Pai Chu infoCha Jian ,Zhi Chi Duo Ge |
| --silent | Jing Mo Mo Shi ,Bu Da Yin Ren He Xin Xi ,Chang Yong Zai Ming Ling Xing Guan Dao Zuo Wei Shu Ru Yuan |
| --debug | Kai Qi Diao Shi Mo Shi ,Hui Shu Chu Geng Duo Xin Xi ,Bao Gua Qing Qiu He Xiang Ying ,Ti Qu Dao De Tu Biao Ha Xi ,nucleiDiao Yong Ming Ling Xing Deng Xin Xi |
| --config-dir | Zhi Ding Pei Zhi Wen Jian Jia ,Mo Ren Zai Yong Hu Pei Zhi Wen Jian Jia Xia De observer_wardMu Lu |
| --update-self | Geng Xin Cheng Xu Zi Shen Ban Ben ,Ye Jiu Shi Gai Xiang Mu De defaultv4Fa Bu Biao Qian |
| -u,--update-fingerprint | Geng Xin Zhi Wen Dao Pei Zhi Wen Jian Jia ,Hui Fu Gai web_fingerprint_v4.jsonWen Jian |
| --update-plugin | Geng Xin She Qu nucleiCha Jian Dao Pei Zhi Wen Jian Jia ,Hui Zi Dong Jie Ya zipBing Qie Fu Gai pluginsMu Lu |
| --daemon | apiFu Wu Hou Tai Yun Xing ,windowBu Zhi Chi |
| --token | apiFu Wu Ren Zheng token |
| --webhook | Yao Jiang Shi Bie Jie Guo Tong Guo webhookFa Song Dao Zhi Ding url |
| --webhook-auth | webhookDe AUTHORIZATIONRen Zheng |
| --api-server | apiJian Ting Di Zhi De Duan Kou |
| --mitm | Qi Dong MITM Dai Li Fu Wu Qi (Shi Li :127.0.0.1:1080) |
| --mcp | Qi Yong stdio mcp Fu Wu |
| --prompt-path | Du Qu Lu Jing Wen Jian Bing Zi Ding Yi LLM Yong Yu Sheng Cheng prompt |
| --asynq-redis | asynq Ren Wu Dui Lie De Redis URI(Shi Li :redis://127.0.0.1:6379) |
| --asynq-mode | asynq Mo Shi Xuan Xiang [receive,send,both],Mo Ren :receive |
| --help | Da Yin Bang Zhu Xin Xi |
Geng Xin Zhi Wen Ku
-
Cong githubXia Zai Zhi Wen Ku ,Mo Ren Zhi Geng Xin webZhi Wen ,Ru Guo Xu Yao Jia Zai Fu Wu Zhi Wen Xu Yao Zi Xing Xia Zai service_fingerprint_v4.json Dao Pei Zhi Wen Jian Jia .
-
Mo Ren Bu Geng Xin Fu Wu Zhi Wen
- Mo Ren De Zhi Wen Wen Jian Ming You Liang Ge
web_fingerprint_v4.jsonHeservice_fingerprint_v4.json,Ru Guo Zai Pei Zhi Wen Jian Jia Zhong Cun Zai Jiang Hui Zi Dong Jia Zai . - Li Ru :
web_fingerprint_v4.jsonWen Jian Zai Pei Zhi Wen Jian Jia Xia De Lu Jing
| Cao Zuo Xi Tong | Bao Cun Lu Jing |
|---|---|
| Windows | C:\Users\Alice\AppData\Roaming\observer_ward\web_fingerprint_v4.json |
| Linux | /home/alice/.config/observer_ward/web_fingerprint_v4.json |
| macOS | /Users/Alice/Library/Application Support/observer_ward/web_fingerprint_v4.json |
- Zhi Ding yamlWen Jian Jia
--probe-dirHe Dan Ge jsonWen Jian--probe-pathCan Shu Jiang Quan Bu yamlWen Jian Zhuan Huan Wei Yi Ge Dan jsonWen Jian ,Fang Bian Xi Dai - Ran Hou Jiang Zhe Ge jsonWen Jian Fu Zhi Dao Pei Zhi Wen Jian Jia
./observer_ward --probe-dir web_fingerprint --probe-dir service_fingerprint/null -p fingerprint_v4.json
[INFO ] i convert the 6183 yaml file of the probe directory to a json file fingerprint_v4.json
- Li Ru Ni Ke Yi Jiang
FingerprintHubXiang Mu Xia De Fu Wu Zhi Wen ZhongnullTan Zhen Zhuan Huan Wei jsonWen Jian ,Bing Bao Cun Dao Pei Zhi Wen Jian Jia
~ ./observer_ward --probe-dir FingerprintHub/service-fingerprint/null -p .config/observer_ward/service_fingerprint_v4.json
[INFO ] i convert the 3960 yaml file of the probe directory to a json file .config/observer_ward/service_fingerprint_v4.json
Diao Shi Mo Shi
- Shi Yong
--debugKai Qi Diao Shi Mo Shi ,Ke Yi Kan Dao Geng Xiang Xi De Shu Chu Jie Guo
Details
[INFO ] probes loaded: 1
[INFO ] target loaded: 1
[INFO ] optimized probes: 1
[DEBUG] start: http://httpbin.org/
[DEBUG] Request {
uri: http://httpbin.org/ip,
version: HTTP/1.1,
method: GET,
headers: {
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8",
"content-type": "application/json",
},
body: None,
raw_request: None,
}
[DEBUG] Response {
version: HTTP/1.1,
uri: http://httpbin.org/ip,
status_code: 200,
headers: {
"date": "Mon, 08 Jul 2024 13:19:59 GMT",
"content-type": "application/json",
"content-length": "32",
"connection": "keep-alive",
"server": "gunicorn/19.9.0",
"access-control-allow-origin": "*",
"access-control-allow-credentials": "true",
},
extensions: Extensions,
body: Some(
{
"origin": "1.1.1.1"
}
,
),
}
[DEBUG] end: http://httpbin.org/
:[ http://httpbin.org/]
:[ http://httpbin.org/ip [httpbin-ip] <>]
|_: ip:["1.1.1.1"]
(back to top)
MITM(Zhong Jian Ren Dai Li )Zhi Chi
observer_ward Zhi Chi Yi MITM(Zhong Jian Ren Dai Li )Mo Shi Bei Dong Huo Qu Qing Qiu /Xiang Ying Bing Jin Xing Zhi Wen Shi Bie ,Gua He Zai Dai Li Chang Jing Xia Dui Zhen Shi Liu Liang Jin Xing Bei Dong Zhi Wen Pi Pei .
