mirror of
https://github.com/onionltd/EndGame.git
synced 2024-10-01 04:15:36 -04:00
Add EndGame version 2.5
This commit is contained in:
Onion Limited
parent
4a766ef0ac
commit
4075b99603
@ -1,8 +0,0 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<module type="WEB_MODULE" version="4">
|
||||
<component name="NewModuleRootManager">
|
||||
<content url="file://$MODULE_DIR$" />
|
||||
<orderEntry type="inheritedJdk" />
|
||||
<orderEntry type="sourceFolder" forTests="false" />
|
||||
</component>
|
||||
</module>
|
||||
@ -1,8 +0,0 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<project version="4">
|
||||
<component name="ProjectModuleManager">
|
||||
<modules>
|
||||
<module fileurl="file://$PROJECT_DIR$/.idea/endgame.iml" filepath="$PROJECT_DIR$/.idea/endgame.iml" />
|
||||
</modules>
|
||||
</component>
|
||||
</project>
|
||||
@ -1,6 +0,0 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<project version="4">
|
||||
<component name="VcsDirectoryMappings">
|
||||
<mapping directory="$PROJECT_DIR$" vcs="Git" />
|
||||
</component>
|
||||
</project>
|
||||
@ -1,39 +0,0 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<project version="4">
|
||||
<component name="ChangeListManager">
|
||||
<list default="true" id="29df5c5c-3c59-4700-af86-2362f0062d00" name="Default Changelist" comment="">
|
||||
<change beforePath="$PROJECT_DIR$/site.conf" beforeDir="false" afterPath="$PROJECT_DIR$/site.conf" afterDir="false" />
|
||||
</list>
|
||||
<option name="SHOW_DIALOG" value="false" />
|
||||
<option name="HIGHLIGHT_CONFLICTS" value="true" />
|
||||
<option name="HIGHLIGHT_NON_ACTIVE_CHANGELIST" value="false" />
|
||||
<option name="LAST_RESOLUTION" value="IGNORE" />
|
||||
</component>
|
||||
<component name="GOROOT" path="$USER_HOME$/.gvm/gos/go1.14" />
|
||||
<component name="Git.Settings">
|
||||
<option name="RECENT_GIT_ROOT_PATH" value="$PROJECT_DIR$" />
|
||||
</component>
|
||||
<component name="ProjectId" id="1l8K8ywGwL2SwuuTElCHEoZyLHy" />
|
||||
<component name="ProjectViewState">
|
||||
<option name="hideEmptyMiddlePackages" value="true" />
|
||||
<option name="showLibraryContents" value="true" />
|
||||
</component>
|
||||
<component name="PropertiesComponent">
|
||||
<property name="RunOnceActivity.OpenProjectViewOnStart" value="true" />
|
||||
<property name="go.import.settings.migrated" value="true" />
|
||||
<property name="go.sdk.automatically.set" value="true" />
|
||||
<property name="last_opened_file_path" value="$PROJECT_DIR$/../docker-tor-hidden-service" />
|
||||
<property name="settings.editor.selected.configurable" value="ide.date.format" />
|
||||
</component>
|
||||
<component name="SpellCheckerSettings" RuntimeDictionaries="0" Folders="0" CustomDictionaries="0" DefaultDictionary="application-level" UseSingleDictionary="true" transferred="true" />
|
||||
<component name="WindowStateProjectService">
|
||||
<state x="473" y="214" key="FileChooserDialogImpl" timestamp="1607015731915">
|
||||
<screen x="0" y="0" width="1368" height="768" />
|
||||
</state>
|
||||
<state x="473" y="214" key="FileChooserDialogImpl/0.0.1368.768@0.0.1368.768" timestamp="1607015731915" />
|
||||
<state x="380" y="251" width="616" height="512" key="find.popup" timestamp="1606975273843">
|
||||
<screen x="0" y="0" width="1368" height="768" />
|
||||
</state>
|
||||
<state x="380" y="251" width="616" height="512" key="find.popup/0.0.1368.768@0.0.1368.768" timestamp="1606975273843" />
|
||||
</component>
|
||||
</project>
|
||||
@ -19,6 +19,14 @@ Save the params.py file and go back to the main onionbalance directory. Run
|
||||
|
||||
python3 setup.py install
|
||||
|
||||
and then you can setup the configuration
|
||||
and then you can setup the configuration with your front's URLs.
|
||||
|
||||
**When setting up your onionbalance configuration limit the amount of fronts to 18! Setting it higher you can get descriptor or introduction issues which will cause your onion's descriptor to not be correctly pushed.**
|
||||
To run onionbalance cd into the onionbalance directory and run:
|
||||
|
||||
nohup onionbalance -v info -c config/config.yaml &
|
||||
|
||||
This will start onionbalance detacted from the terminal and then put it in the background. Afterwards you can run
|
||||
|
||||
tail -f nohup.out
|
||||
|
||||
and see the status of it. You want to see distinct descriptors being pushed.
|
||||
@ -82,7 +82,7 @@ The main configuration can be found at the top of the `setup.sh` file. It custom
|
||||
There are options. Such as:
|
||||
* MASTERONION - Your V3 Master OnionBalance Address **WITHOUT http://** (example: dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion)
|
||||
* TORAUTHPASSWORD - Password which is used for your Tor Control Port Authentication with NGINX. Alphanumeric without spaces (example: passwordIcanremembertyping)
|
||||
* KEY - Alphanumeric Key for the shared front session key. Random between 64-128 would do fine. (example: isthis64charactorsalreadyicantbelieveitwowsocoolwaitnotyetohdarn)
|
||||
* KEY - Alphanumeric Key for the shared front session key. Random alphanumberic 64 or 128 would do fine. (example: isthis64charactorsalreadyicantbelieveitwowsocoolwaitnotyetohdarn)
|
||||
* SALT - 8 character salt used with the key. 8 random alphanumeric characters (example: saltsalt)
|
||||
* SESSION_LENGTH - In seconds the amount of time until cookie timeout. Set it high as you can. (example: 3600 [aka 1 hour])
|
||||
* HEXCOLOR - HEX color put into the css file to be not purple but your main site's color. Any CSS hex will work. (example: #9b59b6)
|
||||
|
||||
@ -8,10 +8,10 @@ font-family:roboto, helvetica, sans-serif, arial, verdana, tahoma;font-size:16px
|
||||
.container {width:100%;margin:0 auto;min-height:100%;position:relative;max-height:100vh;overflow:hidden; }
|
||||
.container>.inner{position:absolute;top:50%;left:0;right:0;margin:0 auto;text-align:center;-webkit-transform:translateY(-50%);-moz-transform:translateY(-50%); transform:translateY(-50%);}
|
||||
.container>.inner>.logo{display:inline-block;vertical-align:middle;text-decoration:none;margin-bottom:10px}
|
||||
.container>.inner>.logo>.square{display:inline-block;vertical-align:middle;width:40px;height:40px;background-color:#9b59b6;background-size:24px 24px;background-position:center center;background-repeat:no-repeat;margin-right:10px}
|
||||
