mirrors/appstore
1
0
Fork 0
mirror of https://github.com/okxlin/appstore.git synced 2025-07-13 21:02:18 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat:重构uuwaf

Browse Source
This commit is contained in:
okxlin 2024-08-01 20:47:40 +08:00
parent 3fd9aee4ae
commit 2209ea1883
12 changed files with 208 additions and 225 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
apps/uuwaf/2.5.2/.env.sample
View File

@ -1,6 +0,0 @@
CONTAINER_NAME="uuwaf"
PANEL_APP_PORT_CONSOLE="4443"
PANEL_APP_PORT_HTTP="80"
PANEL_APP_PORT_HTTPS="443"
SUBNET_PREFIX="172.22.0"
TIME_ZONE="Asia/Shanghai"

40
apps/uuwaf/2.5.2/data.yml
View File

@ -1,40 +0,0 @@
additionalProperties:
formFields:
- default: 80
edit: true
envKey: PANEL_APP_PORT_HTTP
labelEn: HTTP Port
labelZh: HTTP端口
required: true
rule: paramPort
type: number
- default: 443
edit: true
envKey: PANEL_APP_PORT_HTTPS
labelEn: HTTPS Port
labelZh: HTTPS端口
required: true
rule: paramPort
type: number
- default: 4443
edit: true
envKey: PANEL_APP_PORT_CONSOLE
labelEn: Console Port
labelZh: 控制台端口
required: true
rule: paramPort
type: number
- default: Asia/Shanghai
edit: true
envKey: TIME_ZONE
labelEn: Time zone
labelZh: 时区
required: true
type: text
- default: 172.22.0
edit: true
envKey: SUBNET_PREFIX
labelEn: Subnet prefix
labelZh: 子网前缀
required: true
type: text

62
apps/uuwaf/2.5.2/docker-compose.yml
View File

@ -1,62 +0,0 @@
services:
uuwaf:
build: ./docker/
ulimits:
nproc: 65535
nofile:
soft: 102400
hard: 102400
container_name: ${CONTAINER_NAME}-uuwaf
networks:
1panel-network:
wafnet:
ipv4_address: ${SUBNET_PREFIX}.3
ports:
- "${PANEL_APP_PORT_HTTP}:80"
- "${PANEL_APP_PORT_HTTPS}:443"
- "${PANEL_APP_PORT_CONSOLE}:4443"
volumes:
- ./uuwaf:/uuwaf
command: ["/run.sh"]
environment:
- TZ=${TIME_ZONE}
labels:
createdBy: "Apps"
links:
- wafdb
depends_on:
- wafdb
wafdb:
image: percona:8
container_name: ${CONTAINER_NAME}-wafdb
networks:
1panel-network:
wafnet:
ipv4_address: ${SUBNET_PREFIX}.7
#ports:
#- "127.0.0.1:4306:3306"
volumes:
- ./uuwaf/initdb:/docker-entrypoint-initdb.d
- wafdata:/var/lib/mysql
environment:
- TZ=${TIME_ZONE}
- INIT_ROCKSDB
- MYSQL_ROOT_PASSWORD=Safe3.WAF
labels:
createdBy: "Apps"
volumes:
wafdata:
networks:
1panel-network:
external: true
wafnet:
name: wafnet
driver: bridge
ipam:
driver: default
config:
- gateway: ${SUBNET_PREFIX:?SUBNET_PREFIX required}.1
subnet: ${SUBNET_PREFIX}.0/24

15
apps/uuwaf/2.5.2/sourcedownload.sh
View File

@ -1,15 +0,0 @@
#!/bin/sh
mkdir -p ./tmp
wget -O ./tmp/waf-community.tgz https://github.com/Safe3/uuWAF/releases/download/v2.5.2/waf-docker-community.v2.5.2.tgz
tar -zxvf ./tmp/waf-community.tgz -C ./tmp
cp -r ./tmp/waf-community/docker .
cp -r ./tmp/waf-community/uuwaf .
rm -r ./tmp
echo 附件已经下载成功

7
apps/uuwaf/5.1.1/.env.sample Normal file
View File

@ -0,0 +1,7 @@
CONTAINER_NAME="uuwaf"
MYSQL_MAX_CONNECTIONS=512
PANEL_APP_PORT_CONSOLE=4443
PANEL_APP_PORT_HTTP=80
PANEL_APP_PORT_HTTPS=443
PANEL_DB_USER_PASSWORD="Safe3.WAF"
TIME_ZONE="Asia/Shanghai"

