Commit Graph
26 Commits
Author SHA1 Message Date
Peijun Zhao d12a545860 更新 LICENSE 2026-05-10 23:15:07 +08:00
Peijun Zhao c60ceda94f V4.0 正式发布:130源文件/114测试全部通过,31个高级扩展安全模块,完整API与专业开发文档
- 版本号从1.0.0升级至4.0.0,pom.xml版本号同步
- 新增 docs/DEVELOPER.md 详细技术开发文档(架构设计/模块详解/API参考/扩展指南)
- 文档用词规范化,去除非专业"超进化"用语,以V4.0和专业表述统一
- README/README_EN/USER_MANUAL/PROJECT_SUMMARY同步更新模块数量和版本信息
- CLI help命令全面重写,200行分类命令参考,覆盖14个功能类别
- 31个高级扩展模块独立开关,配置注释去除版本标签
- 发布产物 release/V4.0/AluerServerGuard-V4.0.jar
2026-05-10 22:36:02 +08:00
Peijun Zhao b271eda8d5 超进化 v3.3: 6个新安全模块 + 31个模块独立开关 + 完整文档与测试
新增6个Minecraft安全模块:
- GeoBlockService: 地理IP封锁(国家黑白名单/高风险MC攻击来源拦截)
- PlayerSessionValidationService: 玩家会话验证(UUID/正版/离线检测/会话重放)
- PluginVerificationService: 插件完整性校验(SHA-256/恶意插件名/25个已知恶意插件)
- ConnectionThrottleService: 连接速率限制(多窗口追踪/递增延迟2s-30s)
- BackupIntegrityService: 备份完整性验证(SHA-256/文件存在性/6h自动扫描)
- AntiSkinSpoofService: 皮肤伪造检测(25个冒充目标/可疑URL/变更频率)

配置独立开关(31个模块全部可单独控制):
- ServerGuardConfig新增SuperEvolutionConfig包含全部31个模块的enabled开关
- application.yml新增完整super-evolution配置段(含中文说明)
- 每个Service注入ServerGuardConfig并在入口检查开关,关闭时跳过检测

DashboardController新增6个API端点 + 全部25个服务重构注入config

测试: V33SecurityTest 29项测试(含23项v3.3 + 6项更正),全部114测试通过

文档: README/README_EN 30+→85+模块,USER_MANUAL新增完整开关配置文档
2026-05-10 22:02:42 +08:00
Peijun Zhao 1d297ba095 超进化 v3.2: Minecraft专属安全模块 — X-ray透视/飞行外挂/物品复制/崩溃漏洞/卡服机检测
新增5个Minecraft反作弊安全模块 + 21项测试 + 5个API端点:
- AntiXrayDetectionService: 钻石/远古残骸挖掘比检测,直线挖掘模式识别
- AntiFlyDetectionService: 垂直/水平速度检测,飞行外挂判定
- AntiDupeDetectionService: 物品堆叠异常/高价值物品暴涨/9种复制方法检测
- CrashExploitProtectionService: 12种崩溃漏洞防护(超大包/NBT炸弹/书与笔攻击等)
- LagMachineDetectionService: Observer链/TNT堆/红石密度/实体泛滥检测
DashboardController新增 /api/security/anti-xray|anti-fly|anti-dupe|crash-exploit|lag-machine 端点
2026-05-10 21:11:00 +08:00
Peijun Zhao 939d257ce6 docs: update all documentation for super evolution v3.1
- PROJECT_SUMMARY: add Section 9 with all 20 new security modules
- USER_MANUAL: add super evolution API endpoints table (20+ new endpoints)
- README.md: update security table to 60+ services with new module entries
- README_EN.md: update security table to 60+ services with new module entries
2026-05-10 20:41:04 +08:00
Peijun Zhao f7c590e34e feat: super evolution — 20 new security modules with full test coverage
新增20个超进化安全模块 (17 new services + 1 test suite + Dashboard API):
- JWT认证服务 (JwtAuthService): 基于HMAC-SHA256的token管理
- 反暴力破解 (BruteForceProtectionService): 渐进延迟+三层时间窗口检测
- 反机器人检测 (AntiBotDetectionService): MC玩家名模式+加入速度+多账号检测
- 反向Shell检测 (ReverseShellDetectionService): 50+ reverse shell模式匹配
- ARP欺骗检测 (ARPSpoofDetectionService): MAC变更+网关欺骗+重复MAC检测
- DNS隧道检测 (DNSTunnelDetectionService): 熵值分析+子域名编码+频率监控
- 漏洞签名检测 (ExploitSignatureService): Log4Shell/SQL注入/XSS等15+签名
- SSRF防护 (SSRFProtectionService): 内网IP/云元数据/编码绕过检测
- XXE防护 (XXEProtectionService): XML实体注入+十亿笑攻击检测
- CSP强制执行 (CSPEnforcementService): XSS/Clickjack防御+安全响应头
- 数据库防火墙 (DatabaseFirewallService): SQL注入+危险关键字+堆叠查询检测
- 数据防泄漏 (DataLossPreventionService): 12种敏感数据模式(邮箱/API Key/SSH Key等)
- 内存保护 (MemoryProtectionService): JVM堆监控+GC过载+内存泄漏检测
- 进程注入检测 (ProcessInjectionDetectionService): 线程异常+内存映射+文件描述符
- 安全文件删除 (SecureFileDeletionService): DoD多pass覆写+擦除后删除
- 取证收集器 (ForensicsCollectorService): 进程/网络/文件/日志取证
- 事件响应 (IncidentResponseService): 5套Playbook(DDOS/爆破/入侵/MC漏洞/数据泄露)
- 威胁狩猎 (ThreatHuntingService): 10种主动狩猎规则
- 合规扫描 (ComplianceScannerService): 7大类20+项合规检查
- 反破坏检测 (AntiGriefDetectionService): MC方块破坏/放置/实体/容器监控

