Skip to content

Commit

Permalink
修改了uninstall章节;暂时弱化docker章节,将docker放到了其章节的后面,而不是第一个
Browse files Browse the repository at this point in the history
  • Loading branch information
DearEmma committed Aug 11, 2021
1 parent 26d94dd commit b8eeee9
Show file tree
Hide file tree
Showing 3 changed files with 47 additions and 43 deletions.
2 changes: 1 addition & 1 deletion docs/_sidebar.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,9 +4,9 @@
- [HFish原理](1-3-workflow)
- 快速开始
- [环境要求](2-1-env)
- [Docker](2-1-docker)
- [Linux](2-2-linux)
- [Windows](2-3-windows)
- [Docker](2-1-docker)
- [数据库相关](2-4-mariadb)
- 环境管理
- [添加服务](3-2-services)
Expand Down
1 change: 0 additions & 1 deletion docs/download/hfish-test-version
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,6 @@
"version":"2.5.0",
"date":"2021-07-28",
"desc":[

​ "特别注意:只支持2.4.0及其以上的版本支持顺滑升级,其他版本需要重新进行部署安装。",
"1.新增API配置功能,支持用户对攻击IP、攻击详细信息、攻击者所使用攻击账号密码导出。",
​ "2.新增TCP端口监听服务,支持最高对10个自定义端口的灵活监听。",
Expand Down
87 changes: 46 additions & 41 deletions docs/uninstall.md
Original file line number Diff line number Diff line change
@@ -1,95 +1,100 @@
# 卸载蜜罐的流程

> 卸载server端
> 卸载 server 端
1. 退出server进程
1. 杀死 server 进程

```shell
# 结束./server 进程
root@HFish~$ ps aux | grep server
root 8435 0.2 10.2 997804 188176 ? Sl Mar23 23:54 ./server
# 结束 server 进程
root@HFish~$ ps ax | grep ./server | grep -v grep
8435 ? Sl 97:59 ./server

root@HFish:~$ kill 8435
root@HFish:~$ sudo kill -9 8435
```

2. 删除server文件夹
2. 删除 server 文件夹

```shell
# 默认情况下 OneFish 统一被部署到/opt/onefish目标,删除即可
root@HFish~$ rm -rf /opt/onefish
# 使用 install.sh 安装的 HFish 会被部署到/opt/hfish目标,删除即可
root@HFish~$ sudo rm -rf /opt/hfish
```

3. 清理数据库
3. 清理数据库(如果使用的是 SQLite 数据库请忽略)

```shell
#删除 OneFish 数据库
# 删除 HFish 数据库
root@HFish:~$ mysql -h127.0.0.1 -uroot -p
Enter password:*******默认为OneFish210!
mysql> DROP DATABASE onefish;
Enter password:*******默认密码详见config.ini配置文件
mysql> DROP DATABASE hfish;

# 停止 MySQL 服务
root@HFish:~$ systemctl stop mysqld
root@HFish:~$ systemctl disable mysqld
root@HFish:~$ sudo systemctl stop mysqld
root@HFish:~$ sudo systemctl disable mysqld
```

4. 还原SSH和Firewall配置
4. 还原 SSH 和 Firewall 配置

```shell
# 删除SSH config内对于访问来源的限制
root@HFish~$ vi /etc/ssh/sshd_config
删除 AllowUsers root@xxx 这行
# 清除 SSH config 内对于访问来源的限制
root@HFish~$ sudo vi /etc/ssh/sshd_config
注释掉以 AllowUsers root@ 开头的行

# 重启 SSH 服务
root@HFish~$ systemctl restart sshd
root@HFish~$ sudo systemctl restart sshd

# 清除Firewall服务的规则
root@HFish~$ firewall-cmd --permanent --list-all | grep ports | head -n 1 | \
# 清除 Firewall 服务的规则(请根据实际情况删除!)
root@HFish~$ sudo firewall-cmd --permanent --list-all | grep ports | head -n 1 | \
cut -d: -f2 | tr ' ' '\n' | xargs -I {} firewall-cmd --permanent --remove-port={}

# 重启 Firewall 服务
root@HFish~$ systemctl restart firewalld
root@HFish~$ sudo systemctl restart firewalld
```



> 卸载节点端
1. 退出client进程
1. 杀死 client 和 services 进程

```shell
# 结束./client 进程
root@HFish~$ ps aux | grep client
root 1012 0.2 10.2 997804 188176 ? Sl Mar23 23:54 ./client

root@HFish:~$ kill -8 1012
# 结束 client 和 services 进程
root@HFish~$ sudo ps ax | grep -E 'services|./client' | grep -v grep
10506 ? Sl 134:20 ./client
1685739 ? Sl 0:00 services/mysql/mysql 0.0.0.0:3306 true
1685743 ? Sl 0:00 services/redis/redis 0.0.0.0:6379 true
1685747 ? Sl 0:00 services/telnet/telnet 0.0.0.0:23 true
1685751 ? Sl 0:00 services/ftp/ftp 0.0.0.0:21 true
1685755 ? Sl 0:00 services/es/es 0.0.0.0:9200 true

root@HFish:~$ sudo kill -9 10506 1685739 1685743 1685747 1685751 1685755
```

2. 删除client文件夹
2. 删除 client 文件夹

```shell
# 默认情况下 OneFish 统一被部署到/opt/onefish目标,删除即可
root@HFish~$ rm -rf /opt/onefish
# 使用 install.sh 安装的 HFish 会被部署到/opt/hfish目标,删除即可
root@HFish~$ sudo rm -rf /opt/hfish
```

3. 还原SSH和Firewall配置
3. 还原 SSH 和 Firewall 配置

```shell
# 还原默认 SSH 端口
root@HFish~$ vi /etc/ssh/sshd_config
root@HFish~$ sudo vi /etc/ssh/sshd_config
- 把 Port 22122 注释掉或修改为默认的22

# 删除 SSH config 内对于访问来源的限制
root@HFish~$ vi /etc/ssh/sshd_config
删除 AllowUsers root@xxx 这行
# 清除 SSH config 内对于访问来源的限制
root@HFish~$ sudo vi /etc/ssh/sshd_config
注释掉以 AllowUsers root@ 开头的行

# 重启 SSH 服务
root@HFish~$ systemctl restart sshd
root@HFish~$ sudo systemctl restart sshd

# 清除Firewall服务的规则
root@HFish~$ firewall-cmd --permanent --list-all | grep ports | head -n 1 | \
# 清除 Firewall 服务规则(请根据实际情况删除!)
root@HFish~$ sudo firewall-cmd --permanent --list-all | grep ports | head -n 1 | \
cut -d: -f2 | tr ' ' '\n' | xargs -I {} firewall-cmd --permanent --remove-port={}

# 重启 Firewall 服务
root@HFish~$ systemctl restart firewalld
root@HFish~$ sudo systemctl restart firewalld
```

0 comments on commit b8eeee9

Please sign in to comment.