-
Notifications
You must be signed in to change notification settings - Fork 90
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
emmm,关于ceye的一点小问题 #39
Comments
看了一下源码,type是dns来着,但一直没能检测到就挺纳闷的,是因为网络延迟还是burp版本不匹配? |
ceye目前就是以dnslog的形式进行监测的,如果发生监测不到的情况,需要确认下ceye的配置是否出现问题,或者目标网络是否block了ceye的相关域名。 |
block倒是没有,我这边能正常访问API,看样子应该是延迟的问题,burp在发送请求后,还没等ceye那边输出记录就先进行了查询的原因。 |
也可以,未来版本考虑加上该特性 |
该机制已在 |
我在测试的时候发现,如果ceye上没有收到http类型请求,只接收到DNS请求的话,就无法在burp上反馈探测出log4j2的RCE,要锁定就会变得相当麻烦,是否可以增添一下对ceye的dns类型的type的支持呢?
The text was updated successfully, but these errors were encountered: