admin/wikiZ-RedGuard
1
0
Fork 0
mirror of https://github.com/wikiZ/RedGuard synced 2026-06-08 18:18:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

Compare commits

base: admin/wikiZ-RedGuard:22.6.27.1332
Branches Tags
admin/wikiZ-RedGuard:main
admin/wikiZ-RedGuard:24.06.18 admin/wikiZ-RedGuard:23.08.21 admin/wikiZ-RedGuard:23.05.14 admin/wikiZ-RedGuard:22.08.03 admin/wikiZ-RedGuard:22.7.22 admin/wikiZ-RedGuard:22.7.21 admin/wikiZ-RedGuard:22.7.14 admin/wikiZ-RedGuard:22.7.12 admin/wikiZ-RedGuard:22.7.4.11.30 admin/wikiZ-RedGuard:22.6.30.1107 admin/wikiZ-RedGuard:22.6.27.1332 admin/wikiZ-RedGuard:22.5.26.1716 admin/wikiZ-RedGuard:22.5.20.1220
...
compare: admin/wikiZ-RedGuard:22.7.4.11.30
Branches Tags
admin/wikiZ-RedGuard:main
admin/wikiZ-RedGuard:24.06.18 admin/wikiZ-RedGuard:23.08.21 admin/wikiZ-RedGuard:23.05.14 admin/wikiZ-RedGuard:22.08.03 admin/wikiZ-RedGuard:22.7.22 admin/wikiZ-RedGuard:22.7.21 admin/wikiZ-RedGuard:22.7.14 admin/wikiZ-RedGuard:22.7.12 admin/wikiZ-RedGuard:22.7.4.11.30 admin/wikiZ-RedGuard:22.6.30.1107 admin/wikiZ-RedGuard:22.6.27.1332 admin/wikiZ-RedGuard:22.5.26.1716 admin/wikiZ-RedGuard:22.5.20.1220

5 Commits
22.6.27.1332 ... 22.7.4.11.30

Author SHA1 Message Date
风起 7ff6cc59e1 Update RedGuard Version 22.7.4.11.30 2022-07-04 13:41:04 +08:00
风起 26719ed09e Update ProxyHandler.go 2022-07-04 11:24:00 +08:00
风起 0281902237 Update ProxyHandler.go 2022-07-04 11:20:23 +08:00
风起 79d6718f8d Update README.md 2022-07-01 10:37:30 +08:00
风起 f394f46062 Update RedGuard Version 22.6.30.1107 2022-06-30 11:10:47 +08:00
7 changed files with 289 additions and 44 deletions
Expand all files Collapse all files
CHANGELOG
+8
View File
@@ -1,3 +1,11 @@
## [22.7.4.11.30] - 2022-7-4
### Added
- Fix inconsistent request IP address and interception IP address Domain fronting
## [22.6.30.1107] - 2022-6-30
### Added
- Domain fronting Obtain the actual requested IP address
## [22.6.28.1712] - 2022-6-28
### Added
- JA3 fingerprint Identify sandbox
RedGuard.log
+232
View File
@@ -2065,3 +2065,235 @@
[2022-06-27 13:35:24] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-06-27 13:35:33] [RedGuard/lib.CreateConfig] RedGuard initialization is complete!
