diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/conf/.aes_key b/openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/.aes_key similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/conf/.aes_key rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/.aes_key diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/conf/.secret b/openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/.secret similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/conf/.secret rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/.secret diff --git a/openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/global.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/global.json new file mode 100644 index 000000000..c473226dd --- /dev/null +++ b/openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/global.json @@ -0,0 +1,173 @@ +{ + "waf": { + "state": "off", + "mode": "protection", + "secret": "" + }, + "redis": { + "state": "off", + "host": "", + "port": 6379, + "password": "", + "ssl": false, + "poolSize": 10 + }, + "ipWhite": { + "state": "on", + "type": "ipWhite", + "action": "allow" + }, + "ipBlack": { + "state": "on", + "code": 403, + "action": "deny", + "type": "ipBlack", + "res": "ip" + }, + "urlWhite": { + "type": "urlWhite", + "state": "on", + "action": "allow" + }, + "urlBlack": { + "type": "urlBlack", + "state": "on", + "code": 403, + "action": "deny" + }, + "uaWhite": { + "type": "uaWhite", + "state": "off", + "action": "allow" + }, + "uaBlack": { + "type": "uaBlack", + "state": "on", + "code": 403, + "action": "deny" + }, + "notFoundCount": { + "state": "on", + "type": "notFoundCount", + "threshold": 30, + "duration": 10, + "action": "deny", + "ipBlock": "on", + "code": 403, + "ipBlockTime": 600 + }, + "methodWhite": { + "type": "methodWhite", + "state": "on", + "code": 444, + "action": "deny" + }, + "bot": { + "state": "on", + "type": "bot", + "uri": "/1pwaf/bot/trap", + "action": "REDIRECT_JS", + "ipBlock": "on", + "ipBlockTime": 600 + }, + "unknownWebsite": { + "state": "on", + "type": "unknownWebsite", + "action": "deny", + "code": 403, + "res": "unknown" + }, + "geoRestrict": { + "state": "off", + "rules": [], + "code": 403, + "action": "deny", + "type": "geoRestrict", + "res": "geo" + }, + "defaultIpBlack": { + "state": "on", + "type": "defaultIpBlack", + "code": 403, + "action": "deny" + }, + "xss": { + "state": "on", + "type": "xss", + "code": 403, + "action": "deny" + }, + "sql": { + "state": "on", + "type": "sql", + "code": 403, + "action": "deny" + }, + "cc": { + "state": "on", + "type": "cc", + "rule": "cc", + "tokenTimeOut": 1800, + "threshold": 100, + "duration": 10, + "action": "deny", + "ipBlock": "on", + "ipBlockTime": 600, + "mode": "uri" + }, + "ccurl": { + "state": "off", + "type": "urlcc", + "action": "deny", + "ipBlock": "on", + "ipBlockTime": 600 + }, + "attackCount": { + "state": "on", + "type": "attackCount", + "threshold": 10, + "duration": 60, + "action": "deny", + "ipBlock": "on", + "ipBlockTime": 3000 + }, + "fileExt": { + "state": "off", + "action": "deny", + "code": 403, + "type": "fileExtCheck" + }, + "cookie": { + "type": "cookie", + "state": "on", + "code": 403, + "action": "deny" + }, + "header": { + "state": "on", + "type": "header", + "code": 403, + "action": "deny" + }, + "defaultUaBlack": { + "type": "defaultUaBlack", + "state": "on", + "code": 403, + "action": "deny" + }, + "defaultUrlBlack": { + "type": "defaultUrlBlack", + "state": "on", + "code": 403, + "action": "deny" + }, + "args": { + "type": "args", + "state": "on", + "code": 403, + "action": "deny" + }, + "cdn": { + "state": "off" + } +} diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/default/monitor.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/monitor.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/default/monitor.json rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/monitor.json diff --git a/openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/siteConfig.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/siteConfig.json new file mode 100644 index 000000000..a489ce00c --- /dev/null +++ b/openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/siteConfig.json @@ -0,0 +1,98 @@ +{ + "waf": { + "state": "on", + "mode": "protection" + }, + "args": { + "state": "on", + "type": "args", + "code": 403, + "action": "deny" + }, + "defaultUaBlack": { + "type": "defaultUaBlack", + "state": "on", + "code": 403, + "action": "deny" + }, + "cookie": { + "state": "on", + "type": "cookie", + "code": 403, + "action": "deny" + }, + "bot": { + "type": "bot", + "state": "on", + "uri": "/1pwaf/bot/trap", + "action": "deny", + "ipBlock": "off", + "ipBlockTime": 600 + }, + "geoRestrict": { + "state": "off", + "rules": [], + "code": 403, + "action": "deny", + "type": "geoRestrict", + "res": "geo" + }, + "xss": { + "state": "on", + "type": "xss", + "code": 403, + "action": "deny" + }, + "sql": { + "state": "on", + "type": "sql", + "code": 403, + "action": "deny" + }, + "cc": { + "state": "on", + "type": "cc", + "rule": "cc", + "tokenTimeOut": 1800, + "threshold": 200, + "duration": 10, + "action": "deny", + "ipBlock": "on", + "ipBlockTime": 600, + "mode": "uri" + }, + "ccurl": { + "state": "on", + "type": "ccurl", + "action": "deny", + "ipBlock": "off", + "ipBlockTime": 600 + }, + "fileExt": { + "state": "off", + "action": "deny", + "code": 403, + "type": "fileExtCheck" + }, + "header": { + "state": "on", + "type": "header", + "code": 403, + "action": "deny" + }, + "defaultUrlBlack": { + "type": "defaultUrlBlack", + "state": "on", + "code": 403, + "action": "deny" + }, + "methodWhite": { + "type": "methodWhite", + "state": "on", + "code": 444, + "action": "deny" + }, + "cdn": { + "state": "off" + } +} diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/conf/sites.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/sites.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/conf/sites.json rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/sites.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/conf/token b/openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/token similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/conf/token rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/token diff --git a/openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/waf.conf b/openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/waf.conf new file mode 100644 index 000000000..7903ec5c4 --- /dev/null +++ b/openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/waf.conf @@ -0,0 +1,14 @@ +lua_shared_dict waf_req_count 10m; +lua_shared_dict waf 50m; +lua_shared_dict waf_block_ip 10m; +lua_shared_dict waf_ip_arr 20m; +lua_shared_dict waf_limit 10m; +lua_shared_dict waf_sql 200m; +lua_shared_dict waf_locks 100k; + +lua_code_cache on; +lua_package_path "/usr/local/openresty/1pwaf/?.lua;/usr/local/openresty/1pwaf/lib/?.lua;;"; +init_by_lua_file /usr/local/openresty/1pwaf/init.lua; +access_by_lua_file /usr/local/openresty/1pwaf/waf.lua; +log_by_lua_file /usr/local/openresty/1pwaf/log_and_traffic.lua; +init_worker_by_lua_file /usr/local/openresty/1pwaf/worker.lua; diff --git a/openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/waf.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/waf.json new file mode 100644 index 000000000..ab7668f0c --- /dev/null +++ b/openresty/1.21.4.3-3-3-focal/1pwaf/data/conf/waf.json @@ -0,0 +1,4 @@ +{ + "name": "1Panel WAF", + "version": "1.0.0" +} \ No newline at end of file diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/default/cc.html b/openresty/1.21.4.3-3-3-focal/1pwaf/data/default/cc.html similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/default/cc.html rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/default/cc.html diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/default/forbidden.html b/openresty/1.21.4.3-3-3-focal/1pwaf/data/default/forbidden.html similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/default/forbidden.html rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/default/forbidden.html diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/default/geo.html b/openresty/1.21.4.3-3-3-focal/1pwaf/data/default/geo.html similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/default/geo.html rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/default/geo.html diff --git a/openresty/1.21.4.3-3-3-focal/1pwaf/data/default/global.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/default/global.json new file mode 100644 index 000000000..c473226dd --- /dev/null +++ b/openresty/1.21.4.3-3-3-focal/1pwaf/data/default/global.json @@ -0,0 +1,173 @@ +{ + "waf": { + "state": "off", + "mode": "protection", + "secret": "" + }, + "redis": { + "state": "off", + "host": "", + "port": 6379, + "password": "", + "ssl": false, + "poolSize": 10 + }, + "ipWhite": { + "state": "on", + "type": "ipWhite", + "action": "allow" + }, + "ipBlack": { + "state": "on", + "code": 403, + "action": "deny", + "type": "ipBlack", + "res": "ip" + }, + "urlWhite": { + "type": "urlWhite", + "state": "on", + "action": "allow" + }, + "urlBlack": { + "type": "urlBlack", + "state": "on", + "code": 403, + "action": "deny" + }, + "uaWhite": { + "type": "uaWhite", + "state": "off", + "action": "allow" + }, + "uaBlack": { + "type": "uaBlack", + "state": "on", + "code": 403, + "action": "deny" + }, + "notFoundCount": { + "state": "on", + "type": "notFoundCount", + "threshold": 30, + "duration": 10, + "action": "deny", + "ipBlock": "on", + "code": 403, + "ipBlockTime": 600 + }, + "methodWhite": { + "type": "methodWhite", + "state": "on", + "code": 444, + "action": "deny" + }, + "bot": { + "state": "on", + "type": "bot", + "uri": "/1pwaf/bot/trap", + "action": "REDIRECT_JS", + "ipBlock": "on", + "ipBlockTime": 600 + }, + "unknownWebsite": { + "state": "on", + "type": "unknownWebsite", + "action": "deny", + "code": 403, + "res": "unknown" + }, + "geoRestrict": { + "state": "off", + "rules": [], + "code": 403, + "action": "deny", + "type": "geoRestrict", + "res": "geo" + }, + "defaultIpBlack": { + "state": "on", + "type": "defaultIpBlack", + "code": 403, + "action": "deny" + }, + "xss": { + "state": "on", + "type": "xss", + "code": 403, + "action": "deny" + }, + "sql": { + "state": "on", + "type": "sql", + "code": 403, + "action": "deny" + }, + "cc": { + "state": "on", + "type": "cc", + "rule": "cc", + "tokenTimeOut": 1800, + "threshold": 100, + "duration": 10, + "action": "deny", + "ipBlock": "on", + "ipBlockTime": 600, + "mode": "uri" + }, + "ccurl": { + "state": "off", + "type": "urlcc", + "action": "deny", + "ipBlock": "on", + "ipBlockTime": 600 + }, + "attackCount": { + "state": "on", + "type": "attackCount", + "threshold": 10, + "duration": 60, + "action": "deny", + "ipBlock": "on", + "ipBlockTime": 3000 + }, + "fileExt": { + "state": "off", + "action": "deny", + "code": 403, + "type": "fileExtCheck" + }, + "cookie": { + "type": "cookie", + "state": "on", + "code": 403, + "action": "deny" + }, + "header": { + "state": "on", + "type": "header", + "code": 403, + "action": "deny" + }, + "defaultUaBlack": { + "type": "defaultUaBlack", + "state": "on", + "code": 403, + "action": "deny" + }, + "defaultUrlBlack": { + "type": "defaultUrlBlack", + "state": "on", + "code": 403, + "action": "deny" + }, + "args": { + "type": "args", + "state": "on", + "code": 403, + "action": "deny" + }, + "cdn": { + "state": "off" + } +} diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/default/ip.html b/openresty/1.21.4.3-3-3-focal/1pwaf/data/default/ip.html similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/default/ip.html rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/default/ip.html diff --git a/openresty/1.21.4.3-3-3-focal/1pwaf/data/default/monitor.