Yearning 介绍(SQL审核平台)

Dear 丶 2022-02-18 11:47 776阅读 0赞

## 介绍 ##

Yearning SQL 审计平台 基于Vue.js与Django的整套mysql-sql审核平台解决方案。提供基于Inception的SQL检测及执行。

GitHub：[https://github.com/cookieY/Yearning][https_github.com_cookieY_Yearning]

文档：[https://cookiey.github.io/Yearning-document/][https_cookiey.github.io_Yearning-document]

## 安装部署（centos6.8） ##

1、Nginx安装

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> </td> 
   <td> <p><code>yum&nbsp;</code><code>install</code>&nbsp;<code>nginx -y</code></p> </td> 
  </tr> 
 </tbody> 
</table>

2、MySQL Server安装

[https://dev.mysql.com/downloads/repo/yum/][https_dev.mysql.com_downloads_repo_yum] 下载yum库mysql57-community-release-el6-11.noarch.rpm

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> </td> 
   <td> <p><code>rpm -ivh mysql57-community-release-el6-11.noarch.rpm</code></p> </td> 
  </tr> 
 </tbody> 
</table>

*  查看

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> </td> 
   <td> <p><code>yum list|</code><code>grep</code>&nbsp;<code>mysql57</code></p> </td> 
  </tr> 
 </tbody> 
</table>

*  安装

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> </td> 
   <td> <p><code>yum&nbsp;</code><code>install</code>&nbsp;<code>mysql-community-server -y</code></p> </td> 
  </tr> 
 </tbody> 
</table>

3、Python 3.6安装

*  解压

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> </td> 
   <td> <p><code>tar</code>&nbsp;<code>-xvf Python-3.6.4.</code><code>tar</code><code>.xz</code></p> </td> 
  </tr> 
 </tbody> 
</table>

*  创建目录

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> </td> 
   <td> <p><code>mkdir</code>&nbsp;<code>-p&nbsp;</code><code>/usr/local/python/3</code><code>.6.4</code><code>/lib</code></p> </td> 
  </tr> 
 </tbody> 
</table>

*  编译

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> <p>2</p> <p>3</p> <p>4</p> </td> 
   <td> <p><code>cd</code>&nbsp;<code>Python-3.6.4</code></p> <p><code>.</code><code>/configure</code>&nbsp;<code>--</code><code>enable</code><code>-shared --prefix=</code><code>/usr/local/python/3</code><code>.6.4 LDFLAGS=</code><code>"-Wl,-rpath /usr/local/python/3.6.4/lib"</code></p> <p><code>make</code></p> <p><code>make</code>&nbsp;<code>install</code></p> </td> 
  </tr> 
 </tbody> 
</table>

*  软连接

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> <p>2</p> <p>3</p> </td> 
   <td> <p><code>cp</code>&nbsp;<code>/usr/bin/python</code>&nbsp;<code>/usr/bin/python2</code><code>.6.6</code></p> <p><code>ln</code>&nbsp;<code>-fs&nbsp;</code><code>/usr/local/python/3</code><code>.6.4</code><code>/bin/python3</code><code>.6&nbsp;</code><code>/usr/bin/python</code></p> <p><code>ln</code>&nbsp;<code>-fs&nbsp;</code><code>/usr/local/python/3</code><code>.6.4</code><code>/bin/pip3</code>&nbsp;<code>/usr/bin/pip</code></p> </td> 
  </tr> 
 </tbody> 
</table>

*  yum修改

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> <p>2</p> </td> 
   <td> <p><code>vi</code>&nbsp;<code>/usr/bin/yum</code></p> <p><code>将头部&nbsp;</code><code>#!/usr/bin/python 修改为 #!/usr/bin/python2.6.6</code></p> </td> 
  </tr> 
 </tbody> 
</table>

4、Inception安装

参考：[http://www.cnblogs.com/shhnwangjian/p/8464172.html][http_www.cnblogs.com_shhnwangjian_p_8464172.html]

5、Yearning安装

*  git下载

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> </td> 
   <td> <p><code>git clone https:</code><code>//github</code><code>.com</code><code>/cookieY/Yearning</code><code>.git</code></p> </td> 
  </tr> 
 </tbody> 
</table>

*  创建库

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> </td> 
   <td> <p><code>create database Yearning DEFAULT CHARACTER SET utf8 COLLATE utf8_general_ci;</code></p> </td> 
  </tr> 
 </tbody> 
</table>

*  安装相应python依赖库

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> <p>2</p> </td> 
   <td> <p><code>cd</code>&nbsp;<code>Yearning</code><code>/src</code></p> <p><code>pip&nbsp;</code><code>install</code>&nbsp;<code>-r requirements.txt</code></p> </td> 
  </tr> 
 </tbody> 
</table>