.container>.inner>.logo>.square{display:inline-block;vertical-align:middle;width:40px;height:40px;background-color:#HEXCOLOR;background-size:24px 24px;background-position:center center;background-repeat:no-repeat;margin-right:10px}
|
||||
.container>.inner>.logo>.text{display:inline-block;vertical-align:middle;font-size:30px;color:#fff;font-weight:700}.container>.inner>.date{display:block;text-align:center;font-size:42px}
|
||||
.container>.inner>.date>.day{color:#9b59b6;font-weight:bold}.signed{display:block;width:400px;height:150px;margin-top:20px;margin:20px auto 0 auto;}
|
||||
.signed>textarea {margin:0 auto;width:400px;height:150px;min-width:400px;max-width:400px;display:block;padding:15px;background:#fff;border:1px solid #9b59b6;min-height:150px;max-height:150px;}p{margin:0 auto 20px auto;max-width:300px;}form.ddos_form .captcha-input{margin:0 auto 20px auto;display: block;width:300px;font-size:0;}form.ddos_form .captcha-input input{display:inline-block;vertical-align:top;height:50px;width:calc(100% - 150px);outline:0;border:none;font-size:16px;color:#000;padding:0 15px;line-height:50px;}form.ddos_form .captcha-input img{display:inline-block;vertical-align:top;}form.ddos_form button{border-radius:3px;display:block;width:300px;margin:0 auto;background:#9b59b6;cursor:pointer;color:#fff;font-size:16px;text-transform:uppercase;text-align:center;height:40px;line-height:40px;outline:0;border:none;}
|
||||
.container>.inner>.date>.day{color:#HEXCOLOR;font-weight:bold}.signed{display:block;width:400px;height:150px;margin-top:20px;margin:20px auto 0 auto;}
|
||||
.signed>textarea {margin:0 auto;width:400px;height:150px;min-width:400px;max-width:400px;display:block;padding:15px;background:#fff;border:1px solid #HEXCOLOR;min-height:150px;max-height:150px;}p{margin:0 auto 20px auto;max-width:300px;}form.ddos_form .captcha-input{margin:0 auto 20px auto;display: block;width:300px;font-size:0;}form.ddos_form .captcha-input input{display:inline-block;vertical-align:top;height:50px;width:calc(100% - 150px);outline:0;border:none;font-size:16px;color:#000;padding:0 15px;line-height:50px;}form.ddos_form .captcha-input img{display:inline-block;vertical-align:top;}form.ddos_form button{border-radius:3px;display:block;width:300px;margin:0 auto;background:#HEXCOLOR;cursor:pointer;color:#fff;font-size:16px;text-transform:uppercase;text-align:center;height:40px;line-height:40px;outline:0;border:none;}
|
||||
|
||||
.captchav2 {text-align: center;width: 100%;}
|
||||
|
||||
|
||||
161
lua/cap.lua
161
lua/cap.lua
@ -1,15 +1,15 @@
|
||||
-- encryption key and salt must be shared across fronts. salt must be 8 chars
|
||||
local key = "encryption_key"
|
||||
local salt = "1saltkey"
|
||||
local salt = "salt1234"
|
||||
-- for how long the captcha is valid. 120 sec is for testing, 3600 1 hour should be production.
|
||||
local session_timeout = 3600
|
||||
local session_timeout = sessionconfigvalue
|
||||
|
||||
aes = require "resty.aes"
|
||||
str = require "resty.string"
|
||||
cook = require "resty.cookie"
|
||||
random = require "resty.random"
|
||||
|
||||
aes_128_cbc_sha512x1 = aes:new(key, salt, aes.cipher(128,"cbc"), aes.hash.sha512, 1)
|
||||
aes_128_cbc_sha512x1 = aes:new(key, salt, aes.cipher(128, "cbc"), aes.hash.sha512, 1)
|
||||
|
||||
local cookie, err = cook:new()
|
||||
if not cookie then
|
||||
@ -18,15 +18,21 @@ if not cookie then
|
||||
end
|
||||
|
||||
function fromhex(str)
|
||||
return (str:gsub('..', function (cc)
|
||||
return string.char(tonumber(cc, 16))
|
||||
end))
|
||||
return (str:gsub(
|
||||
"..",
|
||||
function(cc)
|
||||
return string.char(tonumber(cc, 16))
|
||||
end
|
||||
))
|
||||
end
|
||||
|
||||
function tohex(str)
|
||||
return (str:gsub('.', function (c)
|
||||
return string.format('%02X', string.byte(c))
|
||||
end))
|
||||
return (str:gsub(
|
||||
".",
|
||||
function(c)
|
||||
return string.format("%02X", string.byte(c))
|
||||
end
|
||||
))
|
||||
end
|
||||
|
||||
caperror = nil
|
||||
@ -43,21 +49,21 @@ if in_array(allowed_hosts, ngx.var.http_host) == nil then
|
||||
if pa ~= "no_proxy" then
|
||||
local ok, err = ngx.timer.at(0, kill_circuit, ngx.var.remote_addr, ngx.var.proxy_protocol_addr)
|
||||
if not ok then
|
||||
ngx.log(ngx.ERR, "failed to create timer: ", err)
|
||||
return
|
||||
ngx.log(ngx.ERR, "failed to create timer: ", err)
|
||||
return
|
||||
end
|
||||
end
|
||||
ngx.exit(444)
|
||||
end
|
||||
|
||||
-- only GET and POST requests are allowed the others are not used. HEAD for recon checker
|
||||
if ngx.var.request_method ~= "POST" and ngx.var.request_method ~= "GET" and ngx.var.request_method ~= "HEAD" then
|
||||
-- only GET and POST requests are allowed the others are not used.
|
||||
if ngx.var.request_method ~= "POST" and ngx.var.request_method ~= "GET" then
|
||||
ngx.log(ngx.ERR, "Wrong request (" .. ngx.var.request_method .. ") " .. ngx.var.remote_addr .. "|" .. pa)
|
||||
if pa ~= "no_proxy" then
|
||||
local ok, err = ngx.timer.at(0, kill_circuit, ngx.var.remote_addr, ngx.var.proxy_protocol_addr)
|
||||
if not ok then
|
||||
ngx.log(ngx.ERR, "failed to create timer: ", err)
|
||||
return
|
||||
ngx.log(ngx.ERR, "failed to create timer: ", err)
|
||||
return
|
||||
end
|
||||
end
|
||||
ngx.exit(444)
|
||||
@ -69,8 +75,8 @@ if ngx.var.http_user_agent == nil then
|
||||
if pa ~= "no_proxy" then
|
||||
local ok, err = ngx.timer.at(0, kill_circuit, ngx.var.remote_addr, ngx.var.proxy_protocol_addr)
|
||||
if not ok then
|
||||
ngx.log(ngx.ERR, "failed to create timer: ", err)
|
||||
return
|
||||
ngx.log(ngx.ERR, "failed to create timer: ", err)
|
||||
return
|
||||
end
|
||||
end
|
||||
ngx.exit(444)
|
||||
@ -82,8 +88,8 @@ if ngx.var.request_method == "POST" and ngx.var.http_referer == nil then
|
||||
if pa ~= "no_proxy" then
|
||||
local ok, err = ngx.timer.at(0, kill_circuit, ngx.var.remote_addr, ngx.var.proxy_protocol_addr)
|
||||
if not ok then
|
||||
ngx.log(ngx.ERR, "failed to create timer: ", err)
|
||||
return
|
||||
ngx.log(ngx.ERR, "failed to create timer: ", err)
|
||||
return
|
||||
end
|
||||
end
|
||||
ngx.exit(444)
|
||||
@ -94,7 +100,7 @@ local field, err = cookie:get("dcap")
|
||||
local blocked_cookies = ngx.shared.blocked_cookies
|
||||
local bct, btcflags = blocked_cookies:get(field)
|
||||
if bct then
|
||||
ngx.header.content_type = 'text/plain'
|
||||
ngx.header.content_type = "text/plain"
|
||||
ngx.say("403 DDOS fliter killed your path. (You probably sent too many requests at once). Not calling you a bot, bot, but grab a new identity and try again.")
