{ "compile_table": "PXY_CTRL_COMPILE", "group_table": "PXY_CTRL_GROUP", "rules": [ { "compile_id": 1021, "service": 1, "action": 48, "do_blacklist": 1, "do_log": 1, "effective_range": 0, "user_region": "{\"method\":\"redirect\",\"code\":302,\"to\":\"https://www.baidu.com/index.html\"}", "is_valid": "yes", "groups": [ { "regions": [ { "table_name": "PXY_CTRL_HTTP_URL", "table_type": "string", "table_content": { "keywords": "www.google.com", "expr_type": "regex", "match_method": "sub", "format": "uncase plain" } } ] } ] }, { "compile_id": 1022, "service": 1, "action": 48, "do_blacklist": 1, "do_log": 1, "effective_range": 0, "user_region": "{\"method\":\"block\",\"code\":403,\"message\":\"error\",\"html_profile\":101}", "is_valid": "yes", "groups": [ { "regions": [ { "table_name": "PXY_CTRL_HTTP_URL", "table_type": "string", "table_content": { "keywords": "cn.bing.com", "expr_type": "regex", "match_method": "sub", "format": "uncase plain" } } ] } ] }, { "compile_id": 1023, "service": 1, "action": 48, "do_blacklist": 1, "do_log": 1, "effective_range": 0, "user_region": "{\"method\":\"replace\",\"rules\":[{\"search_in\":\"http_resp_body\",\"find\":\"比特币\",\"replace_with\":\"硬币\"}]}", "is_valid": "yes", "groups": [ { "regions": [ { "table_name": "PXY_CTRL_HTTP_URL", "table_type": "string", "table_content": { "keywords": "edu.csdn.net/course/detail/6998", "expr_type": "regex", "match_method": "sub", "format": "uncase plain" } } ] } ] }, { "compile_id": 1024, "service": 1, "action": 48, "do_blacklist": 1, "do_log": 1, "effective_range": 0, "user_region": "{\"method\":\"hijack\",\"hijack_profile\":201}", "is_valid": "yes", "groups": [ { "regions": [ { "table_name": "PXY_CTRL_HTTP_URL", "table_type": "string", "table_content": { "keywords": "www.wireshark.org/download/win32/WiresharkPortable_2.6.8.paf.exe", "expr_type": "regex", "match_method": "sub", "format": "uncase plain" } } ] } ] }, { "compile_id": 1025, "service": 1, "action": 48, "do_blacklist": 1, "do_log": 1, "effective_range": 0, "user_region": "{\"method\":\"hijack\",\"hijack_profile\":201}", "is_valid": "yes", "groups": [ { "regions": [ { "table_name": "PXY_CTRL_HTTP_URL", "table_type": "string", "table_content": { "keywords": "www.downcc.com/ajax.asp", "expr_type": "regex", "match_method": "sub", "format": "uncase plain" } } ] } ] }, { "compile_id": 1026, "service": 1, "action": 48, "do_blacklist": 1, "do_log": 1, "effective_range": 0, "user_region": "{\"method\":\"insert\",\"insert_profile\":302}", "is_valid": "yes", "groups": [ { "regions": [ { "table_name": "PXY_CTRL_HTTP_URL", "table_type": "string", "table_content": { "keywords": "mirror.hoster.kz/centos", "expr_type": "regex", "match_method": "sub", "format": "uncase plain" } } ] } ] }, { "compile_id": 1027, "service": 1, "action": 48, "do_blacklist": 1, "do_log": 1, "effective_range": 0, "user_region": "{\"method\":\"insert\",\"insert_profile\":303,\"position\":\"before-page-load\"}", "is_valid": "yes", "groups": [ { "regions": [ { "table_name": "PXY_CTRL_HTTP_URL", "table_type": "string", "table_content": { "keywords": "100wa.com/music", "expr_type": "regex", "match_method": "sub", "format": "uncase plain" } } ] } ] } ], "plugin_table": [ { "table_name": "PXY_PROFILE_RESPONSE_PAGES", "table_content": [ "101\t404\thtml\t./resource/pangu/404.html\t1", "102\tHTTP403\ttemplate\t./resource/pangu/HTTP403.html\t1" ] }, { "table_name": "PXY_PROFILE_HIJACK_FILES", "table_content": [ "201\tchakanqi.exe\tapplication/x-msdos-program\t./resource/pangu/chakanqi.exe\t1" ] }, { "table_name": "PXY_PROFILE_INSERT_SCRIPTS", "table_content": [ "301\ttime\tjs\t./resource/pangu/time.js\t1", "302\tu1\tcss\t./resource/pangu/u1.css\t1", "303\tu1\tjs\t./resource/pangu/alert.js\t1" ] }, { "table_name": "PXY_INTERCEPT_COMPILE", "table_content": [ "0\t0\t2\t1\t1\t{}\t{\"keyring\":1,\"exclusions\":{\"ev_cert\":1,\"cert_transparency\":1,\"client_cert_req\":1,\"pinning\":1},\"cert_verify\":{\"approach\":{\"cn\":1,\"issuer\":1,\"self-signed\":1,\"expiration\":0},\"fail_method\":\"fail-close\"},\"ssl_ver\":{\"min\":\"ssl3\",\"max\":\"tls13\",\"mirror_client\":1},\"decrypt_mirror\":{\"enable\":0}}\t1\t2", "1\t0\t2\t1\t1\t{}\t{\"keyring\":2,\"exclusions\":{\"ev_cert\":0,\"cert_transparency\":0,\"client_cert_req\":1,\"pinning\":1},\"cert_verify\":{\"approach\":{\"cn\":1,\"issuer\":1,\"self-signed\":1,\"expiration\":1},\"fail_method\":\"pass-through\"},\"ssl_ver\":{\"min\":\"ssl3\",\"max\":\"tls13\",\"mirror_client\":1},\"decrypt_mirror\":{\"enable\":1,\"mirror_profile\":4}}\t1\t2" ] } ] }