Iinjini zokukhangela zakhiwe ukuze zibonise umxholo. Nangona kunjalo, abahlaseli bazisebenzisa ukuze babonise iimpazamo zakho. Umbuzo umbhalo wonke:login uhlobo lwefayile:log isenokubonakala ingenabungozi. Enyanisweni, yenye yezona ndlela zilula zokufumana iifayile zelog eziveziweyo eziqulethe ukuhamba koqinisekiso, iziqinisekiso, iithokheni, kunye nedatha yeziseko zangaphakathi.
Ukuba uGoogle unokuzibona ezo log, abahlaseli nabo banokuzibona. Nje ukuba zibekwe kwi-index, ukuvezwa kuba yinto engenakuphepheka. Ngaphezu koko, xa iziqinisekiso zivela kwifayile efikelelekayo esidlangalaleni, ukwaphulwa kwemigaqo sele kuqalile.
1. Kutheni i-allintext:login ifayile:log Iyingozi Ngakumbi Kunokuba Ijongeka Kanjani
I-Google dork ngumbuzo wokukhangela osebenzisa ii-opharetha eziphambili ukufumana umxholo obuthathaka okanye ongacwangciswanga kakuhle obhalwe ziinjini zokukhangela. Ayixhaphazi iGoogle. Endaweni yoko, isebenzisa kakubi ukuvezwa kwakho.
Lo mbuzo udibanisa abaqhubi ababini:
- umbhalo wonke: ibuyisela amaphepha apho onke amagama avela khona kumbhalo womzimba
- uhlobo lwefayile:log ithintela iziphumo kwi
.logiifayile
Ngoko ke:
Kuthetha ukuthi: “Ndibonise iifayile zelog eziqulethe igama login. "
Ekuqaleni, oko kubonakala kuyinto engenamsebenzi. Nangona kunjalo, xa kusenziwa, kudla ngokubuya:
- Iilog zeseva yewebhu ezivezwe esidlangalaleni
- CI/CD iilog zilayishwe njengezinto zakudala
- Iilog zokulungisa iimpazamo ngempazamo commitibekwe kwiindawo zokugcina izinto
- Iilog zezicelo ezineziqinisekiso ezicacileyo
Le ayisiyongxaki ye-injini yokukhangela. Endaweni yoko, yingxaki ubuthathaka bokuvezwa kwedatha okubangelwe kukungacwangciswa kakuhle. UGoogle ubhale nje oko bekufikeleleka kuluntu.
2. Oko Abahlaseli Bakufumanayo Kwiifayile ZeeLog Eziveziweyo
Xa abahlaseli bebaleka umbhalo wonke:login uhlobo lwefayile:log, abakhangeli ngokungacwangciswanga. Bakhangela umkhondo wokuqinisekisa.
2.1 Iziqinisekiso zoMbhalo ocacileyo
Iilog zihlala ziqulathe izinto ezifana nezi:
or
Okanye neziqinisekiso ze-SMTP:
Ukufaka imithwalo yokuqinisekisa ukurekhodwa yenye yezona ndlela zikhawulezayo zokuvuza iziqinisekiso zemveliso. Ngenxa yoko, ifayile enye yelog eveziweyo inokwenza imodeli yakho yonke yolawulo lokufikelela ingasebenzi.
2.2 IiTokens zeSession kunye neeJWTs
Nokuba amagama agqithisiweyo akafakwanga, amathokheni ahlala efakwa.
Umzekelo:
I-JWT okanye ikhukhi yeseshoni esebenzayo ngaphakathi kwe .log ifayile ingavumela:
- Ukuqweqwediswa kweseshoni
- Ukunyuka kwelungelo
- Intshukumo esecaleni kwiinkqubo zangaphakathi
Ngamanye amazwi, iithokheni kwiilog ziguqula imveliso yokulungisa iimpazamo ibe yivektha yokudlula yoqinisekiso.
2.3 CI/CD Izixhobo zakudala
Iinkuni zokwakha ziyingozi kakhulu. Enyanisweni, CI/CD iinkqubo zihlala ziprinta izinto eziguquguqukayo kwimeko-bume ngexesha lamanyathelo okwakha.
Abahlaseli bafumanisa rhoqo:
Iqulethe imigca efana nale:
If CI/CD Izinto ezisetyenzisiweyo ziyabonakala, emva koko iimfihlo ziyabonakala. I-Google dork ikhawuleza ukufumanisa izinto.
2.4 Idatha yeLifu kunye neZiseko zoPhuhliso
Iingxelo eziveziweyo zihlala zityhila:
- Izitshixo zokufikelela kwi-AWS
- Imitya yoqhagamshelo lwesitoreji se-Azure
- Ii-URL zenkonzo yangaphakathi
- Iziqinisekiso zeDatabase
- Iindawo zokugqibela zeRedis
Nokuba iziqinisekiso ziyajikeleziswa kamva, umhlaseli ngoku unazo:
- Imephu yeziseko zophuhliso
- Iindibano zokuthiywa kwamagama
- Ingqondi yokuhlasela kwixesha elizayo
Ngoko ke, iinkuni eziveziweyo zibonelela ngokufikelela kunye nokuphonononga.