[2022-06-27 13:35:33] [RedGuard/lib.CreateConfig] RedGuard config path is: C:\Users\风起/.RedGuard_CobaltStrike.ini
[2022-06-29 14:23:34] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-06-29 14:23:34] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-06-29 14:23:34] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-06-29 14:23:34] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-06-29 14:24:29] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-06-29 14:24:29] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-06-29 14:24:29] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-06-29 14:24:29] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-06-29 14:24:54] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-06-29 14:24:54] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-06-29 14:24:54] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-06-29 14:24:54] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-06-29 15:17:29] [RedGuard/core.(*baseHandle).ServeHTTP] JA3 FingerPrint: 07f9ac0700dcc554249f644244e291a1
[2022-06-29 15:17:29] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] POST /api/key/activate?readonly=false
[2022-06-29 15:17:29] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] 127.0.0.1 - AcunetixWVS
[2022-06-29 15:17:29] [RedGuard/core.modifyResponse.func1.1] [RESPONSE] HTTP 301 Moved Permanently, length: 169
[2022-06-29 15:17:29] [RedGuard/core.(*baseHandle).ServeHTTP] [PROXY] Source IP: 127.0.0.1 -> Destination Site: https://360.net
[2022-06-30 10:22:03] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-06-30 10:22:03] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-06-30 10:22:03] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-06-30 10:22:03] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-06-30 10:22:17] [RedGuard/core.(*baseHandle).ServeHTTP] JA3 FingerPrint: 58dfe0bb2ac63056d7221d194e98a32f
[2022-06-30 10:22:17] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] GET /
[2022-06-30 10:22:17] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] 127.0.0.1 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
[2022-06-30 10:22:17] [RedGuard/core.modifyResponse.func1.1] [RESPONSE] HTTP 301 Moved Permanently, length: 169
[2022-06-30 10:22:17] [RedGuard/core.(*baseHandle).ServeHTTP] [PROXY] Source IP: 127.0.0.1 -> Destination Site: https://360.net
[2022-06-30 10:22:57] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-06-30 10:22:57] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-06-30 10:22:57] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-06-30 10:22:57] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-06-30 10:23:58] [RedGuard/core.(*baseHandle).ServeHTTP] JA3 FingerPrint: 9553183a251cdf98be9fc3b6ec0d9720
[2022-06-30 10:23:58] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] GET /
[2022-06-30 10:23:58] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] 127.0.0.1 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
[2022-06-30 10:23:58] [RedGuard/core.modifyResponse.func1.1] [RESPONSE] HTTP 301 Moved Permanently, length: 169
[2022-06-30 10:23:58] [RedGuard/core.(*baseHandle).ServeHTTP] [PROXY] Source IP: 127.0.0.1 -> Destination Site: https://360.net
[2022-06-30 10:25:05] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-06-30 10:25:05] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-06-30 10:25:05] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-06-30 10:25:05] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-06-30 10:25:20] [RedGuard/core.(*baseHandle).ServeHTTP] JA3 FingerPrint: ab6c50ef473b76a2aaf48bd06d20f8e1
[2022-06-30 10:25:20] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] GET /
[2022-06-30 10:25:20] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] 127.0.0.1 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
[2022-06-30 10:25:20] [RedGuard/core.modifyResponse.func1.1] [RESPONSE] HTTP 301 Moved Permanently, length: 169
[2022-06-30 10:25:20] [RedGuard/core.(*baseHandle).ServeHTTP] [PROXY] Source IP: 127.0.0.1 -> Destination Site: https://360.net
[2022-06-30 10:26:43] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-06-30 10:26:43] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-06-30 10:26:43] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-06-30 10:26:43] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-06-30 10:26:52] [RedGuard/core.(*baseHandle).ServeHTTP] JA3 FingerPrint: ab263e1ed7aa06baf8cf22176b724ac3
[2022-06-30 10:26:52] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] GET /
[2022-06-30 10:26:52] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] 127.0.0.1 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
[2022-06-30 10:26:52] [RedGuard/core.modifyResponse.func1.1] [RESPONSE] HTTP 301 Moved Permanently, length: 169
[2022-06-30 10:26:52] [RedGuard/core.(*baseHandle).ServeHTTP] [PROXY] Source IP: 127.0.0.1 -> Destination Site: https://360.net
[2022-06-30 10:37:37] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-06-30 10:37:37] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-06-30 10:37:37] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-06-30 10:37:37] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-06-30 10:37:48] [RedGuard/core.(*baseHandle).ServeHTTP] JA3 FingerPrint: 7be3ebb24597f2a22a24655de944ce65
[2022-06-30 10:37:48] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] GET /
[2022-06-30 10:37:48] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] 127.0.0.1 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
[2022-06-30 10:37:48] [RedGuard/core.modifyResponse.func1.1] [RESPONSE] HTTP 301 Moved Permanently, length: 169
[2022-06-30 10:37:48] [RedGuard/core.(*baseHandle).ServeHTTP] [PROXY] Source IP: 127.0.0.1 -> Destination Site: https://360.net
[2022-06-30 10:42:20] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-06-30 10:42:20] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-06-30 10:42:20] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-06-30 10:42:20] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-06-30 10:42:26] [RedGuard/core.(*baseHandle).ServeHTTP] JA3 FingerPrint: e99822918c9735a154a910c0732b7097
[2022-06-30 10:42:26] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] GET /
[2022-06-30 10:42:26] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] 127.0.0.1 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
[2022-06-30 10:42:26] [RedGuard/core.modifyResponse.func1.1] [RESPONSE] HTTP 301 Moved Permanently, length: 169
[2022-06-30 10:42:26] [RedGuard/core.(*baseHandle).ServeHTTP] [PROXY] Source IP: 127.0.0.1 -> Destination Site: https://360.net
[2022-07-01 09:57:16] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 09:57:16] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 09:57:16] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 09:57:16] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 09:58:13] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 09:58:13] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 09:58:13] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 09:58:13] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 09:58:19] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 09:58:19] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 09:58:19] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 09:58:19] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 09:58:26] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 09:58:26] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 09:58:26] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 09:58:26] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 09:58:31] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 09:58:31] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 09:58:31] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 09:58:31] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 09:58:39] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 09:58:39] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 09:58:39] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 09:58:39] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 09:58:45] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 09:58:45] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 