Qi Yong Yao Dian :
- MITM Gong Neng You crate Te Xing
mitmKong Zhi ;Mo Ren Te Xing Bao Hanmitm,Ruo Shi Yong Zi Ding Yi Te Xing Qing Que Bao Qi Yong Gai Te Xing . - Qi Dong Cheng Xu Shi Shi Yong
--mitmCan Shu Zhi Ding Jian Ting Di Zhi (Li Ru127.0.0.1:1080).
Ben Di Qi Dong Shi Li :
./observer_ward --mitm 127.0.0.1:1080
INFO probes loaded: 3131
INFO optimized probes: 9
INFO Starting MITM proxy server on 127.0.0.1:1080
INFO MITM proxy service started: http://127.0.0.1:1080
INFO Configure your browser or tool to use this proxy
INFO CA certificate path: .slinger-mitm/ca_cert.pem
Shi Yong Shuo Ming :
- Qi Dong Hou Hui Zai Ri Zhi Zhong Shu Chu Dai Li Jian Ting Di Zhi He CA Zheng Shu Lu Jing
.slinger-mitm/ca_cert.pem,Dao Ru CA Zheng Shu Yi Xin Ren Dai Li Hou Ji Ke Lan Jie HTTPS Liu Liang . - derGe Shi Zheng Shu Ke Yi Shi Yong
openssl x509 -in ca_cert.pem -outform DER -out cacert.derJin Xing Zhuan Huan - Bei Lan Jie De Xiang Ying Hui Yi Bu Ti Jiao Gei Zhi Wen Yin Qing Jin Xing Pi Pei ,Pi Pei Dao De Jie Guo Hui Tong Guo Yi You De Shu Chu Fang Shi (Zhong Duan , Wen Jian , webhook Deng )Fan Hui .
- Ru Guo She Zhi
--proxyHui Shi Yong Shang You Dai Li ,Ye Jiu Shi Liu Liang Hui Xian Jing Guo observer_wardDe mitmDai Li Zai Jing Guo Shang You Dai Li Fa Song Qing Qiu . - Ruo Gou Jian Wei Qi Yong
mitmTe Xing ,Qi Dong Shi Hui Ti Shi Te Xing Wei Qi Yong Bing Fan Hui Cuo Wu .
Asynq(Redis Fen Bu Shi Ren Wu Dui Lie )Zhi Chi
observer_ward Ji Cheng Liao Ji Yu Redis De Ren Wu Dui Lie (asynq),Ke Yi Ba Zhi Wen Shi Bie Ren Wu Tong Guo Redis Ru Dui ,worker Hui Cong Dui Lie Qu Chu Ren Wu Bing Chu Li ;worker Ye Ke Yi Ba Chu Li Jie Guo Fa Song Hui Jie Guo Dui Lie .
Qi Yong Yao Dian :
- Asynq Gong Neng You crate Te Xing
asynq_taskKong Zhi ;Mo Ren Te Xing Bao Hanasynq_task,Ruo Shi Yong Zi Ding Yi Te Xing Qing Que Bao Qi Yong Gai Te Xing . - Shi Yong
--asynq-redisZhi Ding Redis Lian Jie (Li Ruredis://127.0.0.1:6379). - Shi Yong
--asynq-modeZhi Ding Mo Shi :receiveZhi Cong redisJie Shou Ren Wu ,sendZhi Fa Song Shi Bie Jie Guo Dao redis,bothCong redisJie Shou Ren Wu Bing Qie Jiang Shi Bie Jie Guo Fan Hui Dao redis. Tui JianbothMo Shi Yong Yu Wan Zheng De Shou Fa Liu Cheng .
Qi Dong worker Shi Li (Ben Di Redis,both Mo Shi ):
./observer_ward --asynq-redis redis://127.0.0.1:6379 --asynq-mode both
Fa Song Ren Wu Shi Li :Xiang Mu Zhong Bao Han Shi Li Cheng Xu observer_ward/examples/send_asynq_task.rs,Yong Yu Ba Shi Li Ren Wu Ru Dui .
cargo run --manifest-path observer_ward/Cargo.toml --example send_asynq_task
Ren Wu Zai He Shi Li :
- Uri(Zhu Dong Qing Qiu )Ren Wu Shi Li :
"task_id": "example-123456",
"input": {
"type": "uri",
"target": ["http://example.com"]
}
}
- HttpData(Bei Dong Pi Pei )Ren Wu Shi Li :
"task_id": "example-123456",
"input": {
"type": "http_data",
"request": {
"uri": "http://example.com/",
"method": "GET",
"headers": null,
"body": null
},
"response": {
"uri": "http://example.com/",
"status_code": 200,
"headers": null,
"body": "...