前言
大佬们各种造轮子各种秀,秀的我头皮发麻,我也想和大佬们一样优秀,可是一直无法编程入门
考虑到只会 PHP ,并且也为了方便博客会员,因此另类加入造轮子队列中~
大佬请飞过,本文主要是分享给那些有博客的朋友们
成品样式
FOFA 高级搜索小工具之 WordPress 版开发
1.主题文件 function.php 末尾加入下面代码
/* fofa查询 */ function fofa_cx() { if ( !empty($_POST['fofa_yf']) ) { // 这里写入你的判断条件,我随便写的一个例子 $email = ''; //配置fofa账号 $key = ''; //配置fofa key $size = $_POST['fofa_ts']; $data = $_POST['fofa_yf']; $fields = 'host,ip,title,port'; $url = 'https://fofa.so/api/v1/search/all?email='.urlencode($email).'&key='.$key.'&size='.$size.'&fields='.$fields.'&qbase64='.base64_encode(stripslashes($data)).''; $ch = curl_init(); $timeout = 3; curl_setopt ($ch, CURLOPT_URL, $url); curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout); $file_contents = curl_exec($ch); curl_close($ch); echo $file_contents; exit; } else { echo json_encode('null'); exit; } } function fofa_cx_no(){ echo json_encode('no_login'); // 登陆判断 可以去掉这个函数 exit; } add_action('wp_ajax_nopriv_fofa_cx', 'fofa_cx_no'); //登陆判断 可以去掉 add_action('wp_ajax_fofa_cx', 'fofa_cx');
2.主题 js 文件中加入下面代码
/** * fofa */ function run_form() { const fofa_yf = document.querySelector('#fofa_yf').value.replace(/&/g,"%26") //replace 不能去掉否则会无法解析 & const fofa_ts = document.querySelector('#fofa_ts').value $.ajax({ //几个参数需要注意一下 type: "POST",//方法类型 dataType: "json",//预期服务器返回的数据类型 url: "/wp-admin/admin-ajax.php" ,//url data: `action=fofa_cx&fofa_yf=${fofa_yf}&fofa_ts=${fofa_ts}`, beforeSend: function (data){ document.querySelector('.tsk').style.display='block' document.querySelector('.tsk').innerHTML='查询中.............' }, success: function (data) { if ( data['error'] == false ) { var json=data['results']; var str = ""; str += "<table border='solid'>"; for (var i = 0; i < json.length; i++) { str += "<tr>"; for (var k = 0; k < json[i].length; k++) { str += " <td style='overflow: hidden;white-space: pre;text-align: center;'>" + json[i][k] + "</td>"; } str += "</tr>"; } str += "</table>"; document.getElementById('info').innerHTML=str; document.querySelector('#btn').style.pointerEvents = 'all' document.querySelector('#btn').style.opacity = 'inherit' document.querySelector('.tsk').innerHTML='查询完成'; setTimeout(function () { document.querySelector('.tsk').style.display='none' }, 2000); } else if( data['errmsg'] == 'Query invalid!' ) { document.querySelector('.tsk').style.display='block' document.querySelector('.tsk').innerHTML='查询语法不得为空,请输入!' setTimeout(function () { document.querySelector('.tsk').style.display='none' }, 2000); } else if( data['errmsg'] == 'FOFA coin is not enough!' ){ document.querySelector('.tsk').style.display='block' document.querySelector('.tsk').innerHTML='API 接口可能出现问题,请留言告知管理员!' setTimeout(function () { document.querySelector('.tsk').style.display='none' }, 2000); } else if( data == 'no_login' ){ document.querySelector('.tsk').innerHTML='您还未登陆,请先登陆!' setTimeout(function () { window.location.href=`/wp-login.php` }, 2000); }; }, statusCode: { 500: function (){ document.querySelector('.tsk').style.display='block' document.querySelector('.tsk').innerHTML='fofa 官网可能被攻击导致查询失败,请重试!' setTimeout(function () { document.querySelector('.tsk').style.display='none' }, 2000); }, }, }); }
3.主题的 page.php 页面文件 复制 粘贴命名为 page-fofa.php 并在文件的文章内容处加入下方代码