|
||||
ngx.flush()
|
||||
ngx.exit(200)
|
||||
@ -103,23 +109,31 @@ end
|
||||
-- check cookie support similar to testcookie
|
||||
if ngx.var.request_method == "GET" then
|
||||
local field, err = cookie:get("dcap")
|
||||
if err then
|
||||
--local tstamp = ngx.now() + slidingscalefunction
|
||||
local tstamp = ngx.now() + 10
|
||||
local plaintext = "queue|" .. tstamp .. "|1|" .. random.token(random.number(10,20))
|
||||
if err or not field then
|
||||
local tstamp = ngx.now() + 5
|
||||
local plaintext = "queue|" .. tstamp .. "|1|" .. random.token(random.number(10, 20))
|
||||
local ciphertext = tohex(aes_128_cbc_sha512x1:encrypt(plaintext))
|
||||
local ok, err = cookie:set({
|
||||
key = "dcap", value = ciphertext, path = "/",
|
||||
domain = ngx.var.host, httponly = true,
|
||||
max_age = session_timeout,
|
||||
samesite = "Lax"
|
||||
})
|
||||
local ok, err =
|
||||
cookie:set(
|
||||
{
|
||||
key = "dcap",
|
||||
value = ciphertext,
|
||||
path = "/",
|
||||
domain = ngx.var.host,
|
||||
httponly = true,
|
||||
max_age = 120,
|
||||
samesite = "Lax"
|
||||
}
|
||||
)
|
||||
if not ok then
|
||||
ngx.log(ngx.ERR, err)
|
||||
return
|
||||
end
|
||||
ngx.header.content_type = 'text/html'
|
||||
ngx.header.content_type = "text/html"
|
||||
local file = io.open("/etc/nginx/queue.html")
|
||||
if not file then
|
||||
ngx.exit(500)
|
||||
end
|
||||
local queue, err = file:read("*a")
|
||||
file:close()
|
||||
ngx.say(queue)
|
||||
@ -128,16 +142,15 @@ if ngx.var.request_method == "GET" then
|
||||
else
|
||||
plaintext = aes_128_cbc_sha512x1:decrypt(fromhex(field))
|
||||
if not plaintext then
|
||||
ngx.header.content_type = 'text/plain'
|
||||
ngx.header.content_type = "text/plain"
|
||||
ngx.say("403 DDOS fliter killed your path. (You probably sent too many requests at once). Not calling you a bot, bot, but grab a new identity and try again.")
|
||||
ngx.flush()
|
||||
ngx.exit(200)
|
||||
end
|
||||
cookdata = split(plaintext,"|")
|
||||
cookdata = split(plaintext, "|")
|
||||
local expired = nil
|
||||
if (cookdata[1] == "queue") then
|
||||
--if (tonumber(cookdata[2])) > ngx.now() or (tonumber(cookdata[2])) > tonumber(cookdata[2]) + slidingscalefunction then
|
||||
if (tonumber(cookdata[2])) > ngx.now() or (tonumber(cookdata[2])) > ngx.now() + 40 then
|
||||
if (tonumber(cookdata[2])) > ngx.now() or (tonumber(cookdata[2])) > ngx.now() + 15 then
|
||||
if pa ~= "no_proxy" then
|
||||
local ok, err = ngx.timer.at(0, kill_circuit, ngx.var.remote_addr, ngx.var.proxy_protocol_addr)
|
||||
if not ok then
|
||||
@ -150,6 +163,7 @@ if ngx.var.request_method == "GET" then
|
||||
ngx.exit(444)
|
||||
end
|
||||
|
||||
-- captcha generator functions
|
||||
require "caphtml_d"
|
||||
|
||||
local expired = nil
|
||||
@ -157,7 +171,6 @@ if ngx.var.request_method == "GET" then
|
||||
displaycap(session_timeout)
|
||||
ngx.flush()
|
||||
ngx.exit(200)
|
||||
|
||||
elseif (cookdata[1] == "cap_not_solved") then
|
||||
if (tonumber(cookdata[2]) + 60) > ngx.now() then
|
||||
if pa ~= "no_proxy" then
|
||||
@ -167,29 +180,39 @@ if ngx.var.request_method == "GET" then
|
||||
return
|
||||
end
|
||||
end
|
||||
ngx.header.content_type = 'text/html'
|
||||
ngx.header.content_type = "text/html"
|
||||
ngx.say("<h1>THINK OF WHAT YOU HAVE DONE!</h1>")
|
||||
ngx.say("<p>That captcha was generated just for you. And look at what you did. Ignoring the captcha... not even giving an incorrect answer to his meaningless existence. You couldn't even give him false hope. Shame on you.</p>")
|
||||
ngx.say("<p>Don't immedately refresh for a new captcha! Try and fail. You must now wait about a minute for a new captcha to load.</p>")
|
||||
ngx.flush()
|
||||
ngx.exit(200)
|
||||
end
|
||||
|
||||
-- captcha generator functions
|
||||
require "caphtml_d"
|
||||
|
||||
local expired = nil
|
||||
|
||||
require "caphtml_d"
|
||||
displaycap(session_timeout)
|
||||
ngx.flush()
|
||||
ngx.exit(200)
|
||||
elseif (cookdata[1] == "captcha_solved") then
|
||||
if (tonumber(cookdata[2]) + session_timeout) < ngx.now() then
|
||||
expired = true
|
||||
caperror = "Session expired"
|
||||
end
|
||||
|
||||
if cookdata[1] ~= "captcha_solved" or expired then
|
||||
require "caphtml_d"
|
||||
local expired = true
|
||||
caperror = "Session expired"
|
||||
displaycap(session_timeout)
|
||||
ngx.flush()
|
||||
ngx.exit(200)
|
||||
end
|
||||
end
|
||||
else
|
||||
local ok, err = ngx.timer.at(0, kill_circuit, ngx.var.remote_addr, ngx.var.proxy_protocol_addr)
|
||||
if not ok then
|
||||
ngx.log(ngx.ERR, "failed to create timer: ", err)
|
||||
return
|
||||
end
|
||||
local blocked_cookies = ngx.shared.blocked_cookies
|
||||
blocked_cookies:set(field, 1, 3600)
|
||||
ngx.header.content_type = "text/plain"
|
||||
ngx.say("That isn't going to work here")
|
||||
ngx.flush()
|
||||
ngx.exit(200)
|
||||
end
|
||||
end
|
||||
end
|
||||
@ -203,12 +226,12 @@ if ngx.var.request_method == "POST" then
|
||||
if field then
|
||||
plaintext = aes_128_cbc_sha512x1:decrypt(fromhex(field))
|
||||
if not plaintext then
|
||||
ngx.header.content_type = 'text/plain'
|
||||
ngx.header.content_type = "text/plain"
|
||||
ngx.say("403 DDOS fliter killed your path. (You probably sent too many requests at once). Not calling you a bot, bot, but grab a new identity and try again.")
|
||||
ngx.flush()
|
||||
ngx.exit(200)
|
||||
end
|
||||
cookdata = split(plaintext,"|")
|
||||
cookdata = split(plaintext, "|")
|
||||
local expired = nil
|
||||
if (cookdata[1] == "cap_not_solved") then
|
||||
if (tonumber(cookdata[2]) + session_timeout) < ngx.now() then
|
||||
@ -219,14 +242,14 @@ if ngx.var.request_method == "POST" then
|
||||
ngx.flush()
|
||||
ngx.exit(200)
|
||||
end
|
||||
elseif (cookdata[1] == "captcha_solved") then
|
||||
elseif (cookdata[1] == "captcha_solved") then
|
||||
return
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
require "caphtml_d"
|
||||
|
||||
-- resty has a library for parsing POST data but it's not really needed
|
||||
-- resty has a library for parsing POST data but it's not really needed
|
||||
ngx.req.read_body()
|
||||
local dataraw = ngx.req.get_body_data()
|
||||
if dataraw == nil then
|
||||
@ -240,18 +263,18 @@ if ngx.var.request_method == "POST" then
|
||||
data = split(data, "&")
|
||||
local sentcap = ""
|
||||
for index, value in ipairs(data) do
|
||||
sentcap = sentcap .. split(value,"=")[2]
|
||||
sentcap = sentcap .. split(value, "=")[2]
|
||||
end
|
||||
|
||||
if field then
|
||||
plaintext = aes_128_cbc_sha512x1:decrypt(fromhex(field))
|
||||
if not plaintext then
|
||||
ngx.header.content_type = 'text/plain'
|
||||
ngx.header.content_type = "text/plain"
|
||||
ngx.say("403 DDOS fliter killed your path. (You probably sent too many requests at once). Not calling you a bot, bot, but grab a new identity and try again.")