47
apps/uuwaf/5.1.1/data.yml Normal file
View File

@ -0,0 +1,47 @@
additionalProperties:
formFields:
- default: "80"
edit: true
envKey: PANEL_APP_PORT_HTTP
labelEn: HTTP Port
labelZh: HTTP 端口
required: true
rule: paramPort
type: number
- default: "443"
edit: true
envKey: PANEL_APP_PORT_HTTPS
labelEn: HTTPS Port
labelZh: HTTPS 端口
required: true
rule: paramPort
type: number
- default: "4443"
edit: true
envKey: PANEL_APP_PORT_CONSOLE
labelEn: Console Port
labelZh: 控制台端口
required: true
rule: paramPort
type: number
- default: "Asia/Shanghai"
edit: true
envKey: TIME_ZONE
labelEn: Time zone
labelZh: 时区
required: true
type: text
- default: "Safe3.WAF"
envKey: PANEL_DB_USER_PASSWORD
labelEn: Password
labelZh: 数据库用户密码
required: true
rule: paramComplexity
type: password
- default: "512"
edit: true
envKey: MYSQL_MAX_CONNECTIONS
labelEn: MySQL Max Connections
labelZh: 数据库最大连接数
required: true
type: number

54
apps/uuwaf/5.1.1/docker-compose.yml Normal file
View File

@ -0,0 +1,54 @@
services:
uuwaf:
image: "uusec/nanqiang:v5.1.1"
ulimits:
nproc: 65535
nofile:
soft: 102400
hard: 102400
container_name: ${CONTAINER_NAME}
networks:
- 1panel-network
ports:
- ${PANEL_APP_PORT_HTTP}:80
- ${PANEL_APP_PORT_HTTPS}:443
- ${PANEL_APP_PORT_CONSOLE}:4443
volumes:
- wafshared:/uuwaf
command: ["/run.sh"]
environment:
- TZ=${TIME_ZONE}
- UUWAF_MYSQL_PASSWORD=${PANEL_DB_USER_PASSWORD}
links:
- wafdb
depends_on:
wafdb:
condition: service_healthy
wafdb:
image: "percona/percona-server:5.7.44"
container_name: ${CONTAINER_NAME}-db
networks:
- 1panel-network
volumes:
- wafshared:/docker-entrypoint-initdb.d
- wafdata:/var/lib/mysql
- ./low-memory-my.cnf:/etc/mysql/my.cnf
environment:
- TZ=${TIME_ZONE}
- INIT_ROCKSDB
- MYSQL_MAX_CONNECTIONS=${MYSQL_MAX_CONNECTIONS}
- MYSQL_ROOT_PASSWORD=${PANEL_DB_USER_PASSWORD}
healthcheck:
test: ["CMD", "mysqladmin", "ping", "-h", "127.0.0.1", "--silent"]
start_period: 0s
interval: 5s
timeout: 3s
retries: 3
volumes:
wafshared:
name: wafshared
wafdata:
name: wafdata
networks:
1panel-network:
external: true

63
apps/uuwaf/5.1.1/low-memory-my.cnf Normal file
View File

@ -0,0 +1,63 @@
# For advice on how to change settings please see
# http://dev.mysql.com/doc/refman/5.7/en/server-configuration-defaults.html
[mysqld]
#
# Remove leading # and set to the amount of RAM for the most important data
# cache in MySQL. Start at 70% of total RAM for dedicated server, else 10%.
# innodb_buffer_pool_size = 128M
#
# Remove leading # to turn on a very important data integrity option: logging
# changes to the binary log between backups.
# log_bin
#
# Remove leading # to set options mainly useful for reporting servers.
# The server defaults are faster for transactions and fast SELECTs.
# Adjust sizes as needed, experiment to find the optimal values.
# join_buffer_size = 128M
# sort_buffer_size = 2M
# read_rnd_buffer_size = 2M
skip-host-cache
skip-name-resolve
datadir=/var/lib/mysql
socket=/var/lib/mysql/mysql.sock
secure-file-priv=/var/lib/mysql-files
user=mysql
# Disabling symbolic-links is recommended to prevent assorted security risks
symbolic-links=0
log-error=/var/log/mysqld.log
pid-file=/var/run/mysqld/mysqld.pid
#### These optimize the memory use of MySQL
#### http://www.tocker.ca/2014/03/10/configuring-mysql-to-use-minimal-memory.html
innodb_buffer_pool_size=5M
innodb_log_buffer_size=256K
query_cache_size=0
max_connections=10
key_buffer_size=8
thread_cache_size=0
host_cache_size=0
innodb_ft_cache_size=1600000
innodb_ft_total_cache_size=32000000
# per thread or per operation settings
thread_stack=131072
sort_buffer_size=32K
read_buffer_size=8200
read_rnd_buffer_size=8200
max_heap_table_size=16K
tmp_table_size=1K
bulk_insert_buffer_size=0
join_buffer_size=128
net_buffer_length=1K
innodb_sort_buffer_size=64K
#settings that relate to the binary log (if enabled)
binlog_cache_size=4K
binlog_stmt_cache_size=4K
#### from https://mariadb.com/de/node/579
performance_schema = off

