[{"data":1,"prerenderedAt":76},["ShallowReactive",2],{"repo-mrash-fwknop":3,"i18n-mrash-fwknop-zh-CN":73},{"mirrorPool":4,"detail":13},[5,9],{"key":6,"label":7,"base":8,"type":6},"github","mirror.github","https:\u002F\u002Fgithub.com\u002F",{"key":10,"label":11,"base":12,"type":10},"auto-proxy","mirror.autoProxy","https:\u002F\u002Fgithub.xxlab.tech\u002F",{"owner":14,"repo":15,"repoId":16,"repoUrl":17,"starCount":18,"language":19,"description":20,"languages":21,"screenshots":34,"homepage":35,"pushedAt":36,"ownerAvatar":37,"ownerName":38,"ownerBio":39,"lastSyncTime":40,"lastReleaseTime":41,"tags":42,"license":50,"category":51,"subgroup":52,"releases":53},"mrash","fwknop",1887353,"https:\u002F\u002Fgithub.com\u002Fmrash\u002Ffwknop",1463,"Perl","Single Packet Authorization > Port Knocking",{"Perl":22,"C":23,"Raku":24,"Roff":25,"XS":26,"Python":27,"1C Enterprise":28,"Makefile":29,"Shell":29,"M4":30,"Java":31,"Objective-C":31,"Erlang":32,"HTML":33,"Limbo":33},42.4,36.1,10.3,3.3,1.6,1.4,1.1,1,0.8,0.4,0.2,0.1,[],"http:\u002F\u002Fwww.cipherdyne.org\u002Ffwknop\u002F","2026-06-01","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F380228?v=4","Michael Rash","Creator of Single Packet Authorization for Zero Trust architectures, author of \"Linux Firewalls: Attack Detection and Response\" from No Starch Press.","2026-09-28T15:20:43.938017+00:00","2024-02-07T02:05:04Z",[43,44,45,46,47,48,49],"authentication","authorization","firewall","hmac","port-knocker","spa","zero-trust","GPL-2.0","network","防火墙工具",[54],{"tag":55,"publishAt":41,"semVer":56,"prerelease":60,"assets":61},"2.6.11",[57,58,59],2,6,11,false,[62,68],{"fileName":63,"sizeMb":64,"sha256":65,"downloadCount":66,"originUrl":67},"fwknop-2.6.11.tar.bz2",1.73,"",168,"https:\u002F\u002Fgithub.com\u002Fmrash\u002Ffwknop\u002Freleases\u002Fdownload\u002F2.6.11\u002Ffwknop-2.6.11.tar.bz2",{"fileName":69,"sizeMb":70,"sha256":65,"downloadCount":71,"originUrl":72},"fwknop-2.6.11.tar.gz",1.92,532,"https:\u002F\u002Fgithub.com\u002Fmrash\u002Ffwknop\u002Freleases\u002Fdownload\u002F2.6.11\u002Ffwknop-2.6.11.tar.gz",{"description":74,"readmeHtml":75},"一款实现单包授权（SPA）的防火墙隐蔽工具，通过单个加密、防重放、HMAC认证的数据包来授权访问隐藏在默认丢弃防火墙策略后的服务。","\u003Ch2 id=\"项目概述\">项目概述\u003C\u002Fh2>\u003Cp>fwknop 实现了一种称为单包授权（Single Packet Authorization, SPA）的授权方案，用于强服务隐蔽。SPA 只需要单个加密、防重放、通过 HMAC 认证的数据包，即可传递对隐藏在默认丢弃防火墙策略后的服务的访问请求。\u003C\u002Fp>\n\u003Ch2 id=\"主要功能\">主要功能\u003C\u002Fh2>\u003Cul>\n\u003Cli>\u003Cstrong>单包授权（SPA）\u003C\u002Fstrong>：比端口敲门（Port Knocking）更安全的下一代方案\u003C\u002Fli>\n\u003Cli>\u003Cstrong>防重放攻击\u003C\u002Fstrong>：SPA 通过加密和 HMAC 认证防止重放攻击\u003C\u002Fli>\n\u003Cli>\u003Cstrong>服务隐蔽\u003C\u002Fstrong>：服务隐藏在默认丢弃防火墙策略后，Nmap 无法扫描\u003C\u002Fli>\n\u003Cli>\u003Cstrong>多防火墙支持\u003C\u002Fstrong>：支持 iptables、firewalld、PF 和 ipfw，覆盖 Linux、OpenBSD、FreeBSD 和 macOS\u003C\u002Fli>\n\u003Cli>\u003Cstrong>自定义脚本支持\u003C\u002Fstrong>：支持 ipset、nftables 等自定义脚本扩展\u003C\u002Fli>\n\u003Cli>\u003Cstrong>加密方式\u003C\u002Fstrong>：支持 Rijndael 分组密码和 GnuPG 非对称加密\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch2 id=\"适用人群\">适用人群\u003C\u002Fh2>\u003Cul>\n\u003Cli>需要 SSH 等关键服务防扫描的安全管理员\u003C\u002Fli>\n\u003Cli>对零日漏洞和未修复代码有顾虑的系统管理员\u003C\u002Fli>\n\u003Cli>网络安全研究人员\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch2 id=\"快速上手\">快速上手\u003C\u002Fh2>\u003Col>\n\u003Cli>安装 fwknop（通过包管理器或源码编译）\u003C\u002Fli>\n\u003Cli>配置 \u003Ccode>\u002Fetc\u002Ffwknop\u002Faccess.conf\u003C\u002Fcode> 文件\u003C\u002Fli>\n\u003Cli>使用 \u003Ccode>--key-gen\u003C\u002Fcode> 选项生成加密密钥和 HMAC 密钥\u003C\u002Fli>\n\u003Cli>使用 \u003Ccode>fwknop\u003C\u002Fcode> 客户端发送 SPA 数据包\u003C\u002Fli>\n\u003Cli>使用 \u003Ccode>fwknopd\u003C\u002Fcode> 守护进程接收并处理 SPA 请求\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch2 id=\"核心优势\">核心优势\u003C\u002Fh2>\u003Cul>\n\u003Cli>比传统端口敲门更安全的 SPA 方案\u003C\u002Fli>\n\u003Cli>支持多种防火墙和操作系统\u003C\u002Fli>\n\u003Cli>加密（Rijndael\u002FGnuPG）+ HMAC 双重认证\u003C\u002Fli>\n\u003Cli>开源免费\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch2 id=\"系统要求\">系统要求\u003C\u002Fh2>\u003Cul>\n\u003Cli>操作系统：Linux、OpenBSD、FreeBSD、macOS\u003C\u002Fli>\n\u003Cli>额外依赖：libpcap（用于被动获取 SPA 数据）\u003C\u002Fli>\n\u003C\u002Ful>\n",1790699388732]