LatteSec/LatteBREAKER

``` # LatteBREAKER Advanced vulnerability scanner combining CVE detection, Nmap-style port scanning, exploit discovery, and professional PDF reporting in a single Go binary. [](https://golang.org/) [](LICENSE) [](https://github.com/LatteSec/LatteBREAKER/releases) [](https://github.com/LatteSec/LatteBREAKER/stargazers) [](https://github.com/LatteSec/LatteBREAKER/releases) [](https://github.com/LatteSec/LatteBREAKER/releases) [](https://github.com/LatteSec/LatteBREAKER/releases) --- ## 目录 - [Features](#features) - [Quick Start](#quick-start) - [Installation](#installation) - [Usage](#usage) - [Examples](#examples) - [Report Structure](#report-structure) - [Architecture](#architecture) - [API Integrations](#api-integrations) - [Security](#security) - [Contributing](#contributing) - [Roadmap](#roadmap) - [License](#license) - [Support](#support) --- ## Features ### Vulnerability Intelligence - Real-time CVE detection via NVD API 2.0 - MITRE CVE database integration - CVSS v3.1 scoring with severity classification - CPE matching for accurate version-based detection - Smart result caching to reduce API calls ### Port Scanning Engine - TCP Connect, SYN stealth, and UDP scan types - Service detection for 1000+ protocols - Banner grabbing with automatic version extraction - Custom port ranges (e.g., `80,443,8000-9000`) - Quick scan of top 100 most common ports - Full 1-65535 port range support ### Technology Fingerprinting - Web servers: Apache, Nginx, IIS, Tomcat, Lighttpd, Caddy - CMS platforms: WordPress, Drupal, Joomla, Magento - JavaScript frameworks: React, Vue.js, Angular, jQuery, Bootstrap - Backend languages: PHP, ASP.NET, Java, Python, Ruby, Node.js - Databases: MySQL, PostgreSQL, MongoDB, Redis, Elasticsearch - API services: GraphQL, REST, Swagger, gRPC ### Exploit Intelligence - ExploitDB search and exploit code retrieval - Rapid7 vulnerability database verification - PacketStorm Security archive search - Automatic CVE-to-exploit correlation - Risk prioritization based on exploit availability ### 专业 PDF 报告 - Ready-to-deliver documents with color-coded severity - Executive summary for management - Technical vulnerability details with CVSS scores - Formatted port scan result tables - Exploit code snippets and source links - Prioritized remediation recommendations ### 性能 - Multi-threaded concurrent scanning - Configurable thread count (1-100+) - Automatic API rate limiting - Configurable timeouts - Minimal memory footprint --- ## 快速开始 ### 安装 **Using Go:** ```bash go install github.com/LatteSec/LatteBREAKER@latest ``` **Docker:** ``` docker pull lattesec/lattebreaker:latest ``` **下载二进制文件：** 从 [Releases](https://github.com/LatteSec/LatteBREAKER/releases) 获取适用于 Linux、macOS、Windows、FreeBSD 的最新版本。 ### 基本用法 ``` lattebreaker -url https://example.com ``` ### 完整扫描示例 ``` lattebreaker -url https://example.com -portscan -ports 1-1000 -deep -threads 50 ``` ## 安装说明 ### 支持的平台 | 平台 | 架构 | |----------|--------------| | Linux | amd64, arm64, arm (Raspberry Pi) | | macOS | amd64 (Intel), arm64 (Apple Silicon) | | Windows | amd64, arm64 | | FreeBSD | amd64, arm64 | | OpenBSD | amd64, arm64 | | NetBSD | amd64, arm64 | ### Go 安装 ``` go install github.com/LatteSec/LatteBREAKER@latest ``` ### Docker ``` # 拉取镜像 docker pull lattesec/lattebreaker:latest # 运行扫描 docker run --rm \ -v $(pwd)/reports:/app/reports \ lattesec/lattebreaker \ -url https://target.com \ -output /app/reports/report.pdf # 带 Port Scanning (需要 host network) docker run --rm \ --network host \ -v $(pwd)/reports:/app/reports \ lattesec/lattebreaker \ -url https://target.com \ -portscan \ -ports 1-1000 ``` ### 从源码构建 ``` git clone https://github.com/LatteSec/LatteBREAKER.git cd LatteBREAKER go mod download go build -ldflags="-s -w" -o lattebreaker ``` ## 用法 ``` Usage: lattebreaker -url [flags] Required: -url string Target URL to scan Optional: -output string Output PDF filename (default: "report.pdf") -deep Enable deep scanning (path discovery, fingerprinting) -timeout int Request timeout in seconds (default: 30) -threads int Number of concurrent threads (default: 10) -portscan Enable port scanning -ports string Port range specification (e.g., "80,443,8000-9000") -scantype string Scan type: tcp, syn, udp, connect (default: "tcp") Examples: # Basic vulnerability scan lattebreaker -url https://example.com # Quick port scan lattebreaker -url https://example.com -portscan # Custom port range lattebreaker -url https://example.com -portscan -ports 80,443,8000-9000 # Deep technology detection lattebreaker -url https://example.com -deep # High-performance full scan lattebreaker -url https://example.com -deep -portscan -ports 1-65535 -threads 100 # UDP service discovery lattebreaker -url https://example.com -portscan -scantype udp -ports 53,161,500 ``` ### 端口范围格式 ``` # 单个端口 -ports 80,443,8080 # 范围 -ports 1-1000 # 混合 -ports 22,80,443,8000-9000,27017 # 所有端口 -ports 1-65535 ``` ## 示例 ### 渗透测试侦察 ``` lattebreaker -url https://target.com -portscan -ports 1-10000 -output recon.pdf ``` ### WordPress 安全审计 ``` lattebreaker -url https://wordpress-site.com -deep -output wordpress-audit.pdf ``` ### 持续安全监控 (Cron) ``` 0 2 * * * /usr/local/bin/lattebreaker -url https://production.com -output /reports/daily-$(date +\%Y\%m\%d).pdf ``` ### CI/CD Pipeline (GitHub Actions) ``` - name: Security Scan run: | go install github.com/LatteSec/LatteBREAKER@latest lattebreaker -url ${{ secrets.STAGING_URL }} -output report.pdf - name: Upload Report uses: actions/upload-artifact@v3 with: name: security-report path: report.pdf ``` ## 报告结构 1. **封面** - 目标信息、扫描日期、漏洞/开放端口数量 2. **执行摘要** - 关键发现、风险评估、可利用漏洞数量 3. **端口扫描结果** - 包含 Port、Protocol、State、Service、Version、Banner 的表格 4. **详细发现** - CVE ID、CVSS 评分、受影响组件、描述、参考链接 5. **可用 Exploit** - Exploit 链接和代码片段 6. **建议** - 按优先级排列的修复步骤 7. **附录** - 扫描配置详情 ### 严重性颜色编码 | 严重性 | CVSS 范围 | 颜色 | |----------|-----------|-------| | CRITICAL | 9.0 - 10.0 | 深红色 | | HIGH | 7.0 - 8.9 | 红色 | | MEDIUM | 4.0 - 6.9 | 橙色 | | LOW | 0.1 - 3.9 | 绿色 | ## 架构 ``` lattebreaker/ ├── main.go # CLI entry point ├── scanner/ │ ├── scanner.go # Core engine, technology detection │ ├── cve.go # CVE database queries (NVD + MITRE) │ ├── exploitdb.go # Exploit search (ExploitDB, Rapid7, PacketStorm) │ ├── portscanner.go # Port scanning engine (TCP/UDP/SYN) │ └── report.go # PDF report generator └── Makefile # Build automation ``` ### 数据流 ``` URL Input → Technology Detection → CVE Lookup → Exploit Check → PDF Report ↓ ↓ ↓ HTTP Headers NVD API ExploitDB HTML Content MITRE API Rapid7 JS Analysis PacketStorm Port Scanning Banner Grabbing ``` ## API 集成 | 服务 | Endpoint | 用途 | 速率限制 | |---------|----------|---------|------------| | NVD | `https://services.nvd.nist.gov/rest/json/cves/2.0` | 主 CVE 数据库 | 50 req/30s | | MITRE CVE | `https://cve.circl.lu/api/search` | 辅助 CVE 来源 | 无限制 | | ExploitDB | `https://www.exploit-db.com/search` | Exploit 验证 | 2s delay | | Rapid7 | `https://www.rapid7.com/db/` | 漏洞数据库 | 无限制 | | PacketStorm | `https://packetstormsecurity.com/search/` | Exploit 归档 | 无限制 | ## 构建 ### 快速构建（所有平台） ``` chmod +x build.sh ./build.sh ``` ### 特定平台构建 ``` # Linux GOOS=linux GOARCH=amd64 go build -ldflags="-s -w" -o lattebreaker-linux-amd64 # macOS Apple Silicon GOOS=darwin GOARCH=arm64 go build -ldflags="-s -w" -o lattebreaker-darwin-arm64 # Windows GOOS=windows GOARCH=amd64 go build -ldflags="-s -w" -o lattebreaker-windows-amd64.exe # Raspberry Pi GOOS=linux GOARCH=arm GOARM=7 go build -ldflags="-s -w" -o lattebreaker-linux-arm ``` ### 使用 Makefile ``` make build # Build for current platform make build-all # Build for all platforms make test # Run tests make lint # Run linter make fmt # Format code make docker-build # Build Docker image ``` ## 安全 **警告：** 本工具仅供授权的安全测试使用。在扫描任何系统之前，请务必获得书面许可。 未经授权的扫描可能会违反： - 计算机欺诈和滥用法 (CFAA) - 美国 - 滥用计算机法 1990 (Computer Misuse Act 1990) - 英国 - 其他司法管辖区的相关法律 **作者不对本工具的滥用或造成的损害负责。** ### 开发命令 ``` make fmt # Format code make vet # Run go vet make lint # Run golangci-lint make test # Run tests make test-cov # Test with coverage ``` ## 路线图 ### 2024 年第一季度 - Shodan/Censys API 集成 - 代理支持 (HTTP, SOCKS5) - JSON/HTML 报告导出 - 自定义漏洞签名 ### 2024 年第二季度 - Web 仪表板界面 - 扫描调度系统 - 用于远程扫描的 REST API - SIEM 集成 (Splunk, ELK) ### 2024 年第三季度 - 分布式扫描能力 - 用于指纹识别的机器学习 - 用于自定义检查的插件系统 - 实时监控模式 ## 许可证 MIT 许可证 - 详见 [LICENSE](LICENSE)。 ## 支持 - 问题：[GitHub Issues](https://github.com/LatteSec/LatteBREAKER/issues) - 讨论：[GitHub Discussions](https://github.com/LatteSec/LatteBREAKER/discussions) **由安全专业人士打造，为安全专业人士服务。**

标签：C2日志可视化, EVTX分析, Go语言, 实时处理, 密码管理, 指纹识别, 插件系统, 数据统计, 日志审计, 程序破解, 端口扫描, 请求拦截