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/default/monitor.json new file mode 100644 index 000000000..6bd119205 --- /dev/null +++ b/openresty/1.21.4.3-3-3-focal/1pwaf/data/default/monitor.json @@ -0,0 +1,30 @@ +{ + "state": "off", + "exclude": { + "extensions": [ + "png", + "gif", + "jpg", + "css", + "js", + "svg", + "jpeg", + "woff", + "woff2", + "bmp", + "swf", + "icon", + "ttf", + "eot" + ], + "status": [], + "uri": [ + "/favicon.ico" + ], + "ua": [], + "ip": [] + }, + "log": { + "maxDay": 180 + } +} \ No newline at end of file diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/default/unknown.html b/openresty/1.21.4.3-3-3-focal/1pwaf/data/default/unknown.html similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/default/unknown.html rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/default/unknown.html diff --git a/openresty/1.21.4.3-3-3-focal/1pwaf/data/html/5s.html b/openresty/1.21.4.3-3-3-focal/1pwaf/data/html/5s.html new file mode 100644 index 000000000..392bf66c4 --- /dev/null +++ b/openresty/1.21.4.3-3-3-focal/1pwaf/data/html/5s.html @@ -0,0 +1,21 @@ + + + +5s + + + +
+
正在验证...
+
验证成功
+
+
+ + + diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/html/5s.js b/openresty/1.21.4.3-3-3-focal/1pwaf/data/html/5s.js similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/html/5s.js rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/html/5s.js diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/html/cc.html b/openresty/1.21.4.3-3-3-focal/1pwaf/data/html/cc.html similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/html/cc.html rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/html/cc.html diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/html/forbidden.html b/openresty/1.21.4.3-3-3-focal/1pwaf/data/html/forbidden.html similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/html/forbidden.html rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/html/forbidden.html diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/html/geo.html b/openresty/1.21.4.3-3-3-focal/1pwaf/data/html/geo.html similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/html/geo.html rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/html/geo.html diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/html/ip.html b/openresty/1.21.4.3-3-3-focal/1pwaf/data/html/ip.html similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/html/ip.html rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/html/ip.html diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/html/redirect.html b/openresty/1.21.4.3-3-3-focal/1pwaf/data/html/redirect.html similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/html/redirect.html rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/html/redirect.html diff --git a/openresty/1.21.4.3-3-3-focal/1pwaf/data/html/slide.html b/openresty/1.21.4.3-3-3-focal/1pwaf/data/html/slide.html new file mode 100644 index 000000000..6ac7d7596 --- /dev/null +++ b/openresty/1.21.4.3-3-3-focal/1pwaf/data/html/slide.html @@ -0,0 +1,26 @@ + + + +滑动认证 + + + +
+
+
+
+
+
+
+ + + diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/html/slide.js b/openresty/1.21.4.3-3-3-focal/1pwaf/data/html/slide.js similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/html/slide.js rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/html/slide.js diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/html/unknown.html b/openresty/1.21.4.3-3-3-focal/1pwaf/data/html/unknown.html similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/html/unknown.html rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/html/unknown.html diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/acl.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/acl.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/acl.json rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/acl.json diff --git a/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/args.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/args.json new file mode 100644 index 000000000..60a5fa6af --- /dev/null +++ b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/args.json @@ -0,0 +1,157 @@ +{ + "rules": [ + { + "state": "on", + "name": "sqlInject1", + "rule": "select.+(from|limit)", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject2", + "rule": "(?:(union(.*?)select))", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject3", + "rule": "having|rongjitest", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject4", + "rule": "sleep\\((\\s*)(\\d*)(\\s*)\\)", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject5", + "rule": "benchmark\\((.*)\\,(.*)\\)", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject6", + "rule": "group\\s+by.+\\(", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject7", + "rule": "(?:from\\W+information_schema\\W)", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject8", + "rule": "(?:(?:current_)user|database|schema|connection_id)\\s*\\(", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject9", + "rule": "into(\\s+)+(?:dump|out)file\\s*", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject10", + "rule": "\\s+(or|xor|and)\\s+.*(=|<|>|'|\")", + "type": "sqlInject" + }, + { + "state": "on", + "name": "args1", + "rule": "xwork.MethodAccessor", + "type": "args", + "description": "Struts 恶意参数过滤" + }, + { + "state": "on", + "name": "args2", + "rule": "xwork\\.MethodAccessor", + "type": "args", + "description": "Struts 恶意参数过滤" + }, + { + "state": "on", + "name": "oneWordTrojan1", + "rule": "(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\(", + "type": "oneWordTrojan" + }, + { + "state": "on", + "name": "oneWordTrojan2", + "rule": "\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[", + "type": "oneWordTrojan" + }, + { + "state": "on", + "name": "protocolFilter1", + "rule": "(gopher|doc|php|glob|file|phar|zlib|ftp|ldap|dict|ogg|data)\\:\\/", + "type": "protocolFilter", + "description": "协议过滤" + }, + { + "state": "on", + "name": "dirFilter1", + "rule": "(?:etc\\/\\W*passwd)", + "type": "dirFilter" + }, + { + "state": "on", + "name": "dirFilter2", + "rule": "java\\.lang", + "type": "dirFilter" + }, + { + "state": "on", + "name": "dirFilter3", + "rule": "(?:etc\\/\\W*shadow)", + "type": "dirFilter" + }, + { + "state": "on", + "name": "dirFilter4", + "rule": "(?:bin\\/\\W*sh)", + "type": "dirFilter" + }, + { + "state": "on", + "name": "xss1", + "rule": "\\<(iframe|script|body|img|layer|div|meta|style|base|object|input)", + "type": "xss" + }, + { + "state": "on", + "name": "xss2", + "rule": "(onmouseover|onerror|onload)\\=", + "type": "xss" + }, + { + "state": "on", + "name": "xss3", + "rule": "base64_decode\\(", + "type": "xss" + }, + { + "state": "on", + "name": "webshell1", + "rule": "/shell?cd+/tmp;\\s*rm+-rf\\+\\*;\\s*wget", + "type": "webshell" + }, + { + "state": "on", + "name": "phpExec1", + "rule": "/systembc/password.php", + "type": "phpExec" + }, + { + "state": "on", + "name": "scannerFilter1", + "rule": "(Acunetix-Aspect|Acunetix-Aspect-Password|Acunetix-Aspect-Queries|X-WIPP|X-RequestManager-Memo|X-Request-Memo|X-Scan-Memo)", + "type": "scannerFilter" + } + ] +} \ No newline at end of file diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/cdn.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/cdn.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/cdn.json rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/cdn.json diff --git a/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/cookie.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/cookie.json new file mode 100644 index 000000000..147a05eec --- /dev/null +++ b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/cookie.json @@ -0,0 +1,138 @@ +{ + "rules": [ + { + "state": "on", + "name": "dirFilter1", + "rule": "\\.\\./", + "type": "dirFilter" + }, + { + "state": "on", + "name": "dirFilter2", + "rule": "\\:\\$", + "type": "dirFilter" + }, + { + "state": "on", + "name": "dirFilter3", + "rule": "\\$\\{", + "type": "dirFilter" + }, + { + "state": "on", + "name": "dirFilter4", + "rule": "(?:etc\\/\\W*passwd)", + "type": "dirFilter" + }, + { + "state": "on", + "name": "dirFilter5", + "rule": "java\\.lang", + "type": "dirFilter" + }, + { + "state": "on", + "name": "sqlInject1", + "rule": "select.+(from|limit)", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject2", + "rule": "(?:(union(.*?)select))", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject3", + "rule": "having|rongjitest", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject4", + "rule": "sleep\\((\\s*)(\\d*)(\\s*)\\)", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject5", + "rule": "benchmark\\((.*)\\,(.*)\\)", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject6", + "rule": "group\\s+by.+\\(", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject7", + "rule": "(?:from\\W+information_schema\\W)", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject8", + "rule": "(?:(?:current_)user|database|schema|connection_id)\\s*\\(", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject9", + "rule": "into(\\s+)+(?:dump|out)file\\s*", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject10", + "rule": "\\s+(or|xor|and)\\s+.