mirror of https://github.com/midoks/mdserver-web
parent
f6cfe29956
commit
9e207ad4d3
@ -1 +1 @@ |
||||
{"reqfile_path": "{$WAF_PATH}/html", "retry": {"retry_time": 180, "is_open_global": 0, "retry": 6, "retry_cycle": 60}, "log": true, "scan": {"status": 444, "ps": "\u8fc7\u6ee4\u5e38\u89c1\u626b\u63cf\u6d4b\u8bd5\u5de5\u5177\u7684\u6e17\u900f\u6d4b\u8bd5", "open": true, "reqfile": ""}, "cc": {"status": 444, "ps": "\u8fc7\u8651CC\u653b\u51fb", "limit": 120, "endtime": 300, "open": true, "reqfile": "", "cycle": 60}, "get": {"status": 403, "ps": "\u8fc7\u6ee4uri\u3001uri\u53c2\u6570\u4e2d\u5e38\u89c1sql\u6ce8\u5165\u3001xss\u7b49\u653b\u51fb", "open": true, "reqfile": "get.html"}, "log_save": 30, "user-agent": {"status": 403, "ps": "\u901a\u5e38\u7528\u4e8e\u8fc7\u6ee4\u6d4f\u89c8\u5668\u3001\u8718\u86db\u53ca\u4e00\u4e9b\u81ea\u52a8\u626b\u63cf\u5668", "open": true, "reqfile": "user_agent.html"}, "other": {"status": 403, "ps": "\u5176\u5b83\u975e\u901a\u7528\u8fc7\u6ee4", "reqfile": "other.html"}, "cookie": {"status": 403, "ps": "\u8fc7\u6ee4\u5229\u7528Cookie\u53d1\u8d77\u7684\u6e17\u900f\u653b\u51fb", "open": true, "reqfile": "cookie.html"}, "logs_path": "/www/wwwlogs/waf", "post": {"status": 403, "ps": "\u8fc7\u6ee4POST\u53c2\u6570\u4e2d\u5e38\u89c1sql\u6ce8\u5165\u3001xss\u7b49\u653b\u51fb", "open": true, "reqfile": "post.html"}, "open": true} |
||||
{"reqfile_path": "{$WAF_PATH}/html", "retry": {"retry_time": 180, "is_open_global": 0, "retry": 6, "retry_cycle": 60}, "log": true, "scan": {"status": 444, "ps": "过滤常见扫描测试工具的渗透测试", "open": true, "reqfile": ""}, "cc": {"status": 444, "ps": "过虑CC攻击", "limit": 120, "endtime": 300, "open": true, "reqfile": "safe_js.html", "cycle": 60}, "safe_verify":{"status": 200,"ps": "强制安全校验", "reqfile": "safe_js.html","open": false,"cpu":75,"auto":true,"time":86400 },"get": {"status": 403, "ps": "过滤uri、uri参数中常见sql注入、xss等攻击", "open": true, "reqfile": "get.html"}, "log_save": 30, "user-agent": {"status": 403, "ps": "通常用于过滤浏览器、蜘蛛及一些自动扫描器", "open": true, "reqfile": "user_agent.html"}, "other": {"status": 403, "ps": "其它非通用过滤", "reqfile": "other.html"}, "cookie": {"status": 403, "ps": "过滤利用Cookie发起的渗透攻击", "open": true, "reqfile": "cookie.html"}, "logs_path": "/www/wwwlogs/waf", "post": {"status": 403, "ps": "过滤POST参数中常见sql注入、xss等攻击", "open": true, "reqfile": "post.html"}, "open": true} |
||||
@ -0,0 +1,154 @@ |
||||
<!doctype html> |
||||
<html> |
||||
<head> |
||||
<meta charset="utf-8"> |
||||
<title>OP网站防火墙|安全校验</title> |
||||
<style> |
||||
*{margin:0;padding:0;color:#444} |
||||
.main{width:600px;margin:10% auto;} |
||||
.title{background: #20a53a;color: #fff;font-size: 16px;height: 40px;line-height: 40px;text-align: center;} |
||||
.content{background-color:#f3f7f9; height:280px;border:1px dashed #c6d9b6;padding:20px} |
||||
#change{ |
||||
font-size: 200px; |
||||
text-align: center; |
||||
} |
||||
</style> |
||||
</head> |
||||
|
||||
<body> |
||||
<div class="main"> |
||||
<div class="title">OP网站防火墙|安全校验</div> |
||||
<div class="content"> |
||||
<p id="change">5</p> |
||||
</div> |
||||
<div id="status" style="display: none;">false</div> |
||||
</div> |
||||
</body> |
||||
|
||||
<script type="text/javascript"> |
||||
|
||||
function ajax(type,bool){ |
||||
var xhr = {}; |
||||
if(typeof(type)=='undefined'){ |
||||
xhr.type='HTML'; |
||||
}else{ |
||||
xhr.type=type.toUpperCase(); |
||||
