https://github.com/adrgs/requestrepo
Analyze HTTP and DNS requests and create custom DNS records for your subdomain
https://github.com/adrgs/requestrepo
burp-collaborator dns http interactsh webhook
Last synced: 2 months ago
JSON representation
Analyze HTTP and DNS requests and create custom DNS records for your subdomain
- Host: GitHub
- URL: https://github.com/adrgs/requestrepo
- Owner: adrgs
- License: mit
- Created: 2022-12-28T16:18:09.000Z (about 3 years ago)
- Default Branch: main
- Last Pushed: 2026-01-14T15:43:46.000Z (2 months ago)
- Last Synced: 2026-01-14T19:17:00.267Z (2 months ago)
- Topics: burp-collaborator, dns, http, interactsh, webhook
- Language: JavaScript
- Homepage: https://requestrepo.com
- Size: 3.23 MB
- Stars: 475
- Watchers: 4
- Forks: 27
- Open Issues: 7
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE.md
Awesome Lists containing this project
README
# requestrepo.com
[](https://github.com/adrgs/requestrepo/actions/workflows/quality-checks.yml)
A tool for analyzing HTTP, DNS, and SMTP requests with custom DNS records and response files.
## Features
- **Multi-protocol logging**: Capture HTTP, DNS, and SMTP requests in real-time
- **Custom DNS records**: Create A, AAAA, CNAME, and TXT records for your subdomain
- **Custom response files**: Define custom HTTP responses with headers and body
- **Real-time updates**: WebSocket-based live request streaming
- **Auto-TLS**: Automatic HTTPS certificates via Let's Encrypt (DNS-01 challenge)
- **IP Geolocation**: Country detection for incoming requests (via DB-IP)
- **Request sharing**: Share individual requests via secure tokens
- **Admin authentication**: Optional password protection for session creation
- **No external dependencies**: In-memory cache with LRU eviction (no Redis required)
## Quick Start
Run RequestRepo with Docker:
```bash
docker run -d \
--name requestrepo \
-p 80:80 -p 443:443 -p 53:53/udp -p 53:53/tcp -p 25:25 \
-e JWT_SECRET=your-secret-key-min-32-chars \
-e DOMAIN=yourdomain.com \
-e SERVER_IP=your.server.ip \
-e TLS_ENABLED=true \
-e ACME_EMAIL=admin@yourdomain.com \
-v requestrepo-certs:/app/certs \
ghcr.io/adrgs/requestrepo:latest
```
This starts all services: HTTP (80), HTTPS (443), DNS (53), SMTP (25).
## Using Docker Compose
### Production (Pull from Registry)
```sh
git clone --depth 1 https://github.com/adrgs/requestrepo.git
cd requestrepo
cp .env.example .env # Edit .env with your settings
# Use production image from ghcr.io
docker compose -f docker-compose.yml up -d
```
### Development (Build Locally)
```sh
git clone https://github.com/adrgs/requestrepo.git
cd requestrepo
cp .env.example .env
# Build and run locally (uses docker-compose.override.yml automatically)
docker compose up -d --build
```
This starts all services:
- HTTP server on port 80
- HTTPS server on port 443 (with auto-TLS)
- DNS server on port 53
- SMTP server on port 25
## DNS Configuration
For DNS logging to work, configure your domain's nameserver to point to your server.
