Izinjini zokusesha zakhiwe ukuze zibhale okuqukethwe. Kodwa-ke, abahlaseli bazisebenzisela ukukhomba amaphutha akho. Umbuzo konke okubhaliwe:login uhlobo lwefayela:ilogi kungase kubonakale kungenangozi. Eqinisweni, kungenye yezindlela ezilula zokuthola amafayela elogi avele obala aqukethe ukugeleza kokuqinisekisa, iziqinisekiso, amathokheni, kanye nedatha yengqalasizinda yangaphakathi.
Uma i-Google ingabona lawo malogi, abahlaseli nabo bangawabona. Uma sekufakwe ohlwini, ukuvezwa kuba yinto engenakugwenywa. Ngaphezu kwalokho, lapho iziqinisekiso zivela kufayela elifinyeleleka emphakathini, ukwephulwa kwemithetho sekuqalile kakade.
1. Kungani i-allintext:login I-filetype:log Iyingozi Kakhulu Kunalokho Ebukeka Ngayo
I-Google dork umbuzo wokusesha osebenzisa opharetha abathuthukile ukuthola okuqukethwe okubucayi noma okungalungiselelwe kahle okuqondiswe yizinjini zokusesha. Ayixhaphazi i-Google. Kunalokho, isebenzisa kabi ukuvezwa kwakho.
Lo mbuzo uhlanganisa opharetha ababili:
- konke okubhaliwe: ibuyisela amakhasi lapho wonke amagama avela khona embhalweni womzimba
- uhlobo lwefayela:ilogi ikhawulela imiphumela ku-
.logamafayela
Ngakho-ke:
Kusho ukuthi: “Ngibonise amafayela elogi aqukethe igama login. "
Uma uqala ukukubona, lokho kubonakala kungasho lutho. Kodwa-ke, empeleni, kuvame ukubuya:
- Amalogi eseva yewebhu avezwe esidlangalaleni
- CI/CD amalogi alayishwe njengezinto zobuciko
- Amalogi okulungisa iphutha ngephutha commitkufakwe ezindaweni zokugcina izinto
- Amalogi ezinhlelo zokusebenza aneziqinisekiso ezicacile
Lokhu akuyona inkinga yenjini yokusesha. Kunalokho, kuyiphutha ubuthakathaka bokuchayeka kwedatha okubangelwa ukungalungiselelwa kahle. I-Google imane yafaka ohlwini lokho okwakufinyeleleka emphakathini.
2. Lokho Abahlaseli Abakutholayo Empeleni Kumafayela Elogi Aveziwe
Lapho abahlaseli bebaleka konke okubhaliwe:login uhlobo lwefayela:ilogi, abaphequluli ngokungahleliwe. Bafuna umkhondo wokuqinisekisa.
2.1 Iziqinisekiso Zombhalo Ongacacile
Amalogi avame ukuqukatha okufakiwe okufana nalokhu:
or
Noma ngisho neziqinisekiso ze-SMTP:
Ukufaka imithwalo yokuqinisekisa yokungena kungenye yezindlela ezisheshayo zokuvuza iziqinisekiso zokukhiqiza. Ngenxa yalokho, ifayela elilodwa lelogi eliveziwe lingenza imodeli yakho yokulawula ukufinyelela ingasebenzi.
2.2 Amathokheni Eseshini nama-JWT
Ngisho noma amaphasiwedi engangeniswanga, amathokheni avame ukungenelwa.
Ngokwesibonelo:
Ikhukhi ye-JWT noma yeseshini esebenzayo ngaphakathi kwe- .log ifayela lingavumela:
- Ukuthumba i-session
- Ukukhuphuka kwelungelo
- Ukunyakaza okuseceleni kuzo zonke izinhlelo zangaphakathi
Ngamanye amazwi, amathokheni ku-log aguqula umphumela wokulungisa amaphutha ube yi-vector ye-bypass yokuqinisekisa.
2.3 CI/CD Izinto zokusebenza
Izingodo zokwakha ziyingozi kakhulu. Eqinisweni, CI/CD izinhlelo zivame ukuphrinta iziguquguquko zemvelo ngesikhathi sezinyathelo zokwakha.
Abahlaseli bavame ukuthola:
Iqukethe imigqa efana nalokhu:
If CI/CD Izinto zobuciko zisobala, bese izimfihlo zisobala. I-Google dork imane isheshise ukutholwa kwezinto.
2.4 Idatha Yamafu Nengqalasizinda
Amalogi asobala avame ukwembula:
- Okhiye bokufinyelela be-AWS
- Izintambo zokuxhumanisa isitoreji se-Azure
- Ama-URL esevisi yangaphakathi
- Imininingwane yesizindalwazi
- Amaphoyinti okugcina e-Redis
Ngisho noma iziqinisekiso zishintshwa kamuva, umhlaseli manje usenazo:
- Ukumepha ingqalasizinda
- Izivumelwano zokuqamba amagama
- Ubuhlakani obuqondisiwe bokuhlasela kwesikhathi esizayo
Ngakho-ke, izingodo eziveziwe zinikeza kokubili ukufinyelela kanye nokuhlola.
