端口扫描

[Apexo8]

系统为win2021 R2，已经下载了npcap，但是漏扫、主机资产测绘等扫描功能一直卡在执行中，大佬知道是怎么回事吗？

[nbyiansec]

资产和poc模板多的情况下扫描会慢，特别是应用资产测绘过程中如果选择了目录探测（默认内置1万目录字典）并且指定了测绘深度，测绘量会指数增加，一个目录对应要爬取一次，如果有报错，可以贴出logs下的sskit/app.log日志文件。

[Apexo8]

java.lang.NullPointerException: Cannot invoke "com.yiansec.sskit.module.kit.amtool.enums.ScanItemEnum.getName()" because "this.scanItemEnum" is null
at com.yiansec.sskit.module.kit.amtool.handle.task.AmtoolAbstractExecTask.executeCommand(AmtoolAbstractExecTask.java:210) ~[sskit-module-kit-amtool-service-1.0.0.jar!/:na]
at com.yiansec.sskit.module.kit.amtool.service.impl.AmtoolExecServiceImpl.getHostAlive(AmtoolExecServiceImpl.java:520) ~[sskit-module-kit-amtool-service-1.0.0.jar!/:na]
at com.yiansec.sskit.module.kit.amtool.service.impl.AmtoolExecServiceImpl.checkHostAliveStatus(AmtoolExecServiceImpl.java:402) ~[sskit-module-kit-amtool-service-1.0.0.jar!/:na]
at com.yiansec.sskit.module.kit.amtool.service.impl.AmtoolExecServiceImpl.handleHostScan(AmtoolExecServiceImpl.java:382) ~[sskit-module-kit-amtool-service-1.0.0.jar!/:na]
at com.yiansec.sskit.module.kit.amtool.service.impl.AmtoolExecServiceImpl.execAmtool(AmtoolExecServiceImpl.java:104) ~[sskit-module-kit-amtool-service-1.0.0.jar!/:na]
at com.yiansec.sskit.module.kit.amtool.service.impl.AmtoolExecServiceImpl$$FastClassBySpringCGLIB$$6e96b3ba.invoke() ~[sskit-module-kit-amtool-service-1.0.0.jar!/:na]
at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:218) ~[spring-core-5.3.30.jar!/:5.3.30]
at org.springframework.aop.framework.CglibAopProxy.invokeMethod(CglibAopProxy.java:386) ~[spring-aop-5.3.30.jar!/:5.3.30]
at org.springframework.aop.framework.CglibAopProxy.access$000(CglibAopProxy.java:85) ~[spring-aop-5.3.30.jar!/:5.3.30]
at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:703) ~[spring-aop-5.3.30.jar!/:5.3.30]
at com.yiansec.sskit.module.kit.amtool.service.impl.AmtoolExecServiceImpl$$EnhancerBySpringCGLIB$$5393f676.execAmtool() ~[sskit-module-kit-amtool-service-1.0.0.jar!/:na]
at com.yiansec.sskit.module.kit.amtool.service.impl.AmtoolScanTaskServiceImpl.lambda$createAmtoolScanTask$0(AmtoolScanTaskServiceImpl.java:130) ~[sskit-module-kit-amtool-service-1.0.0.jar!/:na]
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136) ~[na:na]
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) ~[na:na]
at java.base/java.lang.Thread.run(Thread.java:833) ~[na:na]

[Apexo8]

看了一下好像还是npcap的原因，我之前搜说是Windows Server 2012 R2默认启用“驱动签名强制”，不知道你那边有没有遇到过

[nbyiansec]

安装Microsoft Visual C++ Redistributable Package 试试，仓库文件中有 VC_redist.x64.exe

[Apexo8]

2025-07-25 09:50:43.874 - ERROR [] [pool-2-thread-1] c.y.s.m.k.a.s.i.AmtoolExecServiceImpl : Host alive check failed for task: 1948561518364807170

java.lang.NullPointerException: Cannot invoke "com.yiansec.sskit.module.kit.amtool.enums.ScanItemEnum.getName()" because "this.scanItemEnum" is null
at com.yiansec.sskit.module.kit.amtool.handle.task.AmtoolAbstractExecTask.executeCommand(AmtoolAbstractExecTask.java:210) ~[sskit-module-kit-amtool-service-1.0.0.jar!/:na]
at com.yiansec.sskit.module.kit.amtool.service.impl.AmtoolExecServiceImpl.getHostAlive(AmtoolExecServiceImpl.java:520) ~[sskit-module-kit-amtool-service-1.0.0.jar!/:na]
at com.yiansec.sskit.module.kit.amtool.service.impl.AmtoolExecServiceImpl.checkHostAliveStatus(AmtoolExecServiceImpl.java:402) ~[sskit-module-kit-amtool-service-1.0.0.jar!/:na]
at com.yiansec.sskit.module.kit.amtool.service.impl.AmtoolExecServiceImpl.handleHostScan(AmtoolExecServiceImpl.java:382) ~[sskit-module-kit-amtool-service-1.0.0.jar!/:na]
at com.yiansec.sskit.module.kit.amtool.service.impl.AmtoolExecServiceImpl.execAmtool(AmtoolExecServiceImpl.java:104) ~[sskit-module-kit-amtool-service-1.0.0.jar!/:na]
at com.yiansec.sskit.module.kit.amtool.service.impl.AmtoolExecServiceImpl$$FastClassBySpringCGLIB$$6e96b3ba.invoke() ~[sskit-module-kit-amtool-service-1.0.0.jar!/:na]
at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:218) ~[spring-core-5.3.30.jar!/:5.3.30]
at org.springframework.aop.framework.CglibAopProxy.invokeMethod(CglibAopProxy.java:386) ~[spring-aop-5.3.30.jar!/:5.3.30]
at org.springframework.aop.framework.CglibAopProxy.access$000(CglibAopProxy.java:85) ~[spring-aop-5.3.30.jar!/:5.3.30]
at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:703) ~[spring-aop-5.3.30.jar!/:5.3.30]
at com.yiansec.sskit.module.kit.amtool.service.impl.AmtoolExecServiceImpl$$EnhancerBySpringCGLIB$$fb5ba0d3.execAmtool() ~[sskit-module-kit-amtool-service-1.0.0.jar!/:na]
at com.yiansec.sskit.module.kit.amtool.service.impl.AmtoolScanTaskServiceImpl.lambda$createAmtoolScanTask$0(AmtoolScanTaskServiceImpl.java:130) ~[sskit-module-kit-amtool-service-1.0.0.jar!/:na]
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136) ~[na:na]
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) ~[na:na]
at java.base/java.lang.Thread.run(Thread.java:833) ~[na:na]

[nbyiansec]

这里存在bug，下个版本修复

[nbyiansec]

在测绘之前是否开了vpn，在开启vpn情况下，可能导致测绘失败