扫码加入微信交流群
企业级分布式网络资产扫描平台 | Go-Zero + Vue3
| 模块 | 功能 | 工具 |
|---|---|---|
| 资产发现 | 端口扫描、服务识别 | Naabu / Masscan / Nmap |
| 子域名枚举 | 被动枚举 + 字典爆破 | Subfinder + KSubdomain |
| 指纹识别 | Web 指纹、3W+ 规则 | Httpx + Wappalyzer + 自定义引擎 |
| URL 发现 | 路径爬取 | Urlfinder |
| 漏洞检测 | POC 扫描、自定义 POC | Nuclei SDK |
| Web 截图 | 页面快照 | Chromedp / HTTPX |
| 在线数据源 | API 聚合搜索 | FOFA / Hunter / Quake |
平台能力：分布式架构 · 多工作空间 · 报告导出 · 审计日志
Demo 地址：http://cscan.txf7.cn
演示环境仅供体验，请勿用于实际扫描任务
git clone https://github.com/tangxiaofeng7/cscan.git
cd cscan
# Linux/macOS
chmod +x cscan.sh && ./cscan.sh
# Windows
.\cscan.bat访问 https://ip:3443，默认账号 admin / 123456
⚠️ 执行扫描前需先部署 Worker 节点
+--------------------------------------------------------------------------+
| CSCAN Architecture |
+--------------------------------------------------------------------------+
| |
| +----------------+ |
| | Browser/User | |
| | (Vue3 SPA) | |
| +-------+--------+ |
| | HTTPS (:3443) |
| v |
| +--------------------------------------------------------------------+ |
| | API Service (Go-Zero) | |
| | Port: 8888 | |
| | +--------------------------------------------------------------+ | |
| | | Routes: | | |
| | | - Public: /api/v1/login, /api/v1/worker/download | | |
| | | - Worker: /api/v1/worker/* (Install Key Auth) | | |
| | | - Auth: /api/v1/* (JWT Auth) | | |
| | | - Console: /api/v1/worker/console/* (JWT + Admin) | | |
| | +--------------------------------------------------------------+ | |
| +-----------+-----------------+--------------------------------------+ |
| | | |
| RPC (:9000) MongoDB |
| | | |
| +-----------v-------+ +------v------+ +-------------+ |
| | RPC Service | | MongoDB | | Redis | |
| | (Task Scheduler) | | (cscan) | | (:6379) | |
| +-------------------+ +-------------+ +------+------+ |
| | |
| +----------------------------------+ |
| | Pub/Sub & State Sync |
| v |
| +--------------------------------------------------------------------+ |
| | Worker Cluster (Distributed Scan) | |
| | +--------------+ +--------------+ +--------------+ | |
| | | Worker 1 | | Worker 2 | | Worker N | <- Scale Out | |
| | | | | | | | | |
| | | - Port Scan | | - Vuln Scan | | - Fingerprint| | |
| | | - WebSocket | | - File Mgmt | | - Terminal | | |
| | +--------------+ +--------------+ +--------------+ | |
| +--------------------------------------------------------------------+ |
| |
+--------------------------------------------------------------------------+
+------------------------------------------------------------------------------+
| CSCAN Feature Heatmap |
+------------------------------------------------------------------------------+
| |
| Module | Priority | Heatmap |
| ---------------------------------------------------------------------------- |
| Nuclei Vuln Scan | CRITICAL | ████████████████████████████████ |
| Port Scan (Naabu/Masscan) | CRITICAL | ████████████████████████████████ |
| Worker Distributed Node | CRITICAL | ████████████████████████████ |
| Fingerprint (Httpx/Wapp) | HIGH | ████████████████████████ |
| Subdomain Enum (Subfinder) | HIGH | ████████████████████████ |
| Task Scheduler (RPC) | HIGH | ████████████████████ |
| Online API (FOFA/Hunter) | HIGH | ████████████████████ |
| URL Discovery (Urlfinder) | MEDIUM | ████████████████ |
| Web Screenshot (Chromedp) | MEDIUM | ████████████████ |
| POC Template Management | MEDIUM | ████████████ |
| Report Export | LOW | ████████ |
| Audit Log | LOW | ████████ |
| ---------------------------------------------------------------------------- |
| |
| Legend: ████ Feature Priority / Usage Frequency |
| |
+------------------------------------------------------------------------------+
cscan/
├── api/ # HTTP API 服务
├── rpc/ # RPC 内部通信
├── worker/ # 扫描节点
├── scanner/ # 扫描引擎
├── scheduler/ # 任务调度
├── model/ # 数据模型
├── pkg/ # 公共工具库
├── onlineapi/ # FOFA/Hunter/Quake 集成
├── poc/ # POC 模板
├── web/ # Vue3 前端
└── docker/ # Docker 配置
# 1. 启动依赖
docker-compose -f docker-compose.dev.yaml up -d
# 2. 启动服务
go run rpc/task/task.go -f rpc/task/etc/task.yaml
go run api/cscan.go -f api/etc/cscan.yaml
# 3. 启动前端
cd web ; npm install ; npm run dev
# 4. 启动 Worker
go run cmd/worker/main.go -k <install_key> -s http://localhost:8888# Linux
./cscan-worker -k <install_key> -s http://<api_host>:8888
# Windows
cscan-worker.exe -k <install_key> -s http://<api_host>:8888| 层级 | 技术 |
|---|---|
| 后端 | Go 1.25 + Go-Zero |
| 前端 | Vue 3.4 + Element Plus + Vite + Sass |
| 存储 | MongoDB 6 + Redis 7 |
| 扫描 | Naabu / Masscan / Nmap / Subfinder / Httpx / Nuclei |
MIT