Content
<p align="center">
<a href="https://github.com/wgpsec/ENScan_GO">
<img src="README/logo.png" alt="Logo" width="80" height="80">
</a>
<h3 align="center">ENScan Go</h3>
<p align="center">
Aiming at HW/SRC, solving various information collection challenges encountered by domestic enterprises in HW/SRC scenarios
<br />
<br />
<a href="https://github.com/wgpsec/ENScan_GO/stargazers"><img alt="GitHub stars" src="https://img.shields.io/github/stars/wgpsec/ENScan_GO"/></a>
<a href="https://github.com/wgpsec/ENScan_GO/releases"><img alt="GitHub releases" src="https://img.shields.io/github/release/wgpsec/ENScan_GO"/></a>
<a href="https://github.com/wgpsec/ENScan_GO/blob/main/LICENSE"><img alt="License" src="https://img.shields.io/badge/License-Apache%202.0-blue.svg"/></a>
<a href="https://github.com/wgpsec/ENScan_GO/releases"><img alt="Downloads" src="https://img.shields.io/github/downloads/wgpsec/ENScan_GO/total?color=brightgreen"/></a>
<a href="https://goreportcard.com/report/github.com/wgpsec/ENScan_GO"><img alt="Go Report Card" src="https://goreportcard.com/badge/github.com/wgpsec/ENScan_GO"/></a>
<a href="https://twitter.com/wgpsec"><img alt="Twitter" src="https://img.shields.io/twitter/follow/wgpsec?label=Followers&style=social" /></a>
<br>
<br>
<a href="https://github.com/wgpsec/ENScan_GO/discussions"><strong>Explore More Tricks »</strong></a>
<br/>
<br />
<a href="https://github.com/wgpsec/ENScan_GO?tab=readme-ov-file#%E4%BD%BF%E7%94%A8%E6%8C%87%E5%8D%97">🧐 How to Use</a>
·
<a href="https://github.com/wgpsec/ENScan_GO/releases">⬇️ Download Program</a>
·
<a href="https://github.com/wgpsec/ENScan_GO/issues">❔ Report Bug</a>
·
<a href="https://github.com/wgpsec/ENScan_GO/discussions">🍭 Submit Request</a>
</p>
## 🤷♂️ Disclaimer
The technologies, ideas, and tools mentioned in this document are intended solely for educational and communication purposes related to security. No one is allowed to use them for illegal purposes or for profit; otherwise, the consequences will be borne by the individual.
All data used is publicly available, **no cracking or bypassing protective measures is provided**. Using the program may lead to ⌈account anomalies⌋.
**If this program affects or infringes upon your legal rights, please contact us** admin#wgpsec.org (#replace with @)
## ⚒️ Feature List
- Supports the following data sources
- AiQicha
- Tianyancha
- KuaiCha
- FengNiao
- QiChaCha (not provided)
- XiaoLanBen (not provided)
- Data plugins
- Aladdin (data feedback is outdated and temporarily offline)
- Coolapk Market
- Qimai Data
- Record Information Query API
- Queryable information
- ICP Filing (ICP备案)
- APP
- Weibo
- WeChat Official Account (微信公众号)
- Holding Company (控股公司)
- Supplier (供应商)
- Mini Program (小程序)
- Public Recruitment Information (公开招聘信息)
- External Investment Information (对外投资信息)
- ...
- Practical features
- Supports merged export
- Regex filtering for companies
- Supports deep queries to collect multi-layer subsidiaries
- Supports API mode for tool linkage
## User Guide
### First Use
Go to [RELEASE](https://github.com/wgpsec/ENScan_GO/releases) to download the compiled files for use.
On first use, you need to generate a configuration file and configure the Cookie using the -v command.
```
./enscan -v
```
### Quick Start
*If you encounter access issues, you can try using burp or a proxy.* After starting, if there is an **abnormal exit**, the program will retain the `enscan.gob` cache in the program directory. Please manually delete it if you are running new information.
**Default Company Information** (Website Record, Weibo, WeChat Official Account, App)
```
./enscan -n Xiaomi
```
**Batch Query** (Text separated by lines, optional PID mode)
```
./enscan -f f.txt
```
**Companies with 100% External Investment**
```
./enscan -n Xiaomi -invest 100
```
**Combination Filtering**
Companies greater than 51%, branches, only ICP record information
```
./enscan -n Xiaomi -field icp -invest 51 --branch
```
Collecting Subsidiaries (deep parameter, needs to be used with invest) Companies greater than 51%, branches, only ICP record information
```
./enscan -n Xiaomi -field icp -invest 51 --branch --deep 2
```
**Using Different Channels**
Using Tianyancha data source (or can be set to all to combine multiple data sources)
```
./enscan -n Xiaomi -type tyc
```
Using multiple data sources together (currently does not support multiple channels + filtering)
```
./enscan -n Xiaomi -type aqc,tyc
```
Using plugin channels
```
./enscan -n Xiaomi -type aqc,miit
```
**Please set request delay to prevent impact**
```
./enscan -n Xiaomi -delay 3
```
### Using MCP
Start the MCP server, which will listen on the local http://localhost:8080
```
./enscan --mcp
```
Taking the Cherry Studio configuration as an example
After completing the configuration, start the MCP service
Once the configuration is complete, you can write prompts according to your needs. Feel free to share useful prompts [here](https://github.com/wgpsec/ENScan_GO/discussions/163).
### Cookie Configuration
**AQC**
If a security verification occurs, please use a browser to obtain the cookie and pass the verification to continue. The default query is aiqicha.baidu.com.
Please do not directly use `document.cookie` for cookie information, as it may fail to log in due to the http-only option preventing full copying.
