The AkourSEC project includes a set of features and functions such as:
- Access Control: Determines who can access the website and who should be blocked using access rules and authentication.
- Logging: Records events and activities on the website, enabling monitoring and analysis of any suspicious activities.
- Threat Monitoring: Tracks and identifies suspicious patterns and predicts potential threats using updated security rules.
- Intrusion Prevention: Prevents known and unknown attacks by applying preventive measures and continuous monitoring.
Added vulnerabilities (protection against):
- SQL Injection vulnerability.
- Remote File Inclusion (RFI) vulnerability.
- Local File Inclusion (LFI) vulnerability.
- Remote Code Execution (RCE) vulnerability.
- Denial of Service (DoS) vulnerability.
- Cross-site scripting (XSS) vulnerability.
- Shell upload vulnerability, where the system processes uploaded files to distinguish whether the upload is a malicious shell or a normal file.
- Ability to block a specific IP address.
- Ability to block a specific country.
- Ability to replace specific words wherever they appear on the website.
- View server and website statistics as well as the PHP version.
Once the system blocks access, it logs the attempt to a .txt file, and/or to the database, and/or sends it as a message via WhatsApp, and/or email, and/or Telegram.
