增加异常处理

Author: SummerSec

cmd/commons/attack/attack.go

@@ -9,7 +9,6 @@ import (
 )
 
 func Sevice(url string, hashmap map[string]interface{}) {
-	log.Debugln("github.com/SummerSec/SpringExploit/cmd/commons/attack/attack.go")
 	log.Debugf("[*] Start attack %s", url)
 	pocs := make(map[string]interface{})
 	a := addPoc(pocs)

cmd/commons/core/runner.go

@@ -99,7 +99,11 @@ func Start(u string, hashmap map[string]interface{}, i int, c chan int) {
 	} else {
 		target = r.Scheme + "://" + r.Host + r.Path
 	}
-
+	defer func() {
+		if err := recover(); err != nil {
+			log.Error(" Runner panic: ", err)
+		}
+	}()
 	attack.Sevice(target, hashmap)
 
 	// 放到最后，不然无法生效

cmd/commons/core/update.go

@@ -6,6 +6,7 @@ import (
 	"github.com/tj/go-update/progress"
 	githubUpdateStore "github.com/tj/go-update/stores/github"
 	"runtime"
+	"strings"
 )
 
 const (
@@ -68,7 +69,11 @@ func selfUpdate() {
 // 获取最新版本
 func getLatestVersion() {
 	log.Info("Crrunent Version: ", version)
-	log.Infof("Latest Version: %s", getLatestVersionFromGithub())
+	latestverion := getLatestVersionFromGithub()
+	log.Infof("Latest Version: %s", latestverion)
+	if strings.Compare(latestverion, version) > 0 {
+		log.Info("Use Command SpringExploit -update to update to latest version ")
+	}
 
 }
 
@@ -87,5 +92,6 @@ func getLatestVersionFromGithub() string {
 		return ""
 	}
 	latest := releases[0]
+
 	return latest.Version
 }

cmd/commons/poc/2022/CVE-2022-1388.go

@@ -114,7 +114,6 @@ func (CVE20221388) CheckExp(resp *req.Response, randstr string, hashmap map[stri
 		return true
 	}
 	return false
-	return false
 }
 
 func completer(d prompt.Document) []prompt.Suggest {

cmd/commons/utils/httpclient.go

@@ -54,14 +54,13 @@ func Send(hashmap map[string]interface{}) (resp *req.Response) {
 
 	reqt := client.R().EnableDump()
 	reqs := SetRequest(reqt, headers, body.(string))
-	resp, err := reqs.Send(method, url)
-	if err != nil {
-		log.Error("send request error:	" + err.Error())
-		return nil
-	}
+	defer func() {
+		if err := recover(); err != nil {
+			log.Error("send request error:	" + err.(string))
+		}
+	}()
+	resp, _ = reqs.Send(method, url)
+	log.Trace(resp.String())
 	log.Debugln("send request success")
-	//res := resp.Dump()
-	//log.Debugln("response:	" + res)
-
 	return resp
 }

cmd/commons/utils/os.go

@@ -10,7 +10,8 @@ import (
 func main() {
 	u := "https://api.github.com/repos/SummerSec/SpringExploit/releases/latest"
 	fmt.Println(u)
-	resp, _ := req.R().Get(u)
+	resp, _ := req.C().DevMode().R().Head(u)
+	fmt.Println(resp.Result())
 	body, _ := resp.ToString()
 	// body to map
 	fmt.Println(body)