Skip to content

🕵️‍♂️ 用于分析任何网站的一体化 OSINT 工具

License

Notifications You must be signed in to change notification settings

yuanzhongqiao/web-check

 
 

Repository files navigation

网络检查


适用于任何网站的全面、按需开源情报
🌐 web-check.xyz


内容


关于

深入了解给定网站的内部工作原理:发现潜在的攻击媒介、分析服务器架构、查看安全配置并了解网站正在使用哪些技术。

目前仪表板将显示:IP 信息、SSL 链、DNS 记录、cookie、标头、域信息、搜索爬网规则、页面地图、服务器位置、重定向分类帐、开放端口、跟踪路由、DNS 安全扩展、站点性能、跟踪器、关联主机名、碳足迹。请继续关注,我很快就会添加更多内容!

目的是帮助您轻松了解、优化和保护您的网站。

截屏

展开截图

Screenshot

截屏

现场演示

可以通过以下网址访问托管版本:web-check.as93.net

镜子

此存储库的源镜像到 CodeBerg,可在以下位置获取:codeberg.org/alicia/​​web-check

地位

构建和部署: 回购管理和其他:Netlify 状态 维塞尔州 🐳 构建 + 发布 Docker 镜像 🚀 部署到 AWS
🪞 镜像到 Codeberg 💓 插入贡献者和赞助商

特征

单击展开/折叠部分

请注意, 此列表需要更新,自此以来已经添加了更多工作...

以下部分概述了核心功能,并简要解释了为什么这些数据可能对您有用,并链接到更多资源以了解更多信息。

知识产权信息
Description

An IP address (Internet Protocol address) is a numerical label assigned to each device connected to a network / the internet. The IP associated with a given domain can be found by querying the Domain Name System (DNS) for the domain's A (address) record.

Use Cases

Finding the IP of a given server is the first step to conducting further investigations, as it allows us to probe the server for additional info. Including creating a detailed map of a target's network infrastructure, pinpointing the physical location of a server, identifying the hosting service, and even discovering other domains that are hosted on the same IP address.

Useful Links
SSL链
Description

SSL certificates are digital certificates that authenticate the identity of a website or server, enable secure encrypted communication (HTTPS), and establish trust between clients and servers. A valid SSL certificate is required for a website to be able to use the HTTPS protocol, and encrypt user + site data in transit. SSL certificates are issued by Certificate Authorities (CAs), which are trusted third parties that verify the identity and legitimacy of the certificate holder.

Use Cases

SSL certificates not only provide the assurance that data transmission to and from the website is secure, but they also provide valuable OSINT data. Information from an SSL certificate can include the issuing authority, the domain name, its validity period, and sometimes even organization details. This can be useful for verifying the authenticity of a website, understanding its security setup, or even for discovering associated subdomains or other services.

Useful Links
DNS 记录
Description

This task involves looking up the DNS records associated with a specific domain. DNS is a system that translates human-readable domain names into IP addresses that computers use to communicate. Various types of DNS records exist, including A (address), MX (mail exchange), NS (name server), CNAME (canonical name), and TXT (text), among others.

Use Cases

Extracting DNS records can provide a wealth of information in an OSINT investigation. For example, A and AAAA records can disclose IP addresses associated with a domain, potentially revealing the location of servers. MX records can give clues about a domain's email provider. TXT records are often used for various administrative purposes and can sometimes inadvertently leak internal information. Understanding a domain's DNS setup can also be useful in understanding how its online infrastructure is built and managed.

Useful Links
饼干
Description

The Cookies task involves examining the HTTP cookies set by the target website. Cookies are small pieces of data stored on the user's computer by the web browser while browsing a website. They hold a modest amount of data specific to a particular client and website, such as site preferences, the state of the user's session, or tracking information.

Use Cases

Cookies can disclose information about how the website tracks and interacts with its users. For instance, session cookies can reveal how user sessions are managed, and tracking cookies can hint at what kind of tracking or analytics frameworks are being used. Additionally, examining cookie policies and practices can offer insights into the site's security settings and compliance with privacy regulations.

Useful Links
抓取规则
Description

Robots.txt is a file found (usually) at the root of a domain, and is used to implement the Robots Exclusion Protocol (REP) to indicate which pages should be ignored by which crawlers and bots. It's good practice to avoid search engine crawlers from over-loading your site, but should not be used to keep pages out of search results (use the noindex meta tag or header instead).

