The problem when IP logging is that unless you send a specific user a logging link in private, it can be hard to know who exactly clicked and what any of that means to you as the logger. This was designed with the intention that no logging URL would be used for more than a few thousand clicks. view.php is not designed to load millions of IP addresses and simple file-based logs in this manner will reach a 4GB limit on FAT32 without forking to historical log files. This is a simple and lightweight utility, designed to log and view a few thousand IP addresses at maximum. It's not a big deal as it does not reduce the effectiveness of the vector but does allow external parties performing an investigation to identify the kind of information being logged if so desired. I could encrypt or at the very least base64 the url parameters being sent to the server from the Javascript payload, but I don't. Timestamps are baked into the User Agent (UA) string. There are other logs produced, just explore the which is a log of all users whom clicked a URL - this is helpful in cases where some users failed to load the Javascript payload either due to NoScript or closing the page instantly after clicking. To view the list of users who clicked the URL:
This is the URL that you distribute to users you intend to grab the IP address of.
(it's going to generate log files as plain text)Ĭreate a URL to point at this To create a logging URL: (will use the original YouTube video metadata and redirect to the original video when clicked)Ī URL will be generated and provided as the body of the request-response (HTML page). No external dependencies are required other than NGINX and PHP-FPM.Ĭlient Dependencies: HTML, CSS, Javascript InstructionsĬopy the contents of this git to your root www directory and setup permissions so that the PHP files can create new files within that directory. This is a simple to setup IP logger that is capable of detecting a user's true country of origin even while behind a VPN, in most cases. A javascript "IP Grabber" that disguises itself behind YouTube metadata.
0 kommentar(er)
