It consists of seven modules, including: article system (security documents), download system (security tools, ** works), vulnerability release system (security vulnerabilities), code release module (vulnerability exploitation), online application module (studio) and Information Distribution Module (About Us).
Front desk: The home page has time judgment and IP judgment. If you use a proxy server to log in to the website, the source IP can be judged if the proxy server allows it. The home page displays the most recently added entries for five modules that can add entries. There is a "Management Portal" right below the homepage, and an absolutely secure verification method is used. To put it bluntly, the login is required to enter the name of the management directory. Those who do not know the name of the management directory will naturally not be able to pass the verification. It is still very safe for verification alone. Security documents support front-end submission and back-end review mode. That is, if an article is submitted in the frontend but not displayed, it can be published only after being reviewed by the administrator in the backend. The security tool has done simple anti-multi-thread download processing, but it is still easy to find the source address -_-!!! Each column that supports multiple items supports paging and the display of clicks, and lists the items with the most clicks, and the number of items displayed can be selected in the background. The studio provides online project application, and the applied project will be submitted to the database and displayed in the background. And a link is left to connect to other addresses.
Backend: After passing the first verification at the frontend, you can see the backend login interface. The backend supports three permissions: super administrator, administrator and article contributor; corresponding to: Sadmin, Admin and Articler respectively. Permissions are assigned as follows:
sadmin: super administrator, has access and use rights to all management modules. The items that only sadmin can change or add are: basic settings, studio introduction and its members, "About Us" description and website members, and administrator management.
admin: Administrator, can manage: security documents, security tools, security vulnerabilities, vulnerability exploitation, site works, security document review
articler: article administrator, can manage: security documents, security vulnerabilities, vulnerability exploits, security document review. In the basic settings of the background, you can freely change the site name, site English name, site abbreviation, site email, website domain name, and site registration number. , copyright information, number of popular articles displayed, background connection FTP address, project release, and online communication.
Security: All pages of the entire site are protected by anti-injection technology, and you can change the database name and password at any time. The front-end database and the back-end database are stored separately, and you can change your back-end directory name at any time, plus the two fields before logging in to the back-end. Road verification makes your backend management more secure. Moreover, the background can effectively prevent the submission of javascript, asp, php and other scripts, so that you don’t have to worry about those unruly administrators^_^
Before use, be sure to carefully read the "Security Center Whole Site System Configuration Manual.txt" in the compressed package.
The system code of this entire site is completely open to the public. Users are welcome to make any modifications. If you are willing, please keep the original author name^_^