Use Cases

It's often useful to check the robots.txt file during an investigation, as it can sometimes disclose the directories and pages that the site owner doesn't want to be indexed, potentially because they contain sensitive information, or reveal the existence of otherwise hidden or unlinked directories. Additionally, understanding crawl rules may offer insights into a website's SEO strategies.

Useful Links
标头
Description

The Headers task involves extracting and interpreting the HTTP headers sent by the target website during the request-response cycle. HTTP headers are key-value pairs sent at the start of an HTTP response, or before the actual data. Headers contain important directives for how to handle the data being transferred, including cache policies, content types, encoding, server information, security policies, and more.

Use Cases

Analyzing HTTP headers can provide significant insights in an OSINT investigation. Headers can reveal specific server configurations, chosen technologies, caching directives, and various security settings. This information can help to determine a website's underlying technology stack, server-side security measures, potential vulnerabilities, and general operational practices.

Useful Links
质量指标
Description

Using Lighthouse, the Quality Metrics task measures the performance, accessibility, best practices, and SEO of the target website. This returns a simple checklist of 100 core metrics, along with a score for each category, to gauge the overall quality of a given site.

Use Cases

Useful for assessing a site's technical health, SEO issues, identify vulnerabilities, and ensure compliance with standards.

Useful Links
服务器位置
Description

The Server Location task determines the physical location of the server hosting a given website based on its IP address. This is done by looking up the IP in a location database, which maps the IP to a lat + long of known data centers and ISPs. From the latitude and longitude, it's then possible to show additional contextual info, like a pin on the map, along with address, flag, time zone, currency, etc.

Use Cases

Knowing the server location is a good first step in better understanding a website. For site owners this aids in optimizing content delivery, ensuring compliance with data residency requirements, and identifying potential latency issues that may impact user experience in specific geographical regions. And for security researcher, assess the risk posed by specific regions or jurisdictions regarding cyber threats and regulations.

Useful Links
关联主机
Description

This task involves identifying and listing all domains and subdomains (hostnames) that are associated with the website's primary domain. This process often involves DNS enumeration to discover any linked domains and hostnames, as well as looking at known DNS records.

Use Cases

During an investigation, understanding the full scope of a target's web presence is critical. Associated domains could lead to uncovering related projects, backup sites, development/test sites, or services linked to the main site. These can sometimes provide additional information or potential security vulnerabilities. A comprehensive list of associated domains and hostnames can also give an overview of the organization's structure and online footprint.

Useful Links
重定向链
Description

This task traces the sequence of HTTP redirects that occur from the original URL to the final destination URL. An HTTP redirect is a response with a status code that advises the client to go to another URL. Redirects can occur for several reasons, such as URL normalization (directing to the www version of the site), enforcing HTTPS, URL shorteners, or forwarding users to a new site location.

Use Cases

Understanding the redirect chain can be useful for several reasons. From a security perspective, long or complicated redirect chains can be a sign of potential security risks, such as unencrypted redirects in the chain. Additionally, redirects can impact website performance and SEO, as each redirect introduces additional round-trip-time (RTT). For OSINT, understanding the redirect chain can help identify relationships between different domains or reveal the use of certain technologies or hosting providers.

Useful Links
TXT 记录
Description

TXT records are a type of DNS record that provides text information to sources outside your domain. They can be used for a variety of purposes, such as verifying domain ownership, ensuring email security, and even preventing unauthorized changes to your website.

Use Cases

The TXT records often reveal which external services and technologies are being used with a given domain. They may reveal details about the domain's email configuration, the use of specific services like Google Workspace or Microsoft 365, or security measures in place such as SPF and DKIM. Understanding these details can give an insight into the technologies used by the organization, their email security practices, and potential vulnerabilities.

Useful Links
服务器状态
Description

Checks if a server is online and responding to requests.

Use Cases
Useful Links
开放端口
Description

Open ports on a server are endpoints of communication which are available for establishing connections with clients. Each port corresponds to a specific service or protocol, such as HTTP (port 80), HTTPS (port 443), FTP (port 21), etc. The open ports on a server can be determined using techniques such as port scanning.

Use Cases

Knowing which ports are open on a server can provide information about the services running on that server, useful for understanding the potential vulnerabilities of the system, or for understanding the nature of the services the server is providing.