**TYC tycid**
After configuring the COOKIE, configure the tycid.
**TYC auth_token**
After configuring the COOKIE, configure the auth_token.
For other cookies, please refer to the acquisition method yourself.
### Option Description
#### **field Get Fields**
Use the parameter `field` to specify the information to be queried, and multiple parameters can be specified together for quick collection.
```
-n 小米 -field icp,app
```
Supports the following parameters:
- `icp` Website备案信息 (Website Record Information)
- `weibo` 微博 (Weibo)
- `wechat` 微信公众号 (WeChat Official Account)
- `app` 应用信息 (Application Information)
- `job` 招聘信息 (Job Information)
- `wx_app` 微信小程序 (WeChat Mini Program)
- `copyright` 软件著作权 (Software Copyright)
- `supplier` 供应商信息（通过招标书确定） (Supplier Information, determined by the tender)
- 其他（根据插件情况更新） (Others, updated according to plugin conditions)
#### **type Field Retrieval**
Using the parameter `type` allows you to specify the required API data source.
```
-n 小米 -type tyc
```
**Query Data Sources**
- `aqc` AiQicha
- `tyc` Tianyancha
- `kc` KuaiCha
- `rb` Fengniao
- `all` All Queries
**Plugins**
- `aldzs` Aladdin (Mini Programs only)
- `coolapk` Coolapk Market (APP only)
- `qimai` Qimai Data (APP only)
- `miit` HG-ha's ICP_Query (ICP Filing, APP, Mini Programs, Quick Applications) **Not maintained by the Wolf Group, team members please use the internal version**
#### Complete Parameters
*Document updates may not be timely, please refer to program prompts for accuracy*
| Parameter | Example | Description |
| --------------- | --------------- | ------------------------------------------------------------ |
| -n | Xiaomi | Keyword |
| -i | 29453261288626 | Company PID (automatically recognized type) |
| -f | file.txt | Batch query, text separated by lines (optional PID mode) |
| -type | aqc | API type |
| -o | | Folder location for result output (optional) |
| -is-merge | | Merge export |
| -invest | | Investment ratio |
| -field | icp | Get field information |
| -deep | 1 | Recursively search n layers of companies, must be used with invest |
| -hold | | Whether to query holding companies (may require VIP account) |
| -supplier | | Whether to query supplier information |
| -branch | | Query branch (subsidiary) information |
| -is-branch | | Deep query for branch information (large quantity) |
| -api | | Whether in API mode |
| -debug | | Whether to display debug detailed information |
| -is-show | | Whether to display information output |
| -is-group | | Query keyword as group |
| -is-pid | | Whether the batch query file is company PID |
| -delay | | Delay for each request (S) -1 for random delay 1-5S |
| -branch-filter | | Provide a regular expression; branches and subsidiaries matching this regex will be skipped |
| -proxy | | Set proxy |
| -timeout | | Default timeout for each request is 1 (minute) |
| -no-merge | | Batch query [cancel] merge export |
| -v | | Version information |
### API Mode
**API Call Effects**
You can experience it at https://enscan.wgpsec.org/api/info (currently offline due to abuse)
🥹 The plat platform has stopped maintenance, please don't ask~
#### API Description
The information retrieval will be displayed in real-time and can interact with other tools via API. Please note **do not expose it to the public network**.
**Get Information**
```
GET /api/info?name=小米&invest=100&branch=true
```
| Parameter | Type | Description |
| --------- | -------------------- | ---------------------------- |
| name | Text | Full company name (one of two) |
| type | Text, consistent with command parameters | Data source |
| field | Text, consistent with command parameters | Filter specified information |
| depth | Number | Number of company layers to crawl, e.g., 2 for subsidiary |
| invest | Number | Filter investment ratio |
| holds | true | Filter holding companies |
| supplier | true | Filter supplier information |
| branch | true | Filter branch information |
| output | true | Export to Excel for download if true |
##### PRO Custom Mode (Faster)
Version 2.0.0 introduces pro mode, supporting custom calls without scheduling logic. **type is required**.
```
GET /api/pro/:type&type=xxx
Example
GET /api/pro/advance_filter?name=小米&type=aqc
GET /api/pro/get_page?name=29453261288626&type=aqc&page=1&filed=icp
```
| type | Parameter | Description |
| -------------- | --------- | -------------------------- |
| advance_filter | name (required) | Query keyword |
| get_ensd | | Get mapping field information |
| get_base_info | pid | Get basic company information |
| get_page | pid | Paginate to get specified type information |
#### Startup Deployment
**Golang Version Dependency**
```
go >= 1.22.1
```
**API Mode**
Starting in API mode will listen on port 31000 and launch the API service, which can be used to call and read data.
```
./enscan --api
```
## Communication & Feedback
Follow the WeChat official account `WgpSec狼组安全团队`, reply with `加群` to add the BOT, and then send `enscan` to communicate together~
[](https://starchart.cc/wgpsec/ENScan_GO)
## 404 Star Link Project
<img src="https://github.com/knownsec/404StarLink/raw/master/Images/logo.png" width="30%">
ENScanGo has now joined the [404 Star Link Project](https://github.com/knownsec/404StarLink)
## JetBrains OS licenses
``ENScanGo`` had been developed with the `GoLand` IDE under the **free JetBrains Open Source license(s)** granted by JetBrains s.r.o., hence I would like to express my thanks here.
<a href="https://www.jetbrains.com/?from=wgpsec" target="_blank"><img src="https://raw.githubusercontent.com/wgpsec/.github/master/jetbrains/jetbrains-variant-4.png" width="256" align="middle"/></a>
