|
| 1 | +<div align="center"> |
| 2 | +<img src="https://www.aapanel.com/static/images/aaPanel.png" alt="aaWAF " width="300"/> |
| 3 | +</div> |
| 4 | + |
| 5 | +<h1 align="center">aaWAF</h1> |
| 6 | + |
| 7 | +<div align="center"> |
| 8 | + |
| 9 | +[](https://github.com/aaPanel/BT-WAF) |
| 10 | +[](https://github.com/aaPanel/BT-WAF) |
| 11 | +[](https://github.com/aaPanel/BT-WAF) |
| 12 | +[](https://github.com/aaPanel/BT-WAF) |
| 13 | + |
| 14 | +</div> |
| 15 | +<p align="center"> |
| 16 | + <a href="https://www.aapanel.com/new/waf.html">official website</a> | |
| 17 | + <a href="https://www.kancloud.cn/kern123/cloudwaf/3198565">Using Tutorials</a> | |
| 18 | + <a href="https://btwaf-demo.bt.cn:8379/c0edce7a">Demo</a> | |
| 19 | + <a href="https://yenvb8apub.feishu.cn/sheets/AQafs3FTEhYw8VtEXPJccZwdnUh">ARM and Domestic System Compatibility Table</a> | |
| 20 | +<a href="./english_update.md">Update log</a> |
| 21 | +</p> |
| 22 | + |
| 23 | + |
| 24 | +## aaWAF Introduction |
| 25 | + |
| 26 | +>**Free private cloud WAF firewall** |
| 27 | +Baota Cloud WAF has been certified by millions of users to safeguard your business |
| 28 | +By using reverse proxy, website traffic first reaches the Baota Cloud WAF |
| 29 | +After being detected and filtered by Baota Cloud WAF, it will be transferred to the website server that originally provided the service. |
| 30 | +Baota Cloud WAF is an open-source web application firewall that can protect websites from SQL injection, XSS,CSRF,SSRF, Command injection, code injection, local file inclusion, remote file inclusion, and other attacks |
| 31 | + |
| 32 | + |
| 33 | + |
| 34 | +## Demo |
| 35 | +URL:https://btwaf-demo.bt.cn:8379/c0edce7a<br/> |
| 36 | + |
| 37 | +## Working principle diagram of Baota Cloud WAF |
| 38 | +<p align="center"> |
| 39 | + <img src="./img/btwaf.png"> |
| 40 | +</p> |
| 41 | + |
| 42 | + |
| 43 | + |
| 44 | + |
| 45 | +## install |
| 46 | +Use SSH tool to log in to the server and execute the following command to install: |
| 47 | +```shell |
| 48 | +URL=https://node.aapanel.com/cloudwaf_en/scripts/install_cloudwaf_en.sh && if [ -f /usr/bin/curl ];then curl -sSO "$URL" ;else wget -O install_cloudwaf_en.sh "$URL";fi;bash install_cloudwaf_en.sh |
| 49 | +``` |
| 50 | +<p align="center"> |
| 51 | + <img src="./img/install.png"> |
| 52 | +</p> |
| 53 | + |
| 54 | +## **Offline installation** |
| 55 | +> Note that this installation method is suitable for selecting when the server cannot connect to a public network node |
| 56 | +* Docker must be manually installed during offline installation, otherwise it cannot be installed |
| 57 | +* Before offline installation, please ensure that your server has the tar gzip curl netstat ss docker command. You can use this command to check if it exists: |
| 58 | +``` |
| 59 | +Packs=("curl" "tar" "gzip" "netstat" "ss" "docker" ); for pack in "${Packs[@]}"; do command -v "$pack" >/dev/null 2>&1 || echo -e "\033[31mError: $pack cmd not found\033[0m"; done |
| 60 | +``` |
| 61 | + |
| 62 | +- Offline installation script:[Click to download offline installation script](https://node.aapanel.com/cloudwaf_en/scripts/install_cloudwaf_en.sh) |
| 63 | +- Download image file:[Download image file](https://node.aapanel.com/cloudwaf_en/package/btwaf_mysql_openresty-latest.tar.gz) |
| 64 | +- Download the cloudwaf program file:[Download cloudwaf](https://node.aapanel.com/cloudwaf_en/package/cloudwaf-latest.tar.gz) |
| 65 | + |
| 66 | +After downloading the above files, use tools such as Xftp and winscp to upload them to the server, place the downloaded files in the same path, and then execute the installation command to install offline: |
| 67 | +``` |
| 68 | +bash install_cloudwaf.sh offline |
| 69 | +``` |
| 70 | +<p align="center"> |
| 71 | + <img src="./img/lixian.png"> |
| 72 | +</p> |
| 73 | + |
| 74 | +> After installation, the login steps are the same as online |
| 75 | +
|
| 76 | + |
| 77 | +## Function Introduction |
| 78 | +1.Home Overview |
| 79 | +<p align="center"> |
| 80 | + <img width="1941" alt="image" src="https://github.com/aaPanel/BT-WAF/assets/31841517/19762b6c-bd79-4bda-bd99-ea1af54c17c2"> |
| 81 | +</p> |
| 82 | + |
| 83 | +2.Intercept record |
| 84 | +<p align="center"> |
| 85 | + <img width="1986" alt="image" src="https://github.com/aaPanel/BT-WAF/assets/31841517/bf1b113e-143d-4e58-8bf2-a75d21f54f64"> |
| 86 | +</p> |
| 87 | + |
| 88 | +3.Hit record |
| 89 | +<p align="center"> |
| 90 | + <img width="1986" alt="image" src="./img/rule_git.png"> |
| 91 | +</p> |
| 92 | + |
| 93 | +4.Attack map |
| 94 | +<p align="center"> |
| 95 | + <img width="1986" alt="image" src="./img/wafMap.png"> |
| 96 | +</p> |
| 97 | + |
| 98 | +## Contact Us |
| 99 | +>1. GitHub Issue |
| 100 | +>2. WeChat |
| 101 | +<img width="239" alt="image" src="https://bt-1251050919.cos.ap-guangzhou.myqcloud.com/btwafGroup.png?a=5"> |
0 commit comments