Useful Links
路由追踪
Description

Traceroute is a network diagnostic tool used to track in real-time the pathway taken by a packet of information from one system to another. It records each hop along the route, providing details about the IPs of routers and the delay at each point.

Use Cases

In OSINT investigations, traceroute can provide insights about the routing paths and geography of the network infrastructure supporting a website or service. This can help to identify network bottlenecks, potential censorship or manipulation of network traffic, and give an overall sense of the network's structure and efficiency. Additionally, the IP addresses collected during the traceroute may provide additional points of inquiry for further OSINT investigation.

Useful Links
  • [undefined](function link() { [native code] })
  • [undefined](function link() { [native code] })
  • [undefined](function link() { [native code] })
  • [undefined](function link() { [native code] })
碳足迹
Description

This task calculates the estimated carbon footprint of a website. It's based on the amount of data being transferred and processed, and the energy usage of the servers that host and deliver the website. The larger the website and the more complex its features, the higher its carbon footprint is likely to be.

Use Cases

From an OSINT perspective, understanding a website's carbon footprint doesn't directly provide insights into its internal workings or the organization behind it. However, it can still be valuable data in broader analyses, especially in contexts where environmental impact is a consideration. For example, it can be useful for activists, researchers, or ethical hackers who are interested in the sustainability of digital infrastructure, and who want to hold organizations accountable for their environmental impact.

Useful Links
服务器信息
Description

This task retrieves various pieces of information about the server hosting the target website. This can include the server type (e.g., Apache, Nginx), the hosting provider, the Autonomous System Number (ASN), and more. The information is usually obtained through a combination of IP address lookups and analysis of HTTP response headers.

Use Cases

In an OSINT context, server information can provide valuable clues about the organization behind a website. For instance, the choice of hosting provider could suggest the geographical region in which the organization operates, while the server type could hint at the technologies used by the organization. The ASN could also be used to find other domains hosted by the same organization.

Useful Links
  • [undefined](function link() { [native code] })
  • [undefined](function link() { [native code] })
  • [undefined](function link() { [native code] })
  • [undefined](function link() { [native code] })
域名查询
Description

This task retrieves Whois records for the target domain. Whois records are a rich source of information, including the name and contact information of the domain registrant, the domain's creation and expiration dates, the domain's nameservers, and more. The information is usually obtained through a query to a Whois database server.

Use Cases

In an OSINT context, Whois records can provide valuable clues about the entity behind a website. They can show when the domain was first registered and when it's set to expire, which could provide insights into the operational timeline of the entity. The contact information, though often redacted or anonymized, can sometimes lead to additional avenues of investigation. The nameservers could also be used to link together multiple domains owned by the same entity.

Useful Links
  • [undefined](function link() { [native code] })
  • [undefined](function link() { [native code] })
  • [undefined](function link() { [native code] })
域名信息
Description

This task retrieves Whois records for the target domain. Whois records are a rich source of information, including the name and contact information of the domain registrant, the domain's creation and expiration dates, the domain's nameservers, and more. The information is usually obtained through a query to a Whois database server.

Use Cases

In an OSINT context, Whois records can provide valuable clues about the entity behind a website. They can show when the domain was first registered and when it's set to expire, which could provide insights into the operational timeline of the entity. The contact information, though often redacted or anonymized, can sometimes lead to additional avenues of investigation. The nameservers could also be used to link together multiple domains owned by the same entity.

Useful Links
  • [undefined](function link() { [native code] })
  • [undefined](function link() { [native code] })
  • [undefined](function link() { [native code] })
DNS 安全扩展
Description

Without DNSSEC, it's possible for MITM attackers to spoof records and lead users to phishing sites. This is because the DNS system includes no built-in methods to verify that the response to the request was not forged, or that any other part of the process wasn’t interrupted by an attacker. The DNS Security Extensions (DNSSEC) secures DNS lookups by signing your DNS records using public keys, so browsers can detect if the response has been tampered with. Another solution to this issue is DoH (DNS over HTTPS) and DoT (DNS over TLD).

Use Cases

DNSSEC information provides insight into an organization's level of cybersecurity maturity and potential vulnerabilities, particularly around DNS spoofing and cache poisoning. If no DNS secururity (DNSSEC, DoH, DoT, etc) is implemented, this may provide an entry point for an attacker.

