ReServ

A set of programmable servers (currently HTTP/HTTPS and DNS) which allow configurable and scriptable responses to network requests.

Example uses:

• Use as a local DNS server to intercept and modify IoT device traffic.
• Use as an internet based DNS authority server to test 3rd party websites for SSRF, blind XSS and other vulnerabilities.

Features:

• Simple regex replacements and responses.
• Apply middlewares to all or matching requests (HTTP, SSL and DNS).
• Changes to, or the addition of new configuration files does not require a restart of the server.

Default configuration includes examples for DNS Rebinding attacks (files/routes/30_dnsrebind.json and files/scripts/dnsrebind/dnsrebind.py), slack alerting middleware (files/scripts/slack_alert_middleware/) and responding to ACMEv2 dns-01 challenges (files/routes/10_letsencrypt.json).

Usage

In order to start ReServ with the default configuration simply use the following command:

$ python3 reserv.py

Getting Started

See the Getting Started guide for setting up TLS, DNS glue records and more.