#教程#对kangle/ep进行加固/安全防御/CC防御/防注入/防木马等操作

最近小学生 IDC 越来越多了呢,小学生 IDC 的标配是什么!没错 就是 kangle+easypanel

本教程将会分享一些本人搜集到的方法.基本上都是通过 3311 输入代码来搞定.

本文感谢小樱和 UPUPW

#教程#对 kangle/ep 进行加固/安全防御/CC 防御/防注入/防木马等操作

一.禁止目录执行

先点击右边的请求控制 选择添加 目标 选择拒绝 俩个匹配模块 reg_path

分别写入 记得勾选 nc 详细和图片对比

.*\/((attachment)|(attachments)|(uploadfiles)|(avatar))\/
\.((php)|(php5)|(php7)|(phps)|(jsp)|(asp)|(aspx)|(asa)|(asax)|(ascx)|(ashx)|(asmx)|(axd)).*$

#教程#对 kangle/ep 进行加固/安全防御/CC 防御/防注入/防木马等操作

二.保护系统文件

先点击右边的请求控制 选择添加 目标 选择拒绝 匹配模块 url

分别写入 记得勾选 nc 详细和图片对比

 \.(htaccess|uini)

#教程#对 kangle/ep 进行加固/安全防御/CC 防御/防注入/防木马等操作

三.保护敏感文件

先点击右边的请求控制 选择添加 目标 选择拒绝 匹配模块 url

分别写入 记得勾选 nc 详细和图片对比

(up.+\.|web\.|httpd\.)(conf|log|config|ini)

#教程#对 kangle/ep 进行加固/安全防御/CC 防御/防注入/防木马等操作

四.获取真实 IP

先点击右边的请求控制 选择添加 直接添加 选择继续 标记模块 replace_ip

header 处写入 详细和图片对比

X-Forwarded-For

#教程#对 kangle/ep 进行加固/安全防御/CC 防御/防注入/防木马等操作

五.防止木马上传

先点击右边的请求控制 选择添加 直接添加 选择拒绝 标记模块选择 post_file 之后选择 ignore

详细和图片对比

\.((php)|(php5)|(php7)|(phps)|(jsp)|(asp)|(aspx)|(asa)|(asax)|(ascx)|(ashx)|(asmx)|(axd)|(html)|(htm)|(js))$

#教程#对 kangle/ep 进行加固/安全防御/CC 防御/防注入/防木马等操作

六.设置 17CE 和奇云测全绿功能

#教程#对 kangle/ep 进行加固/安全防御/CC 防御/防注入/防木马等操作本功能纯属自慰,就是转发一下链接.哈哈哈哈哈~让小学生买你主机认为你家机子很快~有点狂哦~

方法都一样.那我就不写俩遍了就拿 17ce 为案例

打开 3311 面板在请求控制里面添加 目标继续 匹配模块选择 referer 输入 http://www.17ce.com|

之后在标记模块选择 redirect 之后输入 code 输入 301

https://static-s.bilibili.com/error/404.png

#教程#对 kangle/ep 进行加固/安全防御/CC 防御/防注入/防木马等操作

七.设置防御 CC

这个功能只能在商业版有效 请使用 kangle.in 升级商业版 我稍后写一个升级商业版的教程

先点击右边的请求控制 选择添加 直接添加 选择继续 标记模块选择 anti_cc

request 和 second 自己按照需求设置

记得勾选 white list 和 fix_url

详细和图片对比

#教程#对 kangle/ep 进行加固/安全防御/CC 防御/防注入/防木马等操作

HTTP/1.1 503 OK
Content-Type: text/html; charset=utf-8
Connection: close
Cache-Control: no-cache,no-store
Recaptcha: sakura

