菜鸟教程 – 学的不仅是技术，更是梦想！

技术网站，更是交流网站

编程杂谈？

网络空间搜索引擎- FOFA的使用技巧总结

likuolei

关键要点

  • FOFA 是一款网络空间搜索引擎，适合网络安全研究和资产管理。
  • 基本搜索包括标题、HTTP 头、正文、URL、端口、IP 等字段，使用简单语法如 title="关键词"。
  • 高级搜索支持逻辑运算符（如 &&、||）和时间范围（如 after="2017"）。
  • 特征 ID (FID) 可快速匹配类似资产，适合漏洞挖掘和企业保护。

FOFA 简介

FOFA 是一款由白帽汇推出的网络空间搜索引擎，通过网络空间测绘帮助用户快速匹配网络资产，适用于漏洞影响分析、应用分布统计等场景。它支持搜索标题、HTTP 头、正文、URL、端口、IP 等多种字段，适合网络安全研究人员、企业安全团队和白帽子用户。

基本使用方法

  • 搜索字段：使用 title="关键词" 搜索标题，header="关键词" 搜索 HTTP 头，body="关键词" 搜索正文，host="域名" 搜索 URL 等。
  • 示例：title="后台管理" 查找包含“后台管理”的网站，port="7001" 查找开放 7001 端口的 IP。

高级功能

  • 逻辑运算符：使用 &&（与）、||（或）、!=（不等于）、==（精确匹配），如 title="powered by" && title!=discuz。
  • 时间范围：after="2017" 搜索 2017 年及以后的资产，before="2017-10-01" 搜索 2017-10-01 前的资产。
  • 特征 ID (FID)：聚合关键特征（如 IP、域名）为标签，快速找到类似资产，如搜索 title="chatgpt" 后用 FID 匹配相似网站。

使用场景

FOFA 适合企业梳理公网暴露资产、漏洞挖掘和研究分析，官网为 [[invalid url, do not cite])，语法参考 [[invalid url, do not cite])。

详细报告：FOFA 网络空间搜索引擎使用技巧总结

引言

FOFA 是一款由白帽汇推出的网络空间搜索引擎，通过网络空间测绘帮助用户快速匹配网络资产，广泛应用于网络安全领域。它的功能涵盖漏洞影响范围分析、应用分布统计、应用流行度排名统计等，适合研究人员、企业安全团队和白帽子用户。本报告总结了 FOFA 的使用技巧，旨在为用户提供全面的指导。

FOFA 的功能与背景

FOFA 通过对全网网络资产的统计、分析和获取信息，为用户提供漏洞及时发现、漏洞发生后的快速定位以及安全数据分析等服务。它的核心能力包括设备指纹识别、漏洞扫描和定制搜索，支持对标题、HTTP 头、HTML 正文、URL、端口、IP、协议、城市、行政区、国家、证书、操作系统、服务器版本和设备名称等进行搜索。
根据 2023 年和 2024 年的相关文章，FOFA 被广泛用于企业资产暴露面梳理、白帽子漏洞挖掘和研究分析，特别是在网络安全领域具有重要价值。

基本搜索语法

FOFA 的搜索语法简单直观，支持多种字段，具体如下：

字段描述示例
title搜索标题中包含关键词的网站title="后台管理"
header搜索 HTTP 头中包含关键词的网站header="weblogic"
body搜索 HTML 正文中包含关键词的网站body="注册"
host搜索 URL 中包含关键词的网站host="jd.com"
port搜索特定端口号开放的 IPport="7001"
ip搜索特定 IP 地址或 IP 段ip="172.16.0.1" 或 ip="172.16.0.1/24"
protocol搜索特定协议类型的资产protocol="ftp"
city搜索特定城市的资产（城市名全称，首字母大写）city="Chengdu"
region搜索特定行政区的资产region="MianYang"
country搜索特定国家的资产（国家编码）country="CN"
cert搜索证书中包含关键词的资产cert="google"
os搜索特定操作系统的资产os="Linux"
server搜索特定服务器版本的资产server=="Microsoft-IIS/7.5"
app搜索特定设备名称的资产app="海康威视-视频监控"

