hktalent / go4Hacker

Automated penetration and auxiliary systems, providing XSS, XXE, DNS log, SSRF, RCE, web netcat and other Servers,gin-vue-admin，online https://51pwn.com

Simple DNS log Server,easy to ACME DNS challenge

log easy send to elasticsearch https://github.com/hktalent/DNS_Server

online

https://51pwn.com/ more demo: https://github.com/hktalent/51Pwn-Platform

go4Hacker

Automated penetration and auxiliary systems, providing XSS, XXE, DNS log, SSRF, RCE, web netcat and other Servers more to see:http://github.com/hktalent/goSqlite_gorm

features

• gin
• vue
• suport http2, -ServerPem -ServerKey
• Standard Domain Resolve Service
• DNSLOG
• HTTPLOG
• Rebinding/CustomRebinding
• Push (callback)
• Multi-user
• dockerlized
• python/golang client sdk
• as a standard name resolve service with support A,CNAME,TXT,MX
• xip

docker

see https://hub.docker.com/repository/docker/hktalent/51pwn4hacker

DNSLOG

super admin user: admin password will be showed in console logs when first run. you can change it by subcommand resetpw

HTTPLOG

build frontend

requirements:

yarn

brew install yarn
npm i -g npm@latest
npm install --global yarn
cd frontend
yarn install
yarn add cache-loader
rm -rf ../dist
yarn build --outDir ../dist
cd ..

build backend

requirements:

golang >= 1.18 node >= 14.17.6 npm >= 8.5.5 yarn >= 1.22.17

go build

# set admin passwd
./go4Hacker resetpw -u admin

#eg : 实际运行时，192.168.0.107 调整为公网 ip地址，也就是域名 51pwn.com 指向的公网ip地址
./go4Hacker serve -4 192.168.0.107 -domain 51pwn.com -lang zh-CN
open http://0.0.0.0:8080

docker build

docker build -t "user/go4Hacker" .

For Chinese user:

docker build -t "user/go4Hacker" -f DockerfileCN .

RUN

i. Register your domain, eg: example.com Set your DNS Server point to your host, eg: ns.example.com => 100.100.100.100 Some registrar limit set to NS host, your can set two ns host point to only one address. Some registrar to ns host must be different ip address, you can set one to a fake addresss and then change to the same addresss

ii. self build

docker run -p80:8080 -p53:53/udp "user/go4Hacker"  serve -domain yourdomain.com -4 100.100.100.100

or use dockerhub

docker pull "sort/go4Hacker"
docker run -p80:8080 -p53:53/udp -p80:8080  "sort/go4Hacker" serve -domain yourdomain.com -4 100.100.100.100

iii. access http://100.100.100.100

Doc

guest/guest123

TODO && Known Issues

• admin user can read all recordds
• allow Anonymous user access document page
• enable custom rebinding stage two setting
• fix login logical problem

build from

https://github.com/chennqqi/go4Hacker but the go and node js modules here are updated to the latest

Donation

Wechat Pay	AliPay	Paypal	BTC Pay	BCH Pay
		paypal [e-mail]