<html>
<head>
<meta charset="UTF-8">
<!--[if IE 8]><style>.ie8 .alert-circle,.ie8 .alert-footer{display:none}.ie8 .alert-box{padding-top:75px}.ie8 .alert-sec-text{top:45px}</style><![endif]-->
<title>浏览器安全检查中-VPSPS.COM</title>
<style>
body {
 margin: 0;
 padding: 0;
 background: #E6EAEB;
 font-family: Arial, '微软雅黑', '宋体', sans-serif
}
.alert-box {
 display: none;
 position: relative;
 margin: 96px auto 0;
 padding: 180px 85px 22px;
 border-radius: 10px 10px 0 0;
 background: #FFF;
 box-shadow: 5px 9px 17px rgba(102,102,102,0.75);
 width: 286px;
 color: #FFF;
 text-align: center
}
.alert-box p {
 margin: 0
}
.alert-circle {
 position: absolute;
 top: -50px;
 left: 111px
}
.alert-sec-circle {
 stroke-dashoffset: 0;
 stroke-dasharray: 735;
 transition: stroke-dashoffset 1s linear
}
.alert-sec-text {
 position: absolute;
 top: 11px;
 left: 190px;
 width: 76px;
 color: #000;
 font-size: 68px
}
.alert-sec-unit {
 font-size: 34px
}
.alert-body {
 margin: 35px 0
}
.alert-head {
 color: #242424;
 font-size: 28px
}
.alert-concent {
 margin: 25px 0 14px;
 color: #7B7B7B;
 font-size: 18px
}
.alert-concent p {
 line-height: 27px
}
.alert-btn {
 display: block;
 border-radius: 10px;
 background-color: #4AB0F7;
 height: 55px;
 line-height: 55px;
 width: 286px;
 color: #FFF;
 font-size: 20px;
 text-decoration: none;
 letter-spacing: 2px
}
.alert-btn:hover {
 background-color: #6BC2FF
}
.alert-footer {
 margin: 0 auto;
 height: 42px;
 width: 120px
}
.alert-footer-icon {
 float: left
}
.alert-footer-text {
 float: left;
 border-left: 2px solid #EEE;
 padding: 3px 0 0 5px;
 height: 40px;
 color: #0B85CC;
 font-size: 12px;
 text-align: left
}
.alert-footer-text p {
 color: #7A7A7A;
 font-size: 22px;
 line-height: 18px
}
</style>
</head>
<body class="ie8">
<div id="js-alert-box" class="alert-box">
 <svg class="alert-circle" width="234" height="234">
 <circle cx="117" cy="117" r="108" fill="#FFF" stroke="#43AEFA" stroke-width="17"></circle>
 <circle id="js-sec-circle" class="alert-sec-circle" cx="117" cy="117" r="108" fill="transparent" stroke="#F4F1F1" stroke-width="18" transform="rotate(-90 117 117)"></circle>
 <text class="alert-sec-unit" x="82" y="172" fill="#BDBDBD">秒</text>
 </svg>
 <div id="js-sec-text" class="alert-sec-text"></div>
 <div class="alert-body">
 <div id="js-alert-head" class="alert-head"></div>
 <div class="alert-concent">
 <p>您好我们检测到您有异常行为</p>
 <p>正在对你的浏览器进行安全检查</p>
 </div>
 <a href="http://idc.ac/" target="_blank" class="alert-btn" id="js-alert-btn" style="display:none">退出安全检查</a>
 </div>
 <div class="alert-footer clearfix">
 <svg width="46px" height="42px" class="alert-footer-icon">
 <circle fill-rule="evenodd" clip-rule="evenodd" fill="#7B7B7B" stroke="#DEDFE0" stroke-width="2" stroke-miterlimit="10" cx="21.917" cy="21.25" r="17"/>
 <path fill="#FFF" d="M22.907,27.83h-1.98l0.3-2.92c-0.37-0.22-0.61-0.63-0.61-1.1c0-0.71,0.58-1.29,1.3-1.29s1.3,0.58,1.3,1.29 c0,0.47-0.24,0.88-0.61,1.1L22.907,27.83z M18.327,17.51c0-1.98,1.61-3.59,3.59-3.59s3.59,1.61,3.59,3.59v2.59h-7.18V17.51z M27.687,20.1v-2.59c0-3.18-2.59-5.76-5.77-5.76s-5.76,2.58-5.76,5.76v2.59h-1.24v10.65h14V20.1H27.687z"/>
 <circle fill-rule="evenodd" clip-rule="evenodd" fill="#FEFEFE" cx="35.417" cy="10.75" r="6.5"/>
 <polygon fill="#7B7B7B" stroke="#7B7B7B" stroke-linecap="round" stroke-linejoin="round" stroke-miterlimit="10" points="35.417,12.16 32.797,9.03 31.917,10.07 35.417,14.25 42.917,5.29 42.037,4.25 "/>
 </svg>
 <div class="alert-footer-text"><p>secure</p>安全加密 </div>
 </div>
</div>
<script type="text/javascript">
function alertSet(e) {
 document.getElementById("js-alert-box").style.display = "block",
 document.getElementById("js-alert-head").innerHTML = e;
 var t = 5,
 n = document.getElementById("js-sec-circle");
 document.getElementById("js-sec-text").innerHTML = t,
 setInterval(function() {
 if (1 > t){
 location.href="{{murl}}";
 }else {
 t -= 1,
 document.getElementById("js-sec-text").innerHTML = t;
 var e = Math.round(t / 5 * 735);
 n.style.strokeDashoffset = e - 735
 }
 if (2 == t){
 document.getElementById("js-alert-btn").setAttribute("href","{{murl}}");
 document.getElementById("js-alert-btn").setAttribute("style","font-weight:bold");
 }
 },
 970);
}
</script>
<script>alertSet('浏览器安全检查中');</script>
</body>
</html>