} |
||||
if(typeof(bool)=='undefined'){ |
||||
xhr.async=true; |
||||
}else{ |
||||
xhr.async=bool; |
||||
} |
||||
xhr.url = ''; |
||||
xhr.send = ''; |
||||
xhr.result=null; |
||||
|
||||
xhr.createXHR = function(){ |
||||
try{ |
||||
request = new XMLHttpRequest(); |
||||
if(request.overrideMimeType){ |
||||
request.overrideMimeType('text/html'); |
||||
} |
||||
}catch(e){ |
||||
var v = ['Microsoft.XMLHTTP', 'MSXML.XMLHTTP', 'Microsoft.XMLHTTP', |
||||
'Msxml2.XMLHTTP.7.0', 'Msxml2.XMLHTTP.6.0', 'Msxml2.XMLHTTP.5.0', |
||||
'Msxml2.XMLHTTP.4.0', 'MSXML2.XMLHTTP.3.0', 'MSXML2.XMLHTTP']; |
||||
for(var i=0;i<v.length;i++){ |
||||
try{ |
||||
request = new ActiveXObject(v[i]); |
||||
if(request){return request;} |
||||
}catch(e){continue; |
||||
|
||||
} |
||||
} |
||||
} |
||||
return request; |
||||
} |
||||
|
||||
xhr.XHR = xhr.createXHR(); |
||||
|
||||
xhr.processHandle = function(){ |
||||
if( xhr.XHR.readyState ==4 && xhr.XHR.status==200){ |
||||
if(xhr.type=='HTML'){ |
||||
xhr.result(xhr.XHR.responseText); |
||||
return xhr.XHR.responseText; |
||||
}else if(xhr.type=='JSON'){ |
||||
xhr.result(eval('('+xhr.XHR.responseText+')')); |
||||
return eval('('+xhr.XHR.responseText+')'); |
||||
}else{ |
||||
xhr.result(xhr.XHR.responseXML); |
||||
return xhr.XHR.responseXML; |
||||
} |
||||
} |
||||
}; |
||||
|
||||
xhr.get = function(url,result){ |
||||
//添加回调函数 |
||||
var name ='PHPjs'; |
||||
var r = name + '_' + Math.random().toString().substr(2);//随机 |
||||
|
||||
xhr.url = url+'&'+name+'='+r; |
||||
|
||||
if(result!=null){ |
||||
xhr.XHR.onreadystatechange = xhr.processHandle; |
||||
xhr.result = result; |
||||
} |
||||
if(window.XMLHttpRequest){ |
||||
xhr.XHR.open('GET',xhr.url,xhr.async); |
||||
xhr.XHR.send(null); |
||||
}else{ |
||||
xhr.XHR.open('GET',xhr.url,xhr.async); |
||||
xhr.XHR.send(); |
||||
} |
||||
}; |
||||
|
||||
xhr.post = function(url,send,result){ |
||||
xhr.url = url; |
||||
if(typeof(send) == 'object'){ |
||||
var str = ''; |
||||
for(var pro in send){ |
||||
str +=pro +'='+send[pro]+'&'; |
||||
} |
||||
xhr.send = str.substr(0,str.length-1); |
||||
}else{ |
||||
xhr.send = send; |
||||
} |
||||
if(result!=null){ |
||||
xhr.XHR.onreadystatechange = xhr.processHandle; |
||||
xhr.result = result; |
||||
} |
||||
xhr.XHR.open('POST',url,xhr.async); |
||||
xhr.XHR.setRequestHeader('request-type','ajax'); |
||||
xhr.XHR.setRequestHeader('Content-type','application/x-www-form-urlencoded'); |
||||
xhr.XHR.send(xhr.send); |
||||
} |
||||
return xhr; |
||||
} |
||||
|
||||
|
||||
|
||||
var ok = setInterval(function(){ |
||||
|
||||
ajax('JSON',true).post('/{uri}',{'pass':"ok"},function(data){ |
||||
if (data['status'] == 0){ |
||||
// document.getElementById('status').innerHTML = "ok"; |
||||
location.reload(); |
||||
} |
||||
}); |
||||
|
||||
var id = document.getElementById('change').innerHTML; |
||||
id = id - 1; |
||||
if (id == 0){ |
||||
document.getElementById('change').innerHTML = '稍等'; |
||||
clearInterval(ok); |
||||
if (document.getElementById('status').innerHTML == 'ok'){ |
||||
location.reload(); |
||||
} |
||||
} else { |
||||
document.getElementById('change').innerHTML = id; |
||||
} |
||||
},1000); |
||||
|
||||
</script> |
||||
</html> |
||||
|
||||
@ -1 +1 @@ |
||||
[[[127, 0, 0, 1], [127, 0, 0, 255]]] |
||||
[[[127, 0, 0, 2], [127, 0, 0, 255]]] |
||||
Loading…
Reference in new issue