09:58:45] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 09:58:45] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 09:58:51] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 09:58:51] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 09:58:51] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 09:58:51] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 09:58:58] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 09:58:58] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 09:58:58] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 09:58:58] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 09:59:37] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 09:59:37] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 09:59:37] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 09:59:37] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 09:59:46] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 09:59:46] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 09:59:46] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 09:59:46] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 09:59:52] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 09:59:52] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 09:59:52] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 09:59:52] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:00:31] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:00:31] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:00:31] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:00:31] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:00:38] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:00:38] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:00:38] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:00:38] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:01:15] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:01:15] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:01:15] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:01:15] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:01:21] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:01:21] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:01:21] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:01:21] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:02:39] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:02:39] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:02:39] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:02:39] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:03:07] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:03:07] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:03:07] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:03:07] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:03:19] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:03:19] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:03:19] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:03:19] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:03:26] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:03:26] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:03:26] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:03:26] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:03:38] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:03:38] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:03:38] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:03:38] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:03:47] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:03:47] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:03:47] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:03:47] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:03:59] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:03:59] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:03:59] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:03:59] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:04:41] [RedGuard/core.(*baseHandle).ServeHTTP] JA3 FingerPrint: 3590d1b8f63dd1d590f0adea4227443d
[2022-07-01 10:04:41] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] GET /ca
[2022-07-01 10:04:41] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] 127.0.0.1 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
[2022-07-01 10:05:11] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:05:11] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:05:11] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:05:11] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:05:16] [RedGuard/core.(*baseHandle).ServeHTTP] JA3 FingerPrint: 3590d1b8f63dd1d590f0adea4227443d
[2022-07-01 10:05:16] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] GET /ca
[2022-07-01 10:05:16] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] 127.0.0.1 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
[2022-07-01 10:05:16] [RedGuard/core.modifyResponse.func1.1] [RESPONSE] HTTP 301 Moved Permanently, length: 169
[2022-07-01 10:05:16] [RedGuard/core.(*baseHandle).ServeHTTP] [PROXY] Source IP: 127.0.0.1 -> Destination Site: https://360.net
[2022-07-01 10:05:49] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:05:49] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:05:49] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:05:49] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:06:35] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:06:35] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:06:35] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:06:35] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:06:40] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:06:40] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:06:40] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:06:40] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:06:45] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:06:45] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:06:45] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:06:45] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:06:51] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:06:51] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:06:51] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:06:51] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:06:55] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:06:55] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:06:55] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:06:55] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:07:00] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:07:00] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:07:00] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:07:00] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:07:05] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:07:05] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:07:05] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:07:05] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:07:10] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:07:10] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:07:10] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:07:10] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:07:17] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:07:17] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:07:17] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:07:17] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-01 10:07:38] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-01 10:07:38] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-01 10:07:38] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-01 10:07:38] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-04 11:11:03] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-04 11:11:03] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-04 11:11:03] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-04 11:11:03] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-04 11:22:35] [RedGuard/lib.InitGenerateSelfSignedCert] A default SSL certificate is being generated for the reverse proxy...