3
apps/uuwaf/5.1.1/scripts/uninstall.sh Normal file
View File

@ -0,0 +1,3 @@
#!/bin/bash
docker-compose down --volumes

97
apps/uuwaf/README.md
View File

@ -1,93 +1,26 @@
# 使用说明
## 1. 商店安装应用
# 南墙
填写参数，点击安装，这里会报错，
**南墙** WEB 应用防火墙（简称：`uuWAF`）一款社区驱动的免费、高性能、高扩展顶级 Web 应用安全防护产品。
这是正常的，因为必要附件未下载，进行下一步操作。
## **技术优势**
## 2. 执行脚本下载附件
- 先进语义引擎
终端执行以下命令下载所需附件，大致路径需要按需修改，脚本即在软件安装目录下
```
cd /opt/1panel/apps/local/uuwaf/uuwaf/sourcedownload.sh && \
chmod +x /opt/1panel/apps/local/uuwaf/uuwaf/sourcedownload.sh && \
bash /opt/1panel/apps/local/uuwaf/uuwaf/sourcedownload.sh
```
南墙采用业界领先的 `SQL、XSS、RCE、LFI` 4种基于语义分析的检测引擎，结合多种深度解码引擎可对 `base64、json、form-data` 等 HTTP 内容真实还原，从而有效抵御各种绕过 WAF 的攻击方式，并且相比传统正则匹配具备准确率高、误报率低、效率高等特点，管理员无需维护庞杂的规则库，即可拦截多种攻击类型。
## 3. 重建应用
- **智能 0day 防御**
正确下载了附件后，点击重建应用，等待安装成功。
南墙创新性的运用机器学习技术，使用**异常检测算法**对 http 正常与攻击流量进行区分识别，并对正常流量进行白名单威胁建模。通过**机器学习算法**自动学习正常流量中的参数特征，并转化成对应的参数白名单规则库，可以在面对各种突发 0day 漏洞时，无需添加规则即可拦截攻击，免除网站管理者一出现漏洞就需挑灯夜战升级的痛苦。
- 默认地址注意是`https`
- **高级规则引擎**
- 默认账号密码
```
username：admin
password：wafadmin
```
# 原始相关
# 南墙简介
[![GitHub stars](https://img.shields.io/github/stars/Safe3/uuWAF.svg?label=关注 南墙&style=for-the-badge)](https://github.com/Safe3/uuWAF)
[![Chat](https://img.shields.io/badge/Discuss-加入讨论组-7289da.svg?style=for-the-badge)](https://github.com/Safe3/uuWAF/discussions)
> **南墙**WEB应用防火墙（简称：`uuWAF`）一款社区驱动的免费、高性能、高扩展顶级Web应用和API安全防护产品。
![](http://waf.uusec.com/_media/waf.png)
🏠安装及使用请访问官网： https://waf.uusec.com/
:heavy_exclamation_mark:注意：南墙 暂不开源，直接下载编译好的二进制文件安装即可，github仓库内主要为社区贡献的规则，每次 uuWAF 发布将自动更新。
南墙积极运用 `nginx` 和 `luajit` 的高性能、高灵活性特点，除了提供对普通用户友好性较好的传统规则创建模式，还提供了高扩展性、高灵活性的 lua 脚本规则编写功能，使得有一定编程功底的高级安全管理员可以创造出一系列传统 WAF 所不能实现的高级漏洞防护规则，用户可以编写一系列插件来扩展 WAF 现有功能。从而使得在拦截一些复杂漏洞时，可以更加得心应手。
## 使用
## :dart: 技术优势
- :libra: 先进语义引擎
南墙采用业界领先的`SQL、XSS、RCE、LFI` 4种基于语义分析的检测引擎，结合多种深度解码引擎可对`base64、json、form-data`等HTTP内容真实还原，从而有效抵御各种绕过WAF的攻击方式，并且相比传统正则匹配具备准确率高、误报率低、效率高等特点，管理员无需维护庞杂的规则库，即可拦截多种攻击类型。
- :ophiuchus: 智能0day防御
南墙创新性的运用机器学习技术，使用**异常检测算法**对http正常与攻击流量进行区分识别，并对正常流量进行白名单威胁建模。通过**机器学习算法**自动学习正常流量中的参数特征，并转化成对应的参数白名单规则库，可以在面对各种突发0day漏洞时，无需添加规则即可拦截攻击，免除网站管理者一出现漏洞就需挑灯夜战升级的痛苦。
- :gemini: 高级规则引擎
南墙积极运用`nginx`和`luajit`的高性能、高灵活性特点，除了提供对普通用户友好性较好的传统规则创建模式，还提供了高扩展性、高灵活性的lua脚本规则编写功能，使得有一定编程功底的高级安全管理员可以创造出一系列传统WAF所不能实现的高级漏洞防护规则，用户可以编写一系列插件来扩展WAF现有功能。从而使得在拦截一些复杂漏洞时，可以更加得心应手。
## :rocket: 快速进阶
南墙为你提供了强大灵活的扩展和安全规则的编写API，在管理后台发布后所有规则无需重启立即生效，远超市面上大部分免费WAF产品如`ModSecurity`，规则展示如下：
![](http://waf.uusec.com/_media/rule.png)
🏠请访问官网： https://waf.uusec.com/ 下载 南墙WAF使用说明书 了解规则API详情
## :gift_heart: 贡献分享
参照: https://waf.uusec.com/#/guide/contribute
## :kissing_heart: 加入讨论
欢迎各位就 南墙 的各种bug或功能需求及使用问题，在如下渠道参与讨论
- 问题提交：https://github.com/Safe3/uuWAF/issues
- 讨论社区：https://github.com/Safe3/uuWAF/discussions
- 官方 QQ 群：11500614
- 官方微信群：微信扫描以下二维码加入
<img src="https://waf.uusec.com/_media/weixin.jpg" alt="微信群" height="200px" />
1. 登录后台，访问https://wafip:4443 ，wafip为安装南墙的服务器ip，用户名`admin`，密码`wafadmin`
2. 添加站点，进入站点管理菜单，点击添加站点按钮，按提示添加站点域名与网站服务器ip
3. 添加证书，进入证书管理菜单，点击添加证书按钮，上传第二步中域名的https证书和私钥文件
4. 将域名DNS的ip指向改为南墙服务器ip地址
5. 访问站点域名查看网站是否能够访问