|
||||
ngx.flush()
|
||||
ngx.exit(200)
|
||||
end
|
||||
cookdata = split(plaintext,"|")
|
||||
cookdata = split(plaintext, "|")
|
||||
|
||||
if (tonumber(cookdata[2]) + 60) < ngx.now() then
|
||||
caperror = "Captcha expired"
|
||||
@ -263,23 +286,29 @@ if ngx.var.request_method == "POST" then
|
||||
if string.lower(sentcap) == string.lower(cookdata[3]) then
|
||||
local newcookdata = ""
|
||||
cookdata[1] = "captcha_solved"
|
||||
for k,v in pairs(cookdata) do
|
||||
cookdata[2] = ngx.now()
|
||||
for k, v in pairs(cookdata) do
|
||||
newcookdata = newcookdata .. "|" .. v
|
||||
end
|
||||
newcookdata = newcookdata .. "|" .. random.token(random.number(10,20))
|
||||
local tstamp = ngx.now()
|
||||
newcookdata = newcookdata .. "|" .. random.token(random.number(10, 20))
|
||||
local ciphertext = tohex(aes_128_cbc_sha512x1:encrypt(newcookdata))
|
||||
local ok, err = cookie:set({
|
||||
key = "dcap", value = ciphertext, path = "/",
|
||||
domain = ngx.var.host, httponly = true,
|
||||
max_age = session_timeout,
|
||||
samesite = "Lax"
|
||||
})
|
||||
local ok, err =
|
||||
cookie:set(
|
||||
{
|
||||
key = "dcap",
|
||||
value = ciphertext,
|
||||
path = "/",
|
||||
domain = ngx.var.host,
|
||||
httponly = true,
|
||||
max_age = session_timeout,
|
||||
samesite = "Lax"
|
||||
}
|
||||
)
|
||||
if not ok then
|
||||
ngx.say("cookie error")
|
||||
return
|
||||
end
|
||||
local redirect_to = ngx.var.uri
|
||||
local redirect_to = ngx.var.uri
|
||||
if ngx.var.query_string ~= nil then
|
||||
redirect_to = redirect_to .. "?" .. ngx.var.query_string
|
||||
end
|
||||
|
||||
@ -6,42 +6,18 @@ apt-get -y upgrade
|
||||
command="nginx -v"
|
||||
nginxv=$( ${command} 2>&1 )
|
||||
NGINXVERSION=$(echo $nginxv | grep -o '[0-9.]*$')
|
||||
|
||||
NGINXOPENSSL="1.1.1d"
|
||||
|
||||
wget https://nginx.org/download/nginx-$NGINXVERSION.tar.gz
|
||||
tar -xzvf nginx-$NGINXVERSION.tar.gz
|
||||
|
||||
cp -R dependencies/* nginx-$NGINXVERSION/
|
||||
|
||||
cd nginx-$NGINXVERSION
|
||||
|
||||
apt-get install -y build-essential zlib1g-dev libpcre3 libpcre3-dev unzip uuid-dev gcc git wget curl libgd3 libgd-dev
|
||||
|
||||
wget https://github.com/apache/incubator-pagespeed-ngx/archive/latest-beta.tar.gz
|
||||
tar -xzvf latest-beta.tar.gz
|
||||
cd incubator-pagespeed-ngx-latest-beta
|
||||
wget https://dl.google.com/dl/page-speed/psol/1.13.35.2-x64.tar.gz
|
||||
tar -xzvf 1.13.35.2-x64.tar.gz
|
||||
cd ..
|
||||
|
||||
git clone https://github.com/yorkane/socks-nginx-module
|
||||
git clone https://github.com/nbs-system/naxsi.git
|
||||
git clone https://github.com/kyprizel/testcookie-nginx-module.git
|
||||
wget https://www.openssl.org/source/openssl-$NGINXOPENSSL.tar.gz
|
||||
tar -xzvf openssl-$NGINXOPENSSL.tar.gz
|
||||
git clone https://github.com/openresty/headers-more-nginx-module.git
|
||||
git clone https://github.com/openresty/echo-nginx-module.git
|
||||
|
||||
#some required stuff for lua/luajit. obviously versions should be ckecked with every install/update
|
||||
git clone https://github.com/openresty/lua-nginx-module
|
||||
cd lua-nginx-module
|
||||
git checkout v0.10.16
|
||||
cd ..
|
||||
git clone https://github.com/openresty/luajit2
|
||||
cd luajit2
|
||||
git checkout v2.1-20200102
|
||||
cd ..
|
||||
git clone https://github.com/vision5/ngx_devel_kit
|
||||
cd luajit2
|
||||
make -j8 && make install
|
||||
cd ..
|
||||
|
||||
export LUAJIT_LIB=/usr/local/lib
|
||||
export LUAJIT_INC=/usr/local/include/luajit-2.1
|
||||
@ -49,37 +25,16 @@ export LUAJIT_INC=/usr/local/include/luajit-2.1
|
||||
--with-ld-opt="-Wl,-rpath,/usr/local/lib" \
|
||||
--with-compat --with-openssl=openssl-$NGINXOPENSSL \
|
||||
--with-http_ssl_module \
|
||||
--add-dynamic-module=incubator-pagespeed-ngx-latest-beta \
|
||||
--add-dynamic-module=naxsi/naxsi_src --add-dynamic-module=testcookie-nginx-module \
|
||||
--add-dynamic-module=naxsi/naxsi_src \
|
||||
--add-dynamic-module=headers-more-nginx-module \
|
||||
--add-dynamic-module=socks-nginx-module \
|
||||
--add-dynamic-module=echo-nginx-module \
|
||||
--add-dynamic-module=ngx_devel_kit \
|
||||
--add-dynamic-module=lua-nginx-module
|
||||
|
||||
git clone https://github.com/openresty/lua-resty-string
|
||||
cd lua-resty-string
|
||||
make install
|
||||
cd ..
|
||||
|
||||
git clone https://github.com/cloudflare/lua-resty-cookie
|
||||
cd lua-resty-cookie
|
||||
make install
|
||||
cd ..
