谷歌：Tsunami是一个通用的网络安全扫描器，具有可扩展的插件系统，用于检测高危漏洞

【实例简介】
谷歌：Tsunami是一个通用的网络安全扫描器，具有可扩展的插件系统，用于检测高危漏洞,源码下载 
【实例截图】
【核心代码】
文件清单
└── tsunami-security-scanner-84f2f50b06dab9aeaebd89850c1a5a69187d0045
    ├── build.gradle
    ├── common
    │   ├── build.gradle
    │   ├── README.md
    │   └── src
    │       ├── main
    │       │   └── java
    │       │       └── com
    │       │           └── google
    │       │               └── tsunami
    │       │                   └── common
    │       │                       ├── cli
    │       │                       │   ├── CliOption.java
    │       │                       │   └── CliOptionsModule.java
    │       │                       ├── command
    │       │                       │   ├── CommandExecutionThreadPool.java
    │       │                       │   ├── CommandExecutorFactory.java
    │       │                       │   ├── CommandExecutor.java
    │       │                       │   └── CommandExecutorModule.java
    │       │                       ├── concurrent
    │       │                       │   ├── BaseThreadPoolModule.java
    │       │                       │   ├── ScheduledThreadPoolModule.java
    │       │                       │   └── ThreadPoolModule.java
    │       │                       ├── config
    │       │                       │   ├── annotations
    │       │                       │   │   └── ConfigProperties.java
    │       │                       │   ├── ConfigException.java
    │       │                       │   ├── ConfigLoader.java
    │       │                       │   ├── ConfigModule.java
    │       │                       │   ├── TsunamiConfig.java
    │       │                       │   └── YamlConfigLoader.java
    │       │                       ├── data
    │       │                       │   ├── NetworkEndpointUtils.java
    │       │                       │   └── NetworkServiceUtils.java
    │       │                       ├── ErrorCode.java
    │       │                       ├── io
    │       │                       │   └── archiving
    │       │                       │       ├── Archiver.java
    │       │                       │       ├── GoogleCloudStorageArchiver.java
    │       │                       │       ├── GoogleCloudStorageArchiverModule.java
    │       │                       │       ├── RawFileArchiver.java
    │       │                       │       └── testing
    │       │                       │           ├── FakeArchiver.java
    │       │                       │           ├── FakeGoogleCloudStorageArchivers.java
    │       │                       │           ├── FakeGoogleCloudStorageArchiversModule.java
    │       │                       │           ├── FakeRawFileArchiver.java
    │       │                       │           └── FakeRawFileArchiverModule.java
    │       │                       ├── net
    │       │                       │   ├── db
    │       │                       │   │   ├── ConnectionProviderInterface.java
    │       │                       │   │   └── ConnectionProvider.java
    │       │                       │   ├── FuzzingUtils.java
    │       │                       │   ├── http
    │       │                       │   │   ├── HttpClientCliOptions.java
    │       │                       │   │   ├── HttpClientConfigProperties.java
    │       │                       │   │   ├── HttpClient.java
    │       │                       │   │   ├── HttpClientModule.java
    │       │                       │   │   ├── HttpHeaders.java
    │       │                       │   │   ├── HttpMethod.java
    │       │                       │   │   ├── HttpRequest.java
    │       │                       │   │   ├── HttpResponse.java
    │       │                       │   │   ├── HttpStatus.java
    │       │                       │   │   ├── javanet
    │       │                       │   │   │   ├── ConnectionFactory.java
    │       │                       │   │   │   └── DefaultConnectionFactory.java
    │       │                       │   │   └── OkHttpHttpClient.java
    │       │                       │   └── UrlUtils.java
    │       │                       ├── reflection
    │       │                       │   ├── ClassGraphModule.java
    │       │                       │   └── RuntimeClassGraphScanResult.java
    │       │                       ├── server
    │       │                       │   └── LanguageServerCommand.java
    │       │                       ├── time
    │       │                       │   ├── SystemUtcClockModule.java
    │       │                       │   ├── testing
    │       │                       │   │   ├── FakeUtcClock.java
    │       │                       │   │   └── FakeUtcClockModule.java
    │       │                       │   └── UtcClock.java
    │       │                       ├── TsunamiException.java
    │       │                       └── version
    │       │                           ├── ComparisonUtility.java
    │       │                           ├── KnownQualifier.java
    │       │                           ├── Segment.java
    │       │                           ├── Token.java
