Initial commit
This commit is contained in:
commit
0873cadc4c
0
.idea/.gitignore
vendored
Normal file
0
.idea/.gitignore
vendored
Normal file
6
.idea/discord.xml
Normal file
6
.idea/discord.xml
Normal file
@ -0,0 +1,6 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<project version="4">
|
||||
<component name="DiscordProjectSettings">
|
||||
<option name="show" value="PROJECT_FILES" />
|
||||
</component>
|
||||
</project>
|
||||
8
.idea/modules.xml
Normal file
8
.idea/modules.xml
Normal file
@ -0,0 +1,8 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<project version="4">
|
||||
<component name="ProjectModuleManager">
|
||||
<modules>
|
||||
<module fileurl="file://$PROJECT_DIR$/.idea/sshoneypot.iml" filepath="$PROJECT_DIR$/.idea/sshoneypot.iml" />
|
||||
</modules>
|
||||
</component>
|
||||
</project>
|
||||
110
.idea/workspace.xml
Normal file
110
.idea/workspace.xml
Normal file
@ -0,0 +1,110 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<project version="4">
|
||||
<component name="ChangeListManager">
|
||||
<list default="true" id="84062d71-ebe8-4cc4-8ed7-9375510de988" name="Default Changelist" comment="" />
|
||||
<option name="SHOW_DIALOG" value="false" />
|
||||
<option name="HIGHLIGHT_CONFLICTS" value="true" />
|
||||
<option name="HIGHLIGHT_NON_ACTIVE_CHANGELIST" value="false" />
|
||||
<option name="LAST_RESOLUTION" value="IGNORE" />
|
||||
</component>
|
||||
<component name="FileTemplateManagerImpl">
|
||||
<option name="RECENT_TEMPLATES">
|
||||
<list>
|
||||
<option value="Go Application" />
|
||||
<option value="Go File" />
|
||||
</list>
|
||||
</option>
|
||||
</component>
|
||||
<component name="GOROOT" url="file:///usr/lib/go" />
|
||||
<component name="Git.Settings">
|
||||
<option name="RECENT_GIT_ROOT_PATH" value="$PROJECT_DIR$" />
|
||||
</component>
|
||||
<component name="GitSEFilterConfiguration">
|
||||
<file-type-list>
|
||||
<filtered-out-file-type name="LOCAL_BRANCH" />
|
||||
<filtered-out-file-type name="REMOTE_BRANCH" />
|
||||
<filtered-out-file-type name="TAG" />
|
||||
<filtered-out-file-type name="COMMIT_BY_MESSAGE" />
|
||||
</file-type-list>
|
||||
</component>
|
||||
<component name="GoLibraries">
|
||||
<option name="indexEntireGoPath" value="false" />
|
||||
</component>
|
||||
<component name="ProjectId" id="1pZZ5aRCduBrvaNLZvRCKVbHVxi" />
|
||||
<component name="ProjectLevelVcsManager" settingsEditedManually="true" />
|
||||
<component name="ProjectViewState">
|
||||
<option name="hideEmptyMiddlePackages" value="true" />
|
||||
<option name="showLibraryContents" value="true" />
|
||||
</component>
|
||||
<component name="PropertiesComponent">
|
||||
<property name="DefaultGoTemplateProperty" value="Go File" />
|
||||
<property name="RunOnceActivity.OpenProjectViewOnStart" value="true" />
|
||||
<property name="RunOnceActivity.ShowReadmeOnStart" value="true" />
|
||||
<property name="WebServerToolWindowFactoryState" value="false" />
|
||||
<property name="dart.analysis.tool.window.visible" value="false" />
|
||||
<property name="go.import.settings.migrated" value="true" />
|
||||
<property name="go.sdk.automatically.set" value="true" />
|
||||
<property name="last_opened_file_path" value="$PROJECT_DIR$" />
|
||||
<property name="settings.editor.selected.configurable" value="preferences.pluginManager" />
|
||||
</component>
|
||||
<component name="RecentsManager">
|
||||
<key name="MoveFile.RECENT_KEYS">
|
||||
<recent name="$PROJECT_DIR$/sshoneypot/info" />
|
||||
<recent name="$PROJECT_DIR$/sshoneypot" />
|
||||
<recent name="$PROJECT_DIR$" />
|
||||
</key>
|
||||
</component>
|
||||
<component name="RunManager" selected="Go Build.go build github.com/bytedream/sshoneypot">
|
||||
<configuration name="go build github.com/bytedream/sshoneypot" type="GoApplicationRunConfiguration" factoryName="Go Application" temporary="true" nameIsGenerated="true">
|
||||
<module name="sshoneypot" />
|
||||
<working_directory value="$PROJECT_DIR$" />
|
||||
<kind value="PACKAGE" />
|
||||
<package value="github.com/bytedream/sshoneypot" />
|
||||
<directory value="$PROJECT_DIR$" />
|
||||
<filePath value="$PROJECT_DIR$/main.go" />
|
||||
<method v="2" />
|
||||
</configuration>
|
||||
<configuration name="dump_fs" type="PythonConfigurationType" factoryName="Python" temporary="true" nameIsGenerated="true">
|
||||
<module name="sshoneypot" />
|
||||
<option name="INTERPRETER_OPTIONS" value="" />
|
||||
<option name="PARENT_ENVS" value="true" />
|
||||
<envs>
|
||||
<env name="PYTHONUNBUFFERED" value="1" />
|
||||
</envs>
|
||||
<option name="SDK_HOME" value="" />
|
||||
<option name="WORKING_DIRECTORY" value="$PROJECT_DIR$" />
|
||||
<option name="IS_MODULE_SDK" value="true" />
|
||||
<option name="ADD_CONTENT_ROOTS" value="true" />
|
||||
<option name="ADD_SOURCE_ROOTS" value="true" />
|
||||
<option name="SCRIPT_NAME" value="$PROJECT_DIR$/dump_fs.py" />
|
||||
<option name="PARAMETERS" value="" />
|
||||
<option name="SHOW_COMMAND_LINE" value="false" />
|
||||
<option name="EMULATE_TERMINAL" value="false" />
|
||||
<option name="MODULE_MODE" value="false" />
|
||||
<option name="REDIRECT_INPUT" value="false" />
|
||||
<option name="INPUT_FILE" value="" />
|
||||
<method v="2" />
|
||||
</configuration>
|
||||
<recent_temporary>
|
||||
<list>
|
||||
<item itemvalue="Go Build.go build github.com/bytedream/sshoneypot" />
|
||||
</list>
|
||||
</recent_temporary>
|
||||
</component>
|
||||
<component name="SpellCheckerSettings" RuntimeDictionaries="0" Folders="0" CustomDictionaries="0" DefaultDictionary="application-level" UseSingleDictionary="true" transferred="true" />
|
||||
<component name="TypeScriptGeneratedFilesManager">
|
||||
<option name="version" value="3" />
|
||||
</component>
|
||||
<component name="Vcs.Log.Tabs.Properties">
|
||||
<option name="TAB_STATES">
|
||||
<map>
|
||||
<entry key="MAIN">
|
||||
<value>
|
||||
<State />
|
||||
</value>
|
||||
</entry>
|
||||
</map>
|
||||
</option>
|
||||
<option name="oldMeFiltersMigrated" value="true" />
|
||||
</component>
|
||||
</project>
|
||||
143
README.md
Normal file
143
README.md
Normal file
@ -0,0 +1,143 @@
|
||||
# ⚠️ UNFINISHED PROJECT ⚠️
|
||||
|
||||
> A try to write a own ssh honeypot. Higly inspirated by [sshesame](https://github.com/jaksi/sshesame).
