Skip to content

deps: bump github.com/chainreactors/zombie from 1.2.3-0.20260629062908-99a0f34ed031 to 1.3.0 in the chainreactors group across 1 directory#28

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/chainreactors-b9f302a519
Open

deps: bump github.com/chainreactors/zombie from 1.2.3-0.20260629062908-99a0f34ed031 to 1.3.0 in the chainreactors group across 1 directory#28
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/chainreactors-b9f302a519

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the chainreactors group with 1 update in the / directory: github.com/chainreactors/zombie.

Updates github.com/chainreactors/zombie from 1.2.3-0.20260629062908-99a0f34ed031 to 1.3.0

Release notes

Sourced from github.com/chainreactors/zombie's releases.

v1.3.0 — SDK 编程接口 + 代理注入 + go:embed 模板 + 并发控制

v1 系列最终版本。全面重构为 SDK 友好架构;支持 per-instance 代理注入;模板从 base64 切换到 go:embed;新增 per-host 并发限速。后续新功能(service protocol / 模板化后渗透)将在 zombie2.0 分支开发。

New Features

SDK 编程接口

  • NewRunner(opt) + RunnerOption 独立结构体,支持程序化调用
  • RunWithArgs(ctx, args, options) 复用 CLI 解析 + 信号处理
  • Help() 函数暴露帮助文本
  • SetResourceProvider() / SetResourceLoader() 资源注入覆盖
opt := &core.RunnerOption{
    Threads:     50,
    Concurrency: 4,
    Timeout:     10,
    Mod:         "clusterbomb",
    FirstOnly:   true,
}
runner := core.NewRunner(opt)
runner.SetTargets(targets)
runner.SetUsers([]string{"root", "admin"})
runner.SetPasswords([]string{"123456", "admin"})
runner.RunWithContext(ctx)

代理注入

  • ProxyDial 字段注入到 RunnerOption,per-execution 代理
  • Socket 协议(SSH/Redis/MySQL/FTP/...)和 HTTP 协议统一走注入的 DialFunc
  • 基于 utils/httpx 统一 HTTP transport 构建
opt.ProxyDial = proxyclient.NewDialFunc("socks5://127.0.0.1:1080")

go:embed 模板

  • 模板从 base64 编码切换到 go:embed + deflate 压缩的 .bin 文件
  • 源码体积减小,编译和启动速度提升
  • templates_gen.go -embed 模式自动生成 embed 声明

per-host 并发限速

  • --concurrency N(原 --host-threads)限制单 host 在飞连接数
  • 基于 channel semaphore,避免触发 sshd MaxStartups 等服务端限速
  • context 取消感知:目标命中后排队任务立即退出,不再建连

... (truncated)

Commits

@dependabot @github

dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, go. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Bumps the chainreactors group with 1 update in the / directory: [github.com/chainreactors/zombie](https://github.com/chainreactors/zombie).


Updates `github.com/chainreactors/zombie` from 1.2.3-0.20260629062908-99a0f34ed031 to 1.3.0
- [Release notes](https://github.com/chainreactors/zombie/releases)
- [Commits](https://github.com/chainreactors/zombie/commits/v1.3.0)

---
updated-dependencies:
- dependency-name: github.com/chainreactors/zombie
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: chainreactors
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/chainreactors-b9f302a519 branch from 9266f88 to bb1aac3 Compare June 29, 2026 20:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants