ARL源码安装

安装ARL

ARL只适配CentOS7， 直接在服务器上下载会出现各种各样的问题

我们下载setup-arl.sh

wget https://raw.githubusercontent.com/TophantTechnology/ARL/master/misc/setup-arl.sh

进行分析，查看需要什么环境，提前准备进行安装

下面是提取出来的，需要下载的环境

rpm -vhU https://nmap.org/dist/nmap-7.91-1.x86_64.rpm
git clone https://github.com/TophantTechnology/ARL
git clone https://github.com/1c3z/ARL-NPoC

wget https://github.com/1c3z/arl_files/raw/master/ncrack -O /usr/local/bin/ncrack
chmod +x /usr/local/bin/ncrack

wget https://github.com/1c3z/arl_files/raw/master/ncrack-services -O /usr/local/share/ncrack/ncrack-services

mkdir -p /data/GeoLite2
    wget https://github.com/1c3z/arl_files/raw/master/GeoLite2-ASN.mmdb -O /data/GeoLite2/GeoLite2-ASN.mmdb
    wget https://github.com/1c3z/arl_files/raw/master/GeoLite2-City.mmdb -O /data/GeoLite2/GeoLite2-City.mmdb

curl https://ssl-config.mozilla.org/ffdhe2048.txt > /etc/ssl/certs/dhparam.pem

我们就可以用本地的相关命令，或者下载器下载下面的文件

https://nmap.org/dist/nmap-7.91-1.x86_64.rpm
git clone https://github.com/TophantTechnology/ARL    或者    https://github.com/TophantTechnology/ARL/archive/refs/heads/master.zip
git clone https://github.com/1c3z/ARL-NPoC    或者    https://github.com/1c3z/ARL-NPoC/archive/refs/heads/master.zip
https://github.com/1c3z/arl_files/raw/master/ncrack
https://github.com/1c3z/arl_files/raw/master/ncrack-services
https://github.com/1c3z/arl_files/raw/master/GeoLite2-ASN.mmdb
https://github.com/1c3z/arl_files/raw/master/GeoLite2-City.mmdb
https://ssl-config.mozilla.org/ffdhe2048.txt

如下图，我们如果下载了压缩包，一定要解压和重命名。我们使用xftp全部传到 /opt 目录，setup-arl.sh 也不要忘了

之后修改我们下载的setup-arl.sh，我们需要去掉几行不需要的

安装nmap的去掉

证书 这两行也要去掉

之后下面的命令一条条在命令行执行

cd /opt
rpm -ivh nmap-7.91-1.x86_64.rpm

mv ncrack /usr/local/bin/ncrack
chmod +x /usr/local/bin/ncrack

mkdir -p /usr/local/share/ncrack/
mv ncrack-services /usr/local/share/ncrack/ncrack-services

mkdir -p /data/GeoLite2
mv GeoLite2-ASN.mmdb /data/GeoLite2/GeoLite2-ASN.mmdb
mv GeoLite2-City.mmdb /data/GeoLite2/GeoLite2-City.mmdb

cat ffdhe2048.txt > /etc/ssl/certs/dhparam.pem
rm -f ffdhe2048.txt
rm -f nmap-7.91-1.x86_64.rpm

cd /etc/ssl/certs/
openssl req -new -newkey rsa:2048 -sha256 -nodes -out arl_web.csr -keyout arl_web.key -subj "/C=CN/ST=Shanghai/L=Shanghai/O=Example Inc./OU=Web Security/CN=127.0.0.1"
openssl x509 -req -days 3650 -in arl_web.csr -signkey arl_web.key -out arl_web.crt

上面的命令执行完成后，我们就要执行setup-arl.sh

chmod +x setup-arl.sh
./setup-arl.sh

这样就完成了

https://IP:5003/login

默认用户名密码admin/arlpass

添加指纹

git clone https://github.com/loecho-sec/ARL-Finger-ADD

或

https://github.com/loecho-sec/ARL-Finger-ADD/archive/refs/heads/main.zip

下载并放到服务器下

python3.6 ARL-Finger-ADD.py https://127.0.0.1:5003/ admin password

配置ARL

/opt/ARL/app/config.yaml

配置文件根据自己的需求进行配置

https://github.com/TophantTechnology/ARL/wiki/ARL-2.3-%E6%96%B0%E6%B7%BB%E5%8A%A0%E5%8A%9F%E8%83%BD%E8%AF%A6%E7%BB%86%E8%AF%B4%E6%98%8E#%E6%B7%BB%E5%8A%A0%E6%9C%BA%E5%99%A8%E4%BA%BA