Peijun Zhao
f7c590e34e
feat: super evolution — 20 new security modules with full test coverage
...
新增20个超进化安全模块 (17 new services + 1 test suite + Dashboard API):
- JWT认证服务 (JwtAuthService): 基于HMAC-SHA256的token管理
- 反暴力破解 (BruteForceProtectionService): 渐进延迟+三层时间窗口检测
- 反机器人检测 (AntiBotDetectionService): MC玩家名模式+加入速度+多账号检测
- 反向Shell检测 (ReverseShellDetectionService): 50+ reverse shell模式匹配
- ARP欺骗检测 (ARPSpoofDetectionService): MAC变更+网关欺骗+重复MAC检测
- DNS隧道检测 (DNSTunnelDetectionService): 熵值分析+子域名编码+频率监控
- 漏洞签名检测 (ExploitSignatureService): Log4Shell/SQL注入/XSS等15+签名
- SSRF防护 (SSRFProtectionService): 内网IP/云元数据/编码绕过检测
- XXE防护 (XXEProtectionService): XML实体注入+十亿笑攻击检测
- CSP强制执行 (CSPEnforcementService): XSS/Clickjack防御+安全响应头
- 数据库防火墙 (DatabaseFirewallService): SQL注入+危险关键字+堆叠查询检测
- 数据防泄漏 (DataLossPreventionService): 12种敏感数据模式(邮箱/API Key/SSH Key等)
- 内存保护 (MemoryProtectionService): JVM堆监控+GC过载+内存泄漏检测
- 进程注入检测 (ProcessInjectionDetectionService): 线程异常+内存映射+文件描述符
- 安全文件删除 (SecureFileDeletionService): DoD多pass覆写+擦除后删除
- 取证收集器 (ForensicsCollectorService): 进程/网络/文件/日志取证
- 事件响应 (IncidentResponseService): 5套Playbook(DDOS/爆破/入侵/MC漏洞/数据泄露)
- 威胁狩猎 (ThreatHuntingService): 10种主动狩猎规则
- 合规扫描 (ComplianceScannerService): 7大类20+项合规检查
- 反破坏检测 (AntiGriefDetectionService): MC方块破坏/放置/实体/容器监控
API端点: DashboardController新增20+个安全API端点
测试: 64个测试全部通过 (12 existing + 52 new)
2026-05-10 20:36:04 +08:00
Peijun Zhao
4c08566022
feat: ASCII banner + graceful shutdown hook for ServerGuardApplication
2026-05-10 16:03:48 +08:00
Peijun Zhao
f28be08211
feat: frontend overhaul - health panel + sparklines + auto-refresh
...
- Add health status panel with component status dots
- Add auto-refresh toggle with configurable interval (3s/6s/10s/30s)
- Add performance sparkline bars (TPS/CPU/Memory/Players)
- Use useReducer for terminal lines (append/clear)
- Better responsive layout for mobile
- Third ambient background layer for visual depth
- Refined glass-panel hover effects
2026-05-10 16:02:04 +08:00
Peijun Zhao
46d597d6ff
feat: critical fixes + health API + webhook + attack reports
...
- Fix busy-wait loop in ServerGuardService (removed while(true))
- Fix sync blocking on async Future (use thenAccept instead of .get())
- Add startup banner with system info and config validation
- Add HealthService: /api/health, /api/health/live, /api/health/ready
- Add RequestLoggingFilter for HTTP request monitoring
- Add CorsConfig for cross-origin support
- Add WebhookService (Discord/Slack notifications)
- Add AttackReportService with HTML report generation
- New endpoints: /api/attacks/recent, /api/attacks/report, /api/webhook/test
- Upgrade Lombok 1.18.30 to 1.18.38 for Java 25+ compatibility
2026-05-10 15:54:48 +08:00
Peijun Zhao
b0aaea9fb3
提交Git
2026-05-10 12:59:00 +08:00
Peijun Zhao