mirror of https://github.com/midoks/mdserver-web
parent
f6cfe29956
commit
9e207ad4d3
@ -1 +1 @@ |
|||||||
{"reqfile_path": "{$WAF_PATH}/html", "retry": {"retry_time": 180, "is_open_global": 0, "retry": 6, "retry_cycle": 60}, "log": true, "scan": {"status": 444, "ps": "\u8fc7\u6ee4\u5e38\u89c1\u626b\u63cf\u6d4b\u8bd5\u5de5\u5177\u7684\u6e17\u900f\u6d4b\u8bd5", "open": true, "reqfile": ""}, "cc": {"status": 444, "ps": "\u8fc7\u8651CC\u653b\u51fb", "limit": 120, "endtime": 300, "open": true, "reqfile": "", "cycle": 60}, "get": {"status": 403, "ps": "\u8fc7\u6ee4uri\u3001uri\u53c2\u6570\u4e2d\u5e38\u89c1sql\u6ce8\u5165\u3001xss\u7b49\u653b\u51fb", "open": true, "reqfile": "get.html"}, "log_save": 30, "user-agent": {"status": 403, "ps": "\u901a\u5e38\u7528\u4e8e\u8fc7\u6ee4\u6d4f\u89c8\u5668\u3001\u8718\u86db\u53ca\u4e00\u4e9b\u81ea\u52a8\u626b\u63cf\u5668", "open": true, "reqfile": "user_agent.html"}, "other": {"status": 403, "ps": "\u5176\u5b83\u975e\u901a\u7528\u8fc7\u6ee4", "reqfile": "other.html"}, "cookie": {"status": 403, "ps": "\u8fc7\u6ee4\u5229\u7528Cookie\u53d1\u8d77\u7684\u6e17\u900f\u653b\u51fb", "open": true, "reqfile": "cookie.html"}, "logs_path": "/www/wwwlogs/waf", "post": {"status": 403, "ps": "\u8fc7\u6ee4POST\u53c2\u6570\u4e2d\u5e38\u89c1sql\u6ce8\u5165\u3001xss\u7b49\u653b\u51fb", "open": true, "reqfile": "post.html"}, "open": true} |
{"reqfile_path": "{$WAF_PATH}/html", "retry": {"retry_time": 180, "is_open_global": 0, "retry": 6, "retry_cycle": 60}, "log": true, "scan": {"status": 444, "ps": "过滤常见扫描测试工具的渗透测试", "open": true, "reqfile": ""}, "cc": {"status": 444, "ps": "过虑CC攻击", "limit": 120, "endtime": 300, "open": true, "reqfile": "safe_js.html", "cycle": 60}, "safe_verify":{"status": 200,"ps": "强制安全校验", "reqfile": "safe_js.html","open": false,"cpu":75,"auto":true,"time":86400 },"get": {"status": 403, "ps": "过滤uri、uri参数中常见sql注入、xss等攻击", "open": true, "reqfile": "get.html"}, "log_save": 30, "user-agent": {"status": 403, "ps": "通常用于过滤浏览器、蜘蛛及一些自动扫描器", "open": true, "reqfile": "user_agent.html"}, "other": {"status": 403, "ps": "其它非通用过滤", "reqfile": "other.html"}, "cookie": {"status": 403, "ps": "过滤利用Cookie发起的渗透攻击", "open": true, "reqfile": "cookie.html"}, "logs_path": "/www/wwwlogs/waf", "post": {"status": 403, "ps": "过滤POST参数中常见sql注入、xss等攻击", "open": true, "reqfile": "post.html"}, "open": true} |
||||||
@ -0,0 +1,154 @@ |
|||||||
|
<!doctype html> |
||||||
|
<html> |
||||||
|
<head> |
||||||
|
<meta charset="utf-8"> |
||||||
|
<title>OP网站防火墙|安全校验</title> |
||||||
|
<style> |
||||||
|
*{margin:0;padding:0;color:#444} |
||||||
|
.main{width:600px;margin:10% auto;} |
||||||
|
.title{background: #20a53a;color: #fff;font-size: 16px;height: 40px;line-height: 40px;text-align: center;} |
||||||
|
.content{background-color:#f3f7f9; height:280px;border:1px dashed #c6d9b6;padding:20px} |
||||||
|
#change{ |
||||||
|
font-size: 200px; |
||||||
|
text-align: center; |
||||||
|
} |
||||||
|
</style> |
||||||
|
</head> |
||||||
|
|
||||||
|
<body> |
||||||
|
<div class="main"> |
||||||
|
<div class="title">OP网站防火墙|安全校验</div> |
||||||
|
<div class="content"> |
||||||
|
<p id="change">5</p> |
||||||
|
</div> |
||||||
|
<div id="status" style="display: none;">false</div> |
||||||
|
</div> |
||||||
|
</body> |
||||||
|
|
||||||
|
<script type="text/javascript"> |
||||||
|
|
||||||
|
function ajax(type,bool){ |
||||||
|
var xhr = {}; |
||||||
|
if(typeof(type)=='undefined'){ |
||||||
|
xhr.type='HTML'; |
||||||
|
}else{ |
||||||
|
xhr.type=type.toUpperCase(); |
||||||
|
} |
||||||
|
if(typeof(bool)=='undefined'){ |
||||||
|
xhr.async=true; |
||||||
|
}else{ |
||||||
|
xhr.async=bool; |
||||||
|
} |
||||||
|
xhr.url = ''; |
||||||
|