|
||||
|
||||
# sshoneypot
|
||||
|
||||
Go 1.10
|
||||
|
||||
**sshoneypot** easy is a fake ssh server that lets everyone connect, logs their activity and can be implemented easily in your project, or can be used as a standalone application.
|
||||
The ssh server has a emulated, full functional linux filesystem. For more details about the filesystem see [here](info/fs.go).
|
||||
It also contains some basic linux commands like `cd`, `ls` or `stat`. You can add commands by yourself too, see [here](#own-commands) how.
|
||||
|
||||
The project itself is just a library, but you can run it standalone via [docker](#Docker).
|
||||
|
||||
## Docker
|
||||
|
||||
## Own commands
|
||||
|
||||
If the standard commands aren't enough, you can easily implement you owns
|
||||
|
||||
```go
|
||||
package main
|
||||
|
||||
func main() {
|
||||
}
|
||||
```
|
||||
|
||||
## Warning
|
||||
This software, just like any other, might contain bugs. Given the popular nature of SSH, you probably shouldn't run it unsupervised as root on a production server on port 22. Use common sense.
|
||||
|
||||
## Motivation
|
||||
I was just curious what all these guys were up to:
|
||||
```
|
||||
sshd[8128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=<client> user=root
|
||||
sshd[8128]: Failed password for root from <client> port 37510 ssh2
|
||||
sshd[8128]: Received disconnect from <client> port 37510:11: [preauth]
|
||||
sshd[8128]: Disconnected from <client> port 37510 [preauth]
|
||||
sshd[8141]: Received disconnect from <client> port 59353:11: [preauth]
|
||||
sshd[8141]: Disconnected from <client> port 59353 [preauth]
|
||||
sshd[8151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=<client> user=root
|
||||
sshd[8151]: Failed password for root from <client> port 63785 ssh2
|
||||
sshd[8159]: Received disconnect from <client> port 24889:11: [preauth]
|
||||
sshd[8159]: Disconnected from <client> port 24889 [preauth]
|
||||
```
|
||||
|
||||
## Details
|
||||
`sshesame` accepts and logs
|
||||
* every password authentication request,
|
||||
* every SSH channel open request and
|
||||
* every SSH request
|
||||
|
||||
**without actually executing anything on the host**.
|
||||
|
||||
For more details, read the [relevant RFC](https://tools.ietf.org/html/rfc4254).
|
||||
|
||||
## Installing
|
||||
### From source
|
||||
* [Install go](https://golang.org/doc/install) (version 1.4 or newer required)
|
||||
* `go get -u github.com/jaksi/sshesame`
|
||||
|
||||
### Snap
|
||||
`snap install sshesame`
|
||||
|
||||
Package created and maintained by [chadmiller](https://github.com/chadmiller).
|
||||
|
||||
You can find the package [here](https://code.launchpad.net/~privacy-squad/+junk/sshesame-snap).
|
||||
|
||||
## Examples
|
||||
|
||||
```go
|
||||
package main
|
||||
|
||||
import (
|
||||
"fmt"
|
||||
"github.com/bytedream/sshoneypot/sshoneypot"
|
||||
)
|
||||
|
||||
func main() {
|
||||
fmt.Println("aa")
|
||||
}
|
||||
```
|
||||
|
||||
## Usage
|
||||
```
|
||||
$ sshesame -h
|
||||
Usage of sshesame:
|
||||
-host_key string
|
||||
a file containing a private key to use
|
||||
-json_logging
|
||||
enable logging in JSON
|
||||
-listen_address string
|
||||
the local address to listen on (default "localhost")
|
||||
-port uint
|
||||
the port number to listen on (default 2022)
|
||||
-server_version string
|
||||
The version identification of the server (RFC 4253 section 4.2 requires that this string start with "SSH-2.0-") (default "SSH-2.0-sshesame")
|
||||
```
|
||||
Consider creating a private key to use with sshesame, for example using `ssh-keygen`.
|
||||
|
||||
## Example output
|
||||
```
|
||||
Connection: client=<client>:45782
|
||||
Login: client=<client>:45782, user="root", password="cisco"
|
||||
Established SSH connection: client=<client>:45782
|
||||
New channel: clinet=<client>:45782, type=direct-tcpip, payload={DestinationAddress:<something> DestinationPort:110 SourceAddress:192.168.0.1 SourcePort:0}
|
||||
Failed to read from channel: EOF
|
||||
New channel: clinet=<client>:45782, type=direct-tcpip, payload={DestinationAddress:<something> DestinationPort:143 SourceAddress:192.168.0.1 SourcePort:0}
|
||||
Failed to read from channel: EOF
|
||||
New channel: clinet=<client>:45782, type=direct-tcpip, payload={DestinationAddress:<something> DestinationPort:587 SourceAddress:192.168.0.1 SourcePort:0}
|
||||
Failed to read from channel: EOF
|
||||
New channel: clinet=<client>:45782, type=direct-tcpip, payload={DestinationAddress:<something> DestinationPort:587 SourceAddress:192.168.0.1 SourcePort:0}
|
||||
Failed to read from channel: EOF
|
||||
New channel: clinet=<client>:45782, type=session, payload=[]
|
||||
Request: client=<client>:45782, channel=session, type=exec, payload={Command:/sbin/ifconfig}
|
||||
Failed to read from terminal: EOF
|
||||
New channel: clinet=<client>:45782, type=session, payload=[]
|
||||
Request: client=<client>:45782, channel=session, type=exec, payload={Command:cat /proc/meminfo}
|
||||
Failed to read from terminal: EOF
|
||||
New channel: clinet=<client>:45782, type=session, payload=[]
|
||||
Request: client=<client>:45782, channel=session, type=exec, payload={Command:2>/dev/null sh -c 'cat /lib/libdl.so* || cat /lib/librt.so* || cat /bin/cat || cat /sbin/ifconfig'}
|
||||
Failed to read from terminal: EOF
|
||||
New channel: clinet=<client>:45782, type=session, payload=[]
|
||||
Request: client=<client>:45782, channel=session, type=exec, payload={Command:cat /proc/version}
|
||||
Failed to read from terminal: EOF
|
||||
New channel: clinet=<client>:45782, type=session, payload=[]
|
||||
Request: client=<client>:45782, channel=session, type=exec, payload={Command:uptime}
|
||||
Failed to read from terminal: EOF
|
||||
Disconnect: client=<client>:45782
|
||||
```
|
||||
So what happened here?
|
||||
* A client logged in with the user "root" and the password "cisco"
|
||||
* Using TCP/IP forwarding over SSH, they tried to connect to a few remote mail servers over POP3 (port 110), IMAP (port 143) and Submission (port 587)
|
||||
* They tried to execute a few commands to get some information about the host
|
||||
|
||||
Again, if you're interested in the technical details of SSH, read the [RFC](https://tools.ietf.org/html/rfc4254).
