
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
github.com/mhsanaei/x-ui
Disclaimer: This project is only for personal learning and communication, please do not use it for illegal purposes, please do not use it in a production environment
xray panel supporting multi-protocol, Multi-lang (English,Farsi,Chinese)
Features | Enable? |
---|---|
Multi-lang | :heavy_check_mark: |
Search in deep | :heavy_check_mark: |
Inbound Multi User | :heavy_check_mark: |
Multi User Traffic & Expiration time | :heavy_check_mark: |
REST API | :heavy_check_mark: |
Telegram BOT | :heavy_check_mark: |
If you think this project is helpful to you, you may wish to give a :star2:
bash <(curl -Ls https://raw.githubusercontent.com/alireza0/x-ui/master/install.sh)
amd64
/root/
directory and root
rootlog in to the server with userIf your server cpu architecture is not
amd64
replace another architecture
cd /root/
rm x-ui/ /usr/local/x-ui/ /usr/bin/x-ui -rf
tar zxvf x-ui-linux-amd64.tar.gz
chmod +x x-ui/x-ui x-ui/bin/xray-linux-* x-ui/x-ui.sh
cp x-ui/x-ui.sh /usr/bin/x-ui
cp -f x-ui/x-ui.service /etc/systemd/system/
mv x-ui/ /usr/local/
systemctl daemon-reload
systemctl enable x-ui
systemctl restart x-ui
This docker tutorial and docker image are provided by alireza0
curl -fsSL https://get.docker.com | sh
mkdir x-ui && cd x-ui
docker run -itd --network=host \
-v $PWD/db/:/etc/x-ui/ \
-v $PWD/cert/:/root/cert/ \
--name x-ui --restart=unless-stopped \
alireza0/x-ui:latest
Build your own image
docker build -t x-ui .
This feature and tutorial are provided by FranzKafkaYu
snap install core; snap refresh core
snap install --classic certbot
ln -s /snap/bin/certbot /usr/bin/certbot
certbot certonly --standalone --register-unsafely-without-email --non-interactive --agree-tos -d <Your Domain Name>
This feature and tutorial are provided by FranzKafkaYu
X-UI supports daily traffic notification, panel login reminder and other functions through the Tg robot. To use the Tg robot, you need to apply for the specific application tutorial. You can refer to the blog Set the robot-related parameters in the panel background, including:
Reference syntax:
30 * * * * * //Notify at the 30s of each point
@hourly // hourly notification
@daily // Daily notification (00:00 in the morning)
@every 8h // notify every 8 hours
TG notification content:
Node traffic usage
Panel login reminder
Node expiration reminder
Traffic warning reminder
More features are planned...
First install the latest version of x-ui on the server where v2-ui is installed, and then use the following command to migrate, which will migrate the native v2-ui All inbound account data
to x-ui,Panel settings and username passwords are not migrated
Please
Close v2-ui
andrestart x-ui
, otherwise the inbound of v2-ui will cause aport conflict with the inbound of x-ui
x-ui v2-ui
If you ygrade from an old version or other forks, for enable traffic for users you should do :
find this in config :
"policy": {
"system": {
and add this just after "policy": {
:
"levels": {
"0": {
"statsUserUplink": true,
"statsUserDownlink": true
}
},
the final output is like :
"policy": {
"levels": {
"0": {
"statsUserUplink": true,
"statsUserDownlink": true
}
},
"system": {
"statsInboundDownlink": true,
"statsInboundUplink": true
}
},
"routing": {
restart panel
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.