├── Plumb.sqlite3 ├── images ├── dnslog.png ├── login.png └── weblog.png ├── config.yaml_back ├── README.md └── Disclaimer.md /Plumb.sqlite3: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0x584A/Plumb/HEAD/Plumb.sqlite3 -------------------------------------------------------------------------------- /images/dnslog.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0x584A/Plumb/HEAD/images/dnslog.png -------------------------------------------------------------------------------- /images/login.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0x584A/Plumb/HEAD/images/login.png -------------------------------------------------------------------------------- /images/weblog.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/0x584A/Plumb/HEAD/images/weblog.png -------------------------------------------------------------------------------- /config.yaml_back: -------------------------------------------------------------------------------- 1 | HTTP: 2 | host: 0.0.0.0 3 | port: 80 4 | jwt_secret: "jwt_secret" 5 | 6 | DNS: 7 | domain: jgeek.cn 8 | 9 | DATABASE: 10 | type: sqlite 11 | path: ./Plumb.sqlite3 12 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # Plumb 1.0.2 2 | 3 | 一个轮子，用于渗透测试优化的 DNS/HTTP 日志工具，简洁、轻便、更易于使用。 4 | 5 | ## Chang Log 6 | 7 | * 2024-09-29： 调整 DNS 监听依赖组件；追加 DNS 监听 TCP 协议，追加协议接收范围：TypeA、TypeAAAA、TypeNS、TypeSOA、TypeTXT； 8 | * 2024-09-28： 调整Web域名和DNS域名的 yaml 获取； 9 | * 2024-09-26： 初始版对外发布； 10 | 11 | ## 功能说明 12 | 13 | * 简洁，显示捕获的完整 Request 信息（Headers、Body） 14 | * 支持监控新记录自动刷新 15 | * 数据库存储轻量化，使用 sqlite db 进行存储，简单便捷 16 | 17 | ## 功能截图 18 | 19 | ![](images/login.png) 20 | ![](images/dnslog.png) 21 | ![](images/weblog.png) 22 | 23 | ## 部署 24 | 25 | 在应用文件同级目录中创建 `config.yaml` 文件，并增加如下内容： 26 | 27 | ```yaml 28 | HTTP: 29 | host: 0.0.0.0 30 | # WebLog监听端口 31 | port: 80 32 | jwt_secret: "jwt_secret" 33 | domain: log.jgeek.cn 34 | 35 | DNS: 36 | # DnsLog接收域名 37 | domain: dns.jgeek.cn 38 | 39 | DATABASE: 40 | type: sqlite 41 | # 本地数据库路保存路径，不存在将会新建数据库及用表 42 | path: ./Plumb.sqlite3 43 | ``` 44 | 45 | 域名需做好 NS 指向，运行后请在域名后加 `/#/login` 进行访问，默认登录账号：`admin/Admin12345` 46 | 47 | 48 | 49 | 50 | ## 致谢 51 | 52 | * [eyes.sh](https://github.com/lijiejie/eyes.sh) 53 | * [DNSlog-GO](https://github.com/lanyi1998/DNSlog-GO) 54 | -------------------------------------------------------------------------------- /Disclaimer.md: -------------------------------------------------------------------------------- 1 | ## 免责声明 2 | 3 | 本工具仅面向**合法授权**的企业安全建设行为，如您需要测试本工具的可用性，请自行搭建靶机环境。 4 | 5 | 在使用本工具进行检测时，您应确保该行为符合当地的法律法规，并且已经取得了足够的授权。**请勿对非授权目标进行扫描。** 6 | 7 | **如果发现上述禁止行为，我们将保留追究您法律责任的权利。** 8 | 9 | 如您在使用本工具的过程中存在任何非法行为，您需自行承担相应后果，我们将不承担任何法律及连带责任。 10 | 11 | 在安装并使用本工具前，请您**务必审慎阅读、充分理解各条款内容**，限制、免责条款或者其他涉及您重大权益的条款可能会以加粗、加下划线等形式提示您重点注意。 12 | 除非您已充分阅读、完全理解并接受本协议所有条款，否则，请您不要安装并使用本工具。您的使用行为或者您以其他任何明示或者默示方式表示接受本协议的，即视为您已阅读并同意本协议的约束。 13 | 14 | 15 | ## Disclaimer 16 | 17 | This tool is only for **legally authorized** enterprise security construction behavior, if you need to test the usability of this tool, please build your own target environment. 18 | 19 | When using this tool for testing, you should ensure that the behavior complies with local laws and regulations and that sufficient authorization has been obtained. **Do not scan unauthorized targets.** 20 | 21 | **We reserve the right to hold you legally liable if we find the above prohibited behavior.** 22 | 23 | If you have any illegal behavior in the process of using this tool, you need to bear the corresponding consequences by yourself, and we will not bear any legal and joint liability. 24 | 25 | Before installing and using the tool, please **be sure to carefully read and fully understand the content of the terms**. Limitations, disclaimers or other terms involving your significant rights and interests may be in bold, underlined and other forms to remind you to pay attention. 26 | Please do not install and use this tool unless you have fully read, fully understand and accept all the terms of this Agreement. Your use of this Agreement or your acceptance of this Agreement by any other express or implied means shall be deemed that you have read and agreed to be bound by this Agreement. --------------------------------------------------------------------------------