[2022-07-04 11:22:35] [main.(*cobaltStrike).serverInit] HostTarget: {"360.net":"http://127.0.0.1:8080","360.com":"https://127.0.0.1:4433"}
[2022-07-04 11:22:35] [RedGuard/core.ProxyManger] Proxy Listen Port :443 (HTTPS)
[2022-07-04 11:22:35] [RedGuard/core.ProxyManger] Proxy Listen Port :80 (HTTP)
[2022-07-04 11:22:46] [RedGuard/core.(*baseHandle).ServeHTTP] JA3 FingerPrint: 1575a0ebc250c601e7b83ca4cf6f1d21
[2022-07-04 11:22:46] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] GET /
[2022-07-04 11:22:46] [RedGuard/core.(*baseHandle).ServeHTTP] [REQUEST] 127.0.0.1 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36
[2022-07-04 11:22:46] [RedGuard/core.modifyResponse.func1.1] [RESPONSE] HTTP 301 Moved Permanently, length: 169
[2022-07-04 11:22:46] [RedGuard/core.(*baseHandle).ServeHTTP] [DROP] Source IP: 127.0.0.1 -> Destination Site: https://360.net
cert-rsa/ca.crt
+14 -14
View File
@@ -1,24 +1,24 @@
-----BEGIN CERTIFICATE-----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bC5jb20wDQYJKoZIhvcNAQELBQADggEBAK5e9R/x/zUj5GJ6XyCAdD6S/GC7Gn3Y
5fnV1a1LXEK7kRuiJ4iKruyOwz/D+aSdqvGjgBNU3z76z18jf1KZnnxWt7W1DOmU
Pqi2nKEkilQ+es7tYj8NxyfnPDc1V5P7ecS9bTYtTemlu5V1NpzoeO8cUM8Xc+Oq
w9gtwR62vlmkAwICgUTF8Pfw9/wBhNVVgsLfuYTKfBWyiLy+TuxtrLSIQ9qYtvRr
GRQgx+jKwURxU7ZFuUAMnXUen+WYKdTO0+FSI96k0KJYpZ+MUfSFXSy4FOHo7imP
a5eLziaD5VOy6RNFxd517CzAJoKtKauL5jNzmrEe0jaDRVRQbhwJPw4=
-----END CERTIFICATE-----
cert-rsa/ca.key
+25 -25
View File
@@ -1,27 +1,27 @@
-----BEGIN RSA PRIVATE KEY-----
MIIEogIBAAKCAQEA3bcmsObI34OtiyF0JlA17wkXjCY6DPZS6FdF/ec0H/ay35M7
St236M4hPNXe5x5kdj7Ax5+O1Ywr/TeSXItTIRhAMLMPplZES+mKkfP+Euq0J2CO
iAH5+Dv1/ihWDj4Lqh27CsiB3WLh6iOiP5tdHBRgk94Ru0wtCnPgrESSEQfmidej
1ZIVmiXXGwwF805MHHQJQu6sdlM6MVVubh+wBiHLCGp3dKAxxGhQloCvg8d396Wa
wdncTJT0Kg62FymbfIGz8mcMtAl1Pk2UKecoiPZQ7YOVqoldmhl7Dr66gwZ6Wjs/
GpjcszulTi5hauKSTQuGAxspNEs6/TRoYrSBswIDAQABAoIBAHOUKoNFi6mZBzrk
MZxXbAY0AyZ4NwLS1d1wwXfesvmGrTCHm/0nH9wouILyKsTovw41IGHv95GzBKt3
8MB1kNxLvAqnDZ10kx3PnQEA5I4P8+IjH6oe/aQ9/bqEZHgAOCxyWzL/21MBXSul
b8sgvqUIql/q/+tXhpNQXOrwxARD1aslv1+SW/DxPRqG9QSIthzXB/q4BCTicPzr
Yct07KiRb218AAux0k+3SkKb7/WruiQ1PgA4qIXc6ixAZoIRtFKFprwomQNcg22k
XlL+QsDC6DoXNr0356Edv9QgguDWiKyM9FkFjYBaFR8P+Ec0+i/Fs0ccTGRJrKFo
BHwri4ECgYEA8cUZfAI/z5tnVsF+iYSGP0B5OQ0FLPyVTNoS+bCfof2RKKqt+Rry
zOzMIck3ir9VRRK8l0pbEZSLKt3EW5EIlLbxdVUsp29GHRa+r4duJO//NHxbmj1p
LHqhZYxrSl2aq4f4DaPhOAg+NE9/Vj+PTMDD8O5jK5hFAM4WWd0+BCMCgYEA6sPg
wW11vDbQnqeDHmk5NW5jvi8EsSoGLZugGf2P8I8J2GprUKTGnb/jrwrdKU+sYMDj
H00A5j7JUGC+JhzNUt8lSo9TWrfofXRwzOaY3MJ+2gtP1xDRoEkPtfDdM6aBKth0
ZvsYG46MdjtH+J9AcCn/rx8XssrTp+RzGysnXTECgYBKd6Uj1yWEcp9fz3WEMfeP
n/I2qlX/x0TNSRYzJj3lDU8asYeohK5ohD9T4MBk0g4Xmm/QQazPO2uqJmiGs6Nq
+vZgZ327jMCR0SGmuxYn9mwq5GrqlSPB+Xug5aFeZHpxfw3eVa3XLmLKhfn4vNcM
kwtHOIX/NYV7e/7Saxzg9QKBgGeqJPXkqsd4gPh9yZVFK4DfhOW3B2BfySicfr7b