3. Indlela Ezi Log Eziqala Ngayo Uluntu Kwasekuqaleni
Iilog azibonakali ngomlingo kuGoogle. Ziyafakwa kwi-index kuba bezifikeleleka esidlangalaleni.
3.1 Iiseva zeWebhu ezingacwangciswanga kakuhle
Iipateni eziqhelekileyo ziquka:
/logs/ii-directory ziyafikeleleka ngaphandle kokuqinisekiswa- Uluhlu lwesalathiso luvuliwe
- I-Nginx okanye i-Apache isebenza eluhlaza
.logiifayile
Ukuba i-log inokufikeleleka nge-HTTP, inokubalwa.
3.2 CI/CD Ukuvezwa kwezinto ezenziwe ngezinto zakudala
Iimpazamo eziqhelekileyo:
- Izinto ezenziwe ngurhulumente zivunyelwe kwi Iintshukumo zeGitHub
- Iilog zilayishwe kwiibhakethi ze-S3 ezivulekileyo
- Pipeline imikhondo ifikeleleka ngaphandle kokuqinisekiswa
A pipeline egcina iinkuni kwibhakethi kawonke-wonke ipapasha iimfihlo zayo ngempumelelo.
3.3 Indlela yokulungisa iimpazamo kwimveliso
Ukungagqibeki kwesakhelo kunokuba yingozi:
Ukongeza, ukuloga izicelo ezininzi kunokuprinta:
- Iintloko
- ivezwa
- Imibutho yezicelo ezipheleleyo
Ukungena kwiimpazamo kwimveliso kuguqula usetyenziso lwakho lube ngumthumeli-zitifiketi.
3.4 IiDocker kunye neeContainer Logs
Iindawo ezikwiikhonteyina zizisa iindlela ezintsha zokuvezwa:
- Iilog zifakwe kwiivolumu ezabelwana ngazo
- Iimoto ezisecaleni zithumela iilog kwiindawo zokugcina ezingakhuselekanga
- Ngena dashboards enokufikelela kuluntu
Ukuba iilog zesikhongozeli ziveziwe nge-HTTP okanye nge-open storage, zinokukhangelwa. Ekugqibeleni, ziyafakwa kwi-index.
4. Ukuhamba Kohlaselo Oluyinyani: Ukusuka eDork ukuya eBreach
Inkqubo yokuhlasela eqhelekileyo ibonakala ngolu hlobo:
Umhlaseli ubaleka:
- Izinto ezifunyenweyo ziveziwe
.logifayili - Izicatshulwa:
- Ithokheni yeJWT
- Isihloko esisisiseko se-Auth
- Umtya woqhagamshelwano lwesiseko sedata
Izama ukuqinisekiswa ngokuchasene:
- Iiphelo ze-API
- Iiphaneli zoLawulo
- Iinkonzo zangaphakathi
Ukuba ukuqinisekiswa kuyaphumelela, umhlaseli anga:
- Amalungelo anyusweyo
- Hambisa ecaleni
- Ukufikelela CI/CD
- Ukunciphisa unxibelelwano lweenkonzo
Oko kwaqala njengombuzo wokukhangela kuba:
- Ukuqweqwediswa kweseshoni
- Ukufakwa kweziqinisekiso zangaphakathi
- Pipeline Thatha indawo
- Ityhefu yezinto ezenziwe ngabantu
Konke kuvela kwifayile yelog ebhalwe esidlangalaleni.
5. Kutheni ukuLoga “Okuninzi Kakhulu” kuyingxaki ye-AppSec
Ukubhala iingobozi akukhethi cala. Endaweni yoko, kudala ivenkile yedatha yesibini.
Ukuba ubhala idatha eyimfihlo, wenza ikopi yesibini yeemfihlo zakho ngempumelelo.
Nangona kunjalo, iilog zihlala zingabandakanywa kwimodeli yengozi. Phantsi kwe-STRIDE, oku kuchaza ngokucacileyo oku kulandelayo:
Ukuxelwa kolwazi
Ke ngoko, ukhuseleko SDLC iindlela zokusebenza kufuneka ziphathe iilog ngolu hlobo:
- Izinto zakudala ezinxulumene nokhuseleko
- Iimpahla ezinobuzaza
- Izinto ezifuna ukhuseleko kwiziseko zophuhliso
Ukuba imodeli yakho yosongelo ayizinaki iilog, ayiphelelanga.
6. Indlela yokuthintela ukuvuza kweziqinisekiso kwiifayile zelogi
6.1 Yeka ukuGcina iiMfihlo
Ungaze ubhale phantsi:
- Amaphasiwedi
- ivezwa
- API izitshixo
- Ii-ID zeSeshini
- Iintloko zemvume
Nokuba ukwimo yokulungisa iimpazamo.
Nanini na xa kunokwenzeka, sebenzisa i-automatic redaction.
6.2 Ukurekhoda Okucwangcisiweyo Nokukhuselekileyo
Sebenzisa ukuloga okucwangcisiweyo kunye nokufihla kunye nokucoca.