*(=|<|>|'|\")", + "type": "sqlInject" + }, + { + "state": "on", + "name": "args1", + "rule": "xwork.MethodAccessor", + "type": "args", + "description": "Struts 恶意参数过滤" + }, + { + "state": "on", + "name": "args2", + "rule": "xwork\\.MethodAccessor", + "type": "args", + "description": "Struts 恶意参数过滤" + }, + { + "state": "on", + "name": "oneWordTrojan1", + "rule": "(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\(", + "type": "oneWordTrojan" + }, + { + "state": "on", + "name": "oneWordTrojan2", + "rule": "\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[", + "type": "oneWordTrojan" + }, + { + "state": "on", + "name": "protocolFilter1", + "rule": "(gopher|doc|php|glob|file|phar|zlib|ftp|ldap|dict|ogg|data)\\:\\/", + "type": "protocolFilter" + }, + { + "state":"on", + "name":"scannerFilter1", + "rule":"(CustomCookie|acunetixCookie)", + "type": "scannerFilter" + }, + { + "state": "on", + "name": "xss1", + "rule": "base64_decode\\(", + "type": "xss" + } + ] +} \ No newline at end of file diff --git a/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/defaultUaBlack.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/defaultUaBlack.json new file mode 100644 index 000000000..b5b984b8f --- /dev/null +++ b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/defaultUaBlack.json @@ -0,0 +1,10 @@ +{ + "rules": [ + { + "state": "on", + "name": "uaBlock1", + "rule": "HTTrack|Apache-HttpClient|harvest|audit|dirbuster|pangolin|nmap|sqln|hydra|Parser|libwww|BBBike|sqlmap|w3af|owasp|Nikto|fimap|havij|zmeu|BabyKrokodil|netsparker|httperf| SF/", + "type": "scannerFilter" + } + ] +} \ No newline at end of file diff --git a/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/defaultUrlBlack.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/defaultUrlBlack.json new file mode 100644 index 000000000..56c775d76 --- /dev/null +++ b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/defaultUrlBlack.json @@ -0,0 +1,196 @@ +{ + "rules": [ + { + "state": "on", + "rule": "\\.(htaccess|mysql_history|bash_history|DS_Store|git|idea|user\\.ini)", + "name": "dirFilter1", + "type": "dirFilter" + }, + { + "state": "on", + "rule": "\\.(bak|inc|old|mdb|sql|backup|java|class)$", + "name": "dirFilter2", + "type": "dirFilter" + }, + { + "state": "on", + "rule": "^/(vhost|bbs|host|wwwroot|www|site|root|backup|data|ftp|db|admin|website|web).*\\.(rar|sql|zip|tar\\.gz|tar)$", + "name": "dirFilter3", + "type": "dirFilter" + }, + { + "state": "on", + "rule": "java\\.lang", + "name": "dirFilter4", + "type": "dirFilter" + }, + { + "state": "on", + "name": "dirFilter5", + "rule": "(?:etc\\/\\W*passwd)", + "type": "dirFilter" + }, + { + "state": "on", + "name": "dirFilter6", + "rule": "(?:bin\\/\\W*sh)", + "type": "dirFilter" + }, + { + "state": "on", + "rule": "/(hack|shell|spy|phpspy)\\.php$", + "name": "phpExec1", + "type": "phpExec" + }, + { + "state": "on", + "rule": "/(attachments|upimg|images|css|uploadfiles|html|uploads|templets|static|template|data|inc|forumdata|upload|includes|cache|avatar)/(\\\\w+).(php|jsp)", + "name": "phpExec2", + "type": "phpExec" + }, + { + "state": "on", + "rule": "(?:phpMyAdmin2|phpMyAdmin|phpmyadmin|dbadmin|pma|myadmin|admin|mysql)/scripts/setup%.php", + "name": "phpExec3", + "type": "phpExec" + }, + { + "state": "on", + "rule": "(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\(", + "name": "oneWordTrojan1", + "type": "oneWordTrojan" + }, + { + "state": "on", + "rule": "(?:(union(.*?)select))", + "name": "sqlInject1", + "type": "sqlInject" + }, + { + "state": "on", + "rule": "(phpmyadmin|jmx-console|jmxinvokerservlet)", + "name": "appFilter1", + "type": "appFilter" + }, + { + "state": "on", + "rule": "wp-includes/wlwmanifest.xml", + "name": "appFilter2", + "type": "appFilter" + }, + { + "state": "on", + "rule": "die(@md5(HelloThinkCMF))", + "name": "appFilter3", + "type": "appFilter" + }, + { + "state": "on", + "rule": "/boaform/admin/formLogin", + "name": "appFilter4", + "type": "appFilter" + }, + { + "state": "on", + "rule": "/password_change.cgi", + "name": "appFilter5", + "type": "appFilter" + }, + { + "state": "on", + "rule": "/service/extdirect", + "name": "appFilter6", + "type": "appFilter" + }, + { + "state": "on", + "rule": "/api/jsonws/invoke", + "name": "appFilter7", + "type": "appFilter" + }, + { + "state": "on", + "rule": "/jars/upload", + "name": "appFilter8", + "type": "appFilter" + }, + { + "state": "on", + "rule": "/example/tree/a/search", + "name": "appFilter9", + "type": "appFilter" + }, + { + "state": "on", + "rule": "/actuator/gateway/routes/hacktest", + "name": "appFilter10", + "type": "appFilter" + }, + { + "state": "on", + "rule": "/api/v1/method.callAnon/getPasswordPolicy", + "name": "appFilter11", + "type": "appFilter" + }, + { + "state": "on", + "rule": "/functionRouter", + "name": "appFilter12", + "type": "appFilter" + }, + { + "state": "on", + "rule": "/uploadfiles/apache.php.jpeg", + "name": "appFilter14", + "type": "appFilter" + }, + { + "state": "on", + "rule": "/xxx/..;/admin/", + "name": "appFilter15", + "type": "appFilter" + }, + { + "state": "on", + "rule": "/dvwa/js/dvwaPage.js", + "name": "appFilter16", + "type": "appFilter" + }, + { + "state": "on", + "rule": "/api/index.php/v1/config/application", + "name": "appFilter17", + "type": "appFilter" + }, + { + "state": "on", + "rule": "/WEB-INF/web.xml", + "name": "appFilter18", + "type": "appFilter" + }, + { + "state": "on", + "rule": "/rest/tinymce/1/macro/preview", + "name": "appFilter19", + "type": "appFilter" + }, + { + "state": "on", + "rule": "/pages/doenterpagevariables.action", + "name": "appFilter20", + "type": "appFilter" + }, + { + "state": "on", + "rule": "/service/rest/beta/repositories/go/group", + "name": "appFilter21", + "type": "appFilter" + }, + { + "state": "on", + "rule": "/dvwa/js/add_event_listeners.js", + "name": "appFilter22", + "type": "appFilter" + } + ] +} \ No newline at end of file diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/fileExt.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/fileExt.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/fileExt.json rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/fileExt.json diff --git a/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/header.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/header.json new file mode 100644 index 000000000..c49c28f73 --- /dev/null +++ b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/header.json @@ -0,0 +1,28 @@ +{ + "rules": [ + { + "state": "on", + "name": "appFilter1", + "rule": "TomcatBypass|Command|Base64", + "type": "appFilter" + }, + { + "state": "on", + "name": "appFilter2", + "rule": "j\\S*ndi\\S*:\\S*(?:dap|dns)\\S+", + "type": "appFilter" + }, + { + "state": "on", + "name": "appFilter3", + "rule": "(?:etc\\/\\W*passwd)", + "type": "appFilter" + }, + { + "state": "on", + "name": "scannerFilter1", + "rule": "(/acunetix-wvs-test-for-some-inexistent-file|netsparker|acunetix_wvs_security_test|AppScan|XSS@HERE)", + "type": "scannerFilter" + } + ] +} \ No newline at end of file diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/ipBlack.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/ipBlack.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/ipBlack.json rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/ipBlack.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/ipWhite.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/ipWhite.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/ipWhite.json rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/ipWhite.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/methodWhite.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/methodWhite.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/methodWhite.json rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/methodWhite.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/post.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/post.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/post.json rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/post.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/uaBlack.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/uaBlack.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/uaBlack.json rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/uaBlack.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/uaWhite.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/uaWhite.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/uaWhite.json rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/uaWhite.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/urlBlack.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/urlBlack.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/urlBlack.json rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/urlBlack.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/urlWhite.json b/openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/urlWhite.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/urlWhite.json rename to openresty/1.21.4.3-3-3-focal/1pwaf/data/rules/urlWhite.json diff --git a/openresty/1.21.4.3-3-3-focal/conf/conf.d/00.default.conf b/openresty/1.21.4.3-3-3-focal/conf/conf.d/00.default.conf new file mode 100644 index 000000000..aa768b259 --- /dev/null +++ b/openresty/1.21.4.3-3-3-focal/conf/conf.d/00.default.conf @@ -0,0 +1,18 @@ +map "" $empty { + default ""; +} + +server +{ + listen 80; + listen 443 ssl http2; + server_name _; + + ssl_ciphers aNULL; + ssl_certificate data:$empty; + ssl_certificate_key data:$empty; + ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3; + + index 404.html; + root /usr/share/nginx/html; +} \ No newline at end of file diff --git a/openresty/1.25.3.2-0-1-focal/conf/default/default.conf b/openresty/1.21.4.3-3-3-focal/conf/conf.d/default.conf similarity index 100% rename from openresty/1.25.3.2-0-1-focal/conf/default/default.conf rename to openresty/1.21.4.3-3-3-focal/conf/conf.d/default.conf diff --git a/openresty/1.25.3.2-0-1-focal/conf/fastcgi-php.conf b/openresty/1.21.4.3-3-3-focal/conf/fastcgi-php.conf similarity index 100% rename from openresty/1.25.3.2-0-1-focal/conf/fastcgi-php.conf rename to openresty/1.21.4.3-3-3-focal/conf/fastcgi-php.conf diff --git a/openresty/1.25.3.2-0-1-focal/conf/fastcgi_params b/openresty/1.21.4.3-3-3-focal/conf/fastcgi_params similarity index 100% rename from openresty/1.25.3.2-0-1-focal/conf/fastcgi_params rename to openresty/1.21.4.3-3-3-focal/conf/fastcgi_params diff --git a/openresty/1.25.3.2-0-1-focal/conf/mime.types b/openresty/1.21.4.3-3-3-focal/conf/mime.types similarity index 100% rename from openresty/1.25.3.2-0-1-focal/conf/mime.types rename to