九.防 SQL 注入

先点击右边的请求控制 选择添加 直接添加 选择拒绝 标记模块选择 param

之后在 param value:(regex) 输入

'.*[; ]?((or)|(insert)|(select)|(union)|(update)|(delete)|(replace)|(create)|(drop)|(alter)|(grant)|(load)|(show)|(exec))[\s(]

之后

ignore casegetpost

详细和图片对比

#教程#对 kangle/ep 进行加固/安全防御/CC 防御/防注入/防木马等操作

十.优化配置

#教程#对 kangle/ep 进行加固/安全防御/CC 防御/防注入/防木马等操作

#教程#对 kangle/ep 进行加固/安全防御/CC 防御/防注入/防木马等操作

#教程#对 kangle/ep 进行加固/安全防御/CC 防御/防注入/防木马等操作

#教程#对 kangle/ep 进行加固/安全防御/CC 防御/防注入/防木马等操作

#教程#对 kangle/ep 进行加固/安全防御/CC 防御/防注入/防木马等操作

#教程#对 kangle/ep 进行加固/安全防御/CC 防御/防注入/防木马等操作

十一.设置 mime 类型

设置 mime 类型 最强谷歌优化设置,增加浏览器缓存,加快 web 访问速度

下面列举出一些常用的格式,可以更加需要来添加。

3gp video/3gpp 31536000
avi video/x-msvideo 31536000
css text/css yes 31536000
dll application/octet-stream 31536000
doc application/msword 31536000
exe application/octet-stream 31536000
flv video/x-flv 31536000
gif image/gif yes 31536000
gz application/x-tar 31536000
htm text/html yes 31536000
html text/html yes 31536000
ico image/x-icon yes 31536000
jpg image/jpeg yes 31536000
js text/javascript yes 31536000
mp3 audio/mpeg 31536000
mp4 video/mp4 31536000
png image/png yes 31536000
rar application/x-rar-compressed 31536000
sh application/x-sh 31536000
swf application/x-shockwave-flash 31536000
tar application/x-tar 31536000
xml text/xml yes 31536000
zip application/x-zip-compressed 31536000
bmp image/x-bmp yes 31536000
pac text/plain yes 31536000

#教程#对 kangle/ep 进行加固/安全防御/CC 防御/防注入/防木马等操作
31536000 是谷歌推荐使用的,百度用的 315360000(十年)。腾讯用的是 600。

