http://k8gege.org/Ladon/LadonGo.html
LadonGo一款开源渗透扫描器框架，使用它可轻松批量探测C段、B段存活主机、指纹识别、端口扫描、密码爆破、远程执行、高危漏洞检测等。2.0版本包含15个模块功能，高危漏洞检测MS17010、SmbGhost，远程执行SshCmd、WinrmCmd，密码爆破SmbScan、SshScan、FtpScan、MysqlScan、WinrmScan，存活探测/信息收集/指纹识别PingScan、IcmpScan，BannerScan、HttpTitle、WeblogicScan，端口扫描PortScan。
| . | . |
|---|---|
| PingScan | (Using system ping to detect Online hosts) |
| IcmpScan | (Using ICMP Protocol to detect Online hosts) |
| HttpBanner | (Using HTTP Protocol Scan Web Banner) |
| HttpTitle | (Using HTTP protocol Scan Web titles) |
| T3Scan | (Using T3 Protocol Scan Weblogic hosts) |
| PortScan | (Scan hosts open ports using TCP protocol) |
| MS17010 | (Using SMB Protocol to detect MS17010 hosts)) |
| SmbGhost | (Using SMB Protocol to detect SmbGhost hosts)) |
| SmbScan | (Using SMB Protocol to Brute-For 445 Port)) |
| SshScan | (Using SSH Protocol to Brute-For 22 Port)) |
| FtpScan | (Using FTP Protocol to Brute-For 21 Port)) |
| MysqlScan | (Using Mysql Protocol to Brute-For 3306 Port)) |
| WinrmScan | (Using Winrm Protocol to Brute-For 5985 Port)) |
| SshCmd | (SSH Remote command execution Default 22 Port)) |
| WinrmCmd | (Winrm Remote command execution Default 5985 Port)) |
go get github.com/k8gege/LadonGo
go build Ladon.goLadon help
Ladon Detection
Ladon BruteForceLadon IP/机器名/CIDR 扫描模块
Ladon 192.168.1.8/24 MS17010
Ladon 192.168.1/c MS17010
Ladon 192.168/b MS17010
Ladon 192/a MS17010Ping扫描C段存活主机（任意权限）
Ladon 192.168.1.8/24 PingScan
ICMP扫描C段存活主机(管理员权限)
Ladon 192.168.1.8/24 IcmpScan
SMB扫描C段永恒之蓝MS17010漏洞主机
Ladon 192.168.1.8/24 MS17010
SMB扫描C段永恒之黑SmbGhost漏洞主机
Ladon 192.168.1.8/24 SmbGhost
T3扫描C段开放WebLogic的主机
Ladon 192.168.1.8/24 T3Scan
HTTP扫描C段开放Web站点Banner
Ladon 192.168.1.8/24 BannerScan
HTTP扫描C段开放Web站点标题
Ladon 192.168.1.8/24 HttpTitle
扫描C段445端口Windows机器弱口令
Ladon 192.168.1.8/24 SmbScan
扫描C段22端口Linux机器SSH弱口令
Ladon 192.168.1.8/24 SshScan
扫描C段21端口FTP服务器弱口令
Ladon 192.168.1.8/24 FtpScan
扫描C段3306端口Mysql服务器弱口令
Ladon 192.168.1.8/24 MysqlScan
扫描C段5985端口Winrm服务器弱口令
Ladon 192.168.1.8/24 WinrmScan
Ladon SshCmd host port user pass cmd
Ladon WinrmCmd host port user pass cmd
1.和Ladon一样，ICMP探测C段仅需1秒
2.Ping扫描C段大约11秒，支持任意权限
3.其它模块自行测试
| ID | OS |
|---|---|
| 0 | WinXP |
| 1 | Win 2003 |
| 2 | Win 7 |
| 3 | Win 8.1 |
| 4 | Win 10 |
| 5 | Win 2008 R2 |
| 6 | Win 2012 R2 |
| 7 | Win 2019 |
| 8 | Kali 1.0.2 |
| 9 | Kali 2018 |
| 10 | Kali 2019 |
| 11 | SUSE 10 |
| 12 | CentOS 5.8 |
| 13 | CentOS 6.3 |
| 14 | CentOS 6.8 |
| 15 | Fedora 5 |
| 16 | RedHat 5.7 |
| 17 | BT5-R3 |
| 18 | MacOS 10.15 |
| 19 | Ubuntu 8 |
| 20 | Ubuntu 18 |
以上系统测试成功，其它系统未测，若不支持可自行编译
https://github.com/k8gege/LadonGo/releases
历史版本: https://github.com/k8gege/Ladon/releases
7.0版本：http://k8gege.org/Download
7.5版本：K8小密圈