    │       │                           ├── Version.java
    │       │                           ├── VersionRange.java
    │       │                           └── VersionSet.java
    │       └── test
    │           ├── java
    │           │   └── com
    │           │       └── google
    │           │           └── tsunami
    │           │               └── common
    │           │                   ├── cli
    │           │                   │   └── CliOptionsModuleTest.java
    │           │                   ├── command
    │           │                   │   ├── CommandExecutorFactoryTest.java
    │           │                   │   └── CommandExecutorTest.java
    │           │                   ├── concurrent
    │           │                   │   ├── BaseThreadPoolModuleTest.java
    │           │                   │   ├── ScheduledThreadPoolModuleTest.java
    │           │                   │   └── ThreadPoolModuleTest.java
    │           │                   ├── config
    │           │                   │   ├── ConfigModuleTest.java
    │           │                   │   ├── TsunamiConfigTest.java
    │           │                   │   └── YamlConfigLoaderTest.java
    │           │                   ├── data
    │           │                   │   ├── NetworkEndpointUtilsTest.java
    │           │                   │   └── NetworkServiceUtilsTest.java
    │           │                   ├── io
    │           │                   │   └── archiving
    │           │                   │       ├── ArchiverTestUtils.java
    │           │                   │       ├── GoogleCloudStorageArchiverTest.java
    │           │                   │       └── RawFileArchiverTest.java
    │           │                   ├── net
    │           │                   │   ├── FuzzingUtilsTest.java
    │           │                   │   ├── http
    │           │                   │   │   ├── HttpClientModuleTest.java
    │           │                   │   │   ├── HttpHeadersTest.java
    │           │                   │   │   ├── HttpRequestTest.java
    │           │                   │   │   ├── HttpResponseTest.java
    │           │                   │   │   └── OkHttpHttpClientTest.java
    │           │                   │   └── UrlUtilsTest.java
    │           │                   ├── time
    │           │                   │   ├── SystemUtcClockModuleTest.java
    │           │                   │   └── testing
    │           │                   │       ├── FakeUtcClockModuleTest.java
    │           │                   │       └── FakeUtcClockTest.java
    │           │                   └── version
    │           │                       ├── ComparisonUtilityTest.java
    │           │                       ├── EqualsTestCase.java
    │           │                       ├── KnownQualifierTest.java
    │           │                       ├── LessThanTestCase.java
    │           │                       ├── SegmentTest.java
    │           │                       ├── TokenTest.java
    │           │                       ├── VersionRangeTest.java
    │           │                       ├── VersionSetTest.java
    │           │                       └── VersionTest.java
    │           └── resources
    │               └── com
    │                   └── google
    │                       └── tsunami
    │                           └── common
    │                               └── net
    │                                   └── http
    │                                       └── testdata
    │                                           ├── README.md
    │                                           └── tsunami_test_server.p12
    ├── Dockerfile
    ├── docs
    │   ├── code-of-conduct.md
    │   ├── contributing.md
    │   ├── future_work.md
    │   ├── howto.md
    │   ├── img
    │   │   └── orchestration.svg
    │   ├── index.md
    │   └── orchestration.md
    ├── gradle
    │   └── wrapper
    │       ├── gradle-wrapper.jar
    │       └── gradle-wrapper.properties
    ├── gradlew
    ├── gradlew.bat
    ├── LICENSE
    ├── main
    │   ├── build.gradle
    │   ├── README.md
    │   └── src
    │       ├── main
    │       │   └── java
    │       │       └── com
    │       │           └── google
    │       │               └── tsunami
    │       │                   └── main
    │       │                       └── cli
    │       │                           ├── LanguageServerOptions.java
    │       │                           ├── option
    │       │                           │   ├── MainCliOptions.java
    │       │                           │   ├── OutputDataFormat.java
    │       │                           │   └── validator
    │       │                           │       ├── IpV4Validator.java
    │       │                           │       ├── IpV6Validator.java
    │       │                           │       └── IpValidator.java
    │       │                           ├── ScanResultsArchiver.java
    │       │                           ├── ScanResultsArchiverModule.java
    │       │                           ├── server
    │       │                           │   ├── RemoteServerLoader.java