这些字段可以单独使用，也可以组合使用，满足不同场景的需求。例如，搜索中国的开放 3388 端口的 IP 可以写为 port="3388" && country="CN"。

高级搜索运算符

FOFA 支持多种逻辑运算符，用于组合和精炼搜索条件，具体如下：

运算符描述示例
&&逻辑与title="powered by" && title!=discuz
||逻辑或header="x-pingback" || header="thinkphp"
!=不等于title!=discuz
==精确匹配server=="Microsoft-IIS/7.5"
()分组条件(title="后台管理" || title="admin") && country="CN"

这些运算符可以帮助用户更精确地定义搜索条件，例如排除某些结果或组合多个条件。

时间范围搜索

FOFA 支持根据时间范围进行搜索，适合历史数据分析：

  • after="年份"：搜索指定年份及以后的资产，例如 after="2017" 表示从 2017-01-01 开始。
  • before="年份-月份-日期"：搜索指定日期以前的资产，例如 before="2017-10-01" 表示在 2017-10-01 之前。

这种功能特别适合研究特定时间段内的资产变化或漏洞历史。

特征 ID (FID) 与规则集

FOFA 提供了特征 ID (FID) 和规则集功能，用于提高搜索效率：

  • FID：将多个关键特征（如 IP 地址、域名、网站标题、图标等）聚合成一个标签，用于匹配具有类似特征的网站。例如，搜索 title="chatgpt" 后，可以通过 FID 找到具有相同指纹的其他资产。
  • 规则集：结合多个关键特征形成可导航的规则指纹，适合快速搜索特定类型的资产，例如搜索“海康威视”摄像头时，可以使用预排序的导航标签。

这些功能特别适合大规模资产匹配和漏洞挖掘。

使用案例与场景

FOFA 的应用场景非常广泛，以下是几个典型案例：

  • 企业资产暴露面梳理：帮助企业了解其在公网上暴露的资产，及时发现和修复漏洞。例如，通过 host="企业域名" 搜索所有相关资产，评估暴露面。
  • 漏洞挖掘：白帽子可以通过 FOFA 快速收集特定产品在全网的资产总量和地区分布，评估漏洞影响范围。例如，搜索 app="特定产品" 后分析其分布。
  • 研究分析：研究人员可以使用 FOFA 进行应用分布统计、流行度排名统计等，例如分析全球某个摄像头品牌的部署情况。

官方资源与注意事项

  • 官网：[[invalid url, do not cite])
  • 语法参考：[[invalid url, do not cite])

在使用 FOFA 时，建议注意以下几点：

  • 确保搜索条件合法合规，避免涉及敏感信息或非法用途。
  • 结合 FID 和规则集提高搜索效率，特别是在处理大规模数据时。
  • 对于历史数据分析，充分利用时间范围搜索功能。

总结

FOFA 作为一款强大的网络空间搜索引擎，为用户提供了丰富的搜索功能和高级特性。通过学习和实践其搜索语法和技巧，可以更有效地进行网络资产的搜索和分析，尤其适合网络安全研究人员、企业安全团队以及白帽子用户。

参考资料

网站 http://yingjuxia.com
文章已创建 3855

84 个评论 在 “网络空间搜索引擎- FOFA的使用技巧总结”

  7. You really make it seem so easy with your presentation but I to find this matter to be actually something that I feel I might by no means understand.
    It seems too complex and extremely extensive for me.

    I’m looking forward in your subsequent publish, I will
    try to get the hold of it!

    回复

  8. You really make it appear really easy with your presentation however I in finding this
    topic to be actually one thing which I believe I
    would never understand. It sort of feels too complex and extremely large for me.

    I am taking a look forward in your subsequent publish, I’ll
    try to get the dangle of it!

    回复

  11. Greate pieces. Keep writing such kind of info on your
    blog. Im really impressed by your site.
    Hey there, You’ve performed an incredible job. I will definitely digg it
    and individually recommend to my friends. I’m sure they’ll be benefited from this web site.