<div class="right-box animate__animated"> <div class="the_content"> <div class="entry-content status-publish" itemprop="articleBody"> <div class="mk-alert danger"> <p>FOFA 搜索引擎高级会员搜索小工具,请遵守网络安全法规.</p> </div> <div data-example-id="form-inline-with-input-group"> <form onsubmit="return false" action="##" method="post" id="run_form"> <div> <label class="sr-only" for="exampleInputAmount">fofa</label> <div class=""> <span class="fofa_bq">语法</span> <input type="text" class="fofa_input" style="width: 40%;" name="fofa_yf" id="fofa_yf" value='' placeholder='header="ThinkPHP" && body="/index.php/admin"'> <a href = "https://www.mrwu.red/fenxiang/3844.html" target="_blank">使用帮助</a> <a href = "javascript:void(0)"onclick="document.getElementById('light').style.display='block';">语法详解</a> <div id="light" class="white_content"> <a href = "javascript:void(0)" onclick ="document.getElementById('light').style.display='none';" class="gbi"><i class="fa fa-times-rectangle fa-lg"></i></a> <h2>查询语法参考</h2> <div class="mk-alert info"> <p>直接输入查询语句,将从标题,html内容,http头信息,url字段中搜索;</p> <p>如果查询表达式有多个与或关系,尽量在外面用()包含起来;</p> <p>* 新增==完全匹配的符号,可以加快搜索速度,比如查找qq.com所有host,可以是domain=="qq.com" *</p> </div> <h2>高级搜索</h2> <div class="mk-alert info"> <p>可以使用括号 和 && || !=等符号,如</p> <p></p> <p>title="powered by" && title!=discuz</p> <p>title="powered by" && title!=discuz</p> <p>( body="content="WordPress" || (header="X-Pingback" && header="/xmlrpc.php" && body="/wp-includes/") && host="gov.cn"</p> </div> <table class="layui-table normal table-content"> <tbody><tr> <td style="min-width: 42%;">title="beijing"</td> <td style="min-width: 30%;">从标题中搜索“北京”</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">header="jboss"</td> <td style="min-width: 30%;">从http头中搜索“jboss”</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">body="Hacked by"</td> <td style="min-width: 30%;">从html正文中搜索abc</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">domain="qq.com"</td> <td style="min-width: 30%;">搜索根域名带有qq.com的网站。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">icon_hash="-247388890"</td> <td style="min-width: 30%;">搜索使用此icon的资产。</td> <td style="min-width: 28%;">仅限高级会员使用</td> </tr> <tr> <td style="min-width: 42%;">host=".gov.cn"</td> <td style="min-width: 30%;">从url中搜索”.gov.cn”</td> <td style="min-width: 28%;">搜索要用host作为名称</td> </tr> <tr> <td style="min-width: 42%;">port="443"</td> <td style="min-width: 30%;">查找对应“443”端口的资产</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">ip="1.1.1.1"</td> <td style="min-width: 30%;">从ip中搜索包含“1.1.1.1”的网站</td> <td style="min-width: 28%;">搜索要用ip作为名称</td> </tr> <tr> <td style="min-width: 42%;">ip="220.181.111.1/24"</td> <td style="min-width: 30%;">查询IP为“220.181.111.1”的C网段资产</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">status_code="402"</td> <td style="min-width: 30%;">查询服务器状态为“402”的资产</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">protocol="https"</td> <td style="min-width: 30%;">查询https协议资产</td> <td style="min-width: 28%;">搜索指定协议类型(在开启端口扫描的情况下有效)</td> </tr> <tr> <td style="min-width: 42%;">city="Hangzhou"</td> <td style="min-width: 30%;">搜索指定城市的资产。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">region="Zhejiang"</td> <td style="min-width: 30%;">搜索指定行政区的资产。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">country="CN"</td> <td style="min-width: 30%;">搜索指定国家(编码)的资产。