Lewati ke konten
Bangk-ShieldBangk-Shield

Mulai Cepat

Panduan ini mengasumsikan Anda sudah menyelesaikan Instalasi.

Jalankan dev server

Section titled “Jalankan dev server”
Terminal window
npm run dev

predev otomatis menjalankan npm run build:rules lebih dulu, sehingga artefak src/rules.compiled.json selalu sinkron dengan config/rules.json.

Wrangler akan menampilkan URL lokal, biasanya http://localhost:8787.

Uji dengan curl

Section titled “Uji dengan curl”

LFI di path — harus kena honeypot

Section titled “LFI di path — harus kena honeypot”
Terminal window
curl -i "http://localhost:8787/etc/passwd"

Skor: lfi:0 = 50, sama dengan threshold default 50. Response berisi header X-Bangk-Shield: honeypot-active dan X-Bangk-Shield-Watermark: bs1-….

Recon sendirian — harus lolos

Section titled “Recon sendirian — harus lolos”
Terminal window
curl -i "http://localhost:8787/.env"

Skor: recon:0 = 25, di bawah threshold. Request diteruskan (atau placeholder muncul).

Recon combo — harus kena honeypot

Section titled “Recon combo — harus kena honeypot”
Terminal window
curl -i "http://localhost:8787/.env/wp-admin"

Skor: recon:0 (25) + recon:2 (20) + combo bonus (20) = 65.

SQLi di query, URL-encoded

Section titled “SQLi di query, URL-encoded”
Terminal window
curl -i "http://localhost:8787/search?id=1%27%20union%20select%201--"

Query di-decode sebelum dicocokkan, sehingga union select terdeteksi. Skor: sqli:0 = 60.

Trafik biasa — harus lolos

Section titled “Trafik biasa — harus lolos”
Terminal window
curl -i "http://localhost:8787/"

Tidak ada sinyal yang cocok, jadi request diteruskan normal.

Ringkasan ekspektasi

Section titled “Ringkasan ekspektasi”
Request Skor Hasil
/etc/passwd 50 Honeypot LFI
/.env 25 Lolos
/.env/wp-admin 65 Honeypot recon
/search?id=1' union select 1-- 60 Honeypot SQLi
/ 0 Lolos

Pembahasan lengkap setiap skenario, termasuk XSS dan circuit breaker, ada di Skenario Pengujian.

Inspeksi response

Section titled “Inspeksi response”
Terminal window
curl -i "http://localhost:8787/etc/passwd"

Yang perlu diperiksa:

  • Status code — default 200 (nilai default_fake_status per vektor).
  • Header X-Bangk-Shield — honeypot-active untuk honeypot, honeypot-active-cb untuk blokir circuit breaker.
  • Header X-Bangk-Shield-Watermark — hash bs1- diikuti 16 karakter hex.
  • Body — template teks berisi URL, IP, vektor, skor, User-Agent, roast, dan fake payload JSON.

Contoh body:

============================================================
[BANGK-SHIELD VIRTUAL LAB - SECURITY SYSTEM]
============================================================
Target URL   : http://localhost:8787/etc/passwd
Client IP    : Unknown IP
Attack Vector: lfi
Threat Score : 50
User-Agent   : curl/8.x
Watermark    : bs1-0123456789abcdef
------------------------------------------------------------
etc/passwd yang dicari cuma ada di komputer situ, bang.


[SIMULATED SERVER RESPONSE]:
{
  "error": "fopen_failed",
  "reason": "path traversal outside webroot"
}
============================================================