Shulou(Shulou.com)06/02 Report--

This article mainly explains "what is GoGhost tool", interested friends may wish to take a look. The method introduced in this paper is simple, fast and practical. Let's let Xiaobian take you to learn "What is GoGhost Tool"!

GoGhost

GoGhost is a high-performance, lightweight and portable open source tool that security researchers can use to scan for SMBGhost vulnerabilities.

tool mounting

You can go directly to the project's GitHub home page and download the corresponding Windows or Linux source code. Of course, since GoGhost is built and developed using the native Go code base, you can also clone the project source code locally and use the following command to build the project:

git clone https://github.com/deepsecurity-pe/GoGhost.gitgo build GoGhost.go Tool Usage Options

[Click me to watch]

GoGhost can scan 25000 IP addresses in less than three seconds, while NMAP takes at least 600 seconds to scan the same number of hosts:

-iL [FILE]

By using the "-iL" option, you can enter scan parameters by specifying files containing CIDR address lists.

-iR [CIDR]

By using the "-iR" option, you can specify a range of IP addresses to scan.

false positive

If the KB4551762 patch is installed on Windows, GoGhost will still mark it as "vulnerable." If CIDR list file size exceeds 500K, scan results may be marked as "vulnerable" due to timeout.

At this point, I believe everyone has a deeper understanding of "what is GoGhost tool," so let's actually operate it! Here is the website, more related content can enter the relevant channels for inquiry, pay attention to us, continue to learn!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.