|
||||
|
||||
## Inspired
|
||||
|
||||
This project was inspired from some the following projects
|
||||
|
||||
- [sshesame](https://github.com/jaksi/sshesame) (another go based fake ssh server)
|
||||
|
||||
## Implementation
|
||||
63
dump_fs.py
Normal file
63
dump_fs.py
Normal file
@ -0,0 +1,63 @@
|
||||
#!/usr/bin/python3
|
||||
import json
|
||||
import os
|
||||
import sys
|
||||
|
||||
|
||||
excluded = ('/tmp', '/proc')
|
||||
|
||||
|
||||
def info(file: str) -> list:
|
||||
try:
|
||||
stat = os.stat(file)
|
||||
# this error may occur when temporary files are being passed as argument and deleted before `os.stat(...)` can read it
|
||||
except FileNotFoundError:
|
||||
import stat
|
||||
stat.S_ISBLK()
|
||||
return None
|
||||
# occurs when you do not have the rights to read the given file
|
||||
except PermissionError:
|
||||
sys.stderr.write(f"Permission denied: '{file}'\n")
|
||||
return None
|
||||
|
||||
type = int(oct(stat.st_mode)[2:-4])
|
||||
|
||||
size = stat.st_size
|
||||
links = stat.st_nlink
|
||||
permissions = int(oct(stat.st_mode)[-4:], 8)
|
||||
|
||||
creation_timestamp = int(stat.st_ctime)
|
||||
# access_timestamp = stat.st_atime
|
||||
# modification_timestamp = stat.st_mtime
|
||||
|
||||
user_id = stat.st_uid if stat.st_uid in [0, 1000] else 1000
|
||||
group_id = stat.st_gid if stat.st_gid in [0, 1000] else 1000
|
||||
|
||||
return [type, size, links, permissions, creation_timestamp, user_id, group_id]
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
fs = {'files': {}, 'info': info('/')}
|
||||
for root, dirs, files in os.walk('/'):
|
||||
|
||||
# checks if the path is in the `excluded` list and if so, it skips this iteration
|
||||
if root.startswith(excluded):
|
||||
continue
|
||||
|
||||
fs_root = fs['files']
|
||||
for dir in root.split(os.sep):
|
||||
if dir.startswith('/'):
|
||||
dir = dir[1:]
|
||||
if dir != "":
|
||||
fs_root = fs_root[dir]['files']
|
||||
|
||||
for dir in dirs:
|
||||
specs = info(os.path.join(root, dir))
|
||||
fs_root[dir] = {'files': {}, 'info': specs}
|
||||
|
||||
for file in files:
|
||||
specs = info(os.path.join(root, file))
|
||||
if specs:
|
||||
fs_root[file] = specs
|
||||
|
||||
json.dump(fs, open('fs.json', 'w+'))
|
||||
41
main.go
Normal file
41
main.go
Normal file
@ -0,0 +1,41 @@
|
||||
package main
|
||||
|
||||
import (
|
||||
"github.com/bytedream/sshoneypot/sshoneypot"
|
||||
"github.com/bytedream/sshoneypot/sshoneypot/info"
|
||||
"golang.org/x/crypto/ssh"
|
||||
"io/fs"
|
||||
"io/ioutil"
|
||||
"os"
|
||||
)
|
||||
|
||||
func main() {
|
||||
//fmt.Println(strings.Split("/etc/aaa", string(os.PathSeparator))[1:])
|
||||
|
||||
/*fs, err := sshoneypot.LoadFSFromJson("fs.json")
|
||||
if err != nil {
|
||||
panic(err)
|
||||
}
|
||||
|
||||
if file, ok := fs.GetFile("/etc"); ok {
|
||||
d, _ := file.(sshoneypot.Directory)
|
||||
fmt.Println(d.Files)
|
||||
//fmt.Println(file.(sshoneypot.Directory).Files)
|
||||
}*/
|
||||
|
||||
var key ssh.Signer
|
||||
if _, err := os.Stat("ssh.key"); os.IsNotExist(err) {
|
||||
privateKey, _ := sshoneypot.GenerateSSHKey()
|
||||
ioutil.WriteFile("ssh.key", privateKey, fs.ModePerm)
|
||||
key, _ = sshoneypot.LoadSSHKey(privateKey)
|
||||
} else {
|
||||
key, _ = sshoneypot.LoadSSHKeyFromFile("ssh.key")
|
||||
}
|
||||
|
||||
filesystem, _ := info.LoadFSFromJson("fs.json")
|
||||
filesystem.Manipulate = true
|
||||
sshServer := sshoneypot.DefaultSSHoneypot(filesystem, key)
|
||||
if err := sshServer.Serve(); err != nil {
|
||||
panic(err)
|
||||
}
|
||||
}
|
||||
27
ssh.key
Executable file
27
ssh.key
Executable file
@ -0,0 +1,27 @@
|
||||
-----BEGIN RSA PRIVATE KEY-----
|
||||
MIIEogIBAAKCAQEAwOnBoYINHWj92prwhQHzLv3pDHAdqui6R4Ap7aWccSEM8fh7
|
||||
4xaqnDSCTPnkndec2t9wkR0rKNcharUSg9RUDyFBTcXeFlDEnEIHQW60iX6WnMAn
|
||||
FUu2dqdX2SkXOvmERBkeQhukYQGrmTLY9KChgMUrLT698G12BiR3QdnwsfIu0ICO
|
||||
PvICqYqn27J78UAArHveHzdxL2nOZhsEFaI5HawqZDc3BRy62yNO/u1Vx+FlbzuY
|
||||
ToYSWYHvItzOFEkQudeJLXwBc6q1tZyLrmriLUek78MXIa3cZxeA6QbQkxPcVvG6
|
||||
ALTgJ5kVS/ryr2VdrvCZs6qeQhxzVkmf+UnY7wIDAQABAoIBACSlAqwMSTN5+yao
|
||||
YeHSIgCeKMO9FFWfyarFVLGY0OPIdG4OVnInnxb2/n1ixqOZDmmhIf/eu5ERdH6R
|
||||
kMfL8H/DQGVmna49f2tzO2+ZeN/ZVQDHm2T3MdzOIujUXl5MgWxyHQZPu+TVbWQ3
|
||||
fXDShnsweOgqT+g40r+N871licwzMUrEmfygYzvQtHmEnb0QS3r46kn45D/uPq/w
|
||||
Cw29R7yibiaBLlGZdOHHMW4A9svWvJfOjTH5+6Rs/rINcWLhIqdV6XQoKYVizjnb
|
||||
8u138/6Xenhq8+9gzJyTUfApBzN+t8lm+bwnuYH5EhGoNv8rPLk90dwHMbXJIkJA
|
||||
pSQrSxkCgYEA0KL0Gz1ozdlLYfBtXfxQmg1tiehtEBM+2Zn9znvCVNG08r/MQu81
|
||||
pyXIfhJWYYveFskLnG0XzS7Bj36V5SwONUtfUzw4ymLUJGknhRzMb/vQgWUcQrWO
|
||||
wglgG8rQskkjzHR3gLIB4Hiv9o/9k8w0Bv/oa+lrQ1DInqPQGNtxIJsCgYEA7LUG
|
||||
mpY5z9xxXF7GinqkFa0iVQ84zYwQ/eyHQfGiap80dgjTEnaEN2cLvl8aGBoXkwiV
|
||||
Lcc/zbk0ftYPMXMwpYDXkeHY99IMwu0eicyOuckYB45n+q9ZsJPiEzkBwVRIdeEQ
|
||||
PBSzFoPw1KXwe/T5xvPo6272lcF/wSIJLdo+fD0CgYAxGVg3HOGQKAX8e3dRefKB
|
||||
/oz7um4ILW9KCFpZgHiAO4XI5ugsDF1lA5hGSwx3ElJmrFOGMYo7aDh3C4Q9FXwW
|
||||
gLFjRjXbMxzXoMODKP7Xj7xG50OaU13QPiKXB8jLXDkHgZUp/TpB2EUY0lQLty+7
|
||||
QfgxhRIQGm/MHaL4ZpQd5wKBgA9ArvdBHOKPAuL/3G1J787RxDeU7oUYNHQYTLLs
|
||||
HhoeviOo9+jlqCllw3T17dmFvOUllW9IuozIFWDi7EG0eXsArWNiGTgG2fmpi+E3
|
||||
RC8mjRzXiU23BOGC9ftlHf7WLoEiCojEkLGvuNILC08BfyLZzrV1BgCqYlAQoGTK
|
||||