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">cert="google"</td> <td style="min-width: 30%;">搜索证书(https或者imaps等)中带有google的资产。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">banner=users && protocol=ftp</td> <td style="min-width: 30%;">搜索FTP协议中带有users文本的资产。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">type=service</td> <td style="min-width: 30%;">搜索所有协议资产,支持subdomain和service两种。</td> <td style="min-width: 28%;">搜索所有协议资产</td> </tr><tr> <td style="min-width: 42%;">os=windows</td> <td style="min-width: 30%;">搜索Windows资产。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">server=="Microsoft-IIS/7.5"</td> <td style="min-width: 30%;">搜索IIS 7.5服务器。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">app="HIKVISION-视频监控"</td> <td style="min-width: 30%;">搜索海康威视设备</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">after="2017" && before="2017-10-01"</td> <td style="min-width: 30%;">时间范围段搜索</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">asn="19551"</td> <td style="min-width: 30%;">搜索指定asn的资产。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">org="Amazon.com, Inc."</td> <td style="min-width: 30%;">搜索指定org(组织)的资产。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">base_protocol="udp"</td> <td style="min-width: 30%;">搜索指定udp协议的资产。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">is_ipv6=true</td> <td style="min-width: 30%;">搜索ipv6的资产</td> <td style="min-width: 28%;">搜索ipv6的资产,只接受true和false。</td> </tr> <tr> <td style="min-width: 42%;">is_domain=true</td> <td style="min-width: 30%;">搜索域名的资产</td> <td style="min-width: 28%;">搜索域名的资产,只接受true和false。</td> </tr> <tr> <td style="min-width: 42%;">ip_ports="80,161"</td> <td style="min-width: 30%;">搜索同时开放80和161端口的ip</td> <td style="min-width: 28%;">搜索同时开放80和161端口的ip资产(以ip为单位的资产数据)</td> </tr> <tr> <td style="min-width: 42%;">port_size="6"</td> <td style="min-width: 30%;">查询开放端口数量等于"6"的资产</td> <td style="min-width: 28%;">仅限FOFA会员使用</td> </tr> <tr> <td style="min-width: 42%;">port_size_gt="3"</td> <td style="min-width: 30%;">查询开放端口数量大于"3"的资产</td> <td style="min-width: 28%;">仅限FOFA会员使用</td> </tr> <tr> <td style="min-width: 42%;">port_size_lt="12"</td> <td style="min-width: 30%;">查询开放端口数量小于"12"的资产</td> <td style="min-width: 28%;">仅限FOFA会员使用</td> </tr> <tr> <td style="min-width: 42%;">ip_country="CN"</td> <td style="min-width: 30%;">搜索中国的ip资产(以ip为单位的资产数据)。</td> <td style="min-width: 28%;">搜索中国的ip资产</td> </tr> <tr> <td style="min-width: 42%;">ip_region="Zhejiang"</td> <td style="min-width: 30%;">搜索指定行政区的ip资产(以ip为单位的资产数据)。</td> <td style="min-width: 28%;">搜索指定行政区的资产</td> </tr> <tr><td style="min-width: 42%;">ip_city="Hangzhou"</td> <td style="min-width: 30%;">搜索指定城市的ip资产(以ip为单位的资产数据)。</td> <td style="min-width: 28%;">搜索指定城市的资产</td> </tr> <tr> <td style="min-width: 42%;">ip_after="2019-01-01"</td> <td style="min-width: 30%;">搜索2019-01-01以后的ip资产(以ip为单位的资产数据)。</td> <td style="min-width: 28%;">搜索2019-01-01以后的ip资产</td> </tr> <tr> <td style="min-width: 42%;">ip_before="2019-07-01"</td> <td style="min-width: 30%;">搜索2019-07-01以前的ip资产(以ip为单位的资产数据)。