{"id":13779086,"url":"https://github.com/grayddq/codeinspect","last_synced_at":"2025-05-11T12:32:42.637Z","repository":{"id":108771331,"uuid":"112584907","full_name":"grayddq/CodeInspect","owner":"grayddq","description":"以代码发布的方式，从根本上实现WEBShell、网马或恶意链接等安全方面的检测。","archived":false,"fork":false,"pushed_at":"2017-12-27T05:51:52.000Z","size":27,"stargazers_count":8,"open_issues_count":0,"forks_count":13,"subscribers_count":1,"default_branch":"master","last_synced_at":"2024-11-17T14:41:20.450Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/grayddq.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2017-11-30T08:21:50.000Z","updated_at":"2020-01-07T02:23:38.000Z","dependencies_parsed_at":"2023-06-04T22:00:28.636Z","dependency_job_id":null,"html_url":"https://github.com/grayddq/CodeInspect","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/grayddq%2FCodeInspect","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/grayddq%2FCodeInspect/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/grayddq%2FCodeInspect/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/grayddq%2FCodeInspect/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/grayddq","download_url":"https://codeload.github.com/grayddq/CodeInspect/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253567239,"owners_count":21928803,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-03T18:01:00.886Z","updated_at":"2025-05-11T12:32:42.379Z","avatar_url":"https://github.com/grayddq.png","language":"Python","funding_links":[],"categories":["\u003ca id=\"39e5bd43766abbdbc518390d86b3a0a5\"\u003e\u003c/a\u003eWebshell检测"],"sub_categories":[],"readme":"# CodeInspect 0.1\n\n这个脚本的主要目标是根据代码发布的方式，从根本上实现WEBShell、网马或恶意链接等安全方面的检测。\n\n## Author ##\n咚咚呛 \n\n如有其他建议，可联系微信280495355\n\n## Support ##\n\n满足如下安全需求\n\n\t1、周期内查询网站代码是否进行过修改如：添加、修改、删除等\n\t2、修改的文件进行日志告警、并进行提取备份\n\t3、事件发生时，可立即进行代码同步恢复，删掉添加或修改的内容。\n\t4、支持GIT、SVN、Rsync等代码发布服务\n\n技术细节如下：\n\n\t1、支持多级代码目录形式\n\t2、支持GIT、SVN、Rsync等代码发布服务\n\t3、支持变动文件拷贝\n\t4、支持代码恢复功能\n\n\n## Test Environment ##\n\n\u003eCentOS Linux release 7.3.1611 (Core)\n\n## Tree ##\n\n\tPubilcAssetInfo\n\t----CodeInspect.py   #主程序\n\t\n\n## Config ##\n\n配置信息CodeInspect.py\n\n\t# 代码路径\n\tCODE_DIR_LIST = ['/root/tool/PubilcAssetInfo', '/home/seclogin/test_gdd/testbbb', '/home/seclogin/test_gdd/testrsync']\n\t# 代码同步方式 git / svn / rsync\n\tTYPE = 'rsync'\n\t# 是否执行代码恢复，True / False\n\tACTION = True\n\t# 可疑文件存放的地方\n\tTMP = '/tmp/codeinspect/'\n\t# rsync服务的登录,替换其中的IP、账户、密码文件等信息\n\tRSYNC_LOGIN_INFO = 'rsync --password-file=/etc/pass.txt test@192.168.1.5::web'\n\n## Log ##\n\n日志目录默认：/var/log/codeinspect.log\n\n\n## Screenshot ##\n\n![Screenshot](pic/111.png)\n\n## output ##\n\n默认可疑文件：/tmp/codeinspect/\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgrayddq%2Fcodeinspect","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgrayddq%2Fcodeinspect","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgrayddq%2Fcodeinspect/lists"}