One Hat Cyber Team
Your IP :
3.14.254.47
Server IP :
192.145.235.60
Server :
Linux ngx365.inmotionhosting.com 5.14.0-427.33.1.el9_4.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 30 09:45:56 EDT 2024 x86_64
Server Software :
Apache
PHP Version :
8.2.27
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
opt
/
sharedrads
/
__pycache__
/
Edit File:
modsec_disable.cpython-39.pyc
a �g�% � @ s� d Z ddlZddlZddlmZ ddlZddlmZmZ ed�Z ed�Z dd� Z d d � Z d d � Z d d� Zd'dd�Zdd� Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zed&kr�e� dS )(zWritten by Quentin H � N)�Path)�red�greenz/tmp/modsec_disable.lockz!/etc/ansible/wordpress-ultrastackc C s* t �� r ttd�� t�d� t �� d S )Nz=Another instance of the script is currently running. Exiting.� )� lock_file�exists�printr �sys�exit�touch� r r �"./opt/sharedrads/modsec_disable.py�get_lock s r c C s t jdd� d S )NT)� missing_ok)r �unlinkr r r r � release_lock s r c C s t d�} | �� S )Nz/var/log/nginx/)r r )Z nginx_dirr r r � check_nginx s r c C s� zt jddgdddd�} W nL ty@ ttd�� td� Y n( t jyf ttd�� td� Y n0 d| jv r�| j�d �d }|�� d }|�d �d S ttd �� td� d S )N� apachectlz-vT)Zcapture_output�textZcheckz7apachectl not found. Please ensure Apache is installed.r z Failed to get Apache version.zServer version� r � �/z Unable to parse Apache version.) � subprocess�run�FileNotFoundErrorr r r �CalledProcessError�stdout�split)�resultZ version_line�versionr r r �get_apache_version" s r Fc C sl | j jddd� | �� r |r&| �d� |r6| �d� n2|rP|D ]}t| |� q>n|rh|D ]}t| |� qXd S )NT��parents�exist_ok� �SecRuleEngine Off )�parent�mkdirr � write_text� disable_rule� remove_rule)� modsec_file�rule_ids� disable_all�reset�remove_rule_id�rule_idr r r �update_modsec_configuration3 s r1 c C s� d|� �}d}| � � rH| �d��}|�� }W d � n1 s>0 Y ||v rhttd|� d��� d S | �d�� }|�|� d�� W d � n1 s�0 Y ttd|� d| � ��� d S ) N�SecRuleRemoveById r$ �r+�Rule z already disabled, not adding.�ar z added to file: )r �open�readr r �writer )r+ r0 � rule_text�contents�filer r r r) C s & .r) c C s� d|� �}| � � r�| �d��^}|�� }|�d� |�� |D ]}||vr<|�|� q<ttd|� d| � ��� W d � n1 s�0 Y d S )Nr2 r3 r r4 z removed from file: )r r6 � readlines�seek�truncater8 r r )r+ r0 r9 r; r: �liner r r r* Q s r* c C s� | � � r�| �d��d}|�� }|�d� |�� |D ]"}|�d�s2|�d�s2|�|� q2ttd| � ��� W d � n1 s|0 Y d S )Nr3 r ZSecRuleRemoveByIdzSecRuleEngine OffzCAll SecRuleRemoveById and SecRuleEngine entries removed from file: ) r r6 r< r= r> � startswithr8 r r )r+ r; r: r? r r r �reset_modsec_configuration^ s rA c C s* t �dg� t �ddg� ttd�� d S )Nz/scripts/rebuildhttpdconfz/sbin/apachectlZgracefulz>Apache configuration rebuilt and service restarted gracefully.)r r r r r r r r �cpanel_restart_apachej s rB c C s� zt �ddg� W n( t jy: ttd�� td� Y n0 z t �g d�� ttd�� W n( t jy� ttd�� td� Y n0 d S )Nr z-tzSyntax failed apache checkr )Z systemctlZrestartZhttpdzApache restarted correctly.zApache failed to restart)r r r r r r r r r r r �platformI_restart_apacheo s rC c C s t �dd| dg� d S )NZngxconf�-uz-rd)r r )�userr r r �cpanel_run_ngxconf} s rF c C sD t d�}t|| jr| jnd | j| j| jd� | jr:t|� t� d S )Nz8/etc/httpd/modsecurity.d/activated_rules/z-mycustom.conf)r+ r, r- r. r/ )r r1 �rule�offr. �droprA rC )�argsZmodsec_file_pathr r r �platformI_modsec� s �rK c C s | j s ttd�� t�d� �z�t� }|�d�rBtd�}td�}n8|�d�r^td�}td�}n ttd |� d ��� td� | jr�|| j | j d }|| j | j d }n || j d }|| j d }|j j d d d � |j j d d d � |j d d� |j d d� | j �r(| j D ]}t ||� t ||� �q | j�rR| jD ]}t||� t||� �q6| j�r�| j�rtt|� t|� n$t|| j d � t|| j d � | j�r�t|� t|� W t� �r�ttd�� t| j � t� n&t� �r�ttd�� t| j � t� 0 d S )Nz7The --user (-u) flag is required for CPanel operations.r z2.4z'/usr/local/apache/conf/userdata/std/2_4z'/usr/local/apache/conf/userdata/ssl/2_4z2.z%/usr/local/apache/conf/userdata/std/2z%/usr/local/apache/conf/userdata/ssl/2zUnsupported Apache version �.z modsec.confTr! )r# zNginx detected.)rE r r r r r r@ r Zdomainr& r' r rG r) rI r* r. rA rH �disable_all_rulesr r rF rB )rJ Zapache_versionZstd_apache_dirZssl_apache_dirZmodsec_file_stdZmodsec_file_sslr0 r r r � cpanel_modsec� s^ � rN c C sR | � � rN| �d��}|�d� W d � n1 s20 Y ttd| � ��� d S )Nr5 r% z All rules disabled in file: )r r6 r8 r r )r+ r; r r r rM � s (rM c C s* t � �ztjdd�} t�� rl| jddtddd� | jdd d d d � | jd dd dd � | jdddtdd� n�| jddtddd� | jddtdd � | jddtddd� | jdd d d d � | jd dd dd � | jd d d d d � | jdddtdd� | �� }t�� �r t |� nt |� W t � nt � 0 d S )!Nz?Disable modsec rules for Cpanel or PlatformI users and domains.)� descriptionz-rz--rule�+z Specific rule IDs to disable)�type�nargs�helpz-oz--off� store_truezDisable all rules)�actionrS z-Rz--resetz Reset the modsec configurationz-Dz--dropz<Drop/Remove a specific rule ID from the modsec configuration)rR rQ rS rD z--userTzCPanel user this is for)rQ ZrequiredrS z-dz--domainz The domain to modify rules for)rQ rS z Disable all rules for the domainz-az--allz)Apply changes to all domains for the user) r �argparse�ArgumentParser� platformIr � add_argument�int�str� parse_argsrK rN r )�parserrJ r r r �main� s( r^ �__main__)NFFN)�__doc__r rV �pathlibr r Z rads.colorr r r rX r r r r r1 r) r* rA rB rC rF rK rN rM r^ �__name__r r r r �<module> s0 <
Simpan