</td> <td style="min-width: 28%;">搜索2019-07-01以前的ip资产</td> </tr> </tbody></table> </div> <span class="fofa_bq" style="margin-left: 40px;">条数</span> <select class="fofa_select" name="fofa_ts" id="fofa_ts"> <option value="100">100</option> <option value="1000">1000</option> <option value="10000">10000</option> </select> <button type="button" class="btn" onclick="run_form();" style="margin-left: 10px;">提交</button> <button type="button" class="btn" id="btn" style="pointer-events: none;opacity: 0.3;">下载</button> <a href="https://www.mrwu.red/user/?pd=survival" rel="nofollow" target="_blank" class="btn">存活探测</a> </div> </div> </form> </div> <div class="mk-alert success tsk" style="display: none;"> </div> <div data-example-id="hoverable-table" style="margin-bottom: 70px;margin-top: 20px;"> <table style="table-layout: fixed;width: 100%;" id="table2html"> <thead> <tr> <th width="70" style="text-align: center;">URL</th> <th width="35" style="text-align: center;">IP</th> <th width="40" style="text-align: center;">标题</th> <th width="5" style="text-align: center;">端口</th> </tr> </thead> <tbody class="tdata" id="info"> </tbody> </table> </div> </div> </div> </div>
4.主题样式 style.css 中加入下方代码
.mk-alert.danger{background-color:#fef0f0;color:#f56c6c} .mk-alert{padding:10px 15px;border-radius:3px;margin:1em auto;line-height:1.5em;display:block;background-color:#f0f9eb;color:#67c23a} .gbi{position:sticky;top:5px;right:10px;left:100%} .fofa_bq{background:#1f8076;color:#fff;padding:6px 12px} .btn{padding:6px 12px;margin-right:4px;margin-bottom:4px;display:inline-block;line-height:1.5} .btn,button{border:0;background:#eb5055;color:#fff;cursor:pointer;opacity:1;user-select:none} .fofa_input{margin-left:-5px;padding:5px 10px 5px 10px} input,textarea{width:100%;padding:5px;box-sizing:border-box;border:1px solid #e5e9ef;background-color:#f4f5f7;resize:vertical} .btn,button,input:not([type~=checkbox]):not([type~=radio]),textarea{-webkit-transition:.2s;-moz-transition:.2s;-ms-transition:.2s;-o-transition:.2s;transition:.2s;font-size:1em;border-radius:3px;-webkit-appearance:none} h2{font-weight:600;position:relative;margin:10px 0 10px;font-size:1.3em;color:#444;margin-left:2%} h2:before{font-weight:600;position:absolute;top:0;left:-15px;content:'#';color:#eb5055} .white_content{display:none;position:absolute;top:0;left:15%;width:60%;height:90%;padding:15px;box-shadow:2px 2px 10px 5px #b3b2b2;background-color:#fff;z-index:1002;overflow:auto} .sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);border:0} .mk-alert.info{background-color:#f4f4f5;color:#909399} table{border-collapse:collapse;border-spacing:0} table td,table th{border:1px solid #f2f2f2;padding:8px} .fancybox-close-small:focus,a:focus,button:focus,input:focus,select:focus,textarea:focus{outline:0} .btn:active,button:active{opacity:1} .btn:focus,.btn:hover,button:focus,button:hover{opacity:.9} a{text-decoration:none;color:#313131} .fofa_select{padding:6px 12px;border:1px solid #ccc;border-radius:4px} a:not([class]):not([data-fancybox]){color:#313131;border-bottom:1px solid #ccc;text-decoration:none;margin:0 5px}
5. 前往 WordPress 后台 页面管理处 创建 模板为 page-fofa.php 的页面,然后访问就完工了
FOFA 高级搜索小工具之独立 PHP 版