Umzekelo (iNode.js):
Umzekelo (iPython):
Umgaqo oyintloko ulula: iimfihlo akufuneki zifikelele kwisinki yeenkuni.
6.3 Indawo yokugcina iiLog ezitshixwayo
Ulawulo lokhuseleko kufuneka luquke:
- Khubaza uludwe lweefolda
- Khusela
/logs/iindlela ezinoqinisekiso - Nciphisa ukufikelela kwibhakethi
- Sebenzisa imigaqo-nkqubo yokugcina
- Bhala phantsi iilog xa uphumle
Iilog akufuneki zifikeleleke esidlangalaleni nge-HTTP.
6.4 CI/CD Guardrails
Uhlolo olwenziwe ngesandla alwanelanga. Endaweni yoko, sebenzisa ulawulo oluzenzekelayo:
- Ukuskena iingobozi ngasese ngaphambi kokupapashwa kwezinto zakudala
- Ukwakha kuyasilela ukuba amathokheni ayafunyanwa
- Nqanda ukulayisha izinto ezisetyenzisiweyo eziqulethe iziqinisekiso
- Ukuqinisekiswa kweHash kwizinto zakudala
CI/CD kufuneka ithintele ukuvezwa ngaphambi kokuba kwenzeke i-indexing.
7. Indlela iXygeni Ethintela Ngayo I-Allintext:login Iziganeko zefayile:log
Ingxaki ayikuko ukungakwazi ukunxibelelana nabantu kwi-Google Dork. Ingxaki kukuchaphazeleka. Ke ngoko, ukuthintela kufuneka kwenzeke ngaphambi kokuba kujongwe.
7.1 Ukufunyanwa Kwemfihlo Kwiingxelo Zezinto Eziyimfihlo Nezinto Ezisetyenzisiweyo
Iiskeni zeXygeni:
- Iilog zesicelo
- CI/CD imigqaliselo yemisebenzi
- Yakha izinto zakudala
- Iileya zeDocker
- Iziphumo ezilandelelanayo
Ukuba iziqinisekiso, iithokheni, okanye amaxabiso abuthathaka abonakala kwi .log iifayile, iXygeni iziphawula ngoko nangoko.
7.2 CI/CD Guardrails Ukuvezwa Kwelo Bhloko
Endaweni yokuxhomekeka kuphononongo olwenziwe ngesandla, I-Xygeni iqinisekisa ukhuseleko pipeline nqanaba:
Oku:
- Iyasilela ukwakha xa kuvela iimfihlo kwiilog
- Ukupapashwa kwezinto zakudala zeBlocks
- Ithintela ukuvezwa esidlangalaleni ngengozi
- Iyayeka ukudibana okungakhuselekanga ngaphambi kokufikelela kwindawo ephambili
Ukuba umsebenzi we-CI uprinta ithokheni, pipeline iyasilela.
Akukho kudweliswa kweenkcukacha.
Akukho kuvezwa.
Akukho siganeko.
7.3 Ukhuseleko lokuShift-ekhohlo Ngaphambi kokuba uGoogle ayibone
Ixesha libalulekile.
Endaweni yokuphendula ku:
I-Xygeni iyayimisa le ngxaki:
- At commit ixesha
- Ngexesha pull request uqinisekiso
- Ngexesha pipeline kuqhutywa
- Ngaphambi kokupapashwa kwezinto zakudala
Ukuba i-log ayizukuba selubala, uGoogle akasoze ayibeke kwi-index.
Okokugqibela: Ukuba uGoogle angayichaza, abahlaseli sele beyenzile
Iilog azinabungozi. Enyanisweni, azisoloko ziyinto yexeshana. Ngokwesiqhelo, aziyonto yabucala. Ke ngoko, yonke ifayile yelog kufuneka iphathwe njengempahla enxulumene nokhuseleko, kungekuphela nje ukusombulula iingxaki.
Ukuba idatha eyimfihlo ifikelela kwi .log ifayile kwaye ifikeleleka kuluntu, ngoko nangoko ijika ibe yindawo yokuhlasela. Ngaphezu koko, xa sele ibekwe kwi-injini yokukhangela, ukuvezwa kwayo kuya kuba ngaphaya kolawulo lwakho.
Isisombululo asikokuyeka ukuloga. Kunoko, kukubhala ngokunenkathalo nokunyanzelisa ulawulo olungqongqo malunga nokugcinwa nokusasazwa. Ngamanye amazwi, ukhuseleko kufuneka ludlulele ngaphaya kwesicelo ngokwaso kwaye luye kumaleko wokubonwa.
Endaweni yoko:
- Yeka ukubhala iimfihlo
- Indawo yokugcina iilog evaliweyo
- Nyanzelisa pipeline guardrails
- Ukufunyanwa ngokuzenzekelayo kunye nokunyanzeliswa komgaqo-nkqubo
Ekugqibeleni, Ukuthintela kumalunga nexesha. Kuba xa umbhalo wonke:login uhlobo lwefayile:log ibuyisela idomeyini yakho, isiganeko sele siqalile.