    回复

  12. I do not even know how I ended up here, but I thought this post
    was great. I do not know who you are but certainly you’re going
    to a famous blogger if you are not already 😉 Cheers!

    回复

  13. Good post. I learn something totally new and challenging on websites I stumbleupon everyday.
    It will always be exciting to read articles from other authors and use a
    little something from their web sites.

    回复

  15. What i don’t understood is in truth how you’re
    now not really much more smartly-favored than you might be now.

    You are very intelligent. You know therefore significantly relating to this matter, produced
    me for my part consider it from so many numerous angles. Its like women and
    men are not fascinated except it’s one thing to do with Girl gaga!
    Your own stuffs nice. Always handle it up!

    回复

  27. Does your site have a contact page? I’m having a tough
    time locating it but, I’d like to send you an email.
    I’ve got some recommendations for your blog you might be interested in hearing.
    Either way, great blog and I look forward to seeing it expand over
    time.

    回复

  28. I think that everything posted made a ton of sense. However, what about this?
    what if you composed a catchier post title? I ain’t suggesting your content is not solid, however what if you added something that makes people want more?
    I mean 网络空间搜索引擎- FOFA的使用技巧总结 – 菜鸟教程
    – 学的不仅是技术，更是梦想！
    is a little boring. You could look at Yahoo’s front page and see how they create post headlines to grab viewers interested.
    You might try adding a video or a pic or two to grab people interested about what you’ve written. In my opinion, it would
    bring your posts a little livelier.

    回复

  31. Hi, I think your website might be having browser compatibility issues.

    When I look at your website in Firefox, it looks fine but when opening in Internet Explorer,
    it has some overlapping. I just wanted to give you a quick heads up!
    Other then that, superb blog!

    回复

  33. Write more, thats all I have to say. Literally, it seems as though
    you relied on the video to make your point. You obviously know what youre talking about, why throw away
    your intelligence on just posting videos to your blog when you could be giving us something enlightening to read?

    回复

  38. Hi my family member! I want to say that this post is awesome,
    great written and include approximately all significant infos.
    I would like to peer more posts like this .

    回复

  39. Hey I know this is off topic but I was wondering if you knew of any widgets I could add
    to my blog that automatically tweet my newest twitter
    updates. I’ve been looking for a plug-in like this for quite some time and was hoping maybe
    you would have some experience with something like this.
    Please let me know if you run into anything. I truly enjoy reading your blog and I
    look forward to your new updates.

    回复

  40. This is not the very first time I stumbled on a blog website that was truly worth commenting on. This specific brief article is appealing
    to me. I honestly live a lifetime of a great number of settings; that is to say that my work
    routines are distinct. I practice Postnatal Massage.
    On top of that, I trade in antiques. I’m gaining knowledge of Linux.
    And, that’s just a handful of activities I undertake.

    In any event, my idea is, each one of us all approaches
    a subject from a one-of-a-kind outlook. Every experience all of us have shapes us and our own viewpoint of ourselves and the society all around you and me.
    I suppose seeking out some greater awareness of real truth is just where almost everything many
    of us speak about leads to. So, precisely how do people today in that case
    communicate? Is it actually possible? I believe our individual contributions to the Cyberspace
    Commons alters a great many individuals, often times.
    For that reason reflect on that, bloggers and commenters.
    Your own brief review can potentially benefit another individual.
    Or perhaps, feedback can certainly achieve the complete opposite.
    Not to mention, everyone, meaning, you, me, certainly ought to pay attention to attempt to aid others to mature
    and absolutely not suffer. Bless you for this specific webpage; I personally am logging
    this post along with my other fantastic weblogs I’ve found
    that I actually bothered to remark on. Keep penning!
    Continue to keep revealing!
    ]

    回复

  41. Hello there! I know this is kinda off topic however , I’d figured I’d ask.
    Would you be interested in exchanging links or maybe guest authoring a blog post or vice-versa?
    My blog covers a lot of the same subjects as yours and I feel we could greatly benefit
    from each other. If you might be interested feel free to send me an e-mail.
    I look forward to hearing from you! Excellent blog by the way!

    回复

  45. I do not know whether it’s just me or if perhaps everybody else experiencing problems with
    your site. It seems like some of the text in your posts
    are running off the screen. Can someone else
    please provide feedback and let me know if this is happening to them as
    well? This could be a issue with my internet browser because I’ve had this
    happen before. Thanks

    回复

  46. I’ve been browsing online more than 3 hours as of late,
    but I never found any interesting article like
    yours. It’s pretty value enough for me. In my opinion, if all site owners and bloggers made good content material as you
    probably did, the web can be much more helpful than ever before.

    回复

  47. Greetings from Idaho! I’m bored to tears at work
    so I decided to check out your blog on my iphone during lunch break.

    I love the information you present here and can’t wait to take a look when I get home.

    I’m shocked at how fast your blog loaded on my phone ..
    I’m not even using WIFI, just 3G .. Anyhow, good site!

    回复

  51. I really love your website.. Very nice colors
    & theme. Did you develop this site yourself?
    Please reply back as I’m hoping to create my own website and would love to find out where you got this from or exactly what the
    theme is called. Cheers!

    回复

  55. Hey! This is my first comment here so I just wanted to give a quick shout
    out and say I genuinely enjoy reading your posts. Can you suggest
    any other blogs/websites/forums that go over the same topics?

    Thanks a lot!

    回复

  56. Hey! This post could not be written any better! Reading through this
    post reminds me of my old room mate! He always kept talking about this.
    I will forward this article to him. Fairly certain he will have a good read.

    Thank you for sharing!

    回复

  57. I know this if off topic but I’m looking into starting my own weblog and was curious what
    all is needed to get setup? I’m assuming having a
    blog like yours would cost a pretty penny? I’m not very web
    smart so I’m not 100% sure. Any recommendations or advice would be greatly appreciated.
    Thank you

    回复

  58. Platform Warriors88 memberikan login instan, terjamin, dan mudah digunakan untuk mengakses dunia game online terbaik.
    Temukan pengalaman hiburan digital masa kini bersama para pemain WARRIORS88 hari ini!

    回复

  59. My coder is trying to convince me to move to .net from PHP.
    I have always disliked the idea because of the costs.
    But he’s tryiong none the less. I’ve been using Movable-type on various websites for
    about a year and am concerned about switching to another platform.

    I have heard fantastic things about blogengine.net.
    Is there a way I can import all my wordpress content into it?
    Any help would be really appreciated!

    回复

  64. Nikmati OU & Mix Parlay di Platform POPDUT8.

    Situs bola terpercaya dengan privasi terlindungi dan modal
    ringan. Buktikan analisis Anda dan raih kemenangan sekarang juga!

    回复

  65. I truly love your site.. Great colors & theme. Did you create this website yourself?
    Please reply back as I’m attempting to create my very own blog and want to find out where you
    got this from or what the theme is called. Thank you!

    回复

  67. Coba Over/Under & Mix Parlay di Popdut. Agen bola resmi dengan privasi terlindungi dan modal ringan. Terapkan analisis Anda
    dan raih kemenangan hari ini!

    回复

  71. I’ve been exploring for a bit for any high-quality articles or weblog posts on this
    kind of area . Exploring in Yahoo I eventually stumbled upon this website.
    Reading this info So i am satisfied to show
    that I’ve a very excellent uncanny feeling I came upon exactly what I needed.
    I most indubitably will make sure to don?t put out of your mind this website and give it a glance regularly.

    回复

  74. This is a great tip especially to those new to the blogosphere.
    Simple but very accurate info… Many thanks for sharing this one.
    A must read article!

    回复

  75. obviously like your web-site but you have to
    check the spelling on quite a few of your posts. Several of them are
    rife with spelling issues and I find it very troublesome to inform the truth nevertheless I will definitely come
    back again.

    回复

回复 postnatal massage New Jersey 取消回复

您的邮箱地址不会被公开。 必填项已用 * 标注

相关文章

开始在上面输入您的搜索词，然后按回车进行搜索。按ESC取消。

返回顶部