3. Indlela Lezi Zingodo Eziba Ngayo Obala Kwasekuqaleni
Amalogi awaveli ngomlingo ku-Google. Afakwa ohlwini ngoba ayefinyeleleka emphakathini.
3.1 Amaseva ewebhu angalungiselelwanga kahle
Amaphethini avamile afaka:
/logs/izincwajana ezifinyeleleka ngaphandle kokuqinisekiswa- Uhlu lwemibhalo luvunyelwe
- I-Nginx noma i-Apache ikhonza eluhlaza
.logamafayela
Uma ilogi ingafinyeleleka nge-HTTP, ingafakwa ohlwini.
3.2 CI/CD Ukuvezwa Kwezinto Ezisetshenzisiwe
Amaphutha ajwayelekile:
- Izinto zobuciko zomphakathi zivunyelwe ku- Izenzo zeGitHub
- Amalogi alayishiwe kumabhakede e-S3 avulekile
- Pipeline imikhondo efinyeleleka ngaphandle kokuqinisekiswa
A pipeline ogcina izingodo ebhakedeni lomphakathi ushicilela ngempumelelo izimfihlo zawo.
3.3 Imodi Yokulungisa Amaphutha Ekukhiqizweni
Okuzenzakalelayo kohlaka kungaba yingozi:
Ngaphezu kwalokho, ukuloga izicelo ngokweqile kungaphrinta:
- Izihloko
- Amadokhumenti
- Imizimba yezicelo ezigcwele
Ukungena ngemvume kokulungisa amaphutha ekukhiqizweni kuguqula uhlelo lwakho lokusebenza lube ngumthumeli weziqinisekiso.
3.4 Amalogi Okufaka Amadokhi Namakhonteyina
Izindawo ezifakwe emakontena zethula izindlela ezintsha zokuchayeka:
- Amalogi afakwe kumavolumu abiwe
- Izimoto eziseceleni zithumela izingodo ezindaweni zokugcina ezingavikelekile
- Ngena dashboards ngokufinyelela komphakathi
Uma amalogi esiqukathi evezwa nge-HTTP noma isitoreji esivulekile, ayasesheka. Ekugcineni, ayafakwa ohlwini.
4. Ukugeleza Kokuhlasela Okungokoqobo: Kusukela eDork Kuya Ekuqhekekeni
Uchungechunge lokuhlasela olujwayelekile lubukeka kanje:
Umhlaseli ugijima:
- Okutholakele kudaluliwe
.logifayela - Izingcaphuno:
- Ithokheni ye-JWT
- Isihloko esiyisisekelo sokuqinisekisa
- Iyunithi yezinhlamvu yokuxhuma kusizindalwazi
Izama ukuqinisekiswa ngokumelene:
- Ama-endpoint e-API
- Amaphaneli okuphatha
- Izinsizakalo zangaphakathi
Uma ukuqinisekiswa kuphumelela, umhlaseli angenza okulandelayo:
- Khulisa amalungelo
- Hambisa eceleni
- Ukufinyelela CI/CD
- Ukunciphisa uchungechunge lokuhlinzeka
Okwaqala njengombuzo wokusesha kuba:
- Ukuthumba i-session
- Ukufakwa kweziqinisekiso zangaphakathi
- Pipeline kombuso
- Ubuthi bezinto ezidaliwe
Konke kusuka kufayela lelogi elifakwe ohlwini esidlangalaleni.
5. Kungani Ukungena "Okuningi Kakhulu" Kuyinkinga ye-AppSec
Ukuloba akuthathi hlangothi. Kunalokho, kudala isitolo sedatha sesibili.
Uma ubhala idatha ebucayi, udala ikhophi yesibili yezimfihlo zakho ngempumelelo.
Noma kunjalo, izingodo zivame ukukhishwa ekubunjweni kwezingozi. Ngaphansi kwe-STRIDE, lokhu kukhomba ngokucacile ukuthi:
Ukudalulwa Kwemininingwane
Ngakho-ke, Kuphephile SDLC imikhuba kufanele iphathe izingodo njengalezi:
- Izinto zobuciko ezihlobene nokuphepha
- Izimpahla ezibucayi
- Izingxenye zengqalasizinda ezidinga ukuvikelwa
Uma imodeli yakho yosongo ingayinaki imibhalo, ayiphelele.
6. Indlela Yokuvimbela Ukuvuza Kwemininingwane Kumafayela Elogi
6.1 Izimfihlo Zokumisa Ukugcina Imibhalo
Ungalokothi ubhale phansi:
- Amaphasiwedi
- Amadokhumenti
- Okhiye be-API
- Ama-ID Eseshini
- Izihloko zokugunyazwa
Ngisho noma kumodi yokulungisa iphutha.
Noma nini lapho kungenzeka, sebenzisa i-redaction ezenzakalelayo.
6.2 Ukungena ngemvume Okuhlelekile Nokuphephile
Sebenzisa ukuloga okuhlelekile ngokufihla nokuhlunga.
