• This repository has been archived on 21/Mar/2023
  • Stars
    star
    198
  • Rank 195,696 (Top 4 %)
  • Language
    PHP
  • Created over 8 years ago
  • Updated over 5 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

利用XSS入侵内网(Use XSS automation Invade intranet)

WebRtcXSS

所有代码是基于ThinkPHP框架开发的

项目教程:http://www.freebuf.com/articles/web/103097.html

项目视频:http://open.freebuf.com/live/774.html

作者:Black-Hole

邮箱:[email protected] && [email protected]

安装说明

修改数据库配置文件

文件位置/Application/Common/Conf/config.php

<?php
return array(
	'URL_MODEL' => 0,  //URL模式,不用动
	'DB_TYPE' => 'mysql',  //数据库类型,不要更改
	'DB_HOST' => 'localhost',  //数据库地址
	'DB_NAME' => 'webrtcxss',  //数据库名称
	'DB_USER' => 'root', //数据库管理员账号
	'DB_PWD' => 'root',  //数据库管理员密码
	'DB_PORT' => '3306', //连接数据库的端口
	'DB_PREFIX' => 'webrtc_',  //数据库前缀
);

一般来说,你只需要更改DB_USER、DB_PWD就可以了。

导入sql数据库文件

MySQL命令行:

mysql -uroot -proot < sql.sql //-u后面跟上数据库账号,-p后面跟上数据库密码(没有空格),sql.sql是sql文件的位置,在项目的根目录下,注意路径,无回显。
mysql -uroot -proot //进入mysql命令行
> show databases; //查看是否存在webrtcxss数据库
//如果你在“修改数据库配置文件”时,使用了其他的数据库名称(修改了DB_NAME信息),切记在sql.sql文件里把“webrtcxss”字符串全部替换成“你修改的字符串”

docker

docker run -dit -p 8080:80 blackhole007/webrtcxss sh -c "lnmp start && bash"

结束

然后就没了,整个项目需要注意的地方,只有数据库方面。

注意:

  • 如果出现Undefined class constant ‘MYSQL_ATTR_INIT_COMMAND’错误

    需要开启PDO扩展


WebRtcXSS

All of the code is based on the framework for the development ThinkPHP

Project Tutorial:http://www.freebuf.com/articles/web/103097.html

Project Video:http://open.freebuf.com/live/774.html

Author:Black-Hole

Email:[email protected] && [email protected]

Important:

  • if(Errot === Undefined class constant ‘MYSQL_ATTR_INIT_COMMAND’){
    You need to enable the PDO extension }

docker

docker run -dit -p 8080:80 blackhole007/webrtcxss sh -c "lnmp start && bash"

Translation from Google

More Repositories

1

autoFindXssAndCsrf

自动化检测页面是否存在XSS和CSRF漏洞的浏览器插件(A plugin for browser that checks automatically whether a page haves XSS and CSRF vulnerabilities)
JavaScript
133
star
2

Fecm

前端XSS防火墙及后台报警系统(front-end XSS firewall and back-end alarm system)
JavaScript
36
star
3

electron-cra-ts-lerna-webpack

Develop the electron application immediately without waiting
JavaScript
28
star
4

react-sentry-demo

react-sentry-demo
JavaScript
24
star
5

wxwork_message_sdk

企业微信接收/回复消息sdk
Go
15
star
6

vue-array

Array object operation under Vue
JavaScript
13
star
7

Fastener

Web版webshell
HTML
11
star
8

electron-devtools-vendor

electron extension vendor
JavaScript
9
star
9

NodeJs_Backdoor

NodeJs后门程序
JavaScript
7
star
10

Koler

Online test system(在线考试系统)
Vue
6
star
11

idea-spell-check

CSpell Check For IDEA
Kotlin
5
star
12

ebook-rename

Get the metadata of the e-book and rename it
JavaScript
5
star
13

JavaScript-Polyfill

参考MDN上的Polyfill实现方式,在此基础上增加注释以及自己的想法
JavaScript
5
star
14

get-calibre-tools

get calibre tools
JavaScript
4
star
15

flawless

一个css由less开发,js由jquery写的一个,前端框架。搞死bootstrap
CSS
3
star
16

array-equals

check if two arrays are equal
JavaScript
2
star
17

fastify-workflows-community

2
star
18

homebrew-repo

Some brew taps that I developed myself or secondary development
Ruby
2
star
19

trash

Small command-line program for OS X that moves files or folders to the trash. (Based on https://github.com/ali-rantakari/trash)
Objective-C
2
star
20

get-image-base64

use canvas api get images base64
JavaScript
2
star
21

sesmate

Friendly AWS SES assistant, to better maintain SES templates in your project and support local mock SES server
Go
2
star
22

samba_docker-ompose

the samba's docker-compose
2
star
23

AutoFindXss

Automated detection xss plugin based on chrome
TypeScript
1
star
24

clone-json

deep copy json
JavaScript
1
star
25

run-objFun

Functions in running objects(运行对象中的函数)
JavaScript
1
star
26

all-equal

all-equal
JavaScript
1
star
27

automl

基于浏览器插件的形式来结合kali实现自动化入侵(半主动)
JavaScript
1
star
28

.vim

My vim config
Vim Script
1
star
29

fastify-reqid

JavaScript
1
star
30

fastmail-sieve-ruleset

My Sieve rules for use with FastMail
Sieve
1
star
31

github-mutual-following-checker

It is so simple that there is no need to add notes :)
JavaScript
1
star
32

regexp-go-to-js

go regexp to js regexp
Go
1
star
33

promise-unified

Add a unified operation for Promise(为Promise添加一个统一的操作方法)
JavaScript
1
star