openresty/1.21.4.3-3-3-focal/conf/mime.types diff --git a/openresty/1.21.4.3-3-3-focal/conf/nginx.conf b/openresty/1.21.4.3-3-3-focal/conf/nginx.conf new file mode 100644 index 000000000..4a5f3673e --- /dev/null +++ b/openresty/1.21.4.3-3-3-focal/conf/nginx.conf @@ -0,0 +1,43 @@ +user root; +worker_processes auto; +error_log /var/log/nginx/error.log notice; +error_log /dev/stdout notice; +pid /var/run/nginx.pid; + +events { + worker_connections 1024; +} + +http { + include mime.types; + default_type application/octet-stream; + log_format main '$remote_addr - $remote_user [$time_local] "$request" ' + '$status $body_bytes_sent "$http_referer" ' + '"$http_user_agent" "$http_x_forwarded_for"'; + server_tokens off; + access_log /var/log/nginx/access.log main; + access_log /dev/stdout main; + sendfile on; + + server_names_hash_bucket_size 512; + client_header_buffer_size 32k; + client_max_body_size 50m; + keepalive_timeout 60; + keepalive_requests 100000; + + gzip on; + gzip_min_length 1k; + gzip_buffers 4 16k; + gzip_http_version 1.1; + gzip_comp_level 2; + gzip_types text/plain application/javascript application/x-javascript text/javascript text/css application/xml; + gzip_vary on; + gzip_proxied expired no-cache no-store private auth; + gzip_disable "MSIE [1-6]\."; + + limit_conn_zone $binary_remote_addr zone=perip:10m; + limit_conn_zone $server_name zone=perserver:10m; + + include /usr/local/openresty/nginx/conf/conf.d/*.conf; + include /usr/local/openresty/1pwaf/data/conf/waf.conf; +} \ No newline at end of file diff --git a/openresty/1.21.4.3-3-3-focal/docker-compose.yml b/openresty/1.21.4.3-3-3-focal/docker-compose.yml new file mode 100644 index 000000000..bd44da1a1 --- /dev/null +++ b/openresty/1.21.4.3-3-3-focal/docker-compose.yml @@ -0,0 +1,19 @@ +services: + openresty: + image: 1panel/openresty:1.21.4.3-3-3-focal + container_name: ${CONTAINER_NAME} + restart: always + network_mode: host + volumes: + - ./conf/nginx.conf:/usr/local/openresty/nginx/conf/nginx.conf + - ./conf/fastcgi_params:/usr/local/openresty/nginx/conf/fastcgi_params + - ./conf/fastcgi-php.conf:/usr/local/openresty/nginx/conf/fastcgi-php.conf + - ./conf/mime.types:/usr/local/openresty/nginx/conf/mime.types + - ./log:/var/log/nginx + - ./conf/conf.d:/usr/local/openresty/nginx/conf/conf.d/ + - ./www:/www + - ./root:/usr/share/nginx/html + - /etc/localtime:/etc/localtime + - ./1pwaf/data:/usr/local/openresty/1pwaf/data + labels: + createdBy: "Apps" diff --git a/openresty/1.25.3.2-0-1-focal/root/404.html b/openresty/1.21.4.3-3-3-focal/root/404.html similarity index 100% rename from openresty/1.25.3.2-0-1-focal/root/404.html rename to openresty/1.21.4.3-3-3-focal/root/404.html diff --git a/openresty/1.25.3.2-0-1-focal/root/index.html b/openresty/1.21.4.3-3-3-focal/root/index.html similarity index 100% rename from openresty/1.25.3.2-0-1-focal/root/index.html rename to openresty/1.21.4.3-3-3-focal/root/index.html diff --git a/openresty/1.25.3.2-0-1-focal/root/stop/index.html b/openresty/1.21.4.3-3-3-focal/root/stop/index.html similarity index 100% rename from openresty/1.25.3.2-0-1-focal/root/stop/index.html rename to openresty/1.21.4.3-3-3-focal/root/stop/index.html diff --git a/openresty/1.21.4.3-3-3-focal/scripts/init.sh b/openresty/1.21.4.3-3-3-focal/scripts/init.sh new file mode 100644 index 000000000..dd1465ed3 --- /dev/null +++ b/openresty/1.21.4.3-3-3-focal/scripts/init.sh @@ -0,0 +1,9 @@ +#!/bin/bash + +source ./.env + +sed -i -E "s/(listen[[:space:]]+)(80)([[:space:]]*;)/\1${PANEL_APP_PORT_HTTP}\3/" conf/conf.d/00.default.conf +sed -i -E "s/(listen[[:space:]]+)(443)([[:space:]]+ssl[[:space:]]+http2;)/\1${PANEL_APP_PORT_HTTPS}\3/" conf/conf.d/00.default.conf + +sed -i -E "s/(listen[[:space:]]+)(80)([[:space:]]*;)/\1${PANEL_APP_PORT_HTTP}\3/" conf/conf.d/default.conf + diff --git a/openresty/1.25.3.2-0-1-focal/build/tmp/ngx_brotli.zip b/openresty/1.25.3.2-0-1-focal/build/tmp/ngx_brotli.zip deleted file mode 100644 index 3117ff3ca..000000000 Binary files a/openresty/1.25.3.2-0-1-focal/build/tmp/ngx_brotli.zip and /dev/null differ diff --git a/openresty/1.25.3.2-0-1-focal/.env b/openresty/1.27.1.1-1-focal/.env similarity index 100% rename from openresty/1.25.3.2-0-1-focal/.env rename to openresty/1.27.1.1-1-focal/.env diff --git a/openresty/1.25.3.2-0-1-focal/build/tmp/pre.sh b/openresty/1.27.1.1-1-focal/1pwaf/data/conf/.aes_key similarity index 100% rename from openresty/1.25.3.2-0-1-focal/build/tmp/pre.sh rename to openresty/1.27.1.1-1-focal/1pwaf/data/conf/.aes_key diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/conf/.secret b/openresty/1.27.1.1-1-focal/1pwaf/data/conf/.secret new file mode 100644 index 000000000..e69de29bb diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/conf/global.json b/openresty/1.27.1.1-1-focal/1pwaf/data/conf/global.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/conf/global.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/conf/global.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/conf/monitor.json b/openresty/1.27.1.1-1-focal/1pwaf/data/conf/monitor.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/conf/monitor.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/conf/monitor.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/conf/siteConfig.json b/openresty/1.27.1.1-1-focal/1pwaf/data/conf/siteConfig.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/conf/siteConfig.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/conf/siteConfig.json diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/conf/sites.json b/openresty/1.27.1.1-1-focal/1pwaf/data/conf/sites.json new file mode 100644 index 000000000..e69de29bb diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/conf/token b/openresty/1.27.1.1-1-focal/1pwaf/data/conf/token new file mode 100644 index 000000000..e69de29bb diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/conf/waf.conf b/openresty/1.27.1.1-1-focal/1pwaf/data/conf/waf.conf similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/conf/waf.conf rename to openresty/1.27.1.1-1-focal/1pwaf/data/conf/waf.conf diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/conf/waf.json b/openresty/1.27.1.1-1-focal/1pwaf/data/conf/waf.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/conf/waf.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/conf/waf.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/db/global/default.db b/openresty/1.27.1.1-1-focal/1pwaf/data/db/global/default.db similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/db/global/default.db rename to openresty/1.27.1.1-1-focal/1pwaf/data/db/global/default.db diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/default/app/Halo.json b/openresty/1.27.1.1-1-focal/1pwaf/data/default/app/Halo.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/default/app/Halo.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/default/app/Halo.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/default/app/WordPress.json b/openresty/1.27.1.1-1-focal/1pwaf/data/default/app/WordPress.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/default/app/WordPress.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/default/app/WordPress.json diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/default/cc.html b/openresty/1.27.1.1-1-focal/1pwaf/data/default/cc.html new file mode 100644 index 000000000..641a59caa --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/default/cc.html @@ -0,0 +1,75 @@ + + + + + + +请求拦截 + + + + +
+
请求频率太高 已被拦截
+
+ +
+ 由 + 1Panel + 提供防护 +
+ + + + diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/default/forbidden.html b/openresty/1.27.1.1-1-focal/1pwaf/data/default/forbidden.html new file mode 100644 index 000000000..6c056e0c6 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/default/forbidden.html @@ -0,0 +1,75 @@ + + + + + + +请求拦截 + + + + +
+
请求携带恶意参数 已被拦截
+
+ +
+ 由 + 1Panel + 提供防护 +
+ + + + diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/default/geo.html b/openresty/1.27.1.1-1-focal/1pwaf/data/default/geo.html new file mode 100644 index 000000000..7f7ff0b98 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/default/geo.html @@ -0,0 +1,75 @@ + + + + + + +地区拦截 + + + + +
+
你的区域被禁止访问
+
+ +
+ 由 + 1Panel + 提供防护 +
+ + + + diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/default/global.json b/openresty/1.27.1.1-1-focal/1pwaf/data/default/global.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/default/global.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/default/global.json diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/default/ip.html b/openresty/1.27.1.1-1-focal/1pwaf/data/default/ip.html new file mode 100644 index 000000000..5d7c3ef77 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/default/ip.html @@ -0,0 +1,75 @@ + + + + + + +黑名单拦截 + + + + +
+
很抱歉，您的 IP 被禁止访问
+
+ +
+ 由 + 1Panel + 提供防护 +
+ + + + diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/default/monitor.json b/openresty/1.27.1.1-1-focal/1pwaf/data/default/monitor.json new file mode 100644 index 000000000..6bd119205 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/default/monitor.json @@ -0,0 +1,30 @@ +{ + "state": "off", + "exclude": { + "extensions": [ + "png", + "gif", + "jpg", + "css", + "js", + "svg", + "jpeg", + "woff", + "woff2", + "bmp", + "swf", + "icon", + "ttf", + "eot" + ], + "status": [], + "uri": [ + "/favicon.ico" + ], + "ua": [], + "ip": [] + }, + "log": { + "maxDay": 180 + } +} \ No newline at end of file diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/default/unknown.html b/openresty/1.27.1.1-1-focal/1pwaf/data/default/unknown.html new file mode 100644 index 000000000..6c39f4309 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/default/unknown.html @@ -0,0 +1,75 @@ + + + + + + +网站不存在 + + + + +
+
网站不存在，请检查域名
+
+ +
+ 由 + 1Panel + 提供防护 +
+ + + + diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/geo/BlackIP.mmdb b/openresty/1.27.1.1-1-focal/1pwaf/data/geo/BlackIP.mmdb similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/geo/BlackIP.mmdb rename to openresty/1.27.1.1-1-focal/1pwaf/data/geo/BlackIP.mmdb diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/geo/GeoIP.mmdb b/openresty/1.27.1.1-1-focal/1pwaf/data/geo/GeoIP.mmdb similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/geo/GeoIP.mmdb rename to openresty/1.27.1.1-1-focal/1pwaf/data/geo/GeoIP.mmdb diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/geo/SpiderIP.mmdb b/openresty/1.27.1.1-1-focal/1pwaf/data/geo/SpiderIP.mmdb similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/geo/SpiderIP.mmdb rename to openresty/1.27.1.1-1-focal/1pwaf/data/geo/SpiderIP.mmdb diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/html/5s.html b/openresty/1.27.1.1-1-focal/1pwaf/data/html/5s.html similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/html/5s.html rename to openresty/1.27.1.1-1-focal/1pwaf/data/html/5s.html diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/html/5s.js b/openresty/1.27.1.1-1-focal/1pwaf/data/html/5s.js new file mode 100644 index 000000000..d20c2a8fb --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/html/5s.js @@ -0,0 +1,24 @@ +window.onload = function () { + setTimeout(function () { + showSuccess(); + verifySucc(); + }, 5000); + + function showSuccess() { + document.getElementById("loadingText").style.display = "none"; + document.getElementById("loadingSuccess").style.display = "block"; + document.querySelector(".loadingSpinner").style.display = "none"; + } + + function verifySucc() { + let xhr = new XMLHttpRequest(); + xhr.onreadystatechange = function () { + if (xhr.readyState === 4 && xhr.status === 200) { + window.location.reload(); + } + }; + const requestUrl = "%s-%s-%s-%s-%s-"; + xhr.open("GET", requestUrl, true); + xhr.send(); + } +} \ No newline at end of file diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/html/cc.html b/openresty/1.27.1.1-1-focal/1pwaf/data/html/cc.html new file mode 100644 index 000000000..641a59caa --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/html/cc.html @@ -0,0 +1,75 @@ + + + + + + +请求拦截 + + + + +
+
请求频率太高 已被拦截
+
+ +
+ 由 + 1Panel + 提供防护 +
+ + + + diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/html/forbidden.html b/openresty/1.27.1.1-1-focal/1pwaf/data/html/forbidden.html new file mode 100644 index 000000000..6c056e0c6 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/html/forbidden.html @@ -0,0 +1,75 @@ + + + + + + +请求拦截 + + + + +
+
请求携带恶意参数 已被拦截
+
+ +
+ 由 + 1Panel + 提供防护 +
+ + + + diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/html/geo.html b/openresty/1.27.1.1-1-focal/1pwaf/data/html/geo.html new file mode 100644 index 000000000..7f7ff0b98 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/html/geo.html @@ -0,0 +1,75 @@ + + + + + + +地区拦截 + + + + +
+
你的区域被禁止访问
+
+ +
+ 由 + 1Panel + 提供防护 +
+ + + + diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/html/ip.html b/openresty/1.27.1.1-1-focal/1pwaf/data/html/ip.html new file mode 100644 index 000000000..5d7c3ef77 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/html/ip.html @@ -0,0 +1,75 @@ + + + + + + +黑名单拦截 + + + + +
+
很抱歉，您的 IP 被禁止访问
+
+ +
+ 由 + 1Panel + 提供防护 +
+ + + + diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/html/redirect.html b/openresty/1.27.1.1-1-focal/1pwaf/data/html/redirect.html new file mode 100644 index 000000000..64c776b47 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/html/redirect.html @@ -0,0 +1,24 @@ + + + + 网站防火墙 + + + +
+
网站防火墙
+
+

您的请求不合法，已被拒绝

+
+
此网站防护来自 1Panel
+
+ + diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/html/slide.html b/openresty/1.27.1.1-1-focal/1pwaf/data/html/slide.html similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/html/slide.html rename to openresty/1.27.1.1-1-focal/1pwaf/data/html/slide.html diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/html/slide.js b/openresty/1.27.1.1-1-focal/1pwaf/data/html/slide.js new file mode 100644 index 000000000..a8f92789b --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/html/slide.js @@ -0,0 +1,82 @@ +window.onload = function () { + (function () { + const dragContainer = document.getElementById("dragContainer"); + const dragBg = document.getElementById("dragBg"); + const dragText = document.getElementById("dragText"); + const dragHandler = document.getElementById("dragHandler"); + const maxHandleOffset = dragContainer.clientWidth - dragHandler.clientWidth; + let isVertifySucc = false; + + initDrag(); + + function initDrag() { + dragText.textContent = "拖动滑块验证"; + dragHandler.addEventListener("mousedown", onDragStart); + dragHandler.addEventListener("touchstart", onDragStart); + } + + function onDragStart(a) { + a.preventDefault(); + if (a.type === "mousedown" || (a.type === "touchstart" && a.touches.length === 1)) { + document.addEventListener("mousemove", onDragMove); + document.addEventListener("touchmove", onDragMove); + document.addEventListener("mouseup", onDragEnd); + document.addEventListener("touchend", onDragEnd); + } + } + + function onDragMove(a) { + let clientX; + if (a.type === "mousemove") { + clientX = a.clientX; + } else if (a.type === "touchmove" && a.touches.length === 1) { + clientX = a.touches[0].clientX; + } + let containerOffsetX = clientX - dragContainer.getBoundingClientRect().left; + let left = containerOffsetX - dragHandler.clientWidth / 2; + if (left < 0) { + left = 0; + } else if (left > maxHandleOffset) { + left = maxHandleOffset; + } + dragHandler.style.left = left + "px"; + dragBg.style.width = dragHandler.style.left; + } + + function onDragEnd() { + document.removeEventListener("mousemove", onDragMove); + document.removeEventListener("touchmove", onDragMove); + document.removeEventListener("mouseup", onDragEnd); + document.removeEventListener("touchend", onDragEnd); + + if (!isVertifySucc) { + let left = dragHandler.offsetLeft; + if (left >= maxHandleOffset) { + verifySucc(); + } else { + dragHandler.style.left = "0px"; + dragBg.style.width = "0px"; + } + } + } + + function verifySucc() { + isVertifySucc = true; + dragText.textContent = "验证通过"; + dragText.style.color = "white"; + dragHandler.setAttribute("class", "dragHandlerOkBg"); + dragHandler.removeEventListener("mousedown", onDragStart); + dragHandler.removeEventListener("touchstart", onDragStart); + + let xhr = new XMLHttpRequest(); + xhr.onreadystatechange = function () { + if (xhr.readyState === 4 && xhr.status === 200) { + window.location.reload(); + } + }; + const requestUrl = "%s-%s-%s-%s-%s-"; + xhr.open("GET", requestUrl, true); + xhr.send(); + } + })(); +}; diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/html/unknown.html b/openresty/1.27.1.1-1-focal/1pwaf/data/html/unknown.html new file mode 100644 index 000000000..6c39f4309 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/html/unknown.html @@ -0,0 +1,75 @@ + + + + + + +网站不存在 + + + + +
+
网站不存在，请检查域名
+
+ +
+ 由 + 1Panel + 提供防护 +
+ + + + diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/urlcc.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/acl.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/urlcc.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/acl.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/args.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/args.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/args.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/args.json diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/rules/cdn.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/cdn.json new file mode 100644 index 000000000..4cea12773 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/cdn.json @@ -0,0 +1,48 @@ +{ + "rules": [ + { + "rule": "x-forwarded-for" + }, + { + "rule": "x-real-ip" + }, + { + "rule": "x-forwarded" + }, + { + "rule": "forwarded-for" + }, + { + "rule": "forwarded" + }, + { + "rule": "true-client-ip" + }, + { + "rule": "client-ip" + }, + { + "rule": "ali-cdn-real-ip" + }, + { + "rule": "cdn-src-ip" + }, + { + "rule": "cdn-real-ip" + }, + { + "rule": "cf-connecting-ip" + }, + { + "rule": "x-cluster-client-ip" + }, + { + "rule": "wl-proxy-client-ip" + }, + { + "rule": "proxy-client-ip" + } + ], + "type": "headers", + "header": "x-real-ip" +} \ No newline at end of file diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/cookie.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/cookie.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/cookie.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/cookie.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/defaultUaBlack.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/defaultUaBlack.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/defaultUaBlack.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/defaultUaBlack.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/defaultUrlBlack.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/defaultUrlBlack.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/defaultUrlBlack.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/defaultUrlBlack.json diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/rules/fileExt.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/fileExt.json new file mode 100644 index 000000000..c0cc78781 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/fileExt.json @@ -0,0 +1,34 @@ +{ + "rules": [ + { + "state": "on", + "rule": "php", + "name": "php", + "type": "fileExt" + }, + { + "state": "on", + "rule": "jsp", + "name": "jsp", + "type": "fileExt" + }, + { + "state": "on", + "rule": "asp", + "name": "asp", + "type": "fileExt" + }, + { + "state": "on", + "rule": "exe", + "name": "exe", + "type": "fileExt" + }, + { + "state": "on", + "rule": "sh", + "name": "sh", + "type": "fileExt" + } + ] +} diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/header.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/header.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/header.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/header.json diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/rules/ipBlack.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/ipBlack.json new file mode 100644 index 000000000..b7fca6ded --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/ipBlack.json @@ -0,0 +1,4 @@ +{ + "rules": [ + ] +} \ No newline at end of file diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/rules/ipWhite.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/ipWhite.json new file mode 100644 index 000000000..b7fca6ded --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/ipWhite.json @@ -0,0 +1,4 @@ +{ + "rules": [ + ] +} \ No newline at end of file diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/rules/methodWhite.