|
||||
|
||||
git clone https://github.com/bungle/lua-resty-session
|
||||
cp -a lua-resty-session/lib/resty/session* /usr/local/lib/lua/resty/
|
||||
|
||||
wget -O /usr/local/lib/lua/resty/aes_functions.lua https://github.com/c64bob/lua-resty-aes/raw/master/lib/resty/aes_functions.lua
|
||||
|
||||
#include seems to be a bit mssed up with luajit
|
||||
mkdir /etc/nginx/resty
|
||||
ln -s /usr/local/lib/lua/resty/ /etc/nginx/resty/
|
||||
|
||||
wget -O /usr/local/lib/lua/resty/random.lua https://raw.githubusercontent.com/bungle/lua-resty-random/master/lib/resty/random.lua
|
||||
|
||||
make -j16 modules
|
||||
|
||||
cp -r objs modules
|
||||
rm -R /etc/nginx/modules/modules
|
||||
rm -R /etc/nginx/modules
|
||||
mkdir /etc/nginx/modules
|
||||
mv modules /etc/nginx/modules
|
||||
File diff suppressed because one or more lines are too long
@ -1,4 +1,4 @@
|
||||
local b='ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'
|
||||
local b = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"
|
||||
|
||||
local function base64_encode(data)
|
||||
return ((data:gsub('.', function(x)
|
||||
@ -29,105 +29,7 @@ local function base64_decode(data)
|
||||
end
|
||||
|
||||
function displaycap()
|
||||
|
||||
hour = random.number(0,11)
|
||||
minute = random.number(0,59)
|
||||
shour = tostring(hour)
|
||||
sminute = tostring(minute)
|
||||
if string.len(shour) < 2 then shour = "0" .. shour end
|
||||
if string.len(sminute) < 2 then sminute = "0" .. sminute end
|
||||
|
||||
local gd = require("gd")
|
||||
|
||||
local pickedtime = shour .. ":" .. sminute
|
||||
local radios = {}
|
||||
local ctimeindex = random.number(1,10)
|
||||
radios[ctimeindex] = {}
|
||||
radios[ctimeindex][1] = pickedtime
|
||||
radios[ctimeindex][2] = shour .. sminute
|
||||
for i = 1,ctimeindex-1,1 do
|
||||
fshour = tostring(random.number(0,11))
|
||||
fsminute = tostring(random.number(0,59))
|
||||
if string.len(fshour) < 2 then fshour = "0" .. fshour end
|
||||
if string.len(fsminute) < 2 then fsminute = "0" .. fsminute end
|
||||
local fpickedtime = fshour .. ":" .. fsminute
|
||||
radios[i] = {}
|
||||
radios[i][1] = fpickedtime
|
||||
radios[i][2] = fshour .. fsminute
|
||||
end
|
||||
for i = ctimeindex+1,10,1 do
|
||||
fshour = tostring(random.number(0,11))
|
||||
fsminute = tostring(random.number(0,59))
|
||||
if string.len(fshour) < 2 then fshour = "0" .. fshour end
|
||||
if string.len(fsminute) < 2 then fsminute = "0" .. fsminute end
|
||||
local fpickedtime = fshour .. ":" .. fsminute
|
||||
radios[i] = {}
|
||||
radios[i][1] = fpickedtime
|
||||
radios[i][2] = fshour .. fsminute
|
||||
end
|
||||
|
||||
|
||||
|
||||
local function createClock(size, hours, minutes)
|
||||
local im = gd.createTrueColor(size, size)
|
||||
|
||||
local white = im:colorAllocate(random.number(200,255), random.number(200,255), random.number(200,255))
|
||||
local gray = im:colorAllocate(random.number(100,150), random.number(100,150), random.number(100,150))
|
||||
local black = im:colorAllocate(random.number(0,10), random.number(0,10), random.number(0,10))
|
||||
|
||||
local hrhand = im:colorAllocate(random.number(0,350), random.number(0,150), random.number(0,148))
|
||||
local minhand = im:colorAllocate(random.number(0,350), random.number(0,150), random.number(0,148))
|
||||
|
||||
local cxy = size/2
|
||||
|
||||
im:filledRectangle(0, 0, size, size, white)
|
||||
im:setThickness(2)
|
||||
im:arc(cxy, cxy, size, size, 0, 360, black)
|
||||
|
||||
local ang = 0
|
||||
local rang, gsize
|
||||
while ang < 360 do
|
||||
rang = math.rad(ang)
|
||||
if (ang % 90) == 0 then
|
||||
gsize = 0.75
|
||||
elseif (ang % 5) == 0 then
|
||||
gsize = 0.85
|
||||
else
|
||||
gsize = 0.90
|
||||
end
|
||||
im:line(
|
||||
cxy + gsize * cxy * math.sin(rang),
|
||||
size - (cxy + gsize * cxy * math.cos(rang)),
|
||||
cxy + cxy * 0.9 * math.sin(rang),
|
||||
size - (cxy + cxy * 0.9 * math.cos(rang)),
|
||||
gray)
|
||||
ang = ang + 6
|
||||
end
|
||||
|
||||
im:setThickness(math.max(1, size/50))
|
||||
im:line(cxy, cxy,
|
||||
cxy + 0.45 * size * math.sin(math.rad(6*minutes)),
|
||||
size - (cxy + 0.45 * size * math.cos(math.rad(6*minutes))),
|
||||
hrhand)
|
||||
|
||||
im:setThickness(math.max(1, size/25))
|
||||
rang = math.rad(30*hours + minutes/2)
|
||||
im:line(cxy, cxy,
|
||||
cxy + 0.25 * size * math.sin(rang),
|
||||
size - (cxy + 0.25 * size * math.cos(rang)),
|
||||
minhand)
|
||||
|
||||
im:setThickness(1)
|
||||
local sp = math.max(1, size/20)
|
||||
im:filledArc(cxy, cxy, sp, sp, 0, 360, black, gd.ARC)
|
||||
return im
|
||||
end
|
||||
|
||||
local im = createClock(190, hour, minute)
|
||||
local imageraw = im:jpegStr(90)
|
||||
local imageb64 = base64_encode(imageraw)
|
||||
|
||||
|
||||
ngx.header.content_type = "text/html"
|
||||
local cookie, err = cook:new()
|
||||
if not cookie then
|
||||
ngx.log(ngx.ERR, err)
|
||||
@ -135,150 +37,341 @@ local imageb64 = base64_encode(imageraw)
|
||||
ngx.exit(200)
|
||||
end
|
||||
|
||||
local tstamp = ngx.now()
|
||||
local newcookdata = "cap_not_solved|" .. tstamp .. "|" .. shour .. sminute
|
||||
|
||||
newcookdata = newcookdata .. "|" .. random.token(random.number(10,20))
|
||||
|
||||
local ciphertext = tohex(aes_128_cbc_sha512x1:encrypt(newcookdata))
|
||||
local ok, err = cookie:set({
|
||||
key = "dcap", value = ciphertext, path = "/",
|
||||
domain = ngx.var.host, httponly = true,
|
||||
max_age = 21600,
|
||||
samesite = "Lax"
|
||||
})
|
||||
if not ok then
|
||||
ngx.say("cookie error")
|
||||
ngx.exit(200)
|
||||
local field, err = cookie:get("dcap")
|
||||
plaintext = aes_128_cbc_sha512x1:decrypt(fromhex(field))
|
||||
local blocked_cookies = ngx.shared.blocked_cookies
|
||||
blocked_cookies:set(field, 1, 3600)
|
||||
cookdata = split(plaintext, "|")
|
||||
if (cookdata[1] == "cap_not_solved") then
|
||||
if (cookdata[5] == "3") then
|
||||
ngx.say("You failed the captcha too many times. Get a new identity and try again.")
