mirror of
https://github.com/Medicean/VulApps.git
synced 2025-05-08 03:27:21 +00:00
(Add Tools: Ant) 蚁逅 1.0 (基于实时上线的XSS盲打平台)
This commit is contained in:
Medicean
parent
14359668d2
commit
9fe1119fcb
@ -50,6 +50,7 @@ docker run -d -p 80:8080 medicean/vulapps:s_struts2_s2-037
|
||||
## 安全工具环境
|
||||
|
||||
* [巡风](./tools/xunfeng/)
|
||||
* [Ant(蚁逅)](./tools/ant/)
|
||||
|
||||
## 漏洞环境
|
||||
|
||||
|
||||
@ -2,3 +2,4 @@
|
||||
---
|
||||
|
||||
1. [巡风](./xunfeng)
|
||||
2. [蚁逅](./ant)
|
||||
|
||||
58
tools/ant/Dockerfile
Normal file
58
tools/ant/Dockerfile
Normal file
@ -0,0 +1,58 @@
|
||||
FROM ubuntu:14.04
|
||||
|
||||
MAINTAINER Medici.Yan@Gmail.com
|
||||
ENV LC_ALL C.UTF-8
|
||||
ENV TZ=Asia/Shanghai
|
||||
RUN ln -snf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone
|
||||
|
||||
### APT source list
|
||||
# RUN sed -i 's/archive.ubuntu.com/mirrors.aliyun.com/g' /etc/apt/sources.list
|
||||
|
||||
### Install Node.js
|
||||
ARG NODE_URL=http://oe58q5lw3.bkt.clouddn.com/n/nodejs/nodejs/node-v4.3.2-linux-x64.tar.gz
|
||||
RUN apt-get update \
|
||||
&& apt-get install -y wget \
|
||||
&& wget -qO /tmp/nodejs.tar.gz $NODE_URL \
|
||||
&& mkdir -p /opt/node \
|
||||
&& tar zxf /tmp/nodejs.tar.gz -C /opt/node --strip-components=1 \
|
||||
&& ln -s /opt/node/bin/node /usr/bin/node \
|
||||
&& ln -s /opt/node/bin/npm /usr/bin/npm \
|
||||
&& rm -f /tmp/nodejs.tar.gz \
|
||||
&& mkdir -p /htdocs
|
||||
|
||||
ARG MONGO_URL=http://oe58q5lw3.bkt.clouddn.com/m/mongodb/mongodb/mongodb-linux-x86_64-ubuntu1404-3.2.0.tgz
|
||||
RUN apt-get update \
|
||||
&& apt-get install -y wget \
|
||||
&& wget -qO /tmp/mongodb.tgz $MONGO_URL \
|
||||
&& mkdir -p /opt/mongodb \
|
||||
&& tar zxf /tmp/mongodb.tgz -C /opt/mongodb --strip-components=1 \
|
||||
&& mkdir -p /var/data \
|
||||
&& rm -f /tmp/mongodb.tgz
|
||||
|
||||
ENV PATH /opt/node/bin:/opt/mongodb/bin:$PATH
|
||||
|
||||
VOLUME /var/data
|
||||
ARG ANT_ZIP=http://oe58q5lw3.bkt.clouddn.com/tools/ant/ant-1.0.zip
|
||||
RUN apt-get update \
|
||||
&& apt-get install -y wget unzip \
|
||||
&& wget -qO /tmp/ant.zip $ANT_ZIP \
|
||||
&& unzip -d /htdocs /tmp/ant.zip \
|
||||
&& rm /tmp/ant.zip
|
||||
|
||||
WORKDIR /tmp
|
||||
COPY src/db.conf /htdocs/ant-master/database/db.conf
|
||||
RUN set -x \
|
||||
&& (nohup mongod -f /htdocs/ant-master/database/db.conf &) \
|
||||
&& cd /htdocs/ant-master/database \
|
||||
&& mongorestore \
|
||||
&& rm -f /tmp/nohup.out
|
||||
|
||||
WORKDIR /htdocs/ant-master/web
|
||||
RUN npm install
|
||||
|
||||
COPY src/start.sh /start.sh
|
||||
RUN chmod +x /start.sh
|
||||
|
||||
EXPOSE 3000
|
||||
ENTRYPOINT ["/start.sh"]
|
||||
CMD ["tail", "-f", "/dev/null"]
|
||||
65
tools/ant/README.md
Normal file
65
tools/ant/README.md