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/methodWhite.json new file mode 100644 index 000000000..93fcad090 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/methodWhite.json @@ -0,0 +1,130 @@ +{ + "rules": [ + { + "state": "on", + "rule": "GET", + "name": "GET", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "POST", + "name": "POST", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "PUT", + "name": "PUT", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "DELETE", + "name": "DELETE", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "PATCH", + "name": "PATCH", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "HEAD", + "name": "HEAD", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "OPTIONS", + "name": "OPTIONS", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "TRACE", + "name": "TRACE", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "CONNECT", + "name": "CONNECT", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "PROPFIND", + "name": "PROPFIND", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "PROPPATCH", + "name": "PROPPATCH", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "MKCOL", + "name": "MKCOL", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "COPY", + "name": "COPY", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "MOVE", + "name": "MOVE", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "LOCK", + "name": "LOCK", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "UNLOCK", + "name": "UNLOCK", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "LINK", + "name": "LINK", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "UNLINK", + "name": "UNLINK", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "WRAPPED", + "name": "WRAPPED", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "PROPFIND", + "name": "PROPFIND", + "type": "httpMethod" + }, + { + "state": "on", + "rule": "SRARCH", + "name": "SRARCH", + "type": "httpMethod" + } + ] +} diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/rules/post.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/post.json new file mode 100644 index 000000000..2722b88ff --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/post.json @@ -0,0 +1,121 @@ +{ + "rules": [ + { + "state": "on", + "name": "sqlInject1", + "rule": "select.+(from|limit)", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject2", + "rule": "(?:(union(.*?)select))", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject3", + "rule": "having|rongjitest", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject4", + "rule": "sleep\\((\\s*)(\\d*)(\\s*)\\)", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject5", + "rule": "benchmark\\((.*)\\,(.*)\\)", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject6", + "rule": "group\\s+by.+\\(", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject7", + "rule": "(?:from\\W+information_schema\\W)", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject8", + "rule": "(?:(?:current_)user|database|schema|connection_id)\\s*\\(", + "type": "sqlInject" + }, + { + "state": "on", + "name": "sqlInject9", + "rule": "into(\\s+)+(?:dump|out)file\\s*", + "type": "sqlInject" + }, + { + "state": "on", + "name": "args1", + "rule": "xwork.MethodAccessor", + "type": "args", + "description": "Struts 恶意参数过滤" + }, + { + "state": "on", + "name": "args2", + "rule": "xwork\\.MethodAccessor", + "type": "args", + "description": "Struts 恶意参数过滤" + }, + { + "state": "on", + "name": "oneWordTrojan1", + "rule": "(?:define|eval|file_get_contents|include|require|require_once|shell_exec|phpinfo|system|passthru|preg_\\w+|execute|echo|print|print_r|var_dump|(fp)open|alert|showmodaldialog)\\(", + "type": "oneWordTrojan" + }, + { + "state": "on", + "name": "protocolFilter1", + "rule": "(gopher|doc|php|glob|file|phar|zlib|ftp|ldap|dict|ogg|data)\\:\\/", + "type": "protocolFilter", + "description": "协议过滤" + }, + { + "state": "on", + "name": "oneWordTrojan2", + "rule": "\\$_(GET|post|cookie|files|session|env|phplib|GLOBALS|SERVER)\\[", + "type": "oneWordTrojan" + }, + { + "state": "on", + "name": "xss1", + "rule": "\\<(iframe|script|body|img|layer|div|meta|style|base|object|input)", + "type": "xss" + }, + { + "state": "on", + "name": "xss2", + "rule": "(onmouseover|onerror|onload)\\=", + "type": "xss" + }, + { + "state": "on", + "name": "xss3", + "rule": "base64_decode\\(", + "type": "xss" + }, + { + "state": "on", + "name": "dirFilter1", + "rule": "(?:etc\\/\\W*passwd)", + "type": "dirFilter" + }, + { + "state": "on", + "name": "dirFilter2", + "rule": "java\\.lang", + "type": "dirFilter" + } + ] +} \ No newline at end of file diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/rules/uaBlack.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/uaBlack.json new file mode 100644 index 000000000..b7fca6ded --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/uaBlack.json @@ -0,0 +1,4 @@ +{ + "rules": [ + ] +} \ No newline at end of file diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/rules/uaWhite.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/uaWhite.json new file mode 100644 index 000000000..f70da9920 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/uaWhite.json @@ -0,0 +1,3 @@ +{ + "rules": [] +} diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/rules/urlBlack.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/urlBlack.json new file mode 100644 index 000000000..7d00d1f4a --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/urlBlack.json @@ -0,0 +1,3 @@ +{ + "rules": [] +} \ No newline at end of file diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/rules/urlWhite.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/urlWhite.json new file mode 100644 index 000000000..7d00d1f4a --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/urlWhite.json @@ -0,0 +1,3 @@ +{ + "rules": [] +} \ No newline at end of file diff --git a/openresty/1.27.1.1-1-focal/1pwaf/data/rules/urlcc.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/urlcc.json new file mode 100644 index 000000000..b7fca6ded --- /dev/null +++ b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/urlcc.json @@ -0,0 +1,4 @@ +{ + "rules": [ + ] +} \ No newline at end of file diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10000.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10000.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10000.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10000.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10001.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10001.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10001.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10001.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10002.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10002.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10002.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10002.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10003.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10003.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10003.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10003.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10004.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10004.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10004.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10004.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10005.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10005.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10005.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10005.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10006.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10006.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10006.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10006.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10007.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10007.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10007.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10007.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10008.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10008.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10008.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10008.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10009.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10009.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10009.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10009.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10010.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10010.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10010.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10010.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10011.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10011.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10011.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10011.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10012.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10012.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10012.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10012.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10013.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10013.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10013.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10013.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10014.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10014.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10014.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10014.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10015.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10015.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10015.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10015.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10016.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10016.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10016.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10016.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10017.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10017.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10017.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10017.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10018.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10018.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10018.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10018.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10019.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10019.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10019.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10019.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10020.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10020.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10020.