|
||||
ngx.exit(200)
|
||||
end
|
||||
end
|
||||
|
||||
hour = random.number(0, 11)
|
||||
minute = random.number(0, 59)
|
||||
shour = tostring(hour)
|
||||
sminute = tostring(minute)
|
||||
if string.len(shour) < 2 then
|
||||
shour = "0" .. shour
|
||||
end
|
||||
if string.len(sminute) < 2 then
|
||||
sminute = "0" .. sminute
|
||||
end
|
||||
|
||||
ngx.header.content_type = 'text/html';
|
||||
ngx.say("<!DOCTYPE html> \
|
||||
local gd = require("gd")
|
||||
|
||||
local pickedtime = shour .. ":" .. sminute
|
||||
local radios = {}
|
||||
local ctimeindex = random.number(1, 10)
|
||||
radios[ctimeindex] = {}
|
||||
radios[ctimeindex][1] = pickedtime
|
||||
radios[ctimeindex][2] = shour .. sminute
|
||||
for i = 1, ctimeindex - 1, 1 do
|
||||
fshour = tostring(random.number(0, 11))
|
||||
fsminute = tostring(random.number(0, 59))
|
||||
if string.len(fshour) < 2 then
|
||||
fshour = "0" .. fshour
|
||||
end
|
||||
if string.len(fsminute) < 2 then
|
||||
fsminute = "0" .. fsminute
|
||||
end
|
||||
local fpickedtime = fshour .. ":" .. fsminute
|
||||
radios[i] = {}
|
||||
radios[i][1] = fpickedtime
|
||||
radios[i][2] = fshour .. fsminute
|
||||
end
|
||||
for i = ctimeindex + 1, 10, 1 do
|
||||
fshour = tostring(random.number(0, 11))
|
||||
fsminute = tostring(random.number(0, 59))
|
||||
if string.len(fshour) < 2 then
|
||||
fshour = "0" .. fshour
|
||||
end
|
||||
if string.len(fsminute) < 2 then
|
||||
fsminute = "0" .. fsminute
|
||||
end
|
||||
local fpickedtime = fshour .. ":" .. fsminute
|
||||
radios[i] = {}
|
||||
radios[i][1] = fpickedtime
|
||||
radios[i][2] = fshour .. fsminute
|
||||
end
|
||||
|
||||
local function createClock(size, hours, minutes)
|
||||
local im = gd.createTrueColor(size, size)
|
||||
|
||||
local white = im:colorAllocate(random.number(200, 255), random.number(200, 255), random.number(200, 255))
|
||||
local gray = im:colorAllocate(random.number(100, 150), random.number(100, 150), random.number(100, 150))
|
||||
local black = im:colorAllocate(random.number(0, 10), random.number(0, 10), random.number(0, 10))
|
||||
|
||||
local hrhand = im:colorAllocate(random.number(0, 350), random.number(0, 150), random.number(0, 148))
|
||||
local minhand = im:colorAllocate(random.number(0, 350), random.number(0, 150), random.number(0, 148))
|
||||
|
||||
local cxy = size / 2
|
||||
|
||||
im:filledRectangle(0, 0, size, size, white)
|
||||
im:setThickness(2)
|
||||
im:arc(cxy, cxy, size, size, 0, 360, black)
|
||||
|
||||
local ang = 0
|
||||
local rang, gsize
|
||||
while ang < 360 do
|
||||
rang = math.rad(ang)
|
||||
if (ang % 90) == 0 then
|
||||
gsize = 0.75
|
||||
elseif (ang % 5) == 0 then
|
||||
gsize = 0.85
|
||||
else
|
||||
gsize = 0.90
|
||||
end
|
||||
im:line(
|
||||
cxy + gsize * cxy * math.sin(rang),
|
||||
size - (cxy + gsize * cxy * math.cos(rang)),
|
||||
cxy + cxy * 0.9 * math.sin(rang),
|
||||
size - (cxy + cxy * 0.9 * math.cos(rang)),
|
||||
gray
|
||||
)
|
||||
ang = ang + 6
|
||||
end
|
||||
|
||||
im:setThickness(math.max(1, size / 50))
|
||||
im:line(
|
||||
cxy,
|
||||
cxy,
|
||||
cxy + 0.45 * size * math.sin(math.rad(6 * minutes)),
|
||||
size - (cxy + 0.45 * size * math.cos(math.rad(6 * minutes))),
|
||||
hrhand
|
||||
)
|
||||
|
||||
im:setThickness(math.max(1, size / 25))
|
||||
rang = math.rad(30 * hours + minutes / 2)
|
||||
im:line(cxy, cxy, cxy + 0.25 * size * math.sin(rang), size - (cxy + 0.25 * size * math.cos(rang)), minhand)
|
||||
|
||||
im:setThickness(1)
|
||||
local sp = math.max(1, size / 20)
|
||||
im:filledArc(cxy, cxy, sp, sp, 0, 360, black, gd.ARC)
|
||||
|
||||
im:setThickness(random.number(2, 3))
|
||||
fillcolor = im:colorAllocate(random.number(5, 255), random.number(5, 255), random.number(5, 255))
|
||||
x = random.number(40, 120)
|
||||
y = random.number(40, 120)
|
||||
im:arc(x, y, random.number(30, 90), random.number(30, 90), 0, 360, fillcolor)
|
||||
|
||||
fillcolor = im:colorAllocate(random.number(5, 255), random.number(5, 255), random.number(5, 255))
|
||||
x = random.number(40, 120)
|
||||
y = random.number(40, 120)
|
||||
im:rectangle(x, y, x + random.number(30, 90), y + random.number(30, 90), fillcolor)
|
||||
|
||||
x = random.number(40, 100)
|
||||
y = random.number(x + 40, 180)
|
||||
fillcolor = im:colorAllocate(random.number(5, 255), random.number(5, 255), random.number(5, 255))
|
||||
im:polygon(
|
||||
{
|
||||
{cxy, cxy},
|
||||
{random.number(10, 150), random.number(10, 150)},
|
||||
{random.number(10, 150), random.number(10, 150)}
|
||||
},
|
||||
fillcolor
|
||||
)
|
||||
return im
|
||||
end
|
||||
|
||||
local im = createClock(190, hour, minute)
|
||||
local imageraw = im:jpegStr(80)
|
||||
local imageb64 = base64_encode(imageraw)
|
||||
|
||||
hour = tostring(hour)
|
||||
minute = tostring(minute)
|
||||
if string.len(hour) < 2 then
|
||||
hour = "0" .. hour
|
||||
end
|
||||
if string.len(minute) < 2 then
|
||||
minute = "0" .. minute
|
||||
end
|
||||
|
||||
if (cookdata[1] == "queue") then
|
||||
local tstamp = ngx.now()
|
||||
local newcookdata = "cap_not_solved|" .. tstamp .. "|" .. hour .. minute
|
||||
|
||||
newcookdata = newcookdata .. "|" .. random.token(random.number(10, 20)) .. "|1"
|
||||
|
||||
local ciphertext = tohex(aes_128_cbc_sha512x1:encrypt(newcookdata))
|
||||
local ok, err =
|
||||
cookie:set(
|
||||
{
|
||||
key = "dcap",
|
||||
value = ciphertext,
|
||||
path = "/",
|
||||
domain = ngx.var.host,
|
||||
httponly = true,
|
||||
max_age = 120,
|
||||
samesite = "Lax"
|
||||
}
|
||||
)
|
||||
if not ok then
|
||||
ngx.say("cookie error")
|
||||
ngx.exit(200)
|
||||
end
|
||||
else
|
||||
local tstamp = ngx.now()
|
||||
local tries = tonumber(cookdata[5] + 1)
|
||||
local newcookdata = "cap_not_solved|" .. tstamp .. "|" .. hour .. minute
|
||||
|
||||
newcookdata = newcookdata .. "|" .. random.token(random.number(10, 20)) .. "|" .. tries
|
||||
|
||||
local ciphertext = tohex(aes_128_cbc_sha512x1:encrypt(newcookdata))
|
||||
local ok, err =
|
||||
cookie:set(
|
||||
{
|
||||
key = "dcap",
|
||||
value = ciphertext,
|
||||
path = "/",
|
||||
domain = ngx.var.host,
|
||||
