[Bug]POC扫描出现大面积报错

[Nasak2]

问题模块

POC/漏洞扫描 (POC Scan)

严重程度

功能异常 (Malfunction)

问题描述

poc扫描大面积报错

复现步骤

./fscan -hf result.txt -full -o result_full.txt

错误输出

| ........................^
[-] 设置项执行错误 key: 表达式编译错误: ERROR: <input>:1:2: Syntax error: mismatched input 'AvVhmFLUs0KTA3Kprsdag' expecting <EOF>
[-]  | 6AvVhmFLUs0KTA3Kprsdag==
[-]  | .^
[-] 设置项执行错误 key: 表达式编译错误: ERROR: <input>:1:25: Syntax error: mismatched input '<EOF>' expecting {'[', '{', '(', '.', '-', '!', 'true', 'false', 'null', NUM_FLOAT, NUM_INT, NUM_UINT, STRING, BYTES, IDENTIFIER}
[-]  | vXP33AonIp9bFwGl7aT7rA==
[-]  | ........................^
[-] 设置项执行错误 key: 表达式编译错误: ERROR: <input>:1:11: Syntax error: mismatched input 'PrS3XrPW' expecting <EOF>
[-]  | fsHspZw/92PrS3XrPW+vxw==
[-]  | ..........^
[-] 设置项执行错误 key: 表达式编译错误: ERROR: <input>:1:2: Syntax error: mismatched input 'NfXkC7YVCV5DASIrEm1Rg' expecting <EOF>
[-]  | 6NfXkC7YVCV5DASIrEm1Rg==
[-]  | .^
[-] 设置项执行错误 key: 表达式编译错误: ERROR: <input>:1:25: Syntax error: mismatched input '<EOF>' expecting {'[', '{', '(', '.', '-', '!', 'true', 'false', 'null', NUM_FLOAT, NUM_INT, NUM_UINT, STRING, BYTES, IDENTIFIER}
[-]  | bya2HkYo57u6fWh5theAWw==
[-]  | ........................^
[-] 设置项执行错误 key: 表达式编译错误: ERROR: <input>:1:25: Syntax error: mismatched input '<EOF>' expecting {'[', '{', '(', '.', '-', '!', 'true', 'false', 'null', NUM_FLOAT, NUM_INT, NUM_UINT, STRING, BYTES, IDENTIFIER}
[-]  | Us0KvVhTeasAm43KFLAeng==
[-]  | ........................^
[-] 设置项执行错误 key: 表达式编译错误: ERROR: <input>:1:25: Syntax error: mismatched input '<EOF>' expecting {'[', '{', '(', '.', '-', '!', 'true', 'false', 'null', NUM_FLOAT, NUM_INT, NUM_UINT, STRING, BYTES, IDENTIFIER}
[-]  | V2hhdCBUaGUgSGVsbAAAAA==
[-]  | ........................^
[-] 设置项执行错误 key: 表达式编译错误: ERROR: <input>:1:1: undeclared reference to 'OY' (in container 'lib')
[-]  | OY//C4rhfwNxCQAQCrQQ1Q==
[-]  | ^
[-] 设置项执行错误 key: 表达式编译错误: ERROR: <input>:1:25: Syntax error: mismatched input '<EOF>' expecting {'[', '{', '(', '.', '-', '!', 'true', 'false', 'null', NUM_FLOAT, NUM_INT, NUM_UINT, STRING, BYTES, IDENTIFIER}
[-]  | ZnJlc2h6Y24xMjM0NTY3OA==
[-]  | ........................^
[-] 设置项执行错误 key: 表达式编译错误: ERROR: <input>:1:25: Syntax error: mismatched input '<EOF>' expecting {'[', '{', '(', '.', '-', '!', 'true', 'false', 'null', NUM_FLOAT, NUM_INT, NUM_UINT, STRING, BYTES, IDENTIFIER}
[-]  | XTx6CKLo/SdSgub+OPHSrw==
[-]  | ........................^
[-] 设置项执行错误 key: 表达式编译错误: ERROR: <input>:1:2: Syntax error: mismatched input 'AvVhmFLUs0KTA3Kprsdag' expecting <EOF>
[-]  | 7AvVhmFLUs0KTA3Kprsdag==
[-]  | .^
[-] 设置项执行错误 key: 表达式编译错误: ERROR: <input>:1:25: Syntax error: mismatched input '<EOF>' expecting {'[', '{', '(', '.', '-', '!', 'true', 'false', 'null', NUM_FLOAT, NUM_INT, NUM_UINT, STRING, BYTES, IDENTIFIER}
[-]  | Q01TX0JGTFlLRVlfMjAxOQ==
[-]  | ........................^