/mHFAoGAIVxgfCZsZ4+Nsik8T3eNstI5tytwyU4y27eQEpDvuzmYCMR0/F+6lj9z
|
||||
nPBLMv5ELCQf98lotTLthKv2jRN45Xv9jZ+mu/4fRwdJXaEdc8vt72fX6HXU1Gzt
|
||||
ZXGzkt+hJufUxLN6u3xgGqcRWBxs/xKvAcSEAkkqKy8RgCnNqXk=
|
||||
-----END RSA PRIVATE KEY-----
|
||||
112
sshoneypot/handle.go
Normal file
112
sshoneypot/handle.go
Normal file
@ -0,0 +1,112 @@
|
||||
package sshoneypot
|
||||
|
||||
import (
|
||||
"errors"
|
||||
"fmt"
|
||||
"github.com/bytedream/sshoneypot/sshoneypot/info"
|
||||
"golang.org/x/crypto/ssh"
|
||||
)
|
||||
|
||||
|
||||
type payloadWindowChange struct {
|
||||
Width, Height uint32
|
||||
|
||||
// always 0
|
||||
PixelWidth, PixelHeight uint32
|
||||
}
|
||||
|
||||
type payloadPty struct {
|
||||
Term string
|
||||
Width, Height uint32
|
||||
|
||||
// always 0
|
||||
PixelWidth, PixelHeight uint32
|
||||
|
||||
Modes []byte
|
||||
}
|
||||
|
||||
|
||||
func handleRequest(requests <-chan *ssh.Request, term *info.Termina) {
|
||||
for request := range requests {
|
||||
switch request.Type {
|
||||
case "pty-req":
|
||||
var pty payloadPty
|
||||
ssh.Unmarshal(request.Payload, &pty)
|
||||
|
||||
term.SetSize(int(pty.Width), int(pty.Height))
|
||||
case "window-change":
|
||||
var windowChange payloadWindowChange
|
||||
ssh.Unmarshal(request.Payload, &windowChange)
|
||||
|
||||
term.SetSize(int(windowChange.Width), int(windowChange.Height))
|
||||
}
|
||||
// sends a reply if wanted
|
||||
if request.WantReply {
|
||||
request.Reply(true, nil)
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
func parseCommand(command string) ([]string, error) {
|
||||
var args []string
|
||||
state := "start"
|
||||
current := ""
|
||||
quote := "\""
|
||||
escapeNext := true
|
||||
for i := 0; i < len(command); i++ {
|
||||
c := command[i]
|
||||
|
||||
if state == "quotes" {
|
||||
if string(c) != quote {
|
||||
current += string(c)
|
||||
} else {
|
||||
args = append(args, current)
|
||||
current = ""
|
||||
state = "start"
|
||||
}
|
||||
continue
|
||||
}
|
||||
|
||||
if escapeNext {
|
||||
current += string(c)
|
||||
escapeNext = false
|
||||
continue
|
||||
}
|
||||
|
||||
switch c {
|
||||
case '\\':
|
||||
escapeNext = true
|
||||
continue
|
||||
case '"', '\'':
|
||||
state = "quotes"
|
||||
quote = string(c)
|
||||
continue
|
||||
}
|
||||
|
||||
if state == "arg" {
|
||||
if c == ' ' || c == '\t' {
|
||||
args = append(args, current)
|
||||
current = ""
|
||||
state = "start"
|
||||
} else {
|
||||
current += string(c)
|
||||
}
|
||||
continue
|
||||
}
|
||||
|
||||
if c != ' ' && c != '\t' {
|
||||
state = "arg"
|
||||
current += string(c)
|
||||
}
|
||||
}
|
||||
|
||||
if state == "quotes" {
|
||||
return []string{}, errors.New(fmt.Sprintf("Unclosed quote in command line: %s", command))
|
||||
}
|
||||
|
||||
if current != "" {
|
||||
args = append(args, current)
|
||||
}
|
||||
|
||||
return args, nil
|
||||
}
|
||||
538
sshoneypot/handler/fs.go
Normal file
538
sshoneypot/handler/fs.go
Normal file
@ -0,0 +1,538 @@
|
||||
package handler
|
||||
|
||||
import (
|
||||
"fmt"
|
||||
"github.com/bytedream/sshoneypot/sshoneypot/info"
|
||||
"math/rand"
|
||||
"os"
|
||||
"sort"
|
||||
"strings"
|
||||
)
|
||||
|
||||
func basicFileCommandParser(info *info.Info, help string, availableOptions... string) (options []string, files []string, ok bool) {
|
||||
if len(info.Args) == 0 {
|
||||
info.Errorln(missingOperand(info))
|
||||
return nil, nil, false
|
||||
} else {
|
||||
for _, arg := range info.Args {
|
||||
if strings.HasPrefix(arg, "-") {
|
||||
hasArg := len(availableOptions) == 0
|
||||
|
||||
if arg == "--help" {
|
||||
info.Writeln(help)
|
||||
return nil, nil, false
|
||||
}
|
||||
for _, option := range availableOptions {
|
||||
if arg == option {
|
||||
hasArg = true
|
||||
break
|
||||
}
|
||||
}
|
||||
options = append(options, arg)
|
||||
|
||||
if !hasArg{
|
||||
info.Errorlnf("%s: unrecognized option '%s'", info.Command, arg)
|
||||
info.Errorlnf("Try '%s --help' for more information.", info.Command)
|
||||
return nil, nil, false
|
||||
}
|
||||
} else {
|
||||
files = append(files, arg)
|
||||
}
|
||||
}
|
||||
}
|
||||
return options, files, true
|
||||
}
|
||||
|
||||
type Cat struct {
|
||||
info.SimpleHandler
|
||||
}
|
||||
|
||||
func (cat Cat) Handle(cmdInfo *info.Info) {
|
||||
if multipleArgs(cmdInfo) {
|
||||
var paths []string
|
||||
for _, arg := range cmdInfo.Args {
|
||||
if strings.HasPrefix(arg, "-") {
|
||||
switch arg {
|
||||
case "--help":
|
||||
cmdInfo.Writeln(cat.help())
|
||||
return
|
||||
}
|
||||
} else {
|
||||
paths = append(paths, arg)
|
||||
}
|
||||
}
|
||||
|
||||
for _, path := range paths {
|
||||
if file, ok := cmdInfo.FS.GetFile(path, false); ok {
|
||||
if file.IsDir() {
|
||||
cmdInfo.Writelnf("%s:%s: Is a directory", cmdInfo.Command, path)
|
||||
} else {
|
||||
realFile := file.(info.File)
|
||||
bytes := make([]byte, realFile.Size)
|
||||
// this will make the file content always the same
|
||||
rand.Seed(realFile.Size + realFile.CreationTimestamp)
|
||||
|
||||
rand.Read(bytes)
|
||||
cmdInfo.Writeln(string(bytes))
|
||||
}
|
||||
} else {
|
||||
cmdInfo.Writeln(noSuchFileOrDirectory(path, cmdInfo))
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
func (cat Cat) help() string {
|
||||
return `
|
||||
Usage: cat [OPTION]... [FILE]...