xhr.send = ''; |
||||||
|
xhr.result=null; |
||||||
|
|
||||||
|
xhr.createXHR = function(){ |
||||||
|
try{ |
||||||
|
request = new XMLHttpRequest(); |
||||||
|
if(request.overrideMimeType){ |
||||||
|
request.overrideMimeType('text/html'); |
||||||
|
} |
||||||
|
}catch(e){ |
||||||
|
var v = ['Microsoft.XMLHTTP', 'MSXML.XMLHTTP', 'Microsoft.XMLHTTP', |
||||||
|
'Msxml2.XMLHTTP.7.0', 'Msxml2.XMLHTTP.6.0', 'Msxml2.XMLHTTP.5.0', |
||||||
|
'Msxml2.XMLHTTP.4.0', 'MSXML2.XMLHTTP.3.0', 'MSXML2.XMLHTTP']; |
||||||
|
for(var i=0;i<v.length;i++){ |
||||||
|
try{ |
||||||
|
request = new ActiveXObject(v[i]); |
||||||
|
if(request){return request;} |
||||||
|
}catch(e){continue; |
||||||
|
|
||||||
|
} |
||||||
|
} |
||||||
|
} |
||||||
|
return request; |
||||||
|
} |
||||||
|
|
||||||
|
xhr.XHR = xhr.createXHR(); |
||||||
|
|
||||||
|
xhr.processHandle = function(){ |
||||||
|
if( xhr.XHR.readyState ==4 && xhr.XHR.status==200){ |
||||||
|
if(xhr.type=='HTML'){ |
||||||
|
xhr.result(xhr.XHR.responseText); |
||||||
|
return xhr.XHR.responseText; |
||||||
|
}else if(xhr.type=='JSON'){ |
||||||
|
xhr.result(eval('('+xhr.XHR.responseText+')')); |
||||||
|
return eval('('+xhr.XHR.responseText+')'); |
||||||
|
}else{ |
||||||
|
xhr.result(xhr.XHR.responseXML); |
||||||
|
return xhr.XHR.responseXML; |
||||||
|
} |
||||||
|
} |
||||||
|
}; |
||||||
|
|
||||||
|
xhr.get = function(url,result){ |
||||||
|
//添加回调函数 |
||||||
|
var name ='PHPjs'; |
||||||
|
var r = name + '_' + Math.random().toString().substr(2);//随机 |
||||||
|
|
||||||
|
xhr.url = url+'&'+name+'='+r; |
||||||
|
|
||||||
|
if(result!=null){ |
||||||
|
xhr.XHR.onreadystatechange = xhr.processHandle; |
||||||
|
xhr.result = result; |
||||||
|
} |
||||||
|
if(window.XMLHttpRequest){ |
||||||
|
xhr.XHR.open('GET',xhr.url,xhr.async); |
||||||
|
xhr.XHR.send(null); |
||||||
|
}else{ |
||||||
|
xhr.XHR.open('GET',xhr.url,xhr.async); |
||||||
|
xhr.XHR.send(); |
||||||
|
} |
||||||
|
}; |
||||||
|
|
||||||
|
xhr.post = function(url,send,result){ |
||||||
|
xhr.url = url; |
||||||
|
if(typeof(send) == 'object'){ |
||||||
|
var str = ''; |
||||||
|
for(var pro in send){ |
||||||
|
str +=pro +'='+send[pro]+'&'; |
||||||
|
} |
||||||
|
xhr.send = str.substr(0,str.length-1); |
||||||
|
}else{ |
||||||
|
xhr.send = send; |
||||||
|
} |
||||||
|
if(result!=null){ |
||||||
|
xhr.XHR.onreadystatechange = xhr.processHandle; |
||||||
|
xhr.result = result; |
||||||
|
} |
||||||
|
xhr.XHR.open('POST',url,xhr.async); |
||||||
|
xhr.XHR.setRequestHeader('request-type','ajax'); |
||||||
|
xhr.XHR.setRequestHeader('Content-type','application/x-www-form-urlencoded'); |
||||||
|
xhr.XHR.send(xhr.send); |
||||||
|
} |
||||||
|
return xhr; |
||||||
|
} |
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
var ok = setInterval(function(){ |
||||||
|
|
||||||
|
ajax('JSON',true).post('/{uri}',{'pass':"ok"},function(data){ |
||||||
|
if (data['status'] == 0){ |
||||||
|
// document.getElementById('status').innerHTML = "ok"; |
||||||
|
location.reload(); |
||||||
|
} |
||||||
|
}); |
||||||
|
|
||||||
|
var id = document.getElementById('change').innerHTML; |
||||||
|
id = id - 1; |
||||||
|
if (id == 0){ |
||||||
|
document.getElementById('change').innerHTML = '稍等'; |
||||||
|
clearInterval(ok); |
||||||
|
if (document.getElementById('status').innerHTML == 'ok'){ |
||||||
|
location.reload(); |
||||||
|
} |
||||||
|
} else { |
||||||
|
document.getElementById('change').innerHTML = id; |
||||||
|
} |
||||||
|
},1000); |
||||||
|
|
||||||
|
</script> |
||||||
|
</html> |
||||||
|
|
||||||
@ -1 +1 @@ |
|||||||
[[[127, 0, 0, 1], [127, 0, 0, 255]]] |
[[[127, 0, 0, 2], [127, 0, 0, 255]]] |
||||||
Loading…
Reference in new issue