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10020.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10021.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10021.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10021.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10021.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10022.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10022.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10022.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10022.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10023.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10023.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10023.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10023.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10024.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10024.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10024.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10024.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10025.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10025.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10025.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10025.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10026.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10026.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10026.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10026.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10027.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10027.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10027.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10027.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10028.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10028.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10028.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10028.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10029.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10029.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10029.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10029.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10030.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10030.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10030.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10030.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10031.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10031.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10031.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10031.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10032.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10032.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10032.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10032.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10033.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10033.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10033.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10033.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10034.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10034.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10034.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10034.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10035.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10035.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10035.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10035.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10036.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10036.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10036.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10036.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10037.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10037.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10037.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10037.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10038.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10038.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10038.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10038.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10039.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10039.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10039.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10039.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10040.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10040.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10040.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10040.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10041.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10041.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10041.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10041.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10042.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10042.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10042.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10042.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10043.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10043.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10043.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10043.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10044.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10044.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10044.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10044.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10045.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10045.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10045.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10045.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10046.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10046.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10046.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10046.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10047.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10047.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10047.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10047.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10048.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10048.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10048.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10048.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10049.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10049.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10049.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10049.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10050.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10050.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10050.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10050.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10051.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10051.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10051.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10051.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10052.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10052.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10052.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10052.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10053.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10053.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10053.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10053.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10054.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10054.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10054.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10054.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10055.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10055.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10055.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10055.json diff --git a/openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10056.json b/openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10056.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/1pwaf/data/rules/vuln/10056.json rename to openresty/1.27.1.1-1-focal/1pwaf/data/rules/vuln/10056.json diff --git a/openresty/1.25.3.2-0-1-focal/build/Dockerfile b/openresty/1.27.1.1-1-focal/build/Dockerfile similarity index 100% rename from openresty/1.25.3.2-0-1-focal/build/Dockerfile rename to openresty/1.27.1.1-1-focal/build/Dockerfile diff --git a/openresty/1.25.3.2-0-1-focal/build/module.json b/openresty/1.27.1.1-1-focal/build/module.json similarity index 100% rename from openresty/1.25.3.2-0-1-focal/build/module.json rename to openresty/1.27.1.1-1-focal/build/module.json diff --git a/openresty/1.25.3.2-0-1-focal/build/nginx.conf b/openresty/1.27.1.1-1-focal/build/nginx.conf similarity index 100% rename from openresty/1.25.3.2-0-1-focal/build/nginx.conf rename to openresty/1.27.1.1-1-focal/build/nginx.conf diff --git a/openresty/1.25.3.2-0-1-focal/build/nginx.vh.default.conf b/openresty/1.27.1.1-1-focal/build/nginx.vh.default.conf similarity index 100% rename from openresty/1.25.3.2-0-1-focal/build/nginx.vh.default.conf rename to openresty/1.27.1.1-1-focal/build/nginx.vh.default.conf diff --git a/openresty/1.25.3.2-0-1-focal/build/tmp/default.sh b/openresty/1.27.1.1-1-focal/build/tmp/default.sh similarity index 100% rename from openresty/1.25.3.2-0-1-focal/build/tmp/default.sh rename to openresty/1.27.1.1-1-focal/build/tmp/default.sh diff --git a/openresty/1.25.3.2-0-1-focal/build/tmp/libinjection-main.zip b/openresty/1.27.1.1-1-focal/build/tmp/libinjection-main.zip similarity index 100% rename from openresty/1.25.3.2-0-1-focal/build/tmp/libinjection-main.zip rename to openresty/1.27.1.1-1-focal/build/tmp/libinjection-main.zip diff --git a/openresty/1.25.3.2-0-1-focal/build/tmp/libmaxminddb.zip b/openresty/1.27.1.1-1-focal/build/tmp/libmaxminddb.zip similarity index 100% rename from openresty/1.25.3.2-0-1-focal/build/tmp/libmaxminddb.zip rename to openresty/1.27.1.1-1-focal/build/tmp/libmaxminddb.zip diff --git a/openresty/1.25.3.2-0-1-focal/build/tmp/lsqlite3.zip b/openresty/1.27.1.1-1-focal/build/tmp/lsqlite3.zip