Ladon Scanner For Golang

Wiki

http://k8gege.org/Ladon/LadonGo.html

Introduction

LadonGo is an open source intranet penetration scanner framework, which can be used to easily detect segment C, B, A live hosts, fingerprint identification, port scanning, password explosion, remote execution, high-risk vulnerability detection, etc. Version 4.0 includes 37 functions, high risk vulnerability detection MS17010, SmbGhost, remote execution of SshCmd, WinrmCmd, PhpShell, JspShell, GoWebShell, L, 12 protocol password explosion Smb/Ssh/Ftp/Mysql/Mssql/Oracle/Sqlplus/Winrm/HttpBasic/Edits/MongoDB/RouterOS, survival detection/information collection/fingerprint identification NbtInfo, OnlinePC, Ping, Icmp, SnmpScan, HttpBanner, HttpTitle, TcpBanner, WeblogicScan, O xidScan, Port scan / service probe portscan, forward to Socks5 proxy< br>

LadonGO 4.2 Pentest Scanner framework 全平台Go开源内网渗透扫描器框架,Windows/Linux/Mac内网渗透，使用它可轻松一键批量探测C段、B段、A段存活主机、高危漏洞检测MS17010、SmbGhost，远程执行SSH/Winrm，密码爆破SMB/SSH/FTP/Mysql/Mssql/Oracle/Winrm/HttpBasic/Redis，端口扫描服务识别PortScan指纹识别/HttpBanner/HttpTitle/TcpBanner/Weblogic/Oxid多网卡主机，端口扫描服务识别PortScan。

Development environment

OS: Kali 2019 X64

IDE: Mousepad

Go: 1.13 Linux

Function module

Detection

VulDetection

BruteForce

RemoteExec

Exploit

Socks5

Build

go get github.com/k8gege/LadonGo
go build Ladon.go

Make

make windows
make linux
make mac

Install

Linux/Mac

make install

Windows

go run install.go

Usage

help

Ladon FuncList
Ladon Detection
Ladon VulDetection
adon BruteFor
Ladon RemoteExec
Ladon Exploit
Ladon Example

Usage

Ladon IP/pcname/CIDR/URL/txt moudle

Ladon 192.168.1.8 MS17010
Ladon 192.168.1.8/24 MS17010
Ladon 192.168.1/c MS17010
Ladon 192.168/b MS17010
Ladon 192/a MS17010

Ladon 192.168.1-192.168.5 MS17010
Ladon http://192.168.1.8:8080 BasicAuthScan
Ladon ip.txt MS17010
Ladon url.txt HttpBanner

Examples

Forward Socks5 proxy server

Ladon Socks5 192.168.1.8 1080

Information collection and vulnerability detection

Ping scan segment C live hosts (with any permission) < br >

Ladon 192.168.1.8/24 PingScan

ICMP scanning section C survival host (administrator authority)

Ladon 192.168.1.8/24 IcmpScan

SNMP scanning of surviving hosts and devices in Segment C

Ladon 192.168.1.8/24 SnmpScan

SMB scans C-segment eternal blue ms17010 vulnerable hosts < br >

Ladon 192.168.1.8/24 MS17010

SMB scans C-segment eternal black smbghost vulnerability host < br >

Ladon 192.168.1.8/24 SmbGhost

T3 scans the hosts with open WebLogic in Segment C

Ladon 192.168.1.8/24 T3Scan

HTTP scanning C-segment open Web site Banner

Ladon 192.168.1.8/24 BannerScan

HTTP scanning section C open Web site title

Ladon 192.168.1.8/24 HttpTitle

TCP scans the open port service information of section C. < br >

Ladon 192.168.1.8/24 TcpBanner

TCP scans common open ports of segment C hosts

Ladon 192.168.1.8/24 PortScan

Password explosion, weak password

Scan weak password of windows machine on port 445 of section C. < br >

Ladon 192.168.1.8/24 SmbScan

Scan the SSH weak password of the 22 port Linux machine in section C

Ladon 192.168.1.8/24 SshScan

Scan the weak password of FTP server on port 21 of section C. < br >

Ladon 192.168.1.8/24 FtpScan

Scan the weak password of MySQL server on port 3306 in section C

Ladon 192.168.1.8/24 MysqlScan

Scan weak password of Oracle server on port 1521 in segment C

Ladon 192.168.1.8/24 OracleScan

Scan the weak password of MongoDB server on port 27017 in section C

Ladon 192.168.1.8/24 MongodbScan

Scan weak password of Oracle server on port 1521 of section C. < br >

Ladon 192.168.1.8/24 SqlplusScan

Scan section C 5985 port Winrm server weak password

Ladon 192.168.1.8/24 WinrmScan

Scan the empty password of redis server on port 6379 of section C. < br >

Ladon 192.168.1.8/24 RedisScan

Scan C-segment 8728 port Routeros router < br >

Ladon 192.168.1.8/24 RouterOSScan

Remote command execution

Ladon SshCmd host port user pass cmd
Ladon WinrmCmd host port user pass cmd
Ladon PhpShell url pass cmd
Ladon PhpStudyDoor url cmd

SshCmd & WinrmCmd

PhpShell & PhpStudyDoor

SCAN IP/24 (192.168.1/c)

Scan B(192.168/b)

PS: the scanning speed is actually similar to the speed of Ladon. Net version, but there is no special record, because the speed of go version is recorded by the way during the rewrite test

Cross platform / whole platform / whole system

Support old and new operating systems, especially old Linux systems. Many online tools can't be used at all or various errors are reported

TestOn

MacOS x64 10.15

Linux

Windows

Download

LadonGo (ALL OS)

https://github.com/k8gege/LadonGo/releases
http://k8gege.org/Download/LadonGo.rar

Ladon (Windows & Cobalt Strike)

History: https://github.com/k8gege/Ladon/releases
911 Ver：http://k8gege.org/Download

Stargazers over time