*  配置，编辑Yearning/src/deploy.conf文件

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> <p>2</p> <p>3</p> <p>4</p> <p>5</p> <p>6</p> <p>7</p> <p>8</p> <p>9</p> <p>10</p> <p>11</p> <p>12</p> <p>13</p> <p>14</p> <p>15</p> <p>16</p> <p>17</p> <p>18</p> <p>19</p> <p>20</p> <p>21</p> <p>22</p> <p>23</p> <p>24</p> <p>25</p> <p>26</p> <p>27</p> <p>28</p> <p>29</p> <p>30</p> <p>31</p> </td> 
   <td> <p><code>[mysql]</code></p> <p><code>db = 所创建的库名</code></p> <p><code>address = 数据库地址</code></p> <p><code>port = 数据库端口</code></p> <p><code>password = 数据库密码</code></p> <p><code>username = 数据库用户</code></p> <p>&nbsp;</p> <p><code>[host]</code></p> <p><code>ipaddress = 服务器ip地址:端口 (涉及跨域十分重要!!设置不正确将无法登陆!!)</code></p> <p><code>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</code><code>如 本机地址为192.168.137.13 nginx设置端口为80</code></p> <p><code>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</code><code>则应填写为 192.168.137.13:80 之后通过该地址访问平台。</code></p> <p>&nbsp;</p> <p><code>[Inception]</code></p> <p><code>ip = Inception地址</code></p> <p><code>port = Inception端口</code></p> <p><code>user = Inception用户名</code></p> <p><code>password&nbsp; = Inception密码</code></p> <p><code>backupdb = 备份数据库地址</code></p> <p><code>backupport = 备份数据库端口</code></p> <p><code>backupuser = 备份数据库用户名</code></p> <p><code>backuppassword = 备份数据库密码</code></p> <p>&nbsp;</p> <p><code>[LDAP] LDAP相关设置</code></p> <p><code>LDAP_SERVER = LDAP服务地址</code></p> <p><code>LDAP_SCBASE = LDAP&nbsp;</code><code>dc</code>&nbsp;<code>设置 如&nbsp;</code><code>dc</code><code>=xxx,</code><code>dc</code><code>=com</code></p> <p><code>LDAP_DOMAIN = LDAP域名 如 xxx.com</code></p> <p>&nbsp;</p> <p><code>[email] 邮箱推送相关设置</code></p> <p><code>username = 邮箱发件账号 如 xxxx@163.com</code></p> <p><code>password = 邮箱发件账号密码</code></p> <p><code>smtp_server = 邮箱stmp地址, 具体地址请咨询对应邮箱提供者</code></p> </td> 
  </tr> 
 </tbody> 
</table>

*  初始化数据库

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> <p>2</p> </td> 
   <td> <p><code>python manage.py makemigrations</code></p> <p><code>python manage.py migrate</code></p> </td> 
  </tr> 
 </tbody> 
</table>

*  添加初始化用户

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> </td> 
   <td> <p><code>echo</code>&nbsp;<code>"from core.models import Account;Account.objects.create_user(username='admin', password='admin123456', group='admin',is_staff=1)"</code>&nbsp;<code>| python manage.py shell</code></p> </td> 
  </tr> 
 </tbody> 
</table>

*  复制编译好的静态文件到nginx html目录下

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> <p>2</p> <p>3</p> </td> 
   <td> <p><code>cd</code>&nbsp;<code>Yearning</code><code>/webpage/dist</code></p> <p><code>cp</code>&nbsp;<code>-rf *&nbsp;</code><code>/usr/share/nginx/html/</code></p> <p><code>service nginx restart</code></p> </td> 
  </tr> 
 </tbody> 
</table>

*  启动django

<table> 
 <tbody> 
  <tr> 
   <td> <p>1</p> <p>2</p> </td> 
   <td> <p><code>cd</code>&nbsp;<code>Yearning</code><code>/src</code></p> <p><code>python manage.py runserver 0.0.0.0:8000</code></p> </td> 
  </tr> 
 </tbody> 
</table>

*  访问首页http://192.168.137.13

![830561-20180224142545354-1134246207.png][]

文章来源：[https://www.cnblogs.com/shhnwangjian/p/8465657.html][https_www.cnblogs.com_shhnwangjian_p_8465657.html]

[https_github.com_cookieY_Yearning]: https://github.com/cookieY/Yearning
[https_cookiey.github.io_Yearning-document]: https://cookiey.github.io/Yearning-document/
[https_dev.mysql.com_downloads_repo_yum]: https://dev.mysql.com/downloads/repo/yum/
[http_www.cnblogs.com_shhnwangjian_p_8464172.html]: http://www.cnblogs.com/shhnwangjian/p/8464172.html
[830561-20180224142545354-1134246207.png]: /images/20220218/74b574effcf7495283890085beacadde.png
[https_www.cnblogs.com_shhnwangjian_p_8465657.html]: https://www.cnblogs.com/shhnwangjian/p/8465657.html