### Root Domain Setup
Dedicate the entire domain to requestrepo (e.g., `requestrepo.com`):
| Record Type | Name | Value |
| ----------- | ----- | ----------------: |
| NS | `@` | `ns1.example.com` |
| A | `ns1` | `` |
### Subdomain Setup
Run requestrepo on a subdomain (e.g., `rr.example.com`):
| Record Type | Name | Value |
| ----------- | ----- | ----------------: |
| NS | `rr` | `ns1.example.com` |
| A | `ns1` | `` |
For subdomain setups behind a reverse proxy, ensure:
1. The `Host` header is preserved
2. WebSocket support is enabled for `/api/v2/ws`
## IP Geolocation
The Docker image includes the [DB-IP](https://db-ip.com/db/download/ip-to-country-lite) country database by default. For local development without Docker, download manually:
```sh
mkdir -p ip2country/vendor
curl -o ip2country/vendor/dbip-country-lite.csv.gz \
"https://download.db-ip.com/free/dbip-country-lite-$(date +%Y-%m).csv.gz"
```
## Development
### Prerequisites
- [Rust](https://rustup.rs/) 1.75+
- [Bun](https://bun.sh/) 1.0+
- Docker (optional, for deployment)
### Installation
```sh
make install
```
### Starting Services
```sh
# Start backend (Rust)
make start-backend
# Start frontend (React/Vite)
make start-frontend
```
### Available Commands
| Command | Description |
|---------|-------------|
| `make install` | Install all dependencies and git hooks |
| `make start-backend` | Start Rust backend server |
| `make start-frontend` | Start React development server |
| `make build` | Build Rust backend (release mode) |
| `make test` | Run all tests |
| `make lint` | Run linters (clippy + eslint) |
| `make format` | Format code (rustfmt + prettier) |
| `make docker-build` | Build Docker image |
| `make docker-up` | Start Docker containers |
| `make docker-down` | Stop Docker containers |
## Architecture
```
requestrepo/
├── src/ # Rust backend
│ ├── cache/ # In-memory LRU cache
│ ├── certs/ # TLS/ACME certificate management
│ ├── dns/ # DNS server
│ ├── http/ # HTTP/HTTPS server + REST API
│ ├── smtp/ # SMTP server
│ └── utils/ # JWT, config, helpers
├── frontend/ # React frontend
│ ├── src/
│ │ ├── components/ # UI components
│ │ ├── pages/ # Page components
│ │ ├── stores/ # Zustand state stores
│ │ └── hooks/ # Custom React hooks
│ └── ...
└── ip2country/ # IP geolocation database
```
## Environment Variables
See [.env.example](.env.example) for all available options.
| Variable | Required | Default | Description |
|----------|----------|---------|-------------|
| `JWT_SECRET` | Yes | - | Secret key for JWT signing (min 32 chars) |
| `DOMAIN` | Yes | - | Base domain (e.g., `requestrepo.com`) |
| `SERVER_IP` | Yes | - | Public IP for DNS responses |
| `ADMIN_TOKEN` | No | - | Password for session creation |
| `TLS_ENABLED` | No | `false` | Enable HTTPS with Let's Encrypt |
| `ACME_EMAIL` | No | - | Email for Let's Encrypt (required if TLS enabled) |
| `HTTP_PORT` | No | `80` | HTTP server port |
| `HTTPS_PORT` | No | `443` | HTTPS server port |
| `DNS_PORT` | No | `53` | DNS server port |
| `SMTP_PORT` | No | `25` | SMTP server port |
| `SENTRY_DSN_BACKEND` | No | - | Sentry DSN for backend error tracking |
| `SENTRY_DSN_FRONTEND` | No | - | Sentry DSN for frontend error tracking |
| `CACHE_MAX_MEMORY_PCT` | No | `0.7` | Max cache memory as % of container limit |
| `MAX_SUBDOMAIN_SIZE_MB` | No | `10` | Max storage per subdomain |
| `MAX_REQUEST_BODY_MB` | No | `10` | Max HTTP request body size |
| `SESSION_RATE_LIMIT` | No | `10` | Max sessions per IP per window |
| `SESSION_RATE_WINDOW_SECS` | No | `60` | Rate limit window in seconds |
| `ALLOW_ALL_HEADERS` | No | `false` | Allow dangerous headers (e.g., Service-Worker-Allowed) |
| `RUST_LOG` | No | `info` | Log level (trace, debug, info, warn, error) |
## Interface
## Security Acknowledgments
Thank you to the following researchers for responsibly disclosing security issues:
- [debsec](https://x.com/deb_security) - LFI via improper path handling
- [JaGoTu](https://infosec.exchange/@jagotu) - DoS via unrestricted file upload
- [m0z](https://x.com/LooseSecurity) - LFI via session subdomain
- [Jorian](https://x.com/J0R1AN) - Session hijacking via Service-Worker-Allowed header
## Contributing
Please read [CONTRIBUTING.md](CONTRIBUTING.md) for details on our code of conduct and the process for submitting pull requests.
## License
If you find this project useful, please consider giving it a star on GitHub.