Cyclos is a free alternative to Burp Suite Collaborator. It sets up a basic web server using Node.js. Any requests sent to this web server are forwarded to a Discord channel. Cyclos can be used to test for vulnerabilities like SSRF or blind XSS. Once set up, Cyclos will keep running to requests without needing any further configuration. The setup only needs to be done once.
- HTTP Server: Listens for incoming HTTPS requests. (The current setup doesn't function with HTTP requests. If anyone knows how to address this issue, please create a ticket or issue for further discussion and resolution.)
- Discord Webhook Integration: Sends request details (URL, method, headers, client's IP) to a Discord channel via a provided webhook URL.
The code establishes an HTTP server that monitors incoming requests. When a request is received, it extracts specifics like the request method, URL, headers, and client's IP address. These details are then structured into a message and dispatched to a designated Discord channel using a webhook URL.
- Fork this Repository: Create a copy of this repository in your GitHub account.
- Deploy New App: Use Cyclic.sh to deploy a new app and select the forked repository.
- Set Environment Variables: Please make sure you set the WEBHOOK environment variable with your Discord webhook URL in the Cyclic.sh Variables tab.
- Finalize Configuration: The setup should now be complete and operational.
Once the server is up and running, it'll capture incoming HTTP requests and relay their details to your Discord channel. Access the server via the URL provided by Cyclic.sh and observe the forwarded request details in Discord.
Contributions are welcome! Feel free to enhance this project by forking the repository, implementing improvements, and generating pull requests.