您可以直接修改配置文件

<vhs >
<mime_type ext='*' type='text/plain' gzip='1' max_age='31536000'/>
<mime_type ext='3gp' type='video/3gpp' max_age='31536000'/>
<mime_type ext='3gpp' type='video/3gpp' max_age='31536000'/>
<mime_type ext='ai' type='application/postscript' max_age='31536000'/>
<mime_type ext='aif' type='audio/x-aiff' max_age='31536000'/>
<mime_type ext='aifc' type='audio/x-aiff' max_age='31536000'/>
<mime_type ext='aiff' type='audio/x-aiff' max_age='31536000'/>
<mime_type ext='amr' type='audio/amr' max_age='31536000'/>
<mime_type ext='arj' type='application/x-arj-compressed' max_age='31536000'/>
<mime_type ext='atom' type='application/atom+xml' max_age='31536000'/>
<mime_type ext='au' type='audio/basic' max_age='31536000'/>
<mime_type ext='avi' type='video/x-msvideo' max_age='31536000'/>
<mime_type ext='bcpio' type='application/x-bcpio' max_age='31536000'/>
<mime_type ext='bin' type='application/macbinary' max_age='31536000'/>
<mime_type ext='bmp' type='image/x-bmp' gzip='1' max_age='31536000'/>
<mime_type ext='c' type='text/plain' gzip='1' max_age='31536000'/>
<mime_type ext='cab' type='application/octet-stream' max_age='31536000'/>
<mime_type ext='cc' type='text/plain' gzip='1' max_age='31536000'/>
<mime_type ext='cdf' type='application/x-netcdf' max_age='31536000'/>
<mime_type ext='cod' type='text/x-co-desc' gzip='1' max_age='31536000'/>
<mime_type ext='core' type='application/octet-stream' max_age='31536000'/>
<mime_type ext='cpio' type='application/x-cpio' max_age='31536000'/>
<mime_type ext='cpp' type='text/plain' gzip='1' max_age='31536000'/>
<mime_type ext='csh' type='application/x-csh' max_age='31536000'/>
<mime_type ext='css' type='text/css' gzip='1' max_age='31536000'/>
<mime_type ext='dll' type='application/octet-stream' max_age='31536000'/>
<mime_type ext='doc' type='application/msword' max_age='31536000'/>
<mime_type ext='dvi' type='application/x-dvi' max_age='31536000'/>
<mime_type ext='ear' type='application/java-archive' max_age='31536000'/>
<mime_type ext='eps' type='application/postscript' max_age='31536000'/>
<mime_type ext='etx' type='text/x-setext' gzip='1' max_age='31536000'/>
<mime_type ext='exe' type='application/octet-stream' max_age='31536000'/>
<mime_type ext='f90' type='text/plain' gzip='1' max_age='31536000'/>
<mime_type ext='flv' type='video/x-flv' max_age='31536000'/>
<mime_type ext='gif' type='image/gif' gzip='1' max_age='31536000'/>
<mime_type ext='gtar' type='application/x-gtar' max_age='31536000'/>
<mime_type ext='gz' type='application/x-tar' max_age='31536000'/>
<mime_type ext='h' type='text/plain' gzip='1' max_age='31536000'/>
<mime_type ext='hdf' type='application/x-hdf' max_age='31536000'/>
<mime_type ext='hh' type='text/plain' gzip='1' max_age='31536000'/>
<mime_type ext='hqx' type='application/mac-binhex40' max_age='31536000'/>
<mime_type ext='htm' type='text/html' gzip='1' max_age='31536000'/>
<mime_type ext='html' type='text/html' gzip='1' max_age='31536000'/>
<mime_type ext='ico' type='image/x-icon' gzip='1' max_age='31536000'/>
<mime_type ext='ief' type='image/ief' gzip='1' max_age='31536000'/>
<mime_type ext='jad' type='text/vnd.sun.j2me.app-descriptor' gzip='1' max_age='31536000'/>
<mime_type ext='jar' type='application/java-archive' max_age='31536000'/>
<mime_type ext='jng' type='image/x-jng' gzip='1' max_age='31536000'/>
<mime_type ext='jpe' type='image/jpeg' gzip='1' max_age='31536000'/>
<mime_type ext='jpeg' type='image/jpeg' gzip='1' max_age='31536000'/>
<mime_type ext='jpg' type='image/jpeg' gzip='1' max_age='31536000'/>
<mime_type ext='js' type='application/x-javascript' gzip='1' max_age='31536000'/>