S5MS5msM2uRaTmXcFOL3bh9O0jRLGD97FjmVYfm/LlfQAg5lAKeC0HDPora7ExA3
hyp8K92GfzPddmNLv8c8W8Dx9jmAKS5MFCIe+QFAPhCX6bFdqkye8yz9CScq5nUJ
wjERAoGAL2j9stAIcFYlNt8fhmJ8BW2Gyfmbz6cy+pPDt6hogiK5If7uYZjXQd1e
eanbdPdyh7IWUm+rcanM8Qrc+gAQXGdAUYs5uue6HKO18PXw2GNyib3Fes6nQ63L
fjKDQ7PsetwZeQ6eaHEsDZ7Mnxwz7tVnovGYOThLLEV5iKEO5mY=
MIIEowIBAAKCAQEAzpW24GpGu38AYnrIEHBJvHa6Fyy+RR17I5FxGLRODyWPKcT5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-----END RSA PRIVATE KEY-----
config/version.go
+1 -1
View File
@@ -21,7 +21,7 @@ Github:%s
RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.
`
VERSION = "22.6.27.1332 Alpha"
VERSION = "22.7.4.11.30 Alpha"
TITLE = "RedGuard"
LICENSE = "GPL-2.0"
URL = "https://github.com/wikiZ/RedGuard"
core/ProxyFilter.go
+1
View File
@@ -132,6 +132,7 @@ func ProxyFilterManger(req *http.Request) (status bool) {
}
}
}
// Check the location of the requested IP address
if allowLocation != "" && allowLocation != "*" {
// @param allowLocation string The territory that is allowed to go online
core/ProxyHandler.go
+8 -4
View File
@@ -51,7 +51,7 @@ func modifyResponse(drop bool) func(*http.Response) error {
logger.Warningf("[RESPONSE] HTTP %s, length: %d", resp.Status, resp.ContentLength)
if drop {
// DROP Request
logger.Alertf("[DROP] Source IP: %s", ip)
logger.Alertf("[DROP] Source IP: %s", resp.Request.RemoteAddr)
_ = Body.Close() // Direct shutdown response
return
}
@@ -79,7 +79,11 @@ func (h *baseHandle) ServeHTTP(write http.ResponseWriter, req *http.Request) {
var proxy *httputil.ReverseProxy
// Determine the URL to be redirected to
redirectURL = lib.ReadConfig("proxy", "Redirect", cfg)
ip = lib.ConvertIP(req.RemoteAddr)
req.RemoteAddr = lib.ConvertIP(req.RemoteAddr)
// Obtaining the real IP address
if req.Header.Get("X-Forwarded-For") != "" {
req.RemoteAddr = req.Header.Get("X-Forwarded-For")
}
// Check whether the host is verified
if IPHash := lib.EncodeMD5(req.JA3); arrays.ContainsString(_addressArray, req.JA3) == -1 {
logger.Noticef("JA3 FingerPrint: %s", IPHash)
@@ -88,7 +92,7 @@ func (h *baseHandle) ServeHTTP(write http.ResponseWriter, req *http.Request) {
if !ProxyFilterManger(req) {
goto LOOK // Redirect to the specified site
}
logger.Noticef("[REQUEST] %s - %s", ip, req.UserAgent())
logger.Noticef("[REQUEST] %s - %s", req.RemoteAddr, req.UserAgent())
_addressArray = append(_addressArray, IPHash) // Add to the list after verification for the first time
}
// Fetch directly from cache
@@ -133,7 +137,7 @@ LOOK:
proxy.ServeHTTP(write, req)
REDIRECT:
// REDIRECT Request
logger.Alertf("[%s] Source IP: %s -> Destination Site: %s", strings.ToUpper(dropAction), ip, redirectURL)
logger.Alertf("[%s] Source IP: %s -> Destination Site: %s", strings.ToUpper(dropAction), req.RemoteAddr, redirectURL)
}
// ProxyManger Initialize the reverse proxy and pass in the address of the real back-end service