XSS报警机制（前端防火墙：第二篇）

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

<code>#!php

public function addVul(){

    if(I('get.category','','int') == ""){

        $this->ajaxReturn(array(

            "typeMsg" =>  "error",

            "msgText" =>  "漏洞类型错误",

        ));

    }

    switch (I('get.category','','int')) {

        case '1':

            $vul['category'] = "触发alret函数";

            break;

        case '2':

            $vul['category'] = "发现不在白名单里的第三方JavaScript资源";

            break;

        default:

            $this->ajaxReturn(array(

                "typeMsg" =>  "error",

                "msgText" =>  "漏洞类型错误",

            ));

            break;

    }

    if($_SERVER['HTTP_X_FORWARDED_FOR'] === null){

        $vul['hxff_ip'] = "攻击者没有通过代理服务器访问";

    }else{

        $vul['hxff_ip'] = I('server.HTTP_X_FORWARDED_FOR'); //获取攻击者的HTTP_X_FORWARDED_FOR

    }

    if($_SERVER['HTTP_CLIENT_IP'] === null){

        $vul['hci_ip'] = "攻击者数据包头部没有HTTP_CLIENT_IP";

    }else{

        $vul['hci_ip'] = I('server.HTTP_CLIENT_IP');//获取攻击者的HTTP_CLIENT_IP

    }

    $vul['ra_ip'] = I('server.REMOTE_ADDR');    //获取攻击者的REMOTE_ADDR

    $vulcookie    = I('cookie.');   //获取攻击者的cookies

    for($i = 0;$i<count($vulcookie);$i++){

        $vul['cookies'] .= array_keys($vulcookie)[$i].'='.$vulcookie[array_keys($vulcookie)[$i]].'; ';  //拼接成方便查看的cookies格式

    }

    $vul['url']   = I('server.HTTP_REFERER');   //获取攻击者攻击成功的url

    $vul['ua']    = I('server.HTTP_USER_AGENT');    //获取攻击者的User-Agent

    $vul['time']  = date("Y-m-d");  //获取攻击者攻击的时间

    $vul['fixes'] = 0;  //默认为漏洞未修复

    $bugData = M('bugdata');    //连接fecm_bugdata数据库

    $bugData->data($vul)->add();    //添加到数据库中

}

</code>

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

<code>#!php

public function index(){

    $reportForm = M('bugdata'); //连接fecm_bugdata数据库

    $dateTimeLabels = [];

    $dateTimeTotal = [];

    for($i = 0;$i < 7;$i++){    //获取近7天的数据

        $time = date("Y-m-d",strtotime(-$i." day"));

        array_unshift($dateTimeLabels,$time);

        $data['time'] = array('like','%'.$time.'%');

        array_unshift($dateTimeTotal,$reportForm->where($data)->count());

    }

    $reportForm = json_encode(["Labels" => $dateTimeLabels,"Total" => $dateTimeTotal]); //转化成json格式

    $this->assign('reportForm',$reportForm)->assign('total',total());   //交给前端模块

    $this->display();   //前端页面生成

}

</code>

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

<code>#!js

var lineChartData = {

    labels :eval({$reportForm})['Labels'],

    datasets : [

        {

            fillColor : "rgba(151,187,205,0.5)",

            strokeColor : "rgba(151,187,205,1)",

            pointColor : "rgba(151,187,205,1)",

            pointStrokeColor : "#fff",

            data : eval({$reportForm})['Total']

        }

    ]

}

var myLine = new Chart(document.getElementById("Statistics").getContext("2d")).Line(lineChartData);

</code>

1

2

3

4

5

6

7

8

9

<code>#!js

for(var i=0,tags=document.querySelectorAll('iframe[src],frame[src],script[src],link[rel=stylesheet],object[data],embed[src]'),tag;tag=tags[i];i++){

    var a = document.createElement('a');

    a.href = tag.src||tag.href||tag.data;

    if(a.hostname!=location.hostname){

        console.warn(location.hostname+' 发现第三方资源['+tag.localName+']:'+a.href);

    }

}

</code>

1

2

3

4

5

<code>#!js

var scriptList = [

    location.hostname,

]

</code>

1

2

3

<code>#!js

var webScript = document.querySelectorAll('script[src]');

</code>

1

2

3

4

5

6

7

8

9

10

11

12

13

<code>#!js

for(var i = 0;i < webScript.length;i++){

    var a = document.createElement('a');    //建立一个新的a标签，方便取值

    a.href = webScript[i].src;  //把script里的src赋值给a标签里的href属性

    if(a.hostname != webHost){  //对比，是否为第三方资源

        for(var j = 0;j < scriptList.length;j++){

            if(a.hostname != scriptList[i]){    //判断当前的第三方资源是否在白名单里

                new Image().src = 'http://fecm.cn/Api/addVul/category/2';   //发送给FECM

            }

        }

    }

}

</code>