diff --git a/README.md b/README.md index 212b47a..ba7c5f6 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,6 @@ -# eyes.sh 1.0.1 +# eyes.sh 1.0.2 + +View this doc in [English](README_EN.md). [eyes.sh](http://eyes.sh/)是用来辅助安全测试和漏扫工具的DNS Log / HTTP Log检测工具,基于 [BugScan DNSLog](https://github.com/bugscanteam/dnslog/) 优化(感谢四叶草安全、感谢坤哥 :) )。 @@ -9,6 +11,7 @@ ## Chang Log +* 2022-04-09: 增加多语言支持,添加英文翻译 * 2022-04-06: 注册用户名,限制只允许使用字母数字 ## **背景** diff --git a/README_EN.md b/README_EN.md new file mode 100644 index 0000000..f5f5fbb --- /dev/null +++ b/README_EN.md @@ -0,0 +1,79 @@ +# eyes.sh 1.0.2 + +View this doc in [Chinese](README.md). + +[eyes.sh](http://eyes.sh/) is a simple DNS / HTTP logger which can be used by pentesters or scanners to identify and locate vulnerable targets. + +Mostly used to find vulerabilities like SSRF / Blind SQL Injection / Blind RCE / Stored XSS. + +* In some cases, target can send DNS queries but http requests were blocked by Firewall, you can use eyes.sh to monitor if any DNS Queries captured +* In some cases, RCE or SSRF were triggered by a group of hosts, you can use eyes.sh to capture http requests and get their IPs/Headers/Location +* ... + +This project is based on [BugScan DNSLog](https://github.com/bugscanteam/dnslog/) . + +Demo site [http://eyes.sh/](http://eyes.sh/) + +* Login with `demo` / `demo@pass`,the delete function was disabled +* You can also click `Login as random new user` + +## Chang Log + +* 2022-04-09: Add english translation + +Install +--- + +#### Prepare Domain Names + + Let's have `eyes.sh` installation as a show case. + +When install the service,you were required to control two domain names(One is to add two type `A` records, and later set them as `NS` records for `eyes.sh`) + +* Add `eyes_dns1.lijiejie.com` `eyes_dns2.lijiejie.com` , resolve to your Server IP +* Set `eyes_dns1.lijiejie.com` `eyes_dns2.lijiejie.com` as `eyes.sh` name server + +``` +eyes.sh nameserver = eyes_dns1.lijiejie.com +eyes.sh nameserver = eyes_dns2.lijiejie.com +``` + +#### Django + +This project works with **Python 3.8 + Django 4.0**, run `deploy.sh` to install dependencies. + +* Modify TimeZone in settings.py +* MySQL Server charset should be updated to utf-8 + +Edit `\dnslog\settings.py`, add your service domain,IP and `DATABASES` + +``` +DNS_DOMAIN = 'eyes.sh' # Service Domain +ADMIN_DOMAIN = ['eyes.sh', 'www.eyes.sh'] # Reserved domains to view records + +# name server +NS1_DOMAIN = 'eyes_dns1.lijiejie.com' +NS2_DOMAIN = 'eyes_dns2.lijiejie.com' + +SERVER_IP = '123.123.123.123' # Your server IP +``` + +Nginx config file is `dnslog_nginx.conf` + +#### Add Sys Admin + +When install completed,**the first registerd user will become the sys admin by default**. + +## Screenshot + + + +![](static/dnslog_en.png) + +![](static/http_log_en.png) + +![](static/rebind.png) + +## License + +[GPL-2.0](GPL-2.0) \ No newline at end of file diff --git a/static/dnslog_en.png b/static/dnslog_en.png new file mode 100644 index 0000000..9f04861 Binary files /dev/null and b/static/dnslog_en.png differ diff --git a/static/http_log_en.png b/static/http_log_en.png new file mode 100644 index 0000000..f31c732 Binary files /dev/null and b/static/http_log_en.png differ