Useful Links
  • [undefined](function link() { [native code] })
  • [undefined](function link() { [native code] })
  • [undefined](function link() { [native code] })
  • [undefined](function link() { [native code] })
  • [undefined](function link() { [native code] })
  • [undefined](function link() { [native code] })
网站特色
Description

Checks which core features are present on a site. If a feature as marked as dead, that means it's not being actively used at load time

Use Cases

This is useful to understand what a site is capable of, and what technologies to look for

Useful Links
HTTP 严格传输安全
Description

HTTP Strict Transport Security (HSTS) is a web security policy mechanism that helps protect websites against protocol downgrade attacks and cookie hijacking. A website can be included in the HSTS preload list by conforming to a set of requirements and then submitting itself to the list.

Use Cases

There are several reasons why it's important for a site to be HSTS enabled: 1. User bookmarks or manually types http://example.com and is subject to a man-in-the-middle attacker HSTS automatically redirects HTTP requests to HTTPS for the target domain 2. Web application that is intended to be purely HTTPS inadvertently contains HTTP links or serves content over HTTP HSTS automatically redirects HTTP requests to HTTPS for the target domain 3. A man-in-the-middle attacker attempts to intercept traffic from a victim user using an invalid certificate and hopes the user will accept the bad certificate HSTS does not allow a user to override the invalid certificate message

Useful Links
  • [undefined](function link() { [native code] })
  • [undefined](function link() { [native code] })
  • [undefined](function link() { [native code] })
DNS服务器
Description

This check determines the DNS server(s) that the requested URL / IP resolves to. Also fires off a rudimentary check to see if the DNS server supports DoH, and weather it's vulnerable to DNS cache poisoning.

Use Cases
Useful Links
技术堆栈
Description

Checks what technologies a site is built with. This is done by fetching and parsing the site, then comparing it against a bit list of RegEx maintained by Wappalyzer to identify the unique fingerprints that different technologies leave.

Use Cases

Identifying a website's tech stack aids in evaluating its security by exposing potential vulnerabilities, informs competitive analyses and development decisions, and can guide tailored marketing strategies. Ethical application of this knowledge is crucial to avoid harmful activities like data theft or unauthorized intrusion.

Useful Links
列出的页面
Description

This job finds and parses a site's listed sitemap. This file lists public sub-pages on the site, which the author wishes to be crawled by search engines. Sitemaps help with SEO, but are also useful for seeing all a sites public content at a glance.

Use Cases

Understand the structure of a site's public-facing content, and for site-owners, check that you're site's sitemap is accessible, parsable and contains everything you wish it to.

Useful Links
安全.txt
Description

The security.txt file tells researchers how they can responsibly disclose any security issues found on your site. The standard was proposed in RFC 9116, and specifies that this file should include a point of contact (email address), as well as optionally other info, like a link to the security disclosure policy, PGP key, proffered language, policy expiry and more. The file should be located at the root of your domain, either at /security.txt or /.well-known/security.txt.

Use Cases

This is important, as without a defined point of contact a security researcher may be unable to report a critical security issue, or may use insecure or possibly public channels to do so. From an OSINT perspective, you may also glean info about a site including their posture on security, their CSAF provider, and meta data from the PGP public key.

Useful Links
链接页面
Description

Displays all internal and external links found on a site, identified by the href attributes attached to anchor elements.

Use Cases

For site owners, this is useful for diagnosing SEO issues, improving the site structure, understanding how content is inter-connected. External links can show partnerships, dependencies, and potential reputation risks. From a security standpoint, the outbound links can help identify any potential malicious or compromised sites the website is unknowingly linking to. Analyzing internal links can aid in understanding the site's structure and potentially uncover hidden or vulnerable pages which are not intended to be public. And for an OSINT investigator, it can aid in building a comprehensive understanding of the target, uncovering related entities, resources, or even potential hidden parts of the site.

Useful Links
社交标签
Description

Websites can include certain meta tags, that tell search engines and social media platforms what info to display. This usually includes a title, description, thumbnail, keywords, author, social accounts, etc.

