mirror of
https://gitee.com/lauix/HFish
synced 2025-05-10 11:58:01 +08:00
修改了uninstall章节；暂时弱化docker章节，将docker放到了其章节的后面，而不是第一个
This commit is contained in:
my417
parent
26d94dde2d
commit
b8eeee9018
@ -4,9 +4,9 @@
|
||||
- [HFish原理](1-3-workflow)
|
||||
- 快速开始
|
||||
- [环境要求](2-1-env)
|
||||
- [Docker](2-1-docker)
|
||||
- [Linux](2-2-linux)
|
||||
- [Windows](2-3-windows)
|
||||
- [Docker](2-1-docker)
|
||||
- [数据库相关](2-4-mariadb)
|
||||
- 环境管理
|
||||
- [添加服务](3-2-services)
|
||||
|
||||
@ -2,7 +2,6 @@
|
||||
"version":"2.5.0",
|
||||
"date":"2021-07-28",
|
||||
"desc":[
|
||||
|
||||
"特别注意：只支持2.4.0及其以上的版本支持顺滑升级，其他版本需要重新进行部署安装。",
|
||||
"1.新增API配置功能，支持用户对攻击IP、攻击详细信息、攻击者所使用攻击账号密码导出。",
|
||||
"2.新增TCP端口监听服务，支持最高对10个自定义端口的灵活监听。",
|
||||
|
||||
@ -1,95 +1,100 @@
|
||||
# 卸载蜜罐的流程
|
||||
|
||||
> 卸载server端
|
||||
> 卸载 server 端
|
||||
|
||||
1. 退出server进程
|
||||
1. 杀死 server 进程
|
||||
|
||||
```shell
|
||||
# 结束./server 进程
|
||||
root@HFish~$ ps aux | grep server
|
||||
root 8435 0.2 10.2 997804 188176 ? Sl Mar23 23:54 ./server
|
||||
# 结束 server 进程
|
||||
root@HFish~$ ps ax | grep ./server | grep -v grep
|
||||
8435 ? Sl 97:59 ./server
|
||||
|
||||
root@HFish:~$ kill 8435
|
||||
root@HFish:~$ sudo kill -9 8435
|
||||
```
|
||||
|
||||
2. 删除server文件夹
|
||||
2. 删除 server 文件夹
|
||||
|
||||
```shell
|
||||
# 默认情况下 OneFish 统一被部署到/opt/onefish目标，删除即可
|
||||
root@HFish~$ rm -rf /opt/onefish
|
||||
# 使用 install.sh 安装的 HFish 会被部署到/opt/hfish目标，删除即可
|
||||
root@HFish~$ sudo rm -rf /opt/hfish
|
||||
```
|
||||
|
||||
3. 清理数据库
|
||||
3. 清理数据库（如果使用的是 SQLite 数据库请忽略）
|
||||
|
||||
```shell
|
||||
#删除 OneFish 数据库
|
||||
# 删除 HFish 数据库
|
||||
root@HFish:~$ mysql -h127.0.0.1 -uroot -p
|
||||
Enter password:*******（默认为OneFish210!）
|
||||
mysql> DROP DATABASE onefish;
|
||||
Enter password:*******（默认密码详见config.ini配置文件）
|
||||
mysql> DROP DATABASE hfish;
|
||||
|
||||
# 停止 MySQL 服务
|
||||
root@HFish:~$ systemctl stop mysqld
|
||||
root@HFish:~$ systemctl disable mysqld
|
||||
root@HFish:~$ sudo systemctl stop mysqld
|
||||
root@HFish:~$ sudo systemctl disable mysqld
|
||||
```
|
||||
|
||||
4. 还原SSH和Firewall配置
|
||||
4. 还原 SSH 和 Firewall 配置
|
||||
|
||||
```shell
|
||||
# 删除SSH config内对于访问来源的限制
|
||||
root@HFish~$ vi /etc/ssh/sshd_config
|
||||
删除 AllowUsers root@xxx 这行
|
||||
# 清除 SSH config 内对于访问来源的限制
|
||||
root@HFish~$ sudo vi /etc/ssh/sshd_config
|
||||
注释掉以 AllowUsers root@ 开头的行
|
||||
|
||||
# 重启 SSH 服务
|
||||
root@HFish~$ systemctl restart sshd
|
||||
root@HFish~$ sudo systemctl restart sshd
|
||||
|
||||
# 清除Firewall服务的规则
|
||||
root@HFish~$ firewall-cmd --permanent --list-all | grep ports | head -n 1 | \
