awd --waf deployment

Introduction: After completing the password change and downloading the source code, you can consider hanging your own waf, you can use the pass-through waf (please don't complain, the pass-through has been turned off, hahaha)

The role of waf:

1. The most important thing is to analyze the traffic. When others attack us, we can see how others attack.In this way, even if we can't find the attack point, when we are very distressed, we can analyze the traffic and use other people's attack methods.
2. It can be directly defended, similar to a firewall (general games are not allowed to use, after all, the game time is short, and it is impossible to bypass the waf at all, then the game is boring)

With waf link: https://github.com/leohearts/awd-watchbird

1. After packaging, upload it directly to the html directory

Go back to the terminal, in the uploaded waf directory, use the command

php watchbird.php --install /var/www/html

In this way, the php code of each page can be included under waf

2. After running waf, open our web page, enter ?watchbird=ui after any php page, you will enter to the waf configuration page and set the password (Note: You need to set a password when opening it for the first time)

3 Once configured, you can enter the internal web page

Here you can perform a series of operations!