mirror of
https://github.com/lijiejie/eyes.sh.git
synced 2026-09-22 01:30:43 +08:00
add english readme
This commit is contained in:
@@ -1,4 +1,6 @@
|
|||||||
# eyes.sh 1.0.1
|
# eyes.sh 1.0.2
|
||||||
|
|
||||||
|
View this doc in [English](README_EN.md).
|
||||||
|
|
||||||
[eyes.sh](http://eyes.sh/)是用来辅助安全测试和漏扫工具的DNS Log / HTTP Log检测工具,基于 [BugScan DNSLog](https://github.com/bugscanteam/dnslog/) 优化(感谢四叶草安全、感谢坤哥 :) )。
|
[eyes.sh](http://eyes.sh/)是用来辅助安全测试和漏扫工具的DNS Log / HTTP Log检测工具,基于 [BugScan DNSLog](https://github.com/bugscanteam/dnslog/) 优化(感谢四叶草安全、感谢坤哥 :) )。
|
||||||
|
|
||||||
@@ -9,6 +11,7 @@
|
|||||||
|
|
||||||
## Chang Log
|
## Chang Log
|
||||||
|
|
||||||
|
* 2022-04-09: 增加多语言支持,添加英文翻译
|
||||||
* 2022-04-06: 注册用户名,限制只允许使用字母数字
|
* 2022-04-06: 注册用户名,限制只允许使用字母数字
|
||||||
|
|
||||||
## **背景**
|
## **背景**
|
||||||
|
|||||||
@@ -0,0 +1,79 @@
|
|||||||
|
# eyes.sh 1.0.2
|
||||||
|
|
||||||
|
View this doc in [Chinese](README.md).
|
||||||
|
|
||||||
|
[eyes.sh](http://eyes.sh/) is a simple DNS / HTTP logger which can be used by pentesters or scanners to identify and locate vulnerable targets.
|
||||||
|
|
||||||
|
Mostly used to find vulerabilities like SSRF / Blind SQL Injection / Blind RCE / Stored XSS.
|
||||||
|
|
||||||
|
* In some cases, target can send DNS queries but http requests were blocked by Firewall, you can use eyes.sh to monitor if any DNS Queries captured
|
||||||
|
* In some cases, RCE or SSRF were triggered by a group of hosts, you can use eyes.sh to capture http requests and get their IPs/Headers/Location
|
||||||
|
* ...
|
||||||
|
|
||||||
|
This project is based on [BugScan DNSLog](https://github.com/bugscanteam/dnslog/) .
|
||||||
|
|
||||||
|
Demo site [http://eyes.sh/](http://eyes.sh/)
|
||||||
|
|
||||||
|
* Login with `demo` / `demo@pass`,the delete function was disabled
|
||||||
|
* You can also click `Login as random new user`
|
||||||
|
|
||||||
|
## Chang Log
|
||||||
|
|
||||||
|
* 2022-04-09: Add english translation
|
||||||
|
|
||||||
|
Install
|
||||||
|
---
|
||||||
|
|
||||||
|
#### Prepare Domain Names
|
||||||
|
|
||||||
|
Let's have `eyes.sh` installation as a show case.
|
||||||
|
|
||||||
|
When install the service,you were required to control two domain names(One is to add two type `A` records, and later set them as `NS` records for `eyes.sh`)
|
||||||
|
|
||||||
|
* Add `eyes_dns1.lijiejie.com` `eyes_dns2.lijiejie.com` , resolve to your Server IP
|
||||||
|
* Set `eyes_dns1.lijiejie.com` `eyes_dns2.lijiejie.com` as `eyes.sh` name server
|
||||||
|
|
||||||
|
```
|
||||||
|
eyes.sh nameserver = eyes_dns1.lijiejie.com
|
||||||
|
eyes.sh nameserver = eyes_dns2.lijiejie.com
|
||||||
|
```
|
||||||
|
|
||||||
|
#### Django
|
||||||
|
|
||||||
|
This project works with **Python 3.8 + Django 4.0**, run `deploy.sh` to install dependencies.
|
||||||
|
|
||||||
|
* Modify TimeZone in settings.py
|
||||||
|
* MySQL Server charset should be updated to utf-8
|
||||||
|
|
||||||
|
Edit `\dnslog\settings.py`, add your service domain,IP and `DATABASES`
|
||||||
|
|
||||||
|
```
|
||||||
|
DNS_DOMAIN = 'eyes.sh' # Service Domain
|
||||||
|
ADMIN_DOMAIN = ['eyes.sh', 'www.eyes.sh'] # Reserved domains to view records
|
||||||
|
|
||||||
|
# name server
|
||||||
|
NS1_DOMAIN = 'eyes_dns1.lijiejie.com'
|
||||||
|
NS2_DOMAIN = 'eyes_dns2.lijiejie.com'
|
||||||
|
|
||||||
|
SERVER_IP = '123.123.123.123' # Your server IP
|
||||||
|
```
|
||||||
|
|
||||||
|
Nginx config file is `dnslog_nginx.conf`
|
||||||
|
|
||||||
|
#### Add Sys Admin
|
||||||
|
|
||||||
|
When install completed,**the first registerd user will become the sys admin by default**.
|
||||||
|
|
||||||
|
## Screenshot
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|
## License
|
||||||
|
|
||||||
|
[GPL-2.0](GPL-2.0)
|
||||||
Binary file not shown.
|
After Width: | Height: | Size: 54 KiB |
Binary file not shown.
|
After Width: | Height: | Size: 59 KiB |
Reference in New Issue
Block a user