|
||||
Concatenate FILE(s) to standard output.
|
||||
|
||||
With no FILE, or when FILE is -, read standard input.
|
||||
|
||||
-A, --show-all equivalent to -vET
|
||||
-b, --number-nonblank number nonempty output lines, overrides -n
|
||||
-e equivalent to -vE
|
||||
-E, --show-ends display $ at end of each line
|
||||
-n, --number number all output lines
|
||||
-s, --squeeze-blank suppress repeated empty output lines
|
||||
-t equivalent to -vT
|
||||
-T, --show-tabs display TAB characters as ^I
|
||||
-u (ignored)
|
||||
-v, --show-nonprinting use ^ and M- notation, except for LFD and TAB
|
||||
--help display this help and exit
|
||||
--version output version information and exit
|
||||
|
||||
Examples:
|
||||
cat f - g Output f's contents, then standard input, then g's contents.
|
||||
cat Copy standard input to standard output.
|
||||
|
||||
GNU coreutils online help: <https://www.gnu.org/software/coreutils/>
|
||||
Report cat translation bugs to <https://translationproject.org/team/>
|
||||
Full documentation at: <https://www.gnu.org/software/coreutils/cat>
|
||||
or available locally via: info '(coreutils) cat invocation'`
|
||||
}
|
||||
|
||||
type CD struct {
|
||||
info.SimpleHandler
|
||||
}
|
||||
|
||||
func (cd CD) Handle(cmdInfo *info.Info) {
|
||||
if _, files, ok := basicFileCommandParser(cmdInfo, cd.help()); ok {
|
||||
if len(files) != 1 {
|
||||
return
|
||||
} else {
|
||||
path := files[0]
|
||||
if _, ok := cmdInfo.FS.GetExplicitDirectory(path, true); ok {
|
||||
if cmdInfo.Terminal != nil {
|
||||
cmdInfo.Terminal.SetPrompt(fmt.Sprintf("%s:%s $ ", cmdInfo.User.User(), cmdInfo.FS.Cwd().Name))
|
||||
}
|
||||
} else {
|
||||
cmdInfo.Writelnf("-bash: cd: %s: No such file or directory", path)
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
func (cd CD) help() string {
|
||||
return `cd: cd [-L|[-P [-e]] [-@]] [dir]
|
||||
Change the shell working directory.
|
||||
|
||||
Change the current directory to DIR. The default DIR is the value of the
|
||||
HOME shell variable.
|
||||
|
||||
The variable CDPATH defines the search path for the directory containing
|
||||
DIR. Alternative directory names in CDPATH are separated by a colon (:).
|
||||
A null directory name is the same as the current directory. If DIR begins
|
||||
with a slash (/), then CDPATH is not used.
|
||||
|
||||
If the directory is not found, and the shell option 'cdable_vars' is set,
|
||||
the word is assumed to be a variable name. If that variable has a value,
|
||||
its value is used for DIR.
|
||||
|
||||
Options:
|
||||
-L force symbolic links to be followed: resolve symbolic
|
||||
links in DIR after processing instances of '..'
|
||||
-P use the physical directory structure without following
|
||||
symbolic links: resolve symbolic links in DIR before
|
||||
processing instances of '..'
|
||||
-e if the -P option is supplied, and the current working
|
||||
directory cannot be determined successfully, exit with
|
||||
a non-zero status
|
||||
-@ on systems that support it, present a file with extended
|
||||
attributes as a directory containing the file attributes
|
||||
|
||||
The default is to follow symbolic links, as if '-L' were specified.
|
||||
'..' is processed by removing the immediately previous pathname component
|
||||
back to a slash or the beginning of DIR.
|
||||
|
||||
Exit Status:
|
||||
Returns 0 if the directory is changed, and if $PWD is set successfully when
|
||||
-P is used; non-zero otherwise.`
|
||||
}
|
||||
|
||||
type LS struct {
|
||||
info.SimpleHandler
|
||||
}
|
||||
|
||||
func (ls LS) Handle(cmdInfo *info.Info) {
|
||||
if len(cmdInfo.Args) == 0 {
|
||||
cmdInfo.Args = []string{""}
|
||||
}
|
||||
|
||||
if _, files, ok := basicFileCommandParser(cmdInfo, ls.help()); ok {
|
||||
var errors []string
|
||||
dirs := map[string]string{}
|
||||
|
||||
for _, dir := range files {
|
||||
f, ok := cmdInfo.FS.GetFile(dir, false)
|
||||
if !ok {
|
||||
errors = append(errors, fmt.Sprintf("ls: cannot access '%s': No such file or directory", dir))
|
||||
continue
|
||||
}
|
||||
switch f.(type) {
|
||||
case info.Directory:
|
||||
var length int
|
||||
var files []string
|
||||
for _, file := range f.(info.Directory).Files {
|
||||
if l := len(file.Name); length < l {
|
||||
length = l
|
||||
}
|
||||
files = append(files, file.Name)
|
||||
}
|
||||
length++
|
||||
|
||||
sort.Strings(files)
|
||||
|
||||
var builder strings.Builder
|
||||
var perline int
|
||||
if cmdInfo.Terminal.Width > 0 {
|
||||
perline = int(cmdInfo.Terminal.Width) / length
|
||||
} else {
|
||||
perline = 80 / length
|
||||
}
|
||||
|
||||
for i, file := range files {
|
||||
if i % perline == 0 && i != 0 {
|
||||
builder.WriteString("\n")
|
||||
}
|
||||
builder.WriteString(file + strings.Repeat(" ", length - len(file)))
|
||||
}
|
||||
|
||||
dirs[dir] = builder.String()
|
||||
case info.File:
|
||||
dirs[dir] = dir
|
||||
}
|
||||
}
|
||||
|
||||
if len(dirs) == 1 && len(errors) == 0 {
|
||||
for _, v := range dirs {
|
||||
cmdInfo.Writeln(v)
|
||||
}
|
||||
} else {
|
||||
var builder strings.Builder
|
||||
for _, err := range errors {
|
||||
builder.WriteString(err)
|
||||
builder.WriteString("\n")
|
||||
}
|
||||
if len(errors) > 0 && len(dirs) > 0 {
|
||||
builder.WriteString("\n")
|
||||
}
|
||||
for k, v := range dirs {
|
||||
builder.WriteString(fmt.Sprintf("%s:\n", k))
|
||||
builder.WriteString(v)
|
||||
builder.WriteString("\n")
|
||||
}
|
||||
cmdInfo.Write(builder.String())
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
func (ls LS) help() string {
|
||||
return `Usage: ls [OPTION]... [FILE]...
