Open source project dolphin-ASM network asset risk monitoring system

Project Description

dolphin is an asset risk analysis system, users only need to add a main domain name to the system, dolphin will automatically grab the information related to the domain name for analysis;

For example, the same ICP domain name, sub-domain name, corresponding IP, port, URL address, site screenshot, port protocol, email address, leaked information, etc.

The front end uses the bootstrap framework, and the console uses ThinkPHP; the underlying data comes from the data aggregation system of the Dragonfly platform, calling various frameworks and APIs.

GitHub address: https://github.com/StarCrossPortal/dolphin

Instructions

Fill in the company's main domain name, dolphin can collect 同ICP域名, 子域名, IP, , 端口, URL, 站点截图, 漏洞, 产品指纹, 泄露信息,邮箱证书

installation method

1. Download code:git clone --depth=1 https://github.com/StarCrossPortal/dolphin.git && cd dolphin
2. start dockerdocker run -it -d -p 80:80 -v $(pwd):/root/code --name dolphin daxia/qingting:dolphin
3. install dependenciesdocker exec -it dolphin bash -c 'cd /root/code && composer install'
4. Create a new MySQL database and xinxishouji.sqlimport the file into it
5. Copy .example.envas .env, and modify the database address information
6. The browser opens the address:http://xxxx/admin/home/index

grateful

1. Project UI experience, inspired by the biu system of the 0xbug bosshttps://github.com/0xbug/Biu
2. Data powered by Dragonfly, addresshttp://qingting.starcross.cn/scenario/detail?id=2054

renderings