From 726b3772605cccadda77e06b55b8d59a1947f4fe Mon Sep 17 00:00:00 2001 From: mcoder Date: Wed, 29 Apr 2026 16:33:48 +0330 Subject: [PATCH] Add --- docker-compose.yml | 3 +++ docker/nginx/certs/kr-rezvan.ir-key.pem | 28 +++++++++++++++++++++++++ docker/nginx/certs/kr-rezvan.ir.pem | 26 +++++++++++++++++++++++ docker/nginx/default.conf | 10 +++++++++ docker/nginx/hacker.conf | 11 +++++++++- 5 files changed, 77 insertions(+), 1 deletion(-) create mode 100644 docker/nginx/certs/kr-rezvan.ir-key.pem create mode 100644 docker/nginx/certs/kr-rezvan.ir.pem diff --git a/docker-compose.yml b/docker-compose.yml index 0ad7277..784f965 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -24,9 +24,11 @@ services: container_name: sec_lab_victim_nginx ports: - "58690:80" + - "58691:80" volumes: - ./:/var/www/html:ro - ./docker/nginx/default.conf:/etc/nginx/conf.d/default.conf:ro + - ./docker/nginx/certs:/etc/nginx/certs depends_on: - php networks: @@ -68,6 +70,7 @@ services: volumes: - ./:/var/www/html:ro # حالا هکر هم به کدهای لاراول دسترسی دارد - ./docker/nginx/hacker.conf:/etc/nginx/conf.d/default.conf:ro # کانفیگ اختصاصی هکر + - ./docker/nginx/certs:/etc/nginx/certs depends_on: - php networks: diff --git a/docker/nginx/certs/kr-rezvan.ir-key.pem b/docker/nginx/certs/kr-rezvan.ir-key.pem new file mode 100644 index 0000000..fcc8e6d --- /dev/null +++ b/docker/nginx/certs/kr-rezvan.ir-key.pem @@ -0,0 +1,28 @@ +-----BEGIN PRIVATE KEY----- +MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDRrkevl1RQBPW5 +U9uP8fDrlAF3rQU+gNQbosPuCUjDDW8TXp2gMREFHWW9ZMu2QMUKrGklVtwS4ofv +n/BbWHt9rYeBuw7ny8hahTZWWUoE/GP80mbV0rJXbAbRT6oJ1GCg3wBc8B2/+j+T +gxAYIJt04ft5dS431SYDe0qxdzoXHQl6a6wuKNT8kPiQLZCE/ZLiSTBcYs4i3TD0 +ZckLBSFYEunC9Xc7T+FTCKY8mfqVRakbr1RwohPZKOT4TWoqkIVCvPq3R9GBysCb +8agFOZnXb+/3FR2127ch+3RI/WanPgQnbLzyR8gC8+EVp7GN9pJwePBRG8xE9NWI +nkY9bipRAgMBAAECggEARUE48CgdcuiQeIvYAy04E7co3OxKxSAr7ozOBfsPC02O +mGkxys0p//R7vBhkqGewLRxRBkIwIhSsLVs4OhN5hkMgdJriC3FlVXCWR+Lp7cen +BsQ/rvQOb42AmvWjBegdmkTNi+TLDrOK+B/b2vw6HFrfgnhPsaU3DwNT4lWs3CDk +CkLnjcalQuy+DkM6DLjQsJZGajvvxHv/xqYIZsUB35F94Yz/jyVZRNC1ia8pJAsm +a9uPkSoNTO28Nq1trUxbSxIyaWTeN23wNIc3VayXu2xlNHyrqQ0w8qVGx4heDZ5w +k8sLJHeXtramccj9VSHaCmHx+jNnmNH1gvA0v7U12QKBgQDnVhKigKRhOmfvSoIA +TRsqmbTjM7oGNIrWQkbojYpBf69yHU7vCTyFKIynZkESqpX0tm6ezj0r2wSXLosV +2dK13W69x84XwUk/y+Tn1J7Mb1TV8rzI5p2PCKkcnWA3MiX8mA24zGMjxg28AzZh +pF9un8Qqof8V4cAgjvzrfssw0wKBgQDoCSixTQh5CchUbjhwW51Gj5lN1rhSOhwX +KGnGS+LMreQZx0BiQQOH8kK6AF75nmywdQed/wBfwvj7KYMTfyYdRO4kAnpGM7Id +dpN7UxGGhHb2tzyVjU+W0nQgT99xeVh7h5HuRkQOlGNsPWFPLYI9efIl+ZqS/939 +aicL+ufhywKBgQDVfUCLSU7qD52VXtxkbMQyZ1FhD/6P9XNfUiDgQqch1TVTiaqr +vIlmlcpgPmS1Vko3YRjrY4debqxo3OIsky36+lRVvgv7LjxsLL2eGUFHh0LygyYn +/XPQaXyv1KjTp2sZFjYroiun+wH3zbslFy2fCMBfW8ruJb1KDstohUX9UwKBgQCm +ynaixDHT95E2B6iwM1qhbvWO+0qxaK3qg5VNAh18bX7qfMyuE/e60Azg8QVUP2n3 +iZg5HSUisN8Sg6uB50L5hSP9ZH6KWfytqx+mZXbSkAOHov18rwBH9O2ekGuYgNZ2 +rWPbuEyRgl7ZXmHFbXwSPscuPva6tgvXbme0992Y8wKBgB3QTyEX5gDpXq73dvGz +HGvry3IggWv0FjzLLKLJqphQ0ksD7X1/TTjmmGcMfFJG536z7IMC2zQq3HPnL+Bm +oIwCh2cDVkXcY4471plQYvPKjhCWFk5YDFUqq0//Oy+bAUIeZzPTjTL0JisNjYlW +kSFUKhiAQut22sTblysVhCjG +-----END PRIVATE KEY----- diff --git a/docker/nginx/certs/kr-rezvan.ir.pem b/docker/nginx/certs/kr-rezvan.ir.pem new file mode 100644 index 0000000..2aad5d7 --- /dev/null +++ b/docker/nginx/certs/kr-rezvan.ir.pem @@ -0,0 +1,26 @@ +-----BEGIN CERTIFICATE----- +MIIEXzCCAsegAwIBAgIQODLCMRz9+aOi8Bz4BK9ZwTANBgkqhkiG9w0BAQsFADB9 +MR4wHAYDVQQKExVta2NlcnQgZGV2ZWxvcG1lbnQgQ0ExKTAnBgNVBAsMIE5PQk9E +WVxtaGFrZUBub2JvZHkgKG1jb2RlciA5MDIpMTAwLgYDVQQDDCdta2NlcnQgTk9C +T0RZXG1oYWtlQG5vYm9keSAobWNvZGVyIDkwMikwHhcNMjYwNDI5MTI1NjQ2WhcN +MjgwNzI5MTI1NjQ2WjBUMScwJQYDVQQKEx5ta2NlcnQgZGV2ZWxvcG1lbnQgY2Vy +dGlmaWNhdGUxKTAnBgNVBAsMIE5PQk9EWVxtaGFrZUBub2JvZHkgKG1jb2RlciA5 +MDIpMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a5Hr5dUUAT1uVPb +j/Hw65QBd60FPoDUG6LD7glIww1vE16doDERBR1lvWTLtkDFCqxpJVbcEuKH75/w +W1h7fa2HgbsO58vIWoU2VllKBPxj/NJm1dKyV2wG0U+qCdRgoN8AXPAdv/o/k4MQ +GCCbdOH7eXUuN9UmA3tKsXc6Fx0JemusLijU/JD4kC2QhP2S4kkwXGLOIt0w9GXJ +CwUhWBLpwvV3O0/hUwimPJn6lUWpG69UcKIT2Sjk+E1qKpCFQrz6t0fRgcrAm/Go +BTmZ12/v9xUdtdu3Ift0SP1mpz4EJ2y88kfIAvPhFaexjfaScHjwURvMRPTViJ5G +PW4qUQIDAQABo4GDMIGAMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEF +BQcDATAfBgNVHSMEGDAWgBSUZRjxBAGqML8TzEjuYxqkYoxLoTA4BgNVHREEMTAv +ggxrci1yZXp2YW4uaXKCDioua3ItcmV6dmFuLmlygglsb2NhbGhvc3SHBH8AAAEw +DQYJKoZIhvcNAQELBQADggGBANoSNoL0r5VkjVAwSXzSUurOke74gyCsBJqrYs2V +XENvDO+evrJlzEKLR+QCw7l8nY0oUzENMhhEralPUslvHr31kL5bokCGqnCnSkym +cuCOiexP8RahKxPen8w9dUhzqC0o/ZwlN7qTv9aoLol75KKnnuNUuyuDoX4oX5P9 +6wAu8J5MzYME/2sIYQe0aE9VA606csGFa1pk0o2jklx7Iah6BhB/c2HNom/KjaY0 +0pB7nng9d3o/TUmsRAyh7ECxunNnD8ODZbSREhWz7HzErhgZEFWaDQr4l7xdRlYy +9YS35PMfv4C5fc7BIynBJQbWxlwhO0VRvsNRRRAOSDUrwFHjm3pyfj9hkF5SXhqH +40XGSgH1as8P68WlTROcKNQKg078CoD1Mw7XaE5DfFauSfFMUb5oOOaVZxSyoacx +dTitZHcCIP+x1wTXQfmllwxVbFGf73jeO17Zzw/QVA+MyFDETcuTTzCbjpv6NlTZ +nOhnu2uJNTHHaKKwJOTmSasXpw== +-----END CERTIFICATE----- diff --git a/docker/nginx/default.conf b/docker/nginx/default.conf index e3701c4..2e1dae6 100644 --- a/docker/nginx/default.conf +++ b/docker/nginx/default.conf @@ -1,6 +1,16 @@ server { listen 80; server_name webapp.kr-rezvan.ir blog.webapp.kr-rezvan.ir; + return 301 https://$host$request_uri; # ری‌دایرکت به نسخه امن +} + +server { + listen 443 ssl; + server_name webapp.kr-rezvan.ir blog.webapp.kr-rezvan.ir; + + ssl_certificate /etc/nginx/certs/kr-rezvan.ir.pem; + ssl_certificate_key /etc/nginx/certs/kr-rezvan.ir-key.pem; + root /var/www/html/public; index index.php; diff --git a/docker/nginx/hacker.conf b/docker/nginx/hacker.conf index ec7a357..06b5e20 100644 --- a/docker/nginx/hacker.conf +++ b/docker/nginx/hacker.conf @@ -1,7 +1,16 @@ server { listen 80; - # این انجینیکس فقط به درخواست‌های دامنه هکر جواب می‌دهد server_name hackerapp.eitebar.ir; + return 301 https://$host$request_uri; +} + +server { + listen 443 ssl; + server_name hackerapp.eitebar.ir; + + ssl_certificate /etc/nginx/certs/kr-rezvan.ir.pem; + ssl_certificate_key /etc/nginx/certs/kr-rezvan.ir-key.pem; + root /var/www/html/public; index index.php;