    │       │                           │   └── RemoteServerLoaderModule.java
    │       │                           └── TsunamiCli.java
    │       └── test
    │           └── java
    │               └── com
    │                   └── google
    │                       └── tsunami
    │                           └── main
    │                               └── cli
    │                                   ├── LanguageServerOptionsTest.java
    │                                   ├── option
    │                                   │   ├── MainCliOptionsTest.java
    │                                   │   ├── OutputDataFormatTest.java
    │                                   │   └── validator
    │                                   │       ├── IpV4ValidatorTest.java
    │                                   │       ├── IpV6ValidatorTest.java
    │                                   │       └── IpValidatorTest.java
    │                                   ├── ScanResultsArchiverTest.java
    │                                   ├── server
    │                                   │   └── RemoteServerLoaderTest.java
    │                                   └── TsunamiCliTest.java
    ├── plugin
    │   ├── build.gradle
    │   ├── README.md
    │   └── src
    │       ├── main
    │       │   ├── java
    │       │   │   └── com
    │       │   │       └── google
    │       │   │           └── tsunami
    │       │   │               └── plugin
    │       │   │                   ├── annotations
    │       │   │                   │   ├── ForServiceName.java
    │       │   │                   │   ├── ForSoftware.java
    │       │   │                   │   ├── ForWebService.java
    │       │   │                   │   └── PluginInfo.java
    │       │   │                   ├── LanguageServerException.java
    │       │   │                   ├── payload
    │       │   │                   │   ├── NotImplementedException.java
    │       │   │                   │   ├── PayloadGenerator.java
    │       │   │                   │   ├── PayloadGeneratorModule.java
    │       │   │                   │   ├── Payload.java
    │       │   │                   │   ├── PayloadSecretGenerator.java
    │       │   │                   │   ├── README.md
    │       │   │                   │   ├── testing
    │       │   │                   │   │   ├── FakePayloadGeneratorModule.java
    │       │   │                   │   │   └── PayloadTestHelper.java
    │       │   │                   │   └── Validator.java
    │       │   │                   ├── PluginBootstrapModule.java
    │       │   │                   ├── PluginDefinition.java
    │       │   │                   ├── PluginExecutionException.java
    │       │   │                   ├── PluginExecutionModule.java
    │       │   │                   ├── PluginExecutionResult.java
    │       │   │                   ├── PluginExecutionThreadPool.java
    │       │   │                   ├── PluginExecutorImpl.java
    │       │   │                   ├── PluginExecutor.java
    │       │   │                   ├── PluginExecutorModule.java
    │       │   │                   ├── PluginLoadingModule.java
    │       │   │                   ├── PluginManager.java
    │       │   │                   ├── PluginServiceClient.java
    │       │   │                   ├── PluginType.java
    │       │   │                   ├── PortScanner.java
    │       │   │                   ├── RemoteVulnDetectorImpl.java
    │       │   │                   ├── RemoteVulnDetector.java
    │       │   │                   ├── RemoteVulnDetectorLoadingModule.java
    │       │   │                   ├── ServiceFingerprinter.java
    │       │   │                   ├── TcsClientCliOptions.java
    │       │   │                   ├── TcsClient.java
    │       │   │                   ├── TcsConfigProperties.java
    │       │   │                   ├── testing
    │       │   │                   │   ├── FailedPortScannerBootstrapModule.java
    │       │   │                   │   ├── FailedPortScanner.java
    │       │   │                   │   ├── FailedRemoteVulnDetectorBootstrapModule.java
    │       │   │                   │   ├── FailedRemoteVulnDetector.java
    │       │   │                   │   ├── FailedServiceFingerprinterBootstrapModule.java
    │       │   │                   │   ├── FailedServiceFingerprinter.java
    │       │   │                   │   ├── FailedVulnDetectorBootstrapModule.java
    │       │   │                   │   ├── FailedVulnDetector.java
    │       │   │                   │   ├── FakePluginExecutionModule.java
    │       │   │                   │   ├── FakePortScanner2.java
    │       │   │                   │   ├── FakePortScannerBootstrapModule2.java
    │       │   │                   │   ├── FakePortScannerBootstrapModule.java
    │       │   │                   │   ├── FakePortScanner.java
    │       │   │                   │   ├── FakeRemoteVulnDetectorBootstrapModule.java
    │       │   │                   │   ├── FakeRemoteVulnDetector.java
    │       │   │                   │   ├── FakeServiceFingerprinterBootstrapModule.java