|
||||
List information about the FILEs (the current directory by default).
|
||||
Sort entries alphabetically if none of -cftuvSUX nor --sort is specified.
|
||||
|
||||
Mandatory arguments to long options are mandatory for short options too.
|
||||
-a, --all do not ignore entries starting with .
|
||||
-A, --almost-all do not list implied . and ..
|
||||
--author with -l, print the author of each file
|
||||
-b, --escape print C-style escapes for nongraphic characters
|
||||
--block-size=SIZE with -l, scale sizes by SIZE when printing them;
|
||||
e.g., '--block-size=M'; see SIZE format below
|
||||
-B, --ignore-backups do not list implied entries ending with ~
|
||||
-c with -lt: sort by, and show, ctime (time of last
|
||||
modification of file status information);
|
||||
with -l: show ctime and sort by name;
|
||||
otherwise: sort by ctime, newest first
|
||||
-C list entries by columns
|
||||
--color[=WHEN] colorize the output; WHEN can be 'always' (default
|
||||
if omitted), 'auto', or 'never'; more info below
|
||||
-d, --directory list directories themselves, not their contents
|
||||
-D, --dired generate output designed for Emacs' dired mode
|
||||
-f do not sort, enable -aU, disable -ls --color
|
||||
-F, --classify append indicator (one of */=>@|) to entries
|
||||
--file-type likewise, except do not append '*'
|
||||
--format=WORD across -x, commas -m, horizontal -x, long -l,
|
||||
single-column -1, verbose -l, vertical -C
|
||||
--full-time like -l --time-style=full-iso
|
||||
-g like -l, but do not list owner
|
||||
--group-directories-first
|
||||
group directories before files;
|
||||
can be augmented with a --sort option, but any
|
||||
use of --sort=none (-U) disables grouping
|
||||
-G, --no-group in a long listing, don't print group names
|
||||
-h, --human-readable with -l and -s, print sizes like 1K 234M 2G etc.
|
||||
--si likewise, but use powers of 1000 not 1024
|
||||
-H, --dereference-command-line
|
||||
follow symbolic links listed on the command line
|
||||
--dereference-command-line-symlink-to-dir
|
||||
follow each command line symbolic link
|
||||
that points to a directory
|
||||
--hide=PATTERN do not list implied entries matching shell PATTERN
|
||||
(overridden by -a or -A)
|
||||
--hyperlink[=WHEN] hyperlink file names; WHEN can be 'always'
|
||||
(default if omitted), 'auto', or 'never'
|
||||
--indicator-style=WORD append indicator with style WORD to entry names:
|
||||
none (default), slash (-p),
|
||||
file-type (--file-type), classify (-F)
|
||||
-i, --inode print the index number of each file
|
||||
-I, --ignore=PATTERN do not list implied entries matching shell PATTERN
|
||||
-k, --kibibytes default to 1024-byte blocks for disk usage;
|
||||
used only with -s and per directory totals
|
||||
-l use a long listing format
|
||||
-L, --dereference when showing file information for a symbolic
|
||||
link, show information for the file the link
|
||||
references rather than for the link itself
|
||||
-m fill width with a comma separated list of entries
|
||||
-n, --numeric-uid-gid like -l, but list numeric user and group IDs
|
||||
-N, --literal print entry names without quoting
|
||||
-o like -l, but do not list group information
|
||||
-p, --indicator-style=slash
|
||||
append / indicator to directories
|
||||
-q, --hide-control-chars print ? instead of nongraphic characters
|
||||
--show-control-chars show nongraphic characters as-is (the default,
|
||||
unless program is 'ls' and output is a terminal)
|
||||
-Q, --quote-name enclose entry names in double quotes
|
||||
--quoting-style=WORD use quoting style WORD for entry names:
|
||||
literal, locale, shell, shell-always,
|
||||
shell-escape, shell-escape-always, c, escape
|
||||
(overrides QUOTING_STYLE environment variable)
|
||||
-r, --reverse reverse order while sorting
|
||||
-R, --recursive list subdirectories recursively
|
||||
-s, --size print the allocated size of each file, in blocks
|
||||
-S sort by file size, largest first
|
||||
--sort=WORD sort by WORD instead of name: none (-U), size (-S),
|
||||
time (-t), version (-v), extension (-X)
|
||||
--time=WORD with -l, show time as WORD instead of default
|
||||
modification time: atime or access or use (-u);
|
||||
ctime or status (-c); also use specified time
|
||||
as sort key if --sort=time (newest first)
|
||||
--time-style=TIME_STYLE time/date format with -l; see TIME_STYLE below
|
||||
-t sort by modification time, newest first
|
||||
-T, --tabsize=COLS assume tab stops at each COLS instead of 8
|
||||
-u with -lt: sort by, and show, access time;
|
||||
with -l: show access time and sort by name;
|
||||
otherwise: sort by access time, newest first
|
||||
-U do not sort; list entries in directory order
|
||||
-v natural sort of (version) numbers within text
|
||||
-w, --width=COLS set output width to COLS. 0 means no limit
|
||||
-x list entries by lines instead of by columns
|
||||
-X sort alphabetically by entry extension
|
||||
-Z, --context print any security context of each file
|
||||
-1 list one file per line. Avoid '\n' with -q or -b
|
||||
--help display this help and exit
|
||||
--version output version information and exit
|
||||
|
||||
The SIZE argument is an integer and optional unit (example: 10K is 10*1024).
|
||||
Units are K,M,G,T,P,E,Z,Y (powers of 1024) or KB,MB,... (powers of 1000).
|
||||
|
||||
The TIME_STYLE argument can be full-iso, long-iso, iso, locale, or +FORMAT.
|
||||
FORMAT is interpreted like in date(1). If FORMAT is FORMAT1<newline>FORMAT2,
|
||||
then FORMAT1 applies to non-recent files and FORMAT2 to recent files.
|
||||
TIME_STYLE prefixed with 'posix-' takes effect only outside the POSIX locale.
|
||||
Also the TIME_STYLE environment variable sets the default style to use.
|
||||
|
||||
Using color to distinguish file types is disabled both by default and
|
||||
with --color=never. With --color=auto, ls emits color codes only when
|
||||
standard output is connected to a terminal. The LS_COLORS environment
|
||||
variable can change the settings. Use the dircolors command to set it.
|
||||
|
||||
Exit status:
|
||||
0 if OK,
|
||||
1 if minor problems (e.g., cannot access subdirectory),
|
||||
2 if serious trouble (e.g., cannot access command-line argument).
|
||||
|
||||
GNU coreutils online help: <https://www.gnu.org/software/coreutils/>
|
||||
Report ls translation bugs to <https://translationproject.org/team/>
|
||||
Full documentation at: <https://www.gnu.org/software/coreutils/ls>
|
||||
or available locally via: info '(coreutils) ls invocation'`
|
||||
}
|
||||
|
||||
type Mkdir struct {
|
||||
info.SimpleHandler
|
||||
}
|
||||
|
||||
func (mkdir Mkdir) Handle(cmdInfo *info.Info) {
|
||||
if _, files, ok := basicFileCommandParser(cmdInfo, mkdir.help()); ok {
|
||||
for _, file := range files {
|
||||
switch _, err := cmdInfo.FS.CreateDirectory(file); err {
|
||||
case os.ErrExist:
|
||||
cmdInfo.Writelnf("%s: cannot create directory '%s': File exists", cmdInfo.Command, file)
|
||||
case os.ErrPermission:
|
||||
cmdInfo.Writelnf("%s: cannot create directory '%s': Permission denied", cmdInfo.Command, file)
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
func (mkdir Mkdir) help() string {
|
||||
return `
|
||||
Usage: mkdir [OPTION]... DIRECTORY...