Normal file
@ -0,0 +1,65 @@
|
||||
蚁逅
|
||||
---
|
||||
|
||||
[项目地址： https://github.com/antoor/ant](https://github.com/antoor/ant)
|
||||
|
||||
### 工具简介
|
||||
|
||||
**蚁逅**是一款实时上线的 XSS 盲打平台。是不是有点像当年的灰鸽子的感觉？开源，不维护系列
|
||||
|
||||
蚁逅有多酷？看演示就知道了：[**蚁逅演示视频**](http://v.youku.com/v_show/id_XMTI0OTYzNzMyMA==.html?f=25926434&spm=a2hzp.8253876.0.0)
|
||||
|
||||
### 镜像信息
|
||||
|
||||
类型 | 用户名 | 密码
|
||||
:-:|:-:|:-:
|
||||
管理员 | i@root.cool | 123456
|
||||
ant物理路径 | /htdocs/ant-master | -
|
||||
mongodb数据路径| /var/data | -
|
||||
|
||||
|
||||
### 获取环境
|
||||
|
||||
1. 拉取镜像到本地
|
||||
|
||||
```
|
||||
$ docker pull medicean/vulapps:tools_ant
|
||||
```
|
||||
|
||||
2. 启动环境
|
||||
|
||||
```
|
||||
$ docker run -d -p 8000:3000 medicean/vulapps:tools_ant
|
||||
```
|
||||
> `-p 8000:80` 前面的 8000 代表物理机的端口，可随意指定。
|
||||
|
||||
访问: `http://127.0.0.1:8000/` 正常访问则代表安装成功
|
||||
|
||||
**邮件服务设置**
|
||||
> 如果需要自动设置邮件服务，则需要在启动时指定环境变量
|
||||
|
||||
类型 | 环境变量名 | 默认
|
||||
:-:|:-:|:-:
|
||||
邮箱账号 | `EMAIL_ADDRESS` | email@user.com
|
||||
邮箱密码 | `EMAIL_PASSWORD` | email-password
|
||||
SMTP服务器 | `SMTP_HOST` | smtp.qq.com
|
||||
SMTP服务端口 | `SMTP_PORT` | 465
|
||||
|
||||
eg: 指定一个 QQ 邮箱来作为发信邮箱(默认使用的是QQ的发信服务器，所以不需要设置)：
|
||||
|
||||
```
|
||||
$ docker run -d -p 8000:3000 -e EMAIL_ADDRESS=546074829@qq.com -e EMAIL_PASSWORD=123456 medicean/vulapps:tools_ant
|
||||
```
|
||||
|
||||
**挂载点**
|
||||
|
||||
如果需要将数据保存到物理机，需要在物理机上创建一个挂载点，在启动时使用`-v`参数挂载到容器的`/var/data`目录
|
||||
|
||||
例如：
|
||||
|
||||
```
|
||||
$ mkdir -p ~/antdata
|
||||
$ docker run -d -p 8000:3000 -v ~/antdata/:/var/data medicean/vulapps:tools_ant
|
||||
```
|
||||
|
||||
> 这样在销毁容器后，如果下次新建容器还指定了该数据目录，就会将数据还原
|
||||
4
tools/ant/src/db.conf
Normal file
4
tools/ant/src/db.conf
Normal file
@ -0,0 +1,4 @@
|
||||
port = 27017
|
||||
dbpath = /var/data
|
||||
logpath = /var/log/ant.log
|
||||
fork = false
|
||||
18
tools/ant/src/start.sh
Normal file
18
tools/ant/src/start.sh
Normal file
@ -0,0 +1,18 @@
|
||||
#!/bin/bash
|
||||
if [[ "$EMAIL_ADDR" && "$EMAIL_PASSWORD" ]]; then
|
||||
sed -i "s/email@user.com/${EMAIL_ADDR}/g" /htdocs/ant-master/web/modules/mail.js
|
||||
sed -i "s/email-password/${EMAIL_PASSWORD}/g" /htdocs/ant-master/web/modules/mail.js
|
||||
fi
|
||||
|
||||
if [[ "$SMTP_HOST" && "$SMTP_PORT" ]]; then
|
||||
sed -i "s/smtp.qq.com/${SMTP_HOST}/g" /htdocs/ant-master/web/modules/mail.js
|
||||
sed -i "s/465/${SMTP_PORT}/g" /htdocs/ant-master/web/modules/mail.js
|
||||
fi
|
||||
|
||||
nohup mongod -f /htdocs/ant-master/database/db.conf > /var/log/mongodb.log &
|
||||
cd /htdocs/ant-master/database
|
||||
mongorestore
|
||||
|
||||
cd /htdocs/ant-master/web
|
||||
nohup node app &
|
||||
/usr/bin/tail -f /dev/null
|
||||
Loading…
x
Reference in New Issue
Block a user