[-] 设置项执行错误 key: 表达式编译错误: ERROR: <input>:1:25: Syntax error: mismatched input '<EOF>' expecting {'[', '{', '(', '.', '-', '!', 'true', 'false', 'null', NUM_FLOAT, NUM_INT, NUM_UINT, STRING, BYTES, IDENTIFIER}
[-]  | WuB+y2gcHRnY2Lg9+Aqmqg==
[-]  | ........................^
[-] 设置项执行错误 key: 表达式编译错误: ERROR: <input>:1:25: Syntax error: mismatched input '<EOF>' expecting {'[', '{', '(', '.', '-', '!', 'true', 'false', 'null', NUM_FLOAT, NUM_INT, NUM_UINT, STRING, BYTES, IDENTIFIER}
[-]  | Ymx1ZXdoYWxlAAAAAAAAAA==
[-] 执行POC错误 poc-yaml-backup-file: 请求发送错误: 请求执行失败: Get "http://192.168.1.42:9999/sql.zip": context deadline exceeded
[-] 设置项执行错误 泛微OA E-Cology HrmCareerApplyPerView.jsp SQL注入漏洞: 表达式编译错误: ERROR: <input>:1:14: undeclared reference to 'randLowercase' (in container 'lib')
[-]  | randLowercase(6)
[-]  | .............^
[-] 执行POC错误 poc-yaml-fckeditor-info: 请求发送错误: 请求执行失败: Get "http://192.168.1.42:9999//fckeditor/_samples/default.html": context deadline exceeded
[-] 设置项执行错误 帆软 FineReport Fr Log Rce: 表达式编译错误: ERROR: <input>:1:17: undeclared reference to 'timestamp_second' (in container 'lib')
[-]  | timestamp_second()
[-]  | ................^
[-] 设置项执行错误 Nacos 默认密钥创建用户: 表达式编译错误: ERROR: <input>:1:1: undeclared reference to 'eyJhbGciOiJIUzI1NiJ9' (in container 'lib')
[-]  | eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJuYWNvcyIsImV4cCI6MTY5ODg5NDcyN30.feetKmWoPnMkAebjkNnyuKo6c21_hzTgu0dfNqbdpZQ
[-]  | ^
[-] 执行POC错误 poc-yaml-shiro-key: 请求发送错误: 请求执行失败: Get "http://192.168.1.42:9999/": context deadline exceeded
[-] 执行POC错误 poc-yaml-sql-file: 请求发送错误: 请求执行失败: Get "http://192.168.1.42:9999/1.sql": context deadline exceeded
[-] 执行POC错误 poc-yaml-swagger-ui-unauth: 请求发送错误: 请求执行失败: Get "http://192.168.1.42:9999/swagger/ui/index": context deadline exceeded
[-] 执行POC错误 poc-yaml-tomcat-manager-weak: 请求发送错误: 请求执行失败: Get "http://192.168.1.42:9999/manager/html": context deadline exceeded
[-] 执行POC错误 poc-yaml-weblogic-console-weak: 请求发送错误: 请求执行失败: Head "http://192.168.1.42:9999/console/j_security_check": context deadline exceeded
[-] 192.168.3.81:3306 mysql 未发现弱密码
[-] 执行POC错误 poc-yaml-backup-file: 请求发送错误: 请求执行失败: Get "http://192.168.1.217:9999/sql.zip": context deadline exceeded
[-] 设置项执行错误 泛微OA E-Cology HrmCareerApplyPerView.jsp SQL注入漏洞: 表达式编译错误: ERROR: <input>:1:14: undeclared reference to 'randLowercase' (in container 'lib')
[-]  | randLowercase(6)
[-]  | .............^
[-] 执行POC错误 poc-yaml-fckeditor-info: 请求发送错误: 请求执行失败: Get "http://192.168.1.217:9999//fckeditor/_samples/default.html": context deadline exceeded
[-] 设置项执行错误 帆软 FineReport Fr Log Rce: 表达式编译错误: ERROR: <input>:1:17: undeclared reference to 'timestamp_second' (in container 'lib')
[-]  | timestamp_second()
[-]  | ................^
[-] 设置项执行错误 Nacos 默认密钥创建用户: 表达式编译错误: ERROR: <input>:1:1: undeclared reference to 'eyJhbGciOiJIUzI1NiJ9' (in container 'lib')