|
||||
# 清除 Firewall 服务的规则（请根据实际情况删除！）
|
||||
root@HFish~$ sudo firewall-cmd --permanent --list-all | grep ports | head -n 1 | \
|
||||
cut -d: -f2 | tr ' ' '\n' | xargs -I {} firewall-cmd --permanent --remove-port={}
|
||||
|
||||
# 重启 Firewall 服务
|
||||
root@HFish~$ systemctl restart firewalld
|
||||
root@HFish~$ sudo systemctl restart firewalld
|
||||
```
|
||||
|
||||
|
||||
|
||||
> 卸载节点端
|
||||
|
||||
1. 退出client进程
|
||||
1. 杀死 client 和 services 进程
|
||||
|
||||
```shell
|
||||
# 结束./client 进程
|
||||
root@HFish~$ ps aux | grep client
|
||||
root 1012 0.2 10.2 997804 188176 ? Sl Mar23 23:54 ./client
|
||||
# 结束 client 和 services 进程
|
||||
root@HFish~$ sudo ps ax | grep -E 'services|./client' | grep -v grep
|
||||
10506 ? Sl 134:20 ./client
|
||||
1685739 ? Sl 0:00 services/mysql/mysql 0.0.0.0:3306 true
|
||||
1685743 ? Sl 0:00 services/redis/redis 0.0.0.0:6379 true
|
||||
1685747 ? Sl 0:00 services/telnet/telnet 0.0.0.0:23 true
|
||||
1685751 ? Sl 0:00 services/ftp/ftp 0.0.0.0:21 true
|
||||
1685755 ? Sl 0:00 services/es/es 0.0.0.0:9200 true
|
||||
|
||||
root@HFish:~$ kill -8 1012
|
||||
root@HFish:~$ sudo kill -9 10506 1685739 1685743 1685747 1685751 1685755
|
||||
```
|
||||
|
||||
2. 删除client文件夹
|
||||
2. 删除 client 文件夹
|
||||
|
||||
```shell
|
||||
# 默认情况下 OneFish 统一被部署到/opt/onefish目标，删除即可
|
||||
root@HFish~$ rm -rf /opt/onefish
|
||||
# 使用 install.sh 安装的 HFish 会被部署到/opt/hfish目标，删除即可
|
||||
root@HFish~$ sudo rm -rf /opt/hfish
|
||||
```
|
||||
|
||||
3. 还原SSH和Firewall配置
|
||||
3. 还原 SSH 和 Firewall 配置
|
||||
|
||||
```shell
|
||||
# 还原默认 SSH 端口
|
||||
root@HFish~$ vi /etc/ssh/sshd_config
|
||||
root@HFish~$ sudo vi /etc/ssh/sshd_config
|
||||
- 把 Port 22122 注释掉或修改为默认的22
|
||||
|
||||
# 删除 SSH config 内对于访问来源的限制
|
||||
root@HFish~$ vi /etc/ssh/sshd_config
|
||||
删除 AllowUsers root@xxx 这行
|
||||
# 清除 SSH config 内对于访问来源的限制
|
||||
root@HFish~$ sudo vi /etc/ssh/sshd_config
|
||||
注释掉以 AllowUsers root@ 开头的行
|
||||
|
||||
# 重启 SSH 服务
|
||||
root@HFish~$ systemctl restart sshd
|
||||
root@HFish~$ sudo systemctl restart sshd
|
||||
|
||||
# 清除Firewall服务的规则
|
||||
root@HFish~$ firewall-cmd --permanent --list-all | grep ports | head -n 1 | \
|
||||
# 清除 Firewall 服务规则（请根据实际情况删除！）
|
||||
root@HFish~$ sudo firewall-cmd --permanent --list-all | grep ports | head -n 1 | \
|
||||
cut -d: -f2 | tr ' ' '\n' | xargs -I {} firewall-cmd --permanent --remove-port={}
|
||||
|
||||
# 重启 Firewall 服务
|
||||
root@HFish~$ systemctl restart firewalld
|
||||
root@HFish~$ sudo systemctl restart firewalld
|
||||
```
|
||||
|
||||
|
||||
Loading…
Reference in New Issue
Block a user