|
||||
Create the DIRECTORY(ies), if they do not already exist.
|
||||
|
||||
Mandatory arguments to long options are mandatory for short options too.
|
||||
-m, --mode=MODE set file mode (as in chmod), not a=rwx - umask
|
||||
-p, --parents no error if existing, make parent directories as needed
|
||||
-v, --verbose print a message for each created directory
|
||||
-Z set SELinux security context of each created directory
|
||||
to the default type
|
||||
--context[=CTX] like -Z, or if CTX is specified then set the SELinux
|
||||
or SMACK security context to CTX
|
||||
--help display this help and exit
|
||||
--version output version information and exit
|
||||
|
||||
GNU coreutils online help: <https://www.gnu.org/software/coreutils/>
|
||||
Report mkdir translation bugs to <https://translationproject.org/team/>
|
||||
Full documentation at: <https://www.gnu.org/software/coreutils/mkdir>
|
||||
or available locally via: info '(coreutils) mkdir invocation'`
|
||||
}
|
||||
|
||||
type RM struct {
|
||||
info.SimpleHandler
|
||||
}
|
||||
|
||||
func (rm RM) Handle(cmdInfo *info.Info) {
|
||||
if options, files, ok := basicFileCommandParser(cmdInfo, rm.help()); ok {
|
||||
var dir bool
|
||||
for _, arg := range options {
|
||||
switch arg {
|
||||
case "-r", "-R", "--recursive":
|
||||
dir = true
|
||||
}
|
||||
}
|
||||
|
||||
for _, fileName := range files {
|
||||
if cmdInfo.FS.Manipulate {
|
||||
if file, ok := cmdInfo.FS.GetFile(fileName, false); ok {
|
||||
if file.IsDir() && !dir {
|
||||
cmdInfo.Writelnf("rm: cannot remove '%s': Is a directory", fileName)
|
||||
continue
|
||||
}
|
||||
file.Remove()
|
||||
} else {
|
||||
cmdInfo.Writelnf("rm: cannot remove '%s': No such file or directory", fileName)
|
||||
}
|
||||
} else {
|
||||
cmdInfo.Writef("rm: remove write-protected file '%s'? ", fileName)
|
||||
switch line, _ := cmdInfo.Read(); line {
|
||||
case "y", "Y":
|
||||
cmdInfo.Writelnf("rm: cannot remove '%s': Operation not permitted", fileName)
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
func (rm RM) help() string {
|
||||
return `
|
||||
Usage: rm [OPTION]... [FILE]...
|
||||
Remove (unlink) the FILE(s).
|
||||
|
||||
-f, --force ignore nonexistent files and arguments, never prompt
|
||||
-i prompt before every removal
|
||||
-I prompt once before removing more than three files, or
|
||||
when removing recursively; less intrusive than -i,
|
||||
while still giving protection against most mistakes
|
||||
--interactive[=WHEN] prompt according to WHEN: never, once (-I), or
|
||||
always (-i); without WHEN, prompt always
|
||||
--one-file-system when removing a hierarchy recursively, skip any
|
||||
directory that is on a file system different from
|
||||
that of the corresponding command line argument
|
||||
--no-preserve-root do not treat '/' specially
|
||||
--preserve-root[=all] do not remove '/' (default);
|
||||
with 'all', reject any command line argument
|
||||
on a separate device from its parent
|
||||
-r, -R, --recursive remove directories and their contents recursively
|
||||
-d, --dir remove empty directories
|
||||
-v, --verbose explain what is being done
|
||||
--help display this help and exit
|
||||
--version output version information and exit
|
||||
|
||||
By default, rm does not remove directories. Use the --recursive (-r or -R)
|
||||
option to remove each listed directory, too, along with all of its contents.
|
||||
|
||||
To remove a file whose name starts with a '-', for example '-foo',
|
||||
use one of these commands:
|
||||
rm -- -foo
|
||||
|
||||
rm ./-foo
|
||||
|
||||
Note that if you use rm to remove a file, it might be possible to recover
|
||||
some of its contents, given sufficient expertise and/or time. For greater
|
||||
assurance that the contents are truly unrecoverable, consider using shred.
|
||||
|
||||
GNU coreutils online help: <https://www.gnu.org/software/coreutils/>
|
||||
Report rm translation bugs to <https://translationproject.org/team/>
|
||||
Full documentation at: <https://www.gnu.org/software/coreutils/rm>
|
||||
or available locally via: info '(coreutils) rm invocation'
|
||||
`
|
||||
}
|
||||
|
||||
type Touch struct {
|
||||
info.SimpleHandler
|
||||
}
|
||||
|
||||
func (touch Touch) Handle(cmdInfo *info.Info) {
|
||||
if _, files, ok := basicFileCommandParser(cmdInfo, touch.help()); ok {
|
||||
for _, file := range files {
|
||||
if _, err := cmdInfo.FS.CreateFile(file); err == os.ErrPermission {
|
||||
cmdInfo.Writelnf("%s: cannot touch '%s': Permission denied", cmdInfo.Command, file)
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
func (touch Touch) help() string {
|
||||
return `Usage: touch [OPTION]... FILE...
|
||||
Update the access and modification times of each FILE to the current time.
|
||||
|
||||
A FILE argument that does not exist is created empty, unless -c or -h
|
||||
is supplied.
|
||||
|
||||
A FILE argument string of - is handled specially and causes touch to
|
||||
change the times of the file associated with standard output.
|
||||
|
||||
Mandatory arguments to long options are mandatory for short options too.
|
||||
-a change only the access time
|
||||
-c, --no-create do not create any files
|
||||
-d, --date=STRING parse STRING and use it instead of current time
|
||||
-f (ignored)
|
||||
-h, --no-dereference affect each symbolic link instead of any referenced
|
||||
file (useful only on systems that can change the
|
||||
timestamps of a symlink)
|
||||
-m change only the modification time
|
||||
-r, --reference=FILE use this file's times instead of current time
|
||||
-t STAMP use [[CC]YY]MMDDhhmm[.ss] instead of current time
|
||||
--time=WORD change the specified time:
|
||||
WORD is access, atime, or use: equivalent to -a
|
||||
WORD is modify or mtime: equivalent to -m
|
||||
--help display this help and exit
|
||||
--version output version information and exit
|
||||
|
||||
Note that the -d and -t options accept different time-date formats.