httponly = true,
|
||||
max_age = 120,
|
||||
samesite = "Lax"
|
||||
}
|
||||
)
|
||||
if not ok then
|
||||
ngx.say("cookie error")
|
||||
ngx.exit(200)
|
||||
end
|
||||
end
|
||||
|
||||
ngx.say('<!DOCTYPE html> \
|
||||
<html lang=en> \
|
||||
<head> \
|
||||
<title>DDOS Protection</title> \
|
||||
<meta charset=\"UTF-8\"> \
|
||||
<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\"> \
|
||||
<link id=\"favicon\" rel=\"shortcut icon\" href=\"data:image/x-icon;base64,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\"> \
|
||||
</head><body><style>")
|
||||
<meta charset="UTF-8"> \
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0"> \
|
||||
<link id="favicon" rel="shortcut icon" href="data:image/x-icon;base64,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"> \
|
||||
</head><body><style>')
|
||||
|
||||
local file = io.open("/etc/nginx/cap_d.css")
|
||||
local file = io.open("/etc/nginx/cap_d.css")
|
||||
|
||||
if not file then
|
||||
ngx.exit(500)
|
||||
end
|
||||
if not file then
|
||||
ngx.exit(500)
|
||||
end
|
||||
|
||||
local css, err = file:read("*a")
|
||||
local css, err = file:read("*a")
|
||||
|
||||
file:close()
|
||||
file:close()
|
||||
|
||||
ngx.say(css)
|
||||
ngx.say(css)
|
||||
|
||||
ngx.say("</style> \
|
||||
<div class=\"container\"> \
|
||||
<div class=\"inner\"> \
|
||||
<div class=\"logo\"> \
|
||||
<div class=\"square\" style=\"background-image:url(data:image/png;base64,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)\"></div> \
|
||||
<div class=\"text\">dread</div> \
|
||||
</div>")
|
||||
if caperror ~= nil
|
||||
then
|
||||
ngx.say("<p class=\"alert alert-danger text-center\"><strong>Error: </strong>" .. caperror .. "</p>")
|
||||
else
|
||||
ngx.say("<p>Prove that you are human. Select the time shown on the clock image.</p>")
|
||||
end
|
||||
ngx.say("<form class=\"ddos_form\" method=\"post\"> \
|
||||
<div class=\"captchav2\" style=\"margin-bottom:15px;\"> \
|
||||
<div class=\"imgWrap\" style=\"border:2px solid #fff; max-width: 100%; border-radius: 50%; background-image:url(data:image/png;base64," .. imageb64 .. "\"></div>")
|
||||
ngx.say("</div>");
|
||||
ngx.say("<div style=\"margin-bottom: 15px;\">")
|
||||
ngx.say("<select class=\"center\" name=\"cap\" required>")
|
||||
for i = 0,11,1 do
|
||||
if i < 10 then si = "0" .. tostring(i) else si = i end
|
||||
ngx.say("<option value=\"" .. si .. "\">" .. si .. "</option>\n")
|
||||
end
|
||||
ngx.say("</select> : ")
|
||||
ngx.say("<select name=\"cap\" required>")
|
||||
for i = 0,59,1 do
|
||||
if i < 10 then si = "0" .. tostring(i) else si = i end
|
||||
ngx.say("<option value=\"" .. si .. "\">" .. si .. "</option>\n")
|
||||
end
|
||||
ngx.say("</select>")
|
||||
--ngx.say("<input type=\"text\" required name=\"cap\" maxlength=\"2\" size=\"2\" placeholder=\"hh\"> : ")
|
||||
--ngx.say("<input type=\"text\" required name=\"cap\" maxlength=\"2\" size=\"2\" placeholder=\"mm\">")
|
||||
ngx.say("</div>");
|
||||
ngx.say("<div class=\"expire\"> \
|
||||
<div class=\"timer\"> \
|
||||
<div class=\"time-part-wrapper\"> \
|
||||
<div class=\"time-part seconds tens\"> \
|
||||
<div class=\"digit-wrapper\"> \
|
||||
<span class=\"digit\">0</span> \
|
||||
<span class=\"digit\">5</span> \
|
||||
<span class=\"digit\">4</span> \
|
||||
<span class=\"digit\">3</span> \
|
||||
<span class=\"digit\">2</span> \
|
||||
<span class=\"digit\">1</span> \
|
||||
<span class=\"digit\">0</span> \
|
||||
ngx.say('</style> \
|
||||
<div class="container"> \
|
||||
<div class="inner"> \
|
||||
<div class="logo"> \
|
||||
<div class="square" style="background-image:url(data:image/png;base64,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)"></div> \
|
||||
<div class="text">SITENAME</div> \
|
||||
</div>')
|
||||
|
||||
if caperror ~= nil then
|
||||
ngx.say('<p class="alert alert-danger text-center"><strong>Error: </strong>' .. caperror .. "</p>")
|
||||
else
|
||||
ngx.say("<p>Prove that you are human. Select the time shown on the clock image.</p>")
|
||||
end
|
||||
ngx.say('<form class="ddos_form" method="post"> \
|
||||
<div class="captchav2" style="margin-bottom:15px;"> \
|
||||
<div class="imgWrap" style="border:2px solid #fff; max-width: 100%; border-radius: 50%; background-image:url(data:image/png;base64,' .. imageb64 .. ');"></div>')
|
||||
ngx.say("</div>")
|
||||
ngx.say('<div style="margin-bottom: 15px;">')
|
||||
ngx.say('<select class="center" name="cap" required>')
|
||||
for i = 0, 11, 1 do
|
||||
if i < 10 then
|
||||
si = "0" .. tostring(i)
|
||||
else
|
||||
si = i
|
||||
end
|
||||
ngx.say('<option value="' .. si .. '">' .. si .. "</option>\n")
|
||||
end
|
||||
ngx.say("</select> : ")
|
||||
ngx.say('<select name="cap" required>')
|
||||
for i = 0, 59, 1 do
|
||||
if i < 10 then
|
||||
si = "0" .. tostring(i)
|
||||
else
|
||||
si = i
|
||||
end
|
||||
ngx.say('<option value="' .. si .. '">' .. si .. "</option>\n")
|
||||
end
|
||||
ngx.say("</select>")
|
||||
--ngx.say("<input type=\"text\" required name=\"cap\" maxlength=\"2\" size=\"2\" placeholder=\"hh\"> : ")
|
||||
--ngx.say("<input type=\"text\" required name=\"cap\" maxlength=\"2\" size=\"2\" placeholder=\"mm\">")
|
||||
ngx.say("</div>")
|
||||
ngx.say(
|
||||
'<div class="expire"> \
|
||||
<div class="timer"> \
|
||||
<div class="time-part-wrapper"> \
|
||||
<div class="time-part seconds tens"> \
|
||||
<div class="digit-wrapper"> \
|
||||
<span class="digit">0</span> \
|
||||
<span class="digit">5</span> \
|
||||
<span class="digit">4</span> \
|
||||
<span class="digit">3</span> \
|
||||
<span class="digit">2</span> \
|
||||
<span class="digit">1</span> \
|
||||
<span class="digit">0</span> \
|
||||
</div> \
|
||||
</div> \
|
||||
<div class=\"time-part seconds ones\"> \
|
||||
<div class=\"digit-wrapper\"> \
|
||||
<span class=\"digit\">0</span> \
|
||||
<span class=\"digit\">9</span> \
|
||||
<span class=\"digit\">8</span> \
|
||||
<span class=\"digit\">7</span> \
|
||||
<span class=\"digit\">6</span> \
|
||||
<span class=\"digit\">5</span> \
|
||||
<span class=\"digit\">4</span> \
|
||||
<span class=\"digit\">3</span> \