<mime_type ext='latex' type='application/x-latex' max_age='31536000'/>
<mime_type ext='lha' type='application/x-lha-compressed' max_age='31536000'/>
<mime_type ext='lsm' type='text/plain' gzip='1' max_age='31536000'/>
<mime_type ext='lzh' type='application/x-lha-compressed' max_age='31536000'/>
<mime_type ext='m' type='text/plain' gzip='1' max_age='31536000'/>
<mime_type ext='man' type='application/x-troff-man' max_age='31536000'/>
<mime_type ext='mbm' type='image/x-epoc-mbm' gzip='1' max_age='31536000'/>
<mime_type ext='me' type='application/x-troff-me' max_age='31536000'/>
<mime_type ext='mid' type='audio/midi' max_age='31536000'/>
<mime_type ext='midi' type='audio/midi' max_age='31536000'/>
<mime_type ext='mif' type='application/x-mif' max_age='31536000'/>
<mime_type ext='mmf' type='application/x-smaf' max_age='31536000'/>
<mime_type ext='mml' type='text/mathml' gzip='1' max_age='31536000'/>
<mime_type ext='mov' type='video/quicktime' max_age='31536000'/>
<mime_type ext='movie' type='video/x-sgi-movie' max_age='31536000'/>
<mime_type ext='mp2' type='audio/basic' max_age='31536000'/>
<mime_type ext='mp3' type='audio/mpeg' max_age='31536000'/>
<mime_type ext='mp4' type='video/mp4' max_age='31536000'/>
<mime_type ext='mpe' type='video/mpeg' max_age='31536000'/>
<mime_type ext='mpeg' type='video/mpeg' max_age='31536000'/>
<mime_type ext='mpg' type='video/mpeg' max_age='31536000'/>
<mime_type ext='ms' type='application/x-troff-ms' max_age='31536000'/>
<mime_type ext='msw' type='application/msword' max_age='31536000'/>
<mime_type ext='mwrt' type='application/macwriteii' max_age='31536000'/>
<mime_type ext='n3a' type='image/vnd.nok-3dscreensaver' gzip='1' max_age='31536000'/>
<mime_type ext='nc' type='application/x-netcdf' max_age='31536000'/>
<mime_type ext='ngd' type='application/x-nokiagamedata' max_age='31536000'/>
<mime_type ext='nok' type='image/vnd.nok-oplogo-colornokia-op-logo' gzip='1' max_age='31536000'/>
<mime_type ext='nqd' type='application/vnd.nokia.gamedata' max_age='31536000'/>
<mime_type ext='oda' type='application/oda' max_age='31536000'/>
<mime_type ext='pbm' type='image/x-portable-bitmap' gzip='1' max_age='31536000'/>
<mime_type ext='pdf' type='application/pdf' max_age='31536000'/>
<mime_type ext='pgm' type='image/x-portable-graymap' gzip='1' max_age='31536000'/>
<mime_type ext='pic' type='application/pict' max_age='31536000'/>
<mime_type ext='pict' type='application/pict' max_age='31536000'/>
<mime_type ext='pmd' type='application/x-pmd' max_age='31536000'/>
<mime_type ext='png' type='image/png' gzip='1' max_age='31536000'/>
<mime_type ext='pnm' type='image/x-portable-anymap' gzip='1' max_age='31536000'/>
<mime_type ext='ppm' type='image/x-portable-pixmap' gzip='1' max_age='31536000'/>
<mime_type ext='ps' type='application/postscript' max_age='31536000'/>
<mime_type ext='qcp' type='audio/vnd.qcelp' max_age='31536000'/>
<mime_type ext='qt' type='video/quicktime' max_age='31536000'/>
<mime_type ext='rar' type='application/x-rar-compressed' max_age='31536000'/>
<mime_type ext='ras' type='image/cmu-raster' gzip='1' max_age='31536000'/>
<mime_type ext='rgb' type='image/x-rgb' gzip='1' max_age='31536000'/>
<mime_type ext='rng' type='application/vnd.nokie.ringing-tone' max_age='31536000'/>
<mime_type ext='roff' type='application/x-troff' max_age='31536000'/>
<mime_type ext='rpm' type='application/x-rpm' max_age='31536000'/>
<mime_type ext='rss' type='application/rss+xml' max_age='31536000'/>
<mime_type ext='rtf' type='application/x-rtf' max_age='31536000'/>