Use Cases

Adding this data to your site will boost SEO, and as an OSINT researcher it can be useful to understand how a given web app describes itself

Useful Links
电子邮件配置
Description

DMARC (Domain-based Message Authentication, Reporting & Conformance): DMARC is an email authentication protocol that works with SPF and DKIM to prevent email spoofing and phishing. It allows domain owners to specify how to handle unauthenticated mail via a published policy in DNS, and provides a way for receiving mail servers to send feedback about emails' compliance to the sender. BIMI (Brand Indicators for Message Identification): BIMI is an emerging email standard that enables organizations to display a logo in their customers' email clients automatically. BIMI ties the logo to the domain's DMARC record, providing another level of visual assurance to recipients that the email is legitimate. DKIM (DomainKeys Identified Mail): DKIM is an email security standard designed to make sure that messages were not altered in transit between the sending and recipient servers. It uses digital signatures linked to the domain of the sender to verify the sender and ensure message integrity. SPF (Sender Policy Framework): SPF is an email authentication method designed to prevent email spoofing. It specifies which mail servers are authorized to send email on behalf of a domain by creating a DNS record. This helps protect against spam by providing a way for receiving mail servers to check that incoming mail from a domain comes from a host authorized by that domain's administrators.

Use Cases

This information is helpful for researchers as it helps assess a domain's email security posture, uncover potential vulnerabilities, and verify the legitimacy of emails for phishing detection. These details can also provide insight into the hosting environment, potential service providers, and the configuration patterns of a target organization, assisting in investigative efforts.

Useful Links
防火墙检测
Description

A WAF or web application firewall helps protect web applications by filtering and monitoring HTTP traffic between a web application and the Internet. It typically protects web applications from attacks such as cross-site forgery, cross-site-scripting (XSS), file inclusion, and SQL injection, among others.

Use Cases

It's useful to understand if a site is using a WAF, and which firewall software / service it is using, as this provides an insight into the sites protection against several attack vectors, but also may reveal vulnerabilities in the firewall itself.

Useful Links
HTTP 安全特性
Description

Correctly configured security HTTP headers adds a layer of protection against common attacks to your site. The main headers to be aware of are: HTTP Strict Transport Security (HSTS): Enforces the use of HTTPS, mitigating man-in-the-middle attacks and protocol downgrade attempts. Content Security Policy (CSP): Constrains web page resources to prevent cross-site scripting and data injection attacks. X-Content-Type-Options: Prevents browsers from MIME-sniffing a response away from the declared content type, curbing MIME-type confusion attacks. X-Frame-Options: Protects users from clickjacking attacks by controlling whether a browser should render the page in a <frame>, <iframe>, <embed>, or <object>.

Use Cases

Reviewing security headers is important, as it offers insights into a site's defensive posture and potential vulnerabilities, enabling proactive mitigation and ensuring compliance with security best practices.

Useful Links
存档历史
Description

Fetches full history of archives from the Wayback machine

Use Cases

This is useful for understanding the history of a site, and how it has changed over time. It can also be useful for finding old versions of a site, or for finding content that has been removed.

Useful Links
全球排名
Description

This check shows the global rank of the requested site. This is only accurate for websites which are in the top 100 million list. We're using data from the Tranco project (see below), which collates the top sites on the web from Umbrella, Majestic, Quantcast, the Chrome User Experience Report and Cloudflare Radar.

Use Cases

Knowing a websites overall global rank can be useful for understanding the scale of the site, and for comparing it to other sites. It can also be useful for understanding the relative popularity of a site, and for identifying potential trends.

Useful Links
块检测
Description

Checks access to the URL using 10+ of the most popular privacy, malware and parental control blocking DNS servers.

Use Cases
Useful Links
恶意软件和网络钓鱼检测
Description

Checks if a site appears in several common malware and phishing lists, to determine it's threat level.

Use Cases

Knowing if a site is listed as a threat by any of these services can be useful for understanding the reputation of a site, and for identifying potential trends.

Useful Links
TLS 密码套件
Description

These are combinations of cryptographic algorithms used by the server to establish a secure connection. It includes the key exchange algorithm, bulk encryption algorithm, MAC algorithm, and PRF (pseudorandom function).