<!DOCTYPE html> <html> <head> <title>FOFA 在线高级搜索小工具</title> <script type="text/javascript" src="https://www.mrwu.red/wp-content/themes/mkBlog/js/jquery.min.js?ver=1.92" id="jquery.min-js"></script> <link rel="stylesheet" id="font-awesome-css" href="https://oss.mrwu.red/wp-content/themes/mkBlog/fonts/font-awesome.min.css?ver=1.92" type="text/css" media="all"> <script src="https://www.mrwu.red/wp-content/themes/mkBlog/js/jquery.table2excel.min.js"></script> <script src="js.js"></script> <style type="text/css"> .mk-alert.danger{background-color:#fef0f0;color:#f56c6c} .mk-alert{padding:10px 15px;border-radius:3px;margin:1em auto;line-height:1.5em;display:block;background-color:#f0f9eb;color:#67c23a} .gbi{position:sticky;top:5px;right:10px;left:100%} .fofa_bq{background:#1f8076;color:#fff;padding:6px 12px} .btn{padding:6px 12px;margin-right:4px;margin-bottom:4px;display:inline-block;line-height:1.5} .btn,button{border:0;background:#eb5055;color:#fff;cursor:pointer;opacity:1;user-select:none} .fofa_input{margin-left:-5px;padding:5px 10px 5px 10px} input,textarea{width:100%;padding:5px;box-sizing:border-box;border:1px solid #e5e9ef;background-color:#f4f5f7;resize:vertical} .btn,button,input:not([type~=checkbox]):not([type~=radio]),textarea{-webkit-transition:.2s;-moz-transition:.2s;-ms-transition:.2s;-o-transition:.2s;transition:.2s;font-size:1em;border-radius:3px;-webkit-appearance:none} h2{font-weight:600;position:relative;margin:10px 0 10px;font-size:1.3em;color:#444;margin-left:2%} h2:before{font-weight:600;position:absolute;top:0;left:-15px;content:'#';color:#eb5055} .white_content{display:none;position:absolute;top:0;left:15%;width:60%;height:90%;padding:15px;box-shadow:2px 2px 10px 5px #b3b2b2;background-color:#fff;z-index:1002;overflow:auto} .sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);border:0} .mk-alert.info{background-color:#f4f4f5;color:#909399} table{border-collapse:collapse;border-spacing:0} table td,table th{border:1px solid #f2f2f2;padding:8px} .fancybox-close-small:focus,a:focus,button:focus,input:focus,select:focus,textarea:focus{outline:0} .btn:active,button:active{opacity:1} .btn:focus,.btn:hover,button:focus,button:hover{opacity:.9} a{text-decoration:none;color:#313131} .fofa_select{padding:6px 12px;border:1px solid #ccc;border-radius:4px} a:not([class]):not([data-fancybox]){color:#313131;border-bottom:1px solid #ccc;text-decoration:none;margin:0 5px} </style> </head> <body> <div class="right-box animate__animated"> <div class="the_content"> <div class="entry-content status-publish" itemprop="articleBody"> <div class="mk-alert danger"> <p>FOFA 搜索引擎高级会员搜索小工具,请遵守网络安全法规.</p> </div> <div data-example-id="form-inline-with-input-group"> <form onsubmit="return false" action="##" method="post" id="run_form"> <div> <label class="sr-only" for="exampleInputAmount">fofa</label> <div class=""> <span class="fofa_bq">语法</span> <input type="text" class="fofa_input" style="width: 40%;" name="fofa_yf" id="fofa_yf" value='' placeholder='header="ThinkPHP" && body="/index.php/admin"'> <a href = "https://www.mrwu.red/fenxiang/3844.html" target="_blank">使用帮助</a> <a href = "javascript:void(0)"onclick="document.getElementById('light').style.display='block';">语法详解</a> <div id="light" class="white_content"> <a href = "javascript:void(0)" onclick ="document.getElementById('light').style.display='none';" class="gbi"><i class="fa fa-times-rectangle fa-lg"></i></a> <h2>查询语法参考</h2> <div class="mk-alert info"> <p>直接输入查询语句,将从标题,html内容,http头信息,url字段中搜索;</p> <p>如果查询表达式有多个与或关系,尽量在外面用()包含起来;</p> <p>* 新增==完全匹配的符号,可以加快搜索速度,比如查找qq.com所有host,可以是domain=="qq.com" *</p> </div> <h2>高级搜索</h2> <div class="mk-alert info"> <p>可以使用括号 和 && || !=等符号,如</p> <p></p> <p>title="powered by" && title!=discuz</p> <p>title="powered by" && title!=discuz</p> <p>( body="content="WordPress" || (header="X-Pingback" && header="/xmlrpc.php" && body="/wp-includes/") && host="gov.cn"</p> </div> <table class="layui-table normal table-content"> <tbody><tr> <td style="min-width: 42%;">title="beijing"</td> <td style="min-width: 30%;">从标题中搜索“北京”</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">header="jboss"</td> <td style="min-width: 30%;">从http头中搜索“jboss”</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">body="Hacked by"</td> <td style="min-width: 30%;">从html正文中搜索abc</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">domain="qq.com"</td> <td style="min-width: 30%;">搜索根域名带有qq.com的网站。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">icon_hash="-247388890"</td> <td style="min-width: 30%;">搜索使用此icon的资产。</td> <td style="min-width: 28%;">仅限高级会员使用</td> </tr> <tr> <td style="min-width: 42%;">host=".gov.cn"</td> <td style="min-width: 30%;">从url中搜索”.gov.cn”</td> <td style="min-width: 28%;">搜索要用host作为名称</td> </tr> <tr> <td style="min-width: 42%;">port="443"</td> <td style="min-width: 30%;">查找对应“443”端口的资产</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">ip="1.1.1.1"</td> <td style="min-width: 30%;">从ip中搜索包含“1.1.1.1”的网站</td> <td style="min-width: 28%;">搜索要用ip作为名称</td> </tr> <tr> <td style="min-width: 42%;">ip="220.181.111.1/24"</td> <td style="min-width: 30%;">查询IP为“220.181.111.1”的C网段资产</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">status_code="402"</td> <td style="min-width: 30%;">查询服务器状态为“402”的资产</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">protocol="https"</td> <td style="min-width: 30%;">查询https协议资产</td> <td style="min-width: 28%;">搜索指定协议类型(在开启端口扫描的情况下有效)</td> </tr> <tr> <td style="min-width: 42%;">city="Hangzhou"</td> <td style="min-width: 30%;">搜索指定城市的资产。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">region="Zhejiang"</td> <td style="min-width: 30%;">搜索指定行政区的资产。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">country="CN"</td> <td style="min-width: 30%;">搜索指定国家(编码)的资产。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">cert="google"</td> <td style="min-width: 30%;">搜索证书(https或者imaps等)中带有google的资产。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">banner=users && protocol=ftp</td> <td style="min-width: 30%;">搜索FTP协议中带有users文本的资产。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">type=service</td> <td style="min-width: 30%;">搜索所有协议资产,支持subdomain和service两种。</td> <td style="min-width: 28%;">搜索所有协议资产</td> </tr><tr> <td style="min-width: 42%;">os=windows</td> <td style="min-width: 30%;">搜索Windows资产。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">server=="Microsoft-IIS/7.5"</td> <td style="min-width: 30%;">搜索IIS 7.5服务器。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">app="HIKVISION-视频监控"</td> <td style="min-width: 30%;">搜索海康威视设备</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">after="2017" && before="2017-10-01"</td> <td style="min-width: 30%;">时间范围段搜索</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">asn="19551"</td> <td style="min-width: 30%;">搜索指定asn的资产。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">org="Amazon.com, Inc."</td> <td style="min-width: 30%;">搜索指定org(组织)的资产。