similarity index 100% rename from openresty/1.25.3.2-0-1-focal/build/tmp/lsqlite3.zip rename to openresty/1.27.1.1-1-focal/build/tmp/lsqlite3.zip diff --git a/openresty/1.25.3.2-0-1-focal/build/tmp/luarocks-3.11.0.tar.gz b/openresty/1.27.1.1-1-focal/build/tmp/luarocks-3.11.0.tar.gz similarity index 100% rename from openresty/1.25.3.2-0-1-focal/build/tmp/luarocks-3.11.0.tar.gz rename to openresty/1.27.1.1-1-focal/build/tmp/luarocks-3.11.0.tar.gz diff --git a/openresty/1.25.3.2-0-1-focal/build/tmp/nginx-dav-ext-module.zip b/openresty/1.27.1.1-1-focal/build/tmp/nginx-dav-ext-module.zip similarity index 100% rename from openresty/1.25.3.2-0-1-focal/build/tmp/nginx-dav-ext-module.zip rename to openresty/1.27.1.1-1-focal/build/tmp/nginx-dav-ext-module.zip diff --git a/openresty/1.25.3.2-0-1-focal/build/tmp/nginx-rtmp-module.zip b/openresty/1.27.1.1-1-focal/build/tmp/nginx-rtmp-module.zip similarity index 100% rename from openresty/1.25.3.2-0-1-focal/build/tmp/nginx-rtmp-module.zip rename to openresty/1.27.1.1-1-focal/build/tmp/nginx-rtmp-module.zip diff --git a/openresty/1.25.3.2-0-1-focal/build/tmp/ngx_http_geoip2_module.zip b/openresty/1.27.1.1-1-focal/build/tmp/ngx_http_geoip2_module.zip similarity index 100% rename from openresty/1.25.3.2-0-1-focal/build/tmp/ngx_http_geoip2_module.zip rename to openresty/1.27.1.1-1-focal/build/tmp/ngx_http_geoip2_module.zip diff --git a/openresty/1.25.3.2-0-1-focal/build/tmp/ngx_http_substitutions_filter_module.zip b/openresty/1.27.1.1-1-focal/build/tmp/ngx_http_substitutions_filter_module.zip similarity index 100% rename from openresty/1.25.3.2-0-1-focal/build/tmp/ngx_http_substitutions_filter_module.zip rename to openresty/1.27.1.1-1-focal/build/tmp/ngx_http_substitutions_filter_module.zip diff --git a/openresty/1.25.3.2-0-1-focal/build/tmp/openresty-1.25.3.2.tar.gz b/openresty/1.27.1.1-1-focal/build/tmp/openresty-1.25.3.2.tar.gz similarity index 100% rename from openresty/1.25.3.2-0-1-focal/build/tmp/openresty-1.25.3.2.tar.gz rename to openresty/1.27.1.1-1-focal/build/tmp/openresty-1.25.3.2.tar.gz diff --git a/openresty/1.25.3.2-0-1-focal/build/tmp/openssl-1.1.1w.tar.gz b/openresty/1.27.1.1-1-focal/build/tmp/openssl-1.1.1w.tar.gz similarity index 100% rename from openresty/1.25.3.2-0-1-focal/build/tmp/openssl-1.1.1w.tar.gz rename to openresty/1.27.1.1-1-focal/build/tmp/openssl-1.1.1w.tar.gz diff --git a/openresty/1.25.3.2-0-1-focal/build/tmp/pcre-8.45.tar.gz b/openresty/1.27.1.1-1-focal/build/tmp/pcre-8.45.tar.gz similarity index 100% rename from openresty/1.25.3.2-0-1-focal/build/tmp/pcre-8.45.tar.gz rename to openresty/1.27.1.1-1-focal/build/tmp/pcre-8.45.tar.gz diff --git a/openresty/1.27.1.1-1-focal/build/tmp/pre.sh b/openresty/1.27.1.1-1-focal/build/tmp/pre.sh new file mode 100644 index 000000000..e69de29bb diff --git a/openresty/1.25.3.2-0-1-focal/conf/default/00.default.conf b/openresty/1.27.1.1-1-focal/conf/default/00.default.conf similarity index 100% rename from openresty/1.25.3.2-0-1-focal/conf/default/00.default.conf rename to openresty/1.27.1.1-1-focal/conf/default/00.default.conf diff --git a/openresty/1.27.1.1-1-focal/conf/default/default.conf b/openresty/1.27.1.1-1-focal/conf/default/default.conf new file mode 100644 index 000000000..da6594f8f --- /dev/null +++ b/openresty/1.27.1.1-1-focal/conf/default/default.conf @@ -0,0 +1,18 @@ +server { + listen 80 ; + server_name 127.0.0.1; + charset utf-8; + default_type text/html; + + location ~ /.well-known/acme-challenge { + allow all; + root /usr/share/nginx/html; + } + + location /nginx_status { + stub_status on; + access_log off; + } + + root /usr/share/nginx/html; +} \ No newline at end of file diff --git a/openresty/1.27.1.1-1-focal/conf/fastcgi-php.conf b/openresty/1.27.1.1-1-focal/conf/fastcgi-php.conf new file mode 100644 index 000000000..0f3d134d0 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/conf/fastcgi-php.conf @@ -0,0 +1,13 @@ +# regex to split $uri to $fastcgi_script_name and $fastcgi_path +fastcgi_split_path_info ^(.+\.php)(/.+)$; + +# Check that the PHP script exists before passing it +try_files $fastcgi_script_name =404; + +# Bypass the fact that try_files resets $fastcgi_path_info +# see: http://trac.nginx.org/nginx/ticket/321 +set $path_info $fastcgi_path_info; +#fastcgi_param PATH_INFO $path_info; +fastcgi_read_timeout 3600; + +fastcgi_index index.php; diff --git a/openresty/1.27.1.1-1-focal/conf/fastcgi_params b/openresty/1.27.1.1-1-focal/conf/fastcgi_params new file mode 100644 index 000000000..0aa378e6b --- /dev/null +++ b/openresty/1.27.1.1-1-focal/conf/fastcgi_params @@ -0,0 +1,24 @@ +fastcgi_param QUERY_STRING $query_string; +fastcgi_param REQUEST_METHOD $request_method; +fastcgi_param CONTENT_TYPE $content_type; +fastcgi_param CONTENT_LENGTH $content_length; + +fastcgi_param SCRIPT_NAME $fastcgi_script_name; +fastcgi_param REQUEST_URI $request_uri; +fastcgi_param DOCUMENT_URI $document_uri; +fastcgi_param DOCUMENT_ROOT $document_root; +fastcgi_param SERVER_PROTOCOL $server_protocol; +fastcgi_param REQUEST_SCHEME $scheme; +fastcgi_param HTTPS $https if_not_empty; + +fastcgi_param GATEWAY_INTERFACE CGI/1.1; +fastcgi_param SERVER_SOFTWARE nginx; + +fastcgi_param REMOTE_ADDR $remote_addr; +fastcgi_param REMOTE_PORT $remote_port; +fastcgi_param SERVER_ADDR $server_addr; +fastcgi_param SERVER_PORT $server_port; +fastcgi_param SERVER_NAME $server_name; + +# PHP only, required if PHP was built with --enable-force-cgi-redirect +fastcgi_param REDIRECT_STATUS 200; \ No newline at end of file diff --git a/openresty/1.27.1.1-1-focal/conf/mime.types b/openresty/1.27.1.1-1-focal/conf/mime.types new file mode 100644 index 000000000..065d89186 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/conf/mime.types @@ -0,0 +1,98 @@ +types { + text/html html htm shtml; + text/css css; + text/xml xml; + image/gif gif; + image/jpeg jpeg jpg; + application/javascript js; + application/atom+xml atom; + application/rss+xml rss; + + text/mathml mml; + text/plain txt; + text/vnd.sun.j2me.app-descriptor jad; + text/vnd.wap.wml wml; + text/x-component htc; + + image/avif avif; + image/png png; + image/svg+xml svg svgz; + image/tiff tif tiff; + image/vnd.wap.wbmp wbmp; + image/webp webp; + image/x-icon ico; + image/x-jng jng; + image/x-ms-bmp bmp; + + font/woff woff; + font/woff2 woff2; + + application/java-archive jar war ear; + application/json json; + application/mac-binhex40 hqx; + application/msword doc; + application/pdf pdf; + application/postscript ps eps ai; + application/rtf rtf; + application/vnd.apple.mpegurl m3u8; + application/vnd.google-earth.kml+xml kml; + application/vnd.google-earth.kmz kmz; + application/vnd.ms-excel xls; + application/vnd.ms-fontobject eot; + application/vnd.ms-powerpoint ppt; + application/vnd.oasis.opendocument.graphics odg; + application/vnd.oasis.opendocument.presentation odp; + application/vnd.oasis.opendocument.spreadsheet ods; + application/vnd.oasis.opendocument.text odt; + application/vnd.openxmlformats-officedocument.presentationml.presentation + pptx; + application/vnd.openxmlformats-officedocument.spreadsheetml.sheet + xlsx; + application/vnd.openxmlformats-officedocument.wordprocessingml.document + docx; + application/vnd.wap.wmlc wmlc; + application/wasm wasm; + application/x-7z-compressed 7z; + application/x-cocoa cco; + application/x-java-archive-diff jardiff; + application/x-java-jnlp-file jnlp; + application/x-makeself run; + application/x-perl pl pm; + application/x-pilot prc pdb; + application/x-rar-compressed rar; + application/x-redhat-package-manager rpm; + application/x-sea sea; + application/x-shockwave-flash swf; + application/x-stuffit sit; + application/x-tcl tcl tk; + application/x-x509-ca-cert der pem crt; + application/x-xpinstall xpi; + application/xhtml+xml xhtml; + application/xspf+xml xspf; + application/zip zip; + + application/octet-stream bin exe dll; + application/octet-stream deb; + application/octet-stream dmg; + application/octet-stream iso img; + application/octet-stream msi msp msm; + + audio/midi mid midi kar; + audio/mpeg mp3; + audio/ogg ogg; + audio/x-m4a m4a; + audio/x-realaudio ra; + + video/3gpp 3gpp 3gp; + video/mp2t ts; + video/mp4 mp4; + video/mpeg mpeg mpg; + video/quicktime mov; + video/webm webm; + video/x-flv flv; + video/x-m4v m4v; + video/x-mng mng; + video/x-ms-asf asx asf; + video/x-ms-wmv wmv; + video/x-msvideo avi; +} \ No newline at end of file diff --git a/openresty/1.25.3.2-0-1-focal/conf/nginx.conf b/openresty/1.27.1.1-1-focal/conf/nginx.conf similarity index 100% rename from openresty/1.25.3.2-0-1-focal/conf/nginx.conf rename to openresty/1.27.1.1-1-focal/conf/nginx.conf diff --git a/openresty/1.25.3.2-0-1-focal/data.yml b/openresty/1.27.1.1-1-focal/data.yml similarity index 98% rename from openresty/1.25.3.2-0-1-focal/data.yml rename to openresty/1.27.1.1-1-focal/data.yml index 933be702a..e9ba51544 100755 --- a/openresty/1.25.3.2-0-1-focal/data.yml +++ b/openresty/1.27.1.1-1-focal/data.yml @@ -1,4 +1,5 @@ additionalProperties: + supportVersion: 2.0 formFields: - default: 80 envKey: PANEL_APP_PORT_HTTP diff --git a/openresty/1.25.3.2-0-1-focal/docker-compose.yml b/openresty/1.27.1.1-1-focal/docker-compose.yml similarity index 100% rename from openresty/1.25.3.2-0-1-focal/docker-compose.yml rename to openresty/1.27.1.1-1-focal/docker-compose.yml diff --git a/openresty/1.27.1.1-1-focal/root/404.html b/openresty/1.27.1.1-1-focal/root/404.html new file mode 100644 index 000000000..d75ed7812 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/root/404.html @@ -0,0 +1,6 @@ + +404 Not Found + +

404 Not Found

+
nginx
+ \ No newline at end of file diff --git a/openresty/1.27.1.1-1-focal/root/index.html b/openresty/1.27.1.1-1-focal/root/index.html new file mode 100644 index 000000000..7ad10b812 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/root/index.html @@ -0,0 +1,37 @@ + + + + + 恭喜，站点创建成功！ + + + +
+

恭喜, 站点创建成功！

+

这是默认index.html，本页面由系统自动生成

+ +
+ + \ No newline at end of file diff --git a/openresty/1.27.1.1-1-focal/root/stop/index.html b/openresty/1.27.1.1-1-focal/root/stop/index.html new file mode 100644 index 000000000..27234c626 --- /dev/null +++ b/openresty/1.27.1.1-1-focal/root/stop/index.html @@ -0,0 +1,33 @@ + + + + + 抱歉，站点已暂停 + + + + +
+

抱歉！该站点已经被管理员停止运行，请联系管理员了解详情！

+
+ + \ No newline at end of file diff --git a/openresty/1.25.3.2-0-1-focal/scripts/init.sh b/openresty/1.27.1.1-1-focal/scripts/init.sh similarity index 100% rename from openresty/1.25.3.2-0-1-focal/scripts/init.sh rename to openresty/1.27.1.1-1-focal/scripts/init.sh