Use Cases

This is important info to test for from a security perspective. Because a cipher suite is only as secure as the algorithms that it contains. If the version of encryption or authentication algorithm in a cipher suite have known vulnerabilities the cipher suite and TLS connection may then vulnerable to a downgrade or other attack

Useful Links
TLS 安全配置
Description

This uses guidelines from Mozilla's TLS Observatory to check the security of the TLS configuration. It checks for bad configurations, which may leave the site vulnerable to attack, as well as giving advice on how to fix. It will also give suggestions around outdated and modern TLS configs

Use Cases

Understanding issues with a site's TLS configuration will help you address potential vulnerabilities, and ensure the site is using the latest and most secure TLS configuration.

Useful Links
TLS 握手模拟
Description

This simulates how different clients (browsers, operating systems) would perform a TLS handshake with the server. It helps identify compatibility issues and insecure configurations.

Use Cases
Useful Links
截屏
Description

This check takes a screenshot of webpage that the requested URL / IP resolves to, and displays it.

Use Cases

This may be useful to see what a given website looks like, free of the constraints of your browser, IP, or location.

在这里阅读更多信息:web-check.xyz/about


用法

部署

部署 - 选项#1:Netlify

单击下面的按钮,部署到 Netlify 👇

部署到 Netlify

部署 - 选项 #2:Vercel

单击下面的按钮,部署到 Vercel 👇

使用 Vercel 进行部署

部署 - 选项#3:Docker

运行docker run -p 3000:3000 lissy93/web-check,然后打开localhost:3000

Docker 选项

You can get the Docker image from:

部署 - 选项 #4:从源头开始

安装“开发”部分中列出的先决条件,然后运行:

git clone https://github.com/Lissy93/web-check.git  # Download the code from GitHub
cd web-check                                        # Navigate into the project dir
yarn install                                        # Install the NPM dependencies
yarn build                                          # Build the app for production
yarn serve                                          # Start the app (API and GUI)

配置

默认情况下,无需配置。

但是,您可以设置一些可选的环境变量,以便您可以访问一些额外的检查,或者提高某些使用外部 API 的检查的速率限制。

API 密钥和凭证

钥匙 价值
GOOGLE_CLOUD_API_KEY Google API 密钥(点击此处)。这可用于返回站点的质量指标
REACT_APP_SHODAN_API_KEY Shodan API 密钥(在此处获取)。这将显示给定域的关联主机名
REACT_APP_WHO_API_KEY WhoAPI 密钥(点击此处)。这将显示比默认职位更全面的 WhoIs 记录
完整/即将到来的瓦尔斯
  • GOOGLE_CLOUD_API_KEY - A Google API key (get here). This can be used to return quality metrics for a site
  • REACT_APP_SHODAN_API_KEY - A Shodan API key (get here). This will show associated host names for a given domain
  • REACT_APP_WHO_API_KEY - A WhoAPI key (get here). This will show more comprehensive WhoIs records than the default job
  • SECURITY_TRAILS_API_KEY - A Security Trails API key (get here). This will show org info associated with the IP
  • CLOUDMERSIVE_API_KEY - API key for Cloudmersive (get here). This will show known threats associated with the IP
  • TRANCO_USERNAME - A Tranco email (get here). This will show the rank of a site, based on traffic
  • TRANCO_API_KEY - A Tranco API key (get here). This will show the rank of a site, based on traffic
  • URL_SCAN_API_KEY - A URLScan API key (get here). This will fetch miscalanious info about a site
  • BUILT_WITH_API_KEY - A BuiltWith API key (get here). This will show the main features of a site
  • TORRENT_IP_API_KEY - A torrent API key (get here). This will show torrents downloaded by an IP

配置设置

钥匙 价值
CHROME_PATH Chromium 可执行文件的路径(例如/usr/bin/chromium
PORT 运行 server.js 时提供 API 服务的端口(例如3000
DISABLE_GUI 禁用 GUI,仅提供 API(例如false
API_TIMEOUT_LIMIT API请求的超时限制,以毫秒为单位(例如10000
REACT_APP_API_ENDPOINT API 的端点,本地或远程(例如/api

所有值都是可选的。

您可以将它们添加为环境变量。可以将它们直接放入.env项目根目录中的文件中,或者通过 Netlify / Vercel UI,或者使用 --env 标志传递到 Docker 容器,或者使用您自己的环境变量管理系统

请注意,前缀为 的密钥是REACT_APP_在客户端使用的,因此它们必须以最小权限正确确定范围,因为在拦截浏览器 <-> 服务器网络请求时可能会变得可见


发展

  1. 克隆存储库,git clone [email protected]:Lissy93/web-check.git
  2. CD 进入其中,cd web-check
  3. 安装依赖项:yarn
  4. 启动开发服务器,使用yarn dev