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">base_protocol="udp"</td> <td style="min-width: 30%;">搜索指定udp协议的资产。</td> <td style="min-width: 28%;">-</td> </tr> <tr> <td style="min-width: 42%;">is_ipv6=true</td> <td style="min-width: 30%;">搜索ipv6的资产</td> <td style="min-width: 28%;">搜索ipv6的资产,只接受true和false。</td> </tr> <tr> <td style="min-width: 42%;">is_domain=true</td> <td style="min-width: 30%;">搜索域名的资产</td> <td style="min-width: 28%;">搜索域名的资产,只接受true和false。</td> </tr> <tr> <td style="min-width: 42%;">ip_ports="80,161"</td> <td style="min-width: 30%;">搜索同时开放80和161端口的ip</td> <td style="min-width: 28%;">搜索同时开放80和161端口的ip资产(以ip为单位的资产数据)</td> </tr> <tr> <td style="min-width: 42%;">port_size="6"</td> <td style="min-width: 30%;">查询开放端口数量等于"6"的资产</td> <td style="min-width: 28%;">仅限FOFA会员使用</td> </tr> <tr> <td style="min-width: 42%;">port_size_gt="3"</td> <td style="min-width: 30%;">查询开放端口数量大于"3"的资产</td> <td style="min-width: 28%;">仅限FOFA会员使用</td> </tr> <tr> <td style="min-width: 42%;">port_size_lt="12"</td> <td style="min-width: 30%;">查询开放端口数量小于"12"的资产</td> <td style="min-width: 28%;">仅限FOFA会员使用</td> </tr> <tr> <td style="min-width: 42%;">ip_country="CN"</td> <td style="min-width: 30%;">搜索中国的ip资产(以ip为单位的资产数据)。</td> <td style="min-width: 28%;">搜索中国的ip资产</td> </tr> <tr> <td style="min-width: 42%;">ip_region="Zhejiang"</td> <td style="min-width: 30%;">搜索指定行政区的ip资产(以ip为单位的资产数据)。</td> <td style="min-width: 28%;">搜索指定行政区的资产</td> </tr> <tr><td style="min-width: 42%;">ip_city="Hangzhou"</td> <td style="min-width: 30%;">搜索指定城市的ip资产(以ip为单位的资产数据)。</td> <td style="min-width: 28%;">搜索指定城市的资产</td> </tr> <tr> <td style="min-width: 42%;">ip_after="2019-01-01"</td> <td style="min-width: 30%;">搜索2019-01-01以后的ip资产(以ip为单位的资产数据)。</td> <td style="min-width: 28%;">搜索2019-01-01以后的ip资产</td> </tr> <tr> <td style="min-width: 42%;">ip_before="2019-07-01"</td> <td style="min-width: 30%;">搜索2019-07-01以前的ip资产(以ip为单位的资产数据)。</td> <td style="min-width: 28%;">搜索2019-07-01以前的ip资产</td> </tr> </tbody></table> </div> <span class="fofa_bq" style="margin-left: 40px;">条数</span> <select class="fofa_select" name="fofa_ts" id="fofa_ts"> <option value="100">100</option> <option value="1000">1000</option> <option value="10000">10000</option> </select> <button type="button" class="btn" onclick="run_form();" style="margin-left: 10px;">提交</button> <button type="button" class="btn" id="btn" style="pointer-events: none;opacity: 0.3;">下载</button> <a href="https://www.mrwu.red/user/?pd=survival" rel="nofollow" target="_blank" class="btn">存活探测</a> </div> </div> </form> </div> <div class="mk-alert success tsk" style="display: none;"> </div> <div data-example-id="hoverable-table" style="margin-bottom: 70px;margin-top: 20px;"> <table style="table-layout: fixed;width: 100%;" id="table2html"> <thead> <tr> <th width="70" style="text-align: center;">URL</th> <th width="35" style="text-align: center;">IP</th> <th width="40" style="text-align: center;">标题</th> <th width="5" style="text-align: center;">端口</th> </tr> </thead> <tbody class="tdata" id="info"> </tbody> </table> </div> </div> </div> </div> </body> </html>
然后在创建 js php 2个文件,代码用上面的 js php 代码 在适当修改下即可
结语
是否被我的另类方式弄的一脸懵逼?扯犊子半天,其实根本就是 fofa api PHP 配置拉~
本文作者为Mr.Wu,转载请注明,尊守博主劳动成果!
由于经常折腾代码,可能会导致个别文章内容显示错位或者别的 BUG 影响阅读; 如发现请在该文章下留言告知于我,thank you !