[-]  | eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJuYWNvcyIsImV4cCI6MTY5ODg5NDcyN30.feetKmWoPnMkAebjkNnyuKo6c21_hzTgu0dfNqbdpZQ
[-]  | ^
[-] 执行POC错误 poc-yaml-shiro-key: 请求发送错误: 请求执行失败: Get "http://192.168.1.217:9999/": context deadline exceeded
[-] 执行POC错误 poc-yaml-sql-file: 请求发送错误: 请求执行失败: Get "http://192.168.1.217:9999/1.sql": context deadline exceeded
[-] 执行POC错误 poc-yaml-swagger-ui-unauth: 请求发送错误: 请求执行失败: Get "http://192.168.1.217:9999/swagger/ui/index": context deadline exceeded
[-] 执行POC错误 poc-yaml-tomcat-manager-weak: 请求发送错误: 请求执行失败: Get "http://192.168.1.217:9999/manager/html": context deadline exceeded
[-] 执行POC错误 poc-yaml-weblogic-console-weak: 请求发送错误: 请求执行失败: Head "http://192.168.1.217:9999/console/j_security_check": context deadline exceeded
[-] 192.168.8.56:22 ssh 未发现弱密码
[-] 插件扫描错误 192.168.1.42:9999 - Get "http://192.168.1.42:9999": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
[-] 插件扫描错误 192.168.1.217:9999 - Get "http://192.168.1.217:9999": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
[-] 192.168.31.60:21 ftp 未发现弱密码
[-] 执行POC错误 poc-yaml-backup-file: 请求发送错误: 请求执行失败: Get "http://192.168.8.24:9090/sql.zip": context deadline exceeded
[-] 设置项执行错误 泛微OA E-Cology HrmCareerApplyPerView.jsp SQL注入漏洞: 表达式编译错误: ERROR: <input>:1:14: undeclared reference to 'randLowercase' (in container 'lib')
[-]  | randLowercase(6)
[-]  | .............^
[-] 执行POC错误 poc-yaml-fckeditor-info: 请求发送错误: 请求执行失败: Get "http://192.168.8.24:9090//fckeditor/_samples/default.html": context deadline exceeded
[-] 设置项执行错误 帆软 FineReport Fr Log Rce: 表达式编译错误: ERROR: <input>:1:17: undeclared reference to 'timestamp_second' (in container 'lib')
[-]  | timestamp_second()
[-]  | ................^
[-] 设置项执行错误 Nacos 默认密钥创建用户: 表达式编译错误: ERROR: <input>:1:1: undeclared reference to 'eyJhbGciOiJIUzI1NiJ9' (in container 'lib')
[-]  | eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJuYWNvcyIsImV4cCI6MTY5ODg5NDcyN30.feetKmWoPnMkAebjkNnyuKo6c21_hzTgu0dfNqbdpZQ
[-]  | ^
[-] 执行POC错误 poc-yaml-shiro-key: 请求发送错误: 请求执行失败: Get "http://192.168.8.24:9090/": context deadline exceeded
[-] 执行POC错误 poc-yaml-sql-file: 请求发送错误: 请求执行失败: Get "http://192.168.8.24:9090/1.sql": context deadline exceeded
[-] 执行POC错误 poc-yaml-swagger-ui-unauth: 请求发送错误: 请求执行失败: Get "http://192.168.8.24:9090/swagger/ui/index": context deadline exceeded
[-] 执行POC错误 poc-yaml-tomcat-manager-weak: 请求发送错误: 请求执行失败: Get "http://192.168.8.24:9090/manager/html": context deadline exceeded
[-] 执行POC错误 poc-yaml-weblogic-console-weak: 请求发送错误: 请求执行失败: Head "http://192.168.8.24:9090/console/j_security_check": context deadline exceeded
[-] 插件扫描错误 192.168.8.24:9090 - Get "http://192.168.8.24:9090": context deadline exceeded (Client.Timeout exceeded while awaiting headers)

fscan 版本

其他/自编译

操作系统

Ubuntu 22.04

系统架构

amd64 (x86_64)

补充信息

使用的版本是github下载的fscan_2.2.1_linux_x64

[hongxumin]

有办法解决么？

[Nasak2]

有办法解决么？

不知道，我急着用184去了

[ZacharyZcR]

我看看

[Nasak2]

我看看

这是啥情况啊老哥