Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/AlphabugX/Alphalog

DNSLOG、httplog、rmilog、ldaplog、jndi 等都支持,完全匿名 产品(fuzz.red),Alphalog与传统DNSLog不同,更快、更安全。
https://github.com/AlphabugX/Alphalog

alphalog dnslog httplog ldap log tpclog

Last synced: 21 days ago
JSON representation

DNSLOG、httplog、rmilog、ldaplog、jndi 等都支持,完全匿名 产品(fuzz.red),Alphalog与传统DNSLog不同,更快、更安全。

Awesome Lists containing this project

README

        

# Alphalog

DNSLog、httplog、rmilog、ldaplog、jndi 等都支持,完全匿名 ,Alphalog与传统DNSLog不同,更快、更安全。

# patch 内容

update了前端展示,增加了DNS外带功能。支持极端条件下命令执行结果通过dns外带 >>> [demo](https://www.callback.red/)

image

![image](https://user-images.githubusercontent.com/13174906/228754642-7da361fc-c674-4ea7-8b71-bdb626d97573.png)

```bash
$$$$$$\ $$\ $$\ $$\
$$ __$$\ $$ | $$ | $$ |
$$ / $$ |$$ | $$$$$$\ $$$$$$$\ $$$$$$\ $$ | $$$$$$\ $$$$$$\
$$$$$$$$ |$$ |$$ __$$\ $$ __$$\ \____$$\ $$ | $$ __$$\ $$ __$$\
$$ __$$ |$$ |$$ / $$ |$$ | $$ | $$$$$$$ |$$ | $$ / $$ |$$ / $$ |
$$ | $$ |$$ |$$ | $$ |$$ | $$ |$$ __$$ |$$ | $$ | $$ |$$ | $$ |
$$ | $$ |$$ |$$$$$$$ |$$ | $$ |\$$$$$$$ |$$$$$$$$\\$$$$$$ |\$$$$$$$ |
\__| \__|\__|$$ ____/ \__| \__| \_______|\________|\______/ \____$$ |
$$ | $$\ $$ |
$$ | By:Alphabug \$$$$$$ |
\__| Version:0.2022.01.16.01 \______/
```

# Welcome to alphalog #

![image](https://user-images.githubusercontent.com/27001865/150348452-38595c7d-8f16-4564-a1c7-9a02ed9b57a9.png)

## Install

1. 系统环境
- 任意平台
- Redis数据库

2. 创建config.yaml文件
内容如下
```
domain: alphabug.cn
IP_DNS: VPS地址
IP_JNDI: VPS地址
database: redis:Redis数据库地址:端口:密码
PORT_HTTP: HTTPLOG端口
PORT_JNDI: RMI/LDAP端口
```
例如
```
domain: alphabug.cn
IP_DNS: 192.168.1.7
IP_JNDI: 192.168.1.7
database: redis:192.168.1.3:6379:Alphabug
PORT_HTTP: 80
PORT_JNDI: 5
```

3. Run
```
E:\Code\GolandProjects\Alphalog\output> Alphalog_windows_amd64.exe

$$$$$$\ $$\ $$\ $$\
$$ __$$\ $$ | $$ | $$ |
$$ / $$ |$$ | $$$$$$\ $$$$$$$\ $$$$$$\ $$ | $$$$$$\ $$$$$$\
$$$$$$$$ |$$ |$$ __$$\ $$ __$$\ \____$$\ $$ | $$ __$$\ $$ __$$\
$$ __$$ |$$ |$$ / $$ |$$ | $$ | $$$$$$$ |$$ | $$ / $$ |$$ / $$ |
$$ | $$ |$$ |$$ | $$ |$$ | $$ |$$ __$$ |$$ | $$ | $$ |$$ | $$ |
$$ | $$ |$$ |$$$$$$$ |$$ | $$ |\$$$$$$$ |$$$$$$$$\\$$$$$$ |\$$$$$$$ |
\__| \__|\__|$$ ____/ \__| \__| \_______|\________|\______/ \____$$ |
$$ | $$\ $$ |
$$ | By:Alphabug \$$$$$$ |
\__| Version:1.0.0.Releases \______/
2022/04/30 20:40:09 [Config] Redis Initialization succeeded
2022/04/30 20:40:09 [DNS] Domain: alphabug.cn
2022/04/30 20:40:09 [Redis] Start redis database init
2022/04/30 20:40:09 [DNS] Initialization succeeded
2022/04/30 20:40:09 [JNDI] Start fake reverse server

```

## Usage

1. Get token(`key`) and randomly named subdomain (Expires: 1 Day)

```bash
$ curl fuzz.red/get
{"key":"63d755be-9683-40a9-91fb-b85890155872","subdomain":"oz4e.fuzz.red"}
```

2. Get logs

```bash
$ curl fuzz.red -X POST -d "key=63d755be-9683-40a9-91fb-b85890155872"
{"code":200,"data":[]}
```

### DNSLOG

```bash
ping -c 1 oz4e.fuzz.red
```

```bash
$ curl fuzz.red -X POST -d "key=63d755be-9683-40a9-91fb-b85890155872"
{"code":200,"data":["{\"ip\":\"192.168.1.1\",\"reqbody\":[\"\"],\"subdomain\":\"oz4e.fuzz.red.\",\"time\":\"2022-01-14 17:01:17 +0800 CST\",\"type\":\"dns\"}"]}
```

### HTTPLOG

```bash
curl oz4e.fuzz.red -d "abc"
```

```bash
$ curl fuzz.red -X POST -d "key=63d755be-9683-40a9-91fb-b85890155872" | python -m json.tool
{
"code": 200,
"data": [
{...}]
}
```

### SSRF

```bash
$ curl -L fuzz.red/ssrf/www.baidu.com/
...(www.baidu.com page)...