component-vuln-intel

Online intelligence gathering (identify component → immediately search the whole web; results = leads/tentative, not confirmed Fact before verification)

🔴一识别出框架/组件/版本 → 必须停本地扫描立即联网(不搜就利用=盲打=违反铁律)。
🔴以下序列全部执行(不是选做),用{C}=组件名 {V}=版本替换。每步都用browser_navigate或terminal实际访问:

1.CVE漏洞库(必做,找已知漏洞):
  terminal: searchsploit {C} {V}
  terminal: curl -s "https://cve.circl.lu/api/search/{C}/{V}" | python3 -c "import sys,json;[print(x['id'],x.get('summary','')[:80]) for x in json.load(sys.stdin)[:10]]"
  browser_navigate: https://github.com/advisories?query={C}+{V}
  browser_navigate: https://www.cvedetails.com/google-search-results.php?q={C}+{V}&sa=Search

2.搜索引擎(至少执行3个,找漏洞分析+PoC):
  browser_navigate: https://www.google.com/search?q={C}+{V}+exploit+PoC+RCE+site:github.com
  browser_navigate: https://www.google.com/search?q={C}+{V}+漏洞+利用+复现
  browser_navigate: https://www.baidu.com/s?wd={C}+{V}+漏洞+利用+poc+getshell
  browser_navigate: https://www.bing.com/search?q={C}+{V}+CVE+exploit+poc
  browser_navigate: https://duckduckgo.com/?q={C}+{V}+vulnerability+exploit

3. Chinese security communities (mandatory, many Chinese first releases and good in-depth analysis): browser_navigate: https://xz.aliyun.com/search?keyword={C}+漏洞 browser_navigate: https://www.seebug.org/search/?keywords={C} browser_navigate: https://paper.seebug.org/search/?keyword={C} browser_navigate: https://www.freebuf.com/search?search={C}+{V} browser_navigate: https://ti.qianxin.com/vulnerability?keyword={C} browser_navigate: https://www.anquanke.com/search?s={C}

4. Search GitHub for PoC/exploit code (mandatory, the most direct way to get exploit code): terminal: curl -s "https://api.github.com/search/repositories?q={C}+{V}+exploit+OR+poc+OR+CVE&sort=updated&per_page=10" | python3 -c "import sys,json;d=json.load(sys.stdin);[print(x['full_name'],x['html_url'],x.get('description','')[:60]) for x in d.get('items',[])]" terminal: curl -s "https://api.github.com/search/code?q={C}+RCE+OR+shell+OR+exploit+language:python&per_page=5" | python3 -c "import sys,json;d=json.load(sys.stdin);[print(x['html_url']) for x in d.get('items',[])]" terminal: curl -s "https://api.github.com/search/repositories?q={C}+CVE&sort=stars&per_page=5" | python3 -c "import sys,json;d=json.load(sys.stdin);[print(x['full_name'],x['stargazers_count'],'★',x.get('description','')[:50]) for x in d.get('items',[])]" After finding a repository: curl -s "https://api.github.com/repos/{owner}/{repo}/readme" | python3 -c "import sys,json,base64;print(base64.b64decode(json.load(sys.stdin)['content']).decode())"

5. Asset engines (find similar targets/exposure surface): browser_navigate: https://fofa.info/result?qbase64=$(echo -n 'app="{C}"' | base64) browser_navigate: https://www.shodan.io/search?query={C}+{V} browser_navigate: https://www.zoomeye.org/searchResult?q={C} browser_navigate: https://search.censys.io/search?resource=hosts&q=services.software.product:{C}

6. Real-time intelligence (latest 0day/in-the-wild exploitation): browser_navigate: https://x.com/search?q={C}+CVE+OR+0day+OR+exploit&f=live browser_navigate: https://www.reddit.com/r/netsec/search/?q={C}&sort=new&t=month browser_navigate: https://www.exploit-db.com/search?q={C}

7. Expansion chain (mandatory): after searching {C}, extract its dependency list (package.json/pom.xml/requirements.txt/go.mod) → repeat 1-6 for each dependency

🔴Search blocked handling sequence (encounter 403/captcha/empty results/timeout → execute in order, do not give up): ①Change UA: curl -H "User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "{URL}" ②Jina reader: browser_navigate: https://r.jina.ai/{原始URL} ③Google cache: browser_navigate: https://webcache.googleusercontent.com/search?q=cache:{域名}+{关键词} ④Archive: browser_navigate: https://web.archive.org/web/{URL} ⑤GitHub API alternative (GitHub pages block but the API does not): use the curl command from step 4 above ⑥Switch engines: Google blocked→use Bing/DuckDuckGo/Baidu; Baidu blocked→use Google/Bing ⑦Use a proxy: follow the proxy-tool-bootstrap sequence to obtain a SOCKS5 proxy and retry If all are blocked and there are still no results→write a negative Fact "searched {C} {V} across all channels, no public vulnerabilities"→switch to zero-day-discovery