    │       │   │                   │   ├── FakeServiceFingerprinter.java
    │       │   │                   │   ├── FakeVulnDetector2.java
    │       │   │                   │   ├── FakeVulnDetectorBootstrapModule2.java
    │       │   │                   │   ├── FakeVulnDetectorBootstrapModule.java
    │       │   │                   │   └── FakeVulnDetector.java
    │       │   │                   ├── TsunamiPlugin.java
    │       │   │                   └── VulnDetector.java
    │       │   └── resources
    │       │       └── com
    │       │           └── google
    │       │               └── tsunami
    │       │                   └── plugin
    │       │                       └── payload
    │       │                           └── payload_definitions.yaml
    │       └── test
    │           └── java
    │               └── com
    │                   └── google
    │                       └── tsunami
    │                           └── plugin
    │                               ├── payload
    │                               │   ├── PayloadGeneratorModuleTest.java
    │                               │   ├── PayloadGeneratorWithCallbackServerTest.java
    │                               │   ├── PayloadGeneratorWithoutCallbackServerTest.java
    │                               │   ├── PayloadSecretGeneratorTest.java
    │                               │   └── PayloadTest.java
    │                               ├── PluginDefinitionTest.java
    │                               ├── PluginExecutorImplTest.java
    │                               ├── PluginLoadingModuleTest.java
    │                               ├── PluginManagerTest.java
    │                               ├── PluginServiceClientTest.java
    │                               ├── RemoteVulnDetectorImplTest.java
    │                               ├── RemoteVulnDetectorLoadingModuleTest.java
    │                               └── TcsClientTest.java
    ├── plugin_server
    │   └── py
    │       ├── common
    │       │   ├── data
    │       │   │   ├── network_endpoint_utils.py
    │       │   │   ├── network_endpoint_utils_test.py
    │       │   │   ├── network_service_utils.py
    │       │   │   └── network_service_utils_test.py
    │       │   └── net
    │       │       └── http
    │       │           ├── host_resolver_http_adapter.py
    │       │           ├── host_resolver_http_adapter_test.py
    │       │           ├── http_client.py
    │       │           ├── http_header_fields.py
    │       │           ├── http_header_fields_test.py
    │       │           ├── http_headers.py
    │       │           ├── http_headers_test.py
    │       │           ├── http_method.py
    │       │           ├── http_request.py
    │       │           ├── http_request_test.py
    │       │           ├── http_response.py
    │       │           ├── http_response_test.py
    │       │           ├── http_status.py
    │       │           ├── http_status_test.py
    │       │           ├── requests_http_client.py
    │       │           └── requests_http_client_test.py
    │       ├── plugin
    │       │   ├── payload
    │       │   │   ├── payload_generator.py
    │       │   │   ├── payload_generator_test_helper.py
    │       │   │   ├── payload_generator_test.py
    │       │   │   ├── payload.py
    │       │   │   ├── payload_secret_generator.py
    │       │   │   ├── payload_secret_generator_test.py
    │       │   │   ├── payload_test.py
    │       │   │   ├── payload_utility.py
    │       │   │   ├── payload_utility_test.py
    │       │   │   └── validator.py
    │       │   ├── tcs_client.py
    │       │   └── tcs_client_test.py
    │       ├── plugin_server.py
    │       ├── plugin_service.py
    │       ├── plugin_service_test.py
    │       └── tsunami_plugin.py
    ├── proto
    │   ├── build.gradle
    │   ├── detection.proto
    │   ├── network.proto
    │   ├── network_service.proto
    │   ├── payload_generator.proto
    │   ├── plugin_representation.proto
    │   ├── plugin_service.proto
    │   ├── reconnaissance.proto
    │   ├── scan_results.proto
    │   ├── scan_target.proto
    │   ├── software.proto
    │   ├── vulnerability.proto
    │   └── web_crawl.proto
    ├── quick_start.sh
    ├── README.md
    ├── settings.gradle
    ├── tsunami.yaml
    └── workflow
        ├── build.gradle
        ├── README.md
        └── src
            ├── main
            │   └── java
            │       └── com
            │           └── google
            │               └── tsunami
            │                   └── workflow
            │                       ├── DefaultScanningWorkflow.java
            │                       ├── ExecutionStage.java
            │                       ├── ExecutionTracer.java
            │                       └── ScanningWorkflowException.java
            └── test
                └── java
                    └── com
                        └── google
                            └── tsunami
                                └── workflow
                                    ├── DefaultScanningWorkflowTest.java
                                    └── ExecutionTracerTest.java

127 directories, 266 files