Shulou(Shulou.com)06/02 Report--

This article will explain in detail how to use the Java version of the open source intranet penetration tool. The content of the article is of high quality, so the editor shares it for you as a reference. I hope you will have a certain understanding of the relevant knowledge after reading this article.

What is holer

Holer exposes local servers behind NATs and firewalls to the public internet over secure tunnels.

Support forwarding message based on TCP protocol.

Holer is a port mapping software that maps applications in the local area network to public network access, and supports forwarding messages based on TCP protocol.

How it works1. Holer uses 1.1. Install Java

Install Java 1.7 or later; execute the command java-version to check if Java is available.

1.2. Install the Web server

Take Tomcat as an example, install and start Tomcat

Enter the following URL in the browser to check whether the Tomcat service can be accessed properly:

Http://127.0.0.1:8080

1.3. Configure Holer

Download and extract the software package holer-client.zip

Modify the configuration file: holer-client/conf/holer.conf

Set the HOLER_ACCESS_KEY as follows:

HOLER_ACCESS_KEY=HOLER_CLIENT-2F8D8B78B3C2A0AE

1.4. Start Holer

Cd holer-client/bin

Windows system:

Execute the command startup.bat or double-click startup.bat

Linux system:

Execute the command sh startup.sh

You can then access the Web application through the following URL:

Http://holer65530.wdom.net or http://holer.org:65530

1.5. Address Mapping relationship between Public Network and Intranet Holer Access KeyDomain NameInternet AddressLocal AddressHOLER_CLIENT-2F8D8B78B3C2A0AEholer65530.wdom.netholer.org:65530127.0.0.1:8080HOLER_CLIENT-3C07CDFD1BF99BF2holer65531.wdom.netholer.org:65531127.0.0.1:8088HOLER_CLIENT-2A623FCB6E2A7D1Dholer65532.wdom.netholer.org:65532127.0.0.1:80HOLER_CLIENT-AF3E6391525F70E4N/Aholer.org:65533127.0.0.1:3389HOLER_CLIENT-822404317F9D8ADDN/Aholer.org:65534127.0.0.1:22HOLER_CLIENT-27DD1389DF1D4DBCN/Aholer.org:65535127.0.0.1:3306

If your local Tomcat port is 80 or 8088, please select a matching key to set it.

Please refer to the blog article for more usage examples and help.

1.6. Other versions of Holer software

These Holer software (source code, software packages) are implemented in the GO language and support a variety of operating systems and hardware architectures.

Here, take Windows & Linux x86-64bit as an example, start Holer and execute the following command:

Windows system:

Holer-windows-amd64.exe-k HOLER_CLIENT-2F8D8B78B3C2A0AE

Linux system:

Nohup. / holer-linux-amd64-k HOLER_CLIENT-2F8D8B78B3C2A0AE &

2. Use of Holer server software

Users can also download holer-server.zip to build their own Holer server.

2.1. Set up the Holer server preparation work

(1) prepare a Linux system or Windows system host

(2) install Java 1.8 and above, and execute the command java-version to check whether Java is available.

(3) install and start Nginx. It is recommended to install its stable version.

(4) install MariaDB and set the root user password

(5) set security rules to allow access to Holer server ports 6060, 600 and the ports involved in the port mapping rules

(6) it is recommended to apply for a domain name and complete the domain name license. If there is no domain name, you can directly use IP and port access.

2.2. Configure and start the Holer server

Unpack the package and open the configuration file holer-server/resources/application.yaml

2.2.1. Modify the database username and password spring: datasource: username: root password: 1234562.2.2. Modify the domain name and Nginx home directory holer domain: name: your-domain.com nginx: # home: / usr/local/nginx home: C:/nginx-1.14.2

Linux system default installation Nginx path / usr/local/nginx Windows system you can copy Nginx to a directory and then specify its home directory in the configuration file.

If you need to use the HTTPS feature, the Window system version of Nginx supports the HTTPS feature by default. The Linux system needs to download the Nginx source code, configure and compile, and execute the following commands:

. / configure-- with-http_ssl_modulemake;make install2.2.3 starts the Holer server

The Linux system executes the startup command as follows:

Cd holer-serverchmod 755 holer./holer start

The Windows system executes the startup command as follows:

Cd holer-serverstartup.bat

Or double-click startup.bat

2.3. Create port mapping 2.3.1. Log in to the Holer management system

If the domain name is set in the configuration file application.yaml and the Nginx home directory is specified, enter URL http://holer.your-domain.com in the browser. If the domain name access is not set, log in to the system http://IP address through IP and port:

To log in to the system, you need to enter a default administrator account. Default user name: admin password: admin123

Users can also change the default user name and password in the file holer-server/resources/conf/holer-data.sql, and then restart the Holer server to make it take effect.

2.3.2. Create client and port mappings

Create a Holer client in the user list page

Http://holer.your-domain.com/view/holer-client.html

Create a port map for the Holer client in the port mapping page

Http://holer.your-domain.com/view/holer-port.html

View report information in the data statistics page

Http://holer.your-domain.com/view/holer-report.html

2.3.3. Configure the Holer client to implement port mapping with the Holer server

Select a client record in the user list page, click the details button in the upper right corner of the page, and click the copy button under the pop-up details box.

Then paste the details into the notepad and strictly follow the instructions in the details, so that you can complete the Holer client configuration and achieve the port mapping function based on your own Holer server.

On the Java version of the open source intranet penetration tool to share here, I hope that the above content can be of some help to you, can learn more knowledge. If you think the article is good, you can share it for more people to see.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.