From f23895f440a65c7e52590917e2bf60ca358bb76e Mon Sep 17 00:00:00 2001 From: Muhammad Talha Khan Date: Sun, 28 Jun 2020 19:23:07 +0500 Subject: [PATCH] Ver-2.0 --- README.md | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index ede0c8a..e1bff1b 100644 --- a/README.md +++ b/README.md @@ -14,7 +14,7 @@ Khata is written in PHP (Yes, I said PHP) because PHP is easily available on all For data security I am encrypting received request with AES-256-OFB and keeping them in a plain text file (Now don't be so melodramatic). From where C2 (index.php) picks up all the data decrypts it and present it in readable form. For C2 security I have tried to keep up with the security measures like Anti-CSRF, Captcha, Security Headers, and other stuff I can't remember. (If you have any suggestions to improve security put them in suggestion box). # Demo -http://khata.getforge.io/ +http://khata.mtk911.cf/ ## Getting Started Deploying khata is super easy you just need to have and do few things: @@ -26,7 +26,7 @@ Done ## The necessary 1. Change Username and Password(Make sure it is SHA256) in configuration file 2. Change Key and IV in configuration file for encryption -3. Change file name in configuration file +3. Change file name of logs and responder in configuration file 4. Change random1 and random2 variable 5. Make sure catch.php has permission to write in directory @@ -36,7 +36,7 @@ Done 3. For security reason log file size is limited to 1 GB you can change it to whatever you want ## Arming -Khata can be use to detect XSS and SSRF using Khata as a listener. For XSS place Khata in script tag source