<mime_type ext='rtx' type='text/richtext' gzip='1' max_age='31536000'/>
<mime_type ext='sh' type='application/x-sh' max_age='31536000'/>
<mime_type ext='shar' type='application/x-shar' max_age='31536000'/>
<mime_type ext='si' type='text/vnd.wap.si' gzip='1' max_age='31536000'/>
<mime_type ext='sic' type='application/vnd.wap.sic' max_age='31536000'/>
<mime_type ext='sis' type='application/vnd.symbian.install' max_age='31536000'/>
<mime_type ext='sit' type='application/stuffit' max_age='31536000'/>
<mime_type ext='sl' type='text/vnd.wap.sl' gzip='1' max_age='31536000'/>
<mime_type ext='slc' type='application/vnd.wap.slc' max_age='31536000'/>
<mime_type ext='snd' type='audio/basic' max_age='31536000'/>
<mime_type ext='src' type='application/x-wais-source' max_age='31536000'/>
<mime_type ext='sv4cpio' type='application/x-sv4cpio' max_age='31536000'/>
<mime_type ext='sv4crc' type='application/x-sv4crc' max_age='31536000'/>
<mime_type ext='svg' type='image/svg+xml' gzip='1' max_age='31536000'/>
<mime_type ext='svgz' type='image/svg+xml' gzip='1' max_age='31536000'/>
<mime_type ext='swf' type='application/x-shockwave-flash' max_age='31536000'/>
<mime_type ext='t' type='application/x-troff' max_age='31536000'/>
<mime_type ext='tar' type='application/x-tar' max_age='31536000'/>
<mime_type ext='tcl' type='application/x-tcl' max_age='31536000'/>
<mime_type ext='tex' type='application/x-tex' max_age='31536000'/>
<mime_type ext='texi' type='application/x-texinfo' max_age='31536000'/>
<mime_type ext='texinfo' type='application/x-texinfo' max_age='31536000'/>
<mime_type ext='tgz' type='application/x-tar' max_age='31536000'/>
<mime_type ext='tif' type='image/tiff' gzip='1' max_age='31536000'/>
<mime_type ext='tiff' type='image/tiff' gzip='1' max_age='31536000'/>
<mime_type ext='tr' type='application/x-troff' max_age='31536000'/>
<mime_type ext='tsv' type='text/tab-separated-values' gzip='1' max_age='31536000'/>
<mime_type ext='ustar' type='application/x-ustar' max_age='31536000'/>
<mime_type ext='vcf' type='text/v-vcard' gzip='1' max_age='31536000'/>
<mime_type ext='vcs' type='text/x-vcalendar' gzip='1' max_age='31536000'/>
<mime_type ext='war' type='application/java-archive' max_age='31536000'/>
<mime_type ext='wav' type='audio/x-wav' max_age='31536000'/>
<mime_type ext='wbmp' type='image/vnd.wap.wmbp' gzip='1' max_age='31536000'/>
<mime_type ext='webm' type='video/webm' max_age='31536000'/>
<mime_type ext='webp' type='image/webp' gzip='1' max_age='31536000'/>
<mime_type ext='wml' type='text/vnd.wap.wml' gzip='1' max_age='31536000'/>
<mime_type ext='wmlc' type='application/vnd.wap.wmlc' max_age='31536000'/>
<mime_type ext='wmls' type='text/vnd.wap.wmlscript' gzip='1' max_age='31536000'/>
<mime_type ext='wmlsc' type='text/vnd.wap.wmlscript' gzip='1' max_age='31536000'/>
<mime_type ext='wmv' type='video/x-ms-wmv' max_age='31536000'/>
<mime_type ext='xbm' type='image/x-xbitmap' gzip='1' max_age='31536000'/>
<mime_type ext='xls' type='application/msexcel' max_age='31536000'/>
<mime_type ext='xml' type='text/xml' gzip='1' max_age='31536000'/>
<mime_type ext='xpm' type='image/x-xpixmap' gzip='1' max_age='31536000'/>
<mime_type ext='xwd' type='image/x-xwindowdump' gzip='1' max_age='31536000'/>
<mime_type ext='Z' type='application/x-tar' max_age='31536000'/>
<mime_type ext='zip' type='application/x-zip-compressed' max_age='31536000'/>
<mime_type ext='zlib' type='application/x-deflate' max_age='31536000'/>
</vhs>


本博客所有文章如无特别注明均为原创。作者:晨曦复制或转载请以超链接形式注明转自 晨曦的记忆,乐意数据
原文地址《#教程#对kangle/ep进行加固/安全防御/CC防御/防注入/防木马等操作
分享到:更多

相关推荐

发表评论

路人甲 表情
Ctrl+Enter快速提交

网友评论(0)