Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Specify URL and Token for DNS Callback Provider interactsh #39

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Specify URL and Token for DNS Callback Provider interactsh #39

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 13 additions & 2 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,9 +31,11 @@ $ python3 log4j-scan.py -h
[•] Scanner provided by FullHunt.io - The Next-Gen Attack Surface Management Platform.
[•] Secure your External Attack Surface with FullHunt.io.
usage: log4j-scan.py [-h] [-u URL] [-l USEDLIST] [--request-type REQUEST_TYPE] [--headers-file HEADERS_FILE] [--run-all-tests] [--exclude-user-agent-fuzzing]
[--wait-time WAIT_TIME] [--waf-bypass] [--dns-callback-provider DNS_CALLBACK_PROVIDER] [--custom-dns-callback-host CUSTOM_DNS_CALLBACK_HOST]
[--wait-time WAIT_TIME] [--waf-bypass] [--dns-callback-provider DNS_CALLBACK_PROVIDER]
[--dns-callback-interactsh-server DNS_CALLBACK_INTERACTSH_SERVER] [--dns-callback-interactsh-token DNS_CALLBACK_INTERACTSH_TOKEN]
[--custom-dns-callback-host CUSTOM_DNS_CALLBACK_HOST]

optional arguments:
options:
-h, --help show this help message and exit
-u URL, --url URL Check a single URL.
-l USEDLIST, --list USEDLIST
Expand All @@ -50,6 +52,10 @@ optional arguments:
--waf-bypass Extend scans with WAF bypass payloads.
--dns-callback-provider DNS_CALLBACK_PROVIDER
DNS Callback provider (Options: dnslog.cn, interact.sh) - [Default: interact.sh].
--dns-callback-interactsh-server DNS_CALLBACK_INTERACTSH_SERVER
If interact.sh is the DNS Callback provider then the url can be specified - [Default: interact.sh].
--dns-callback-interactsh-token DNS_CALLBACK_INTERACTSH_TOKEN
If interact.sh is the DNS Callback provider then the token can be specified.
--custom-dns-callback-host CUSTOM_DNS_CALLBACK_HOST
Custom DNS Callback Host.
```
Expand Down Expand Up @@ -79,6 +85,11 @@ $ python3 log4j-scan.py -u https://log4j.lab.secbot.local --waf-bypass
$ python3 log4j-scan.py -l urls.txt
```

## Scan a single URL with custom interactsh server

```shell
$ python3 log4j-scan.py -u https://log4j.lab.secbot.local --dns-callback-interactsh-server interact.sh --dns-callback-interactsh-token '<replaceme>'
```


# Installation
Expand Down
15 changes: 13 additions & 2 deletions log4j-scan.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -100,6 +100,16 @@
help="DNS Callback provider (Options: dnslog.cn, interact.sh) - [Default: interact.sh].",
default="interact.sh",
action='store')
parser.add_argument("--dns-callback-interactsh-server",
dest="dns_callback_interactsh_server",
help="If interact.sh is the DNS Callback provider then the url can be specified - [Default: interact.sh].",
default="interact.sh",
action='store')
parser.add_argument("--dns-callback-interactsh-token",
dest="dns_callback_interactsh_token",
help="If interact.sh is the DNS Callback provider then the token can be specified.",
default="",
action='store')
parser.add_argument("--custom-dns-callback-host",
dest="custom_dns_callback_host",
help="Custom DNS Callback Host.",
Expand Down Expand Up @@ -302,9 +312,10 @@ def main():
cprint(f"[•] Using custom DNS Callback host [{args.custom_dns_callback_host}]. No verification will be done after sending fuzz requests.")
dns_callback_host = args.custom_dns_callback_host
else:
cprint(f"[•] Initiating DNS callback server ({args.dns_callback_provider}).")
cprint(f"[•] Initiating DNS callback provider ({args.dns_callback_provider}).")
if args.dns_callback_provider == "interact.sh":
dns_callback = Interactsh()
cprint(f"[•] Using Server ({args.dns_callback_interactsh_server}).")
dns_callback = Interactsh(token = args.dns_callback_interactsh_token, server = args.dns_callback_interactsh_server)
elif args.dns_callback_provider == "dnslog.cn":
dns_callback = Dnslog()
else:
Expand Down