Skip to content

Latest commit

 

History

History
81 lines (48 loc) · 2.47 KB

README_EN.md

File metadata and controls

81 lines (48 loc) · 2.47 KB
Raw

eyes.sh 1.0.4

View this doc in Chinese.

eyes.sh is a simple DNS / HTTP logger which can be used by pentesters or scanners to identify and locate vulnerable targets.

Mostly used to find vulerabilities like SSRF / Blind SQL Injection / Blind RCE / Stored XSS.

  • In some cases, target can send DNS queries but http requests were blocked by Firewall, you can use eyes.sh to monitor if any DNS Queries captured
  • In some cases, RCE or SSRF were triggered by a group of hosts, you can use eyes.sh to capture http requests and get their IPs/Headers/Location
  • ...

This project is based on BugScan DNSLog .

Demo site http://eyes.sh/

  • Login with demo / demo@pass，the delete function was disabled
  • You can also click Login as random new user

Chang Log

  • 2024-06-06： Add SSL support, to get rid of Mixed Content Warnings (HTTPS/SSL) when exploiting stored XSS on https website
  • 2024-06-02： Bug fixed, a sync IP to geo location search (by HTTP) made DNS Server response too slow, especially under high concurrency queries
  • 2022-04-09： Add english translation

Install

Prepare Domain Names

Let's have eyes.sh installation as a show case.

When install the service，you were required to control two domain names（One is to add two type A records, and later set them as NS records for eyes.sh）

  • Add eyes_dns1.lijiejie.com eyes_dns2.lijiejie.com , resolve to your Server IP
  • Set eyes_dns1.lijiejie.com eyes_dns2.lijiejie.com as eyes.sh name server
eyes.sh nameserver = eyes_dns1.lijiejie.com
eyes.sh nameserver = eyes_dns2.lijiejie.com

Django

This project works with Python 3.8 + Django 4.0， run deploy.sh to install dependencies.

  • Modify TimeZone in settings.py
  • MySQL Server charset should be updated to utf-8

Edit \dnslog\settings.py, add your service domain，IP and DATABASES

DNS_DOMAIN = 'eyes.sh'   # Service Domain
ADMIN_DOMAIN = ['eyes.sh', 'www.eyes.sh']  # Reserved domains to view records

# name server
NS1_DOMAIN = 'eyes_dns1.lijiejie.com'
NS2_DOMAIN = 'eyes_dns2.lijiejie.com'

SERVER_IP = '123.123.123.123'  # Your server IP

Nginx config file is dnslog_nginx.conf

Add Sys Admin

When install completed，the first registerd user will become the sys admin by default.

Screenshot

License

GPL-2.0