|
||||
<span class=\"digit\">2</span> \
|
||||
<span class=\"digit\">1</span> \
|
||||
<span class=\"digit\">0</span> \
|
||||
<div class="time-part seconds ones"> \
|
||||
<div class="digit-wrapper"> \
|
||||
<span class="digit">0</span> \
|
||||
<span class="digit">9</span> \
|
||||
<span class="digit">8</span> \
|
||||
<span class="digit">7</span> \
|
||||
<span class="digit">6</span> \
|
||||
<span class="digit">5</span> \
|
||||
<span class="digit">4</span> \
|
||||
<span class="digit">3</span> \
|
||||
<span class="digit">2</span> \
|
||||
<span class="digit">1</span> \
|
||||
<span class="digit">0</span> \
|
||||
</div> \
|
||||
</div> \
|
||||
</div> \
|
||||
<div class=\"time-part-wrapper\"> \
|
||||
<div class=\"time-part hundredths tens\"> \
|
||||
<div class=\"digit-wrapper\"> \
|
||||
<span class=\"digit\">0</span> \
|
||||
<span class=\"digit\">9</span> \
|
||||
<span class=\"digit\">8</span> \
|
||||
<span class=\"digit\">7</span> \
|
||||
<span class=\"digit\">6</span> \
|
||||
<span class=\"digit\">5</span> \
|
||||
<span class=\"digit\">4</span> \
|
||||
<span class=\"digit\">3</span> \
|
||||
<span class=\"digit\">2</span> \
|
||||
<span class=\"digit\">1</span> \
|
||||
<span class=\"digit\">0</span> \
|
||||
<div class="time-part-wrapper"> \
|
||||
<div class="time-part hundredths tens"> \
|
||||
<div class="digit-wrapper"> \
|
||||
<span class="digit">0</span> \
|
||||
<span class="digit">9</span> \
|
||||
<span class="digit">8</span> \
|
||||
<span class="digit">7</span> \
|
||||
<span class="digit">6</span> \
|
||||
<span class="digit">5</span> \
|
||||
<span class="digit">4</span> \
|
||||
<span class="digit">3</span> \
|
||||
<span class="digit">2</span> \
|
||||
<span class="digit">1</span> \
|
||||
<span class="digit">0</span> \
|
||||
</div> \
|
||||
</div> \
|
||||
<div class=\"time-part hundredths ones\"> \
|
||||
<div class=\"digit-wrapper\"> \
|
||||
<span class=\"digit\">0</span> \
|
||||
<span class=\"digit\">9</span> \
|
||||
<span class=\"digit\">8</span> \
|
||||
<span class=\"digit\">7</span> \
|
||||
<span class=\"digit\">6</span> \
|
||||
<span class=\"digit\">5</span> \
|
||||
<span class=\"digit\">4</span> \
|
||||
<span class=\"digit\">3</span> \
|
||||
<span class=\"digit\">2</span> \
|
||||
<span class=\"digit\">1</span> \
|
||||
<span class=\"digit\">0</span> \
|
||||
<div class="time-part hundredths ones"> \
|
||||
<div class="digit-wrapper"> \
|
||||
<span class="digit">0</span> \
|
||||
<span class="digit">9</span> \
|
||||
<span class="digit">8</span> \
|
||||
<span class="digit">7</span> \
|
||||
<span class="digit">6</span> \
|
||||
<span class="digit">5</span> \
|
||||
<span class="digit">4</span> \
|
||||
<span class="digit">3</span> \
|
||||
<span class="digit">2</span> \
|
||||
<span class="digit">1</span> \
|
||||
<span class="digit">0</span> \
|
||||
</div> \
|
||||
</div> \
|
||||
</div> \
|
||||
</div> \
|
||||
</div>")
|
||||
</div>')
|
||||
|
||||
ngx.say("<button class=\"before\" type=\"submit\">Verify</button> \
|
||||
<button class=\"expired\" type=\"submit\"> Refresh (expired)</button> \
|
||||
ngx.say('<button class="before" type="submit">Verify</button> \
|
||||
<button class="expired" type="submit"> Refresh (expired)</button> \
|
||||
</form> \
|
||||
</div> \
|
||||
</div> \
|
||||
</body> \
|
||||
</html>")
|
||||
|
||||
</html>')
|
||||
end
|
||||
|
||||
|
||||
10
setup.sh
10
setup.sh
@ -17,7 +17,8 @@ SESSION_LENGTH=3600
|
||||
|
||||
#CSS Branding
|
||||
|
||||
HEXCOLOR="#9b59b6"
|
||||
HEXCOLOR="9b59b6"
|
||||
HEXCOLORDARK="6d3d82"
|
||||
SITENAME="dread"
|
||||
|
||||
#There is more branding you need to do in the resty/caphtml_d.lua file near the end.
|
||||
@ -32,7 +33,7 @@ NC='\033[0m' # No Color
|
||||
printf "\r\nProvided by your lovely ${BLUE}/u/Paris${NC} from dread. \r\n"
|
||||
printf "with help from ${BLUE}/u/mr_white${NC} from whitehousemarket.\n"
|
||||
echo "For the full effects of the DDOS prevention you will need to make sure to setup v3 onionbalance."
|
||||
echo "Onionbalance v3 does have distinct descriptors in a forked version. Read the README.MD in the onionbalance folder for more information. "
|
||||
echo "Onionbalance v3 does have distinct descriptors in a forked version. Read the README.MD in the onionbalance folder for more information."
|
||||
|
||||
if [ ${#MASTERONION} -lt 62 ]; then
|
||||
echo "MASTEWRONION doesn't have the correct length. The url needs to include the .onion at the end."
|
||||
@ -104,6 +105,11 @@ string+="$HEXCOLOR"
|
||||
string+="/g"
|
||||
sed -i $string queue.html
|
||||
|
||||
string="s/HEXCOLORDARK/"
|
||||
string+="$HEXCOLORDARK"
|
||||
string+="/g"
|
||||
sed -i $string queue.html
|
||||
|
||||
string="s/SITENAME/"
|
||||
string+="$SITENAME"
|
||||
string+="/g"
|
||||
|
||||
@ -15,7 +15,7 @@ lua_package_path "/etc/nginx/resty/?.lua;;";
|
||||
|
||||
init_by_lua_block {
|
||||
allowed_hosts = { "mainonion",
|
||||
"dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad.onion"
|
||||
"masterbalanceonion"
|
||||
}
|
||||
|
||||
function in_array(tab, val)
|
||||
@ -77,7 +77,7 @@ init_by_lua_block {
|
||||
end
|
||||
ngx.log(ngx.ERR, "connected to tor")
|
||||
|
||||
local bytes, err = sock:send("authenticate \"changethispassowrd\"\n")
|
||||
local bytes, err = sock:send("authenticate \"torauthpassword\"\n")
|
||||
if not bytes then
|
||||
ngx.log(ngx.ERR, "failed authenticate to tor: " .. err)
|
||||
return
|
||||
@ -286,12 +286,12 @@ server {
|
||||
error_log /etc/nginx/naxsi.log;
|
||||
proxy_set_header Host $host;
|
||||
socks_pass socks5://tor;
|
||||
socks_set_host biblemeowimkh3utujmhm6oh2oeb3ubjw2lpgeq3lahrfr2l6ev6zgyd.onion;
|
||||
socks_set_host backendurl;
|
||||
socks_set_header Host $host;
|
||||
socks_redirect off;
|
||||
socks_http_version 1.1;
|
||||
socks_next_upstream error timeout invalid_header http_500 http_502 http_503;
|
||||
#proxy_pass http://10.10.10.10:80;
|
||||
#proxy_pass http://proxypassurl;
|
||||
|
||||
header_filter_by_lua_block {
|
||||
local cookie, err = cook:new()
|
||||
|
||||
Loading…
Reference in New Issue
Block a user