Isibonelo (i-Node.js):
Isibonelo (i-Python):
Isimiso esiyinhloko silula: izimfihlo akumelwe zifinyelele esinkini sezingodo.
6.3 Isitoreji Sezingodo Ezikhiyiwe
Izilawuli zokuphepha kufanele zifake:
- Khubaza ukufakwa kuhlu lwemibhalo
- Vikela
/logs/izindlela ezinokuqinisekiswa - Nciphisa ukufinyelela ebhakedeni
- Sebenzisa izinqubomgomo zokugcina
- Bethela amalogi ngesikhathi sokuphumula
Amalogi akumelwe atholakale esidlangalaleni nge-HTTP.
6.4 CI/CD Guardrails
Ukubuyekezwa ngesandla akwanele. Esikhundleni salokho, sebenzisa izilawuli ezizenzakalelayo:
- Ukuskena izingodo ngasese ngaphambi kokushicilelwa kwezinto zobuciko
- Ukwakha kuyahluleka uma amathokheni etholakala
- Vimbela ukulayishwa kwezinto ezidaliwe eziqukethe iziqinisekiso
- Ukuqinisekiswa kwe-hash kwezinto zobuciko
CI/CD kufanele kuvimbele ukuvezwa ngaphambi kokuba kwenzeke ukukhomba.
7. Indlela i-Xygeni Evimbela Ngayo I-Allintext:login Izehlakalo zefayela:log
Inkinga akuyona i-Google dork. Inkinga ukuchayeka. Ngakho-ke, ukuvimbela kumele kwenzeke ngaphambi kokufaka inkomba.
7.1 Ukutholwa Okuyimfihlo Ezingodweni Zomlando Nasezinto Ezisetshenzisiwe
Ukuskena kwe-Xygeni:
- Amalogi ohlelo lokusebenza
- CI/CD imigqa yemisebenzi
- Yakha izinto zobuciko
- Izendlalelo ze-Docker
- Imiphumela eyenziwe nge-serial
Uma iziqinisekiso, amathokheni, noma amanani abucayi avela ku- .log amafayela, i-Xygeni iwamaka ngokushesha.
7.2 CI/CD Guardrails Lokho Kuveza Ukuvimba
Esikhundleni sokuthembela ekubuyekezweni okwenziwa ngesandla, I-Xygeni iqinisa ezokuphepha e- pipeline Izinga:
Lokhu:
- Iyahluleka ukwakha lapho kuvela izimfihlo ezingodweni
- Ukushicilelwa kwezinto zobuciko ze-Blocks
- Kuvimbela ukudalulwa esidlangalaleni ngengozi
- Imisa ukuhlangana okungaphephile ngaphambi kokufinyelela okuyinhloko
Uma umsebenzi we-CI uprinta ithokheni, pipeline yehluleka.
Akukho ukufakwa ohlwini.
Akukho ukuvezwa.
Akukho sigameko.
7.3 Ukuvikelwa Kokushintsha Kwesobunxele Ngaphambi Kokuthi I-Google Ikubone
Isikhathi sibalulekile.
Esikhundleni sokusabela ku:
I-Xygeni iyayimisa le nkinga:
- At commit isikhathi
- Ngesikhathi pull request ukuqinisekiswa
- Ngesikhathi pipeline ukubulawa
- Ngaphambi kokushicilelwa kwezinto zobuciko
Uma i-log ingakaze ibe sobala, i-Google ayisoze iyifake ohlwini.
Isifundo Sokugcina: Uma i-Google Ingakwazi Ukuyikhomba, Abahlaseli Sebavele Bayenzile
Amalogi awayona ingozi. Eqinisweni, awavamile ukuba esikhashana. Ngokuzenzakalelayo, awayimfihlo. Ngakho-ke, wonke amafayela elogi kufanele aphathwe njengempahla ehlobene nokuphepha, hhayi nje umphumela wokulungisa amaphutha.
Uma idatha ebucayi ifinyelela ku- .log ifayela bese lifinyeleleka emphakathini, ngokushesha iphenduka indawo yokuhlasela. Ngaphezu kwalokho, uma injini yokusesha isivele ifakiwe ohlwini, ukuvezwa kungaphezu kwamandla akho.
Isixazululo akusikho ukuyeka ukubhalisa. Kunalokho, ukubhalisa ngokuzibophezela nokuphoqelela ukulawulwa okuqinile mayelana nokugcinwa nokusabalalisa. Ngamanye amazwi, ukuphepha kumele kudlulele ngale kohlelo lokusebenza uqobo futhi kufinyelele ungqimba lokubonakala.
Esikhundleni salokho:
- Yeka ukuqopha izimfihlo
- Isitoreji selogi esikhiyiwe
- Phoqelela pipeline guardrails
- Ukutholwa okuzenzakalelayo kanye nokuphoqelelwa kwenqubomgomo
Ekugcineni, ukuvimbela kumayelana nesikhathi. Ngoba uma konke okubhaliwe:login uhlobo lwefayela:ilogi ibuyisela isizinda sakho, lesi sigameko sesiqalile kakade.