API端点: DashboardController新增20+个安全API端点
测试: 64个测试全部通过 (12 existing + 52 new)
2026-05-10 20:36:04 +08:00
Peijun Zhao 1fa3e96d0a 更新 2026-05-10 17:10:59 +08:00
Peijun Zhao 7775f4016b 更新文档,增加新功能 2026-05-10 17:03:47 +08:00
Peijun Zhao c963035c99 docs: add logo, fully Chinese README, no mixed English
- Add logo.png (200px width, centered above title)
- Replace All English headers/descriptions with pure Chinese
  - 'Why Aluer' → '为什么选择 Aluer'
  - 'FAQ' → '常见问题'
  - 'Contributors' → '贡献者'
  - All badge labels, button text, footer in Chinese
- Fix anchor links to match Chinese headings
2026-05-10 17:02:36 +08:00
Peijun Zhao 7ee6e23d48 更新文档,增加新功能 2026-05-10 16:40:12 +08:00
Peijun Zhao 09b07d68b9 更新文档,增加新功能 2026-05-10 16:35:02 +08:00
Peijun Zhao 7858da3d0c docs: split README into zh/en with language switcher
- README.md: default Chinese version with 'English' link
- README_EN.md: full English translation with '简体中文' link
- Language switcher badge at top-right of both files
- Consistent styling, badges, and structure across both versions
2026-05-10 16:31:48 +08:00
Peijun Zhao ea0a9077a3 fix: update all repo references to actual GitHub URL (ZpjDev/Aluer) 2026-05-10 16:20:32 +08:00
Peijun Zhao b33f5168e8 docs: beautiful GitHub-style README overhaul
- Add skill-icons, star/forks/issues/PRs/last-commit badges
- Add 'Why Aluer' feature highlight cards section
- Add animated emoji title, mission quote, key-stats table
- Add Contributors wall, Support/Star/Fork CTAs
- Polish license section, footer, table of contents
2026-05-10 16:19:23 +08:00
Peijun Zhao 5e1ab0c1c7 docs: update README, PROJECT_SUMMARY, USER_MANUAL for new features
- README: add notification package, HealthService, health/webhook/report APIs
- README: update web console features (sparklines, auto-refresh, health panel)
- PROJECT_SUMMARY: add notification module and web infrastructure sections
- USER_MANUAL: add health check, webhook, and attack report API docs
2026-05-10 16:12:23 +08:00
Peijun Zhao 4c08566022 feat: ASCII banner + graceful shutdown hook for ServerGuardApplication 2026-05-10 16:03:48 +08:00
Peijun Zhao f28be08211 feat: frontend overhaul - health panel + sparklines + auto-refresh
- Add health status panel with component status dots
- Add auto-refresh toggle with configurable interval (3s/6s/10s/30s)
- Add performance sparkline bars (TPS/CPU/Memory/Players)
- Use useReducer for terminal lines (append/clear)
- Better responsive layout for mobile
- Third ambient background layer for visual depth
- Refined glass-panel hover effects
2026-05-10 16:02:04 +08:00
Peijun Zhao 46d597d6ff feat: critical fixes + health API + webhook + attack reports
- Fix busy-wait loop in ServerGuardService (removed while(true))
- Fix sync blocking on async Future (use thenAccept instead of .get())
- Add startup banner with system info and config validation
- Add HealthService: /api/health, /api/health/live, /api/health/ready
- Add RequestLoggingFilter for HTTP request monitoring
- Add CorsConfig for cross-origin support
- Add WebhookService (Discord/Slack notifications)
- Add AttackReportService with HTML report generation
- New endpoints: /api/attacks/recent, /api/attacks/report, /api/webhook/test
- Upgrade Lombok 1.18.30 to 1.18.38 for Java 25+ compatibility
2026-05-10 15:54:48 +08:00
Peijun Zhao 40e97d1fc6 Merge remote-tracking branch 'origin/main'
# Conflicts:
#	LICENSE
2026-05-10 15:39:48 +08:00
Peijun Zhao 76163f965f 修复无法在IDEA内直接调试的问题 2026-05-10 15:38:14 +08:00
Peijun Zhao 8115d903de Update README.md 2026-05-10 13:55:20 +08:00
Peijun Zhao 38c141a6ea 提交Git 2026-05-10 13:53:31 +08:00
Peijun Zhao d5b0b00510 Update README.md 2026-05-10 13:19:58 +08:00
Peijun Zhao 65eea726f9 Add LICENSE file 2026-05-10 13:11:17 +08:00
Peijun Zhao 33cf22c574 Create LICENSE 2026-05-10 13:10:08 +08:00
Peijun Zhao b0aaea9fb3 提交Git 2026-05-10 12:59:00 +08:00