39
apps/uuwaf/data.yml
View File

@ -1,20 +1,19 @@
name: 南墙 Web 应用防火墙(uuWAF)
tags:
- 工具
title: 免费、高性能、高扩展顶级Web应用和API安全防护产品
type: 工具
description: 免费、高性能、高扩展顶级Web应用和API安全防护产品
additionalProperties:
key: uuwaf
name: 南墙 Web 应用防火墙(uuWAF)
tags:
- Tool
shortDescZh: 免费、高性能、高扩展顶级Web应用和API安全防护产品
shortDescEn: High-performance, highly scalable, top-tier web application and API security protection product
type: tool
crossVersionUpdate: true
limit: 1
recommend: 0
website: https://waf.uusec.com
github: https://github.com/Safe3/uuWAF
document: https://waf.uusec.com
name: uuWAF
tags:
- 安全
title: 南墙 WEB 应用防火墙
description: 南墙 WEB 应用防火墙
additionalProperties:
key: uuwaf
name: uuWAF
tags:
- Security
shortDescZh: 南墙 WEB 应用防火墙
shortDescEn: NanQiang Web Application Firewall
type: tool
crossVersionUpdate: true
limit: 1
recommend: 0
website: https://waf.uusec.com/#/
github: https://github.com/Safe3/uuWAF
document: https://waf.uusec.com/#/?id=main

BIN
apps/uuwaf/logo.png
View File

Binary file not shown.
Side by Side Swipe Overlay

Before

Width:  |  Height:  |  Size: 4.9 KiB

After

Width:  |  Height:  |  Size: 1.7 KiB