您需要安装Node.js(V 18.16.1 或更高版本),以及yarngit。有些检查还需要chromium,traceroutedns安装在您的环境中。如果这些包不存在,这些作业将被跳过。


社区

贡献

任何形式的贡献都非常受欢迎,我们将不胜感激。有关行为准则,请参阅贡献者公约

首先,分叉存储库,进行更改,添加、提交和推送代码,然后返回此处打开拉取请求。如果您是 GitHub 或开源的新手,本指南git 文档可能会帮助您入门,但如果您需要任何支持,请随时与我们联系。

提交 PR

报告错误

如果您发现某些功能无法正常工作,或者想要建议新功能,请继续在 GitHub 上提出请求。对于错误,请概述重现所需的步骤,并包含相关信息,例如系统信息和生成的日志。

提出问题

配套

该应用程序将保持 100% 免费和开源。但由于托管实例获得的流量较大,lambda 函数的使用成本约为每月 25 美元。任何通过 GitHub 赞助来支付费用的帮助将不胜感激。感谢社区的支持,这个项目才能够免费提供给所有人:)

在 GitHub 上赞助 Lissy93

贡献者

感谢以下用户对 Web-Check 的贡献

莉西93
艾丽西娅·赛克斯
利斯机器人
艾丽西亚·博特
市政106
穆尼尔·萨米特
布莱恩蒂曼
布赖恩·蒂曼
金纳巴鲁
金娜·巴鲁
0x舰队
0x舰队
埃尔托恰尔
芦峰一光
治疗主题
约翰于佩茨
t3chn0m4g3
马可·奥赫斯
murrple-1
默里·克里斯托弗森
菲安魂曲
菲安魂曲
尤里塞斯·加斯科
尤利西斯·加斯科恩
阿披舍木格
阿布舍克·穆格
罗宾逊
长径

赞助商

非常感谢这些优秀的人,他们在 GitHub 上赞助了我,他们的支持帮助支付了让 Web-Check 和我的其他项目向所有人免费开放所需的费用。如果可以的话,考虑加入他们,在 GitHub 上赞助我。

共同康德
文森特·科克
鹏1灿
鹏一灿
阿莱德玛
阿里·穆罕默德
布加德里安
BG阿德里安
tjer
托尼·比耶斯
恩拉扎林
艾迪·拉扎林
阿南德·乔杜里
阿南德·乔杜里
发货
虾皮
文件0026
扎克拜尔斯
尤里塞斯·加斯科
尤利西斯·加斯科恩
数字原型
数字考古学
美食品味
美食品味
麦格纳格
布莱恩·麦格纳吉尔
弗拉德·季莫费耶夫
弗拉德·季莫费耶夫
螺旋
直升机XZz
转发邮件
转发电子邮件 - 开源且注重隐私的电子邮件服务 (2023)
巴斯蒂717
巴斯蒂717
弗兰克德兹93
弗兰克德兹93
拉蒂222
布伦特
埃尔南波普尔
埃尔南波普尔
尼克斯·朱皮
尼克斯
紧张的
紧张的
梅扎93
梅扎93

执照

Lissy93/Web-Check已获得MIT © Alicia Sykes 2023
。有关信息,请参阅TLDR Legal > MIT

扩展许可证
The MIT License (MIT)
Copyright (c) Alicia Sykes <[email protected]> 

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sub-license, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included install copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANT ABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON INFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

<clipboard-copy aria-label="Copy" class="ClipboardButton btn btn-invisible js-clipboard-copy m-2 p-0 tooltipped-no-delay d-flex flex-justify-center flex-items-center" data-copy-feedback="Copied!" data-tooltip-direction="w" value="The MIT License (MIT) Copyright (c) Alicia Sykes [email protected]

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sub-license, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included install copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANT ABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON INFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE." tabindex="0" role="button">

View Dependency Licenses & SBOM on FOSSA

© Alicia Sykes 2023
已获得MIT许可感谢您的访问:)

About

🕵️‍♂️ 用于分析任何网站的一体化 OSINT 工具

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • TypeScript 77.5%
  • JavaScript 20.1%
  • HTML 1.4%
  • Other 1.0%