|
||||
|
||||
GNU coreutils online help: <https://www.gnu.org/software/coreutils/>
|
||||
Report touch translation bugs to <https://translationproject.org/team/>
|
||||
Full documentation at: <https://www.gnu.org/software/coreutils/touch>
|
||||
or available locally via: info '(coreutils) touch invocation'`
|
||||
}
|
||||
27
sshoneypot/handler/handler.go
Normal file
27
sshoneypot/handler/handler.go
Normal file
@ -0,0 +1,27 @@
|
||||
package handler
|
||||
|
||||
import (
|
||||
"fmt"
|
||||
"github.com/bytedream/sshoneypot/sshoneypot/info"
|
||||
)
|
||||
|
||||
func Default(info *info.Info) {
|
||||
info.Writelnf("-bash: %s: command not found", info.Command)
|
||||
}
|
||||
|
||||
func multipleArgs(info *info.Info) bool {
|
||||
if len(info.Args) == 0 {
|
||||
info.Writeln(missingOperand(info))
|
||||
return false
|
||||
} else {
|
||||
return true
|
||||
}
|
||||
}
|
||||
|
||||
func missingOperand(info *info.Info) string {
|
||||
return fmt.Sprintf("%s: missing operand", info.Command)
|
||||
}
|
||||
|
||||
func noSuchFileOrDirectory(file string, info *info.Info) string {
|
||||
return fmt.Sprintf("%s: %s: No such file or directory", info.Command, file)
|
||||
}
|
||||
382
sshoneypot/handler/net.go
Normal file
382
sshoneypot/handler/net.go
Normal file
@ -0,0 +1,382 @@
|
||||
package handler
|
||||
|
||||
import (
|
||||
"fmt"
|
||||
"github.com/bytedream/sshoneypot/sshoneypot/info"
|
||||
"github.com/pborman/getopt"
|
||||
"math/rand"
|
||||
"mime"
|
||||
"net"
|
||||
"regexp"
|
||||
"strconv"
|
||||
"strings"
|
||||
"time"
|
||||
)
|
||||
|
||||
func randomIp() string {
|
||||
return fmt.Sprintf("%d.%d.%d.%d", rand.Intn(254), rand.Intn(254), rand.Intn(254), rand.Intn(254))
|
||||
}
|
||||
|
||||
func Ifconfig(cmdInfo *info.Info) {
|
||||
for _, arg := range cmdInfo.Args {
|
||||
if arg == "--help" {
|
||||
cmdInfo.Writeln(`Usage:
|
||||
ifconfig [-a] [-v] [-s] <interface> [[<AF>] <address>]
|
||||
[add <address>[/<prefixlen>]]
|
||||
[del <address>[/<prefixlen>]]
|
||||
[[-]broadcast [<address>]] [[-]pointopoint [<address>]]
|
||||
[netmask <address>] [dstaddr <address>] [tunnel <address>]
|
||||
[outfill <NN>] [keepalive <NN>]
|
||||
[hw <HW> <address>] [mtu <NN>]
|
||||
[[-]trailers] [[-]arp] [[-]allmulti]
|
||||
[multicast] [[-]promisc]
|
||||
[mem_start <NN>] [io_addr <NN>] [irq <NN>] [media <type>]
|
||||
[txqueuelen <NN>]
|
||||
[[-]dynamic]
|
||||
[up|down] ...
|
||||
|
||||
<HW>=Hardware Type.
|
||||
List of possible hardware types:
|
||||
loop (Local Loopback) slip (Serial Line IP) cslip (VJ Serial Line IP)
|
||||
slip6 (6-bit Serial Line IP) cslip6 (VJ 6-bit Serial Line IP) adaptive (Adaptive Serial Line IP)
|
||||
ash (Ash) ether (Ethernet) ax25 (AMPR AX.25)
|
||||
netrom (AMPR NET/ROM) rose (AMPR ROSE) tunnel (IPIP Tunnel)
|
||||
ppp (Point-to-Point Protocol) hdlc ((Cisco)-HDLC) lapb (LAPB)
|
||||
arcnet (ARCnet) dlci (Frame Relay DLCI) frad (Frame Relay Access Device)
|
||||
sit (IPv6-in-IPv4) fddi (Fiber Distributed Data Interface) hippi (HIPPI)
|
||||
irda (IrLAP) ec (Econet) x25 (generic X.25)
|
||||
eui64 (Generic EUI-64)
|
||||
<AF>=Address family. Default: inet
|
||||
List of possible address families:
|
||||
unix (UNIX Domain) inet (DARPA Internet) inet6 (IPv6)
|
||||
ax25 (AMPR AX.25) netrom (AMPR NET/ROM) rose (AMPR ROSE)
|
||||
ipx (Novell IPX) ddp (Appletalk DDP) ec (Econet)
|
||||
ash (Ash) x25 (CCITT X.25)`)
|
||||
return
|
||||
}
|
||||
}
|
||||
cmdInfo.Writeln(`eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
|
||||
inet 172.17.0.2 netmask 255.255.0.0 broadcast 172.17.255.255
|
||||
ether 02:42:ac:11:00:02 txqueuelen 0 (Ethernet)
|
||||
RX packets 13 bytes 1182 (1.1 KiB)
|
||||
RX errors 0 dropped 0 overruns 0 frame 0
|
||||
TX packets 0 bytes 0 (0.0 B)
|
||||
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
|
||||
|
||||
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
|
||||
inet 127.0.0.1 netmask 255.0.0.0
|
||||
loop txqueuelen 1000 (Local Loopback)
|
||||
RX packets 0 bytes 0 (0.0 B)
|
||||
RX errors 0 dropped 0 overruns 0 frame 0
|
||||
TX packets 0 bytes 0 (0.0 B)
|
||||
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0`)
|
||||
}
|
||||
|
||||
type Ping struct {
|
||||
info.SimpleHandler
|
||||
}
|
||||
|
||||
func (ping Ping) Handle(cmdInfo *info.Info) {
|
||||
opts := getopt.New()
|
||||
|
||||
count := opts.Int('c', 4, "count")
|
||||
interval := opts.String('i', "1", "interval")
|
||||
packetsize := opts.Int('s', 56, "packetsize")
|
||||
opts.Getopt(cmdInfo.FullArgs, nil)
|
||||
|
||||
duration, err := strconv.ParseFloat(*interval, 64)
|
||||
if err != nil {
|
||||
cmdInfo.Writelnf("%s: bad timing interval", cmdInfo.Command)
|
||||
return
|
||||
}
|
||||
|
||||
address := opts.Arg(opts.NArgs() - 1)
|
||||
ip := address
|
||||
if net.ParseIP(address) == nil {
|
||||
ip = randomIp()
|
||||
}
|
||||
|
||||
cmdInfo.Writelnf("PING %s (%s) %d data bytes.", address, ip, *packetsize)
|
||||
for i := 0; i < *count; i++ {
|
||||
resultTime := rand.Float64() * 10
|
||||
cmdInfo.Writelnf("%d bytes from %s (%s): icmp_seq=%d ttl=119 time=%.2f", *packetsize + 8, address, ip, i + 1, resultTime)
|
||||
time.Sleep(time.Duration(duration) * time.Second)
|
||||
}
|
||||
}
|
||||
|
||||
func (ping Ping) help() string {
|
||||
return `Usage: ping [-aAbBdDfhLnOqrRUvV64] [-c count] [-i interval] [-I interface]
|
||||
[-m mark] [-M pmtudisc_option] [-l preload] [-p pattern] [-Q tos]
|
||||
[-s packetsize] [-S sndbuf] [-t ttl] [-T timestamp_option]
|
||||
[-w deadline] [-W timeout] [hop1 ...] destination
|
||||
Usage: ping -6 [-aAbBdDfhLnOqrRUvV] [-c count] [-i interval] [-I interface]
|
||||
[-l preload] [-m mark] [-M pmtudisc_option]
|
||||
[-N nodeinfo_option] [-p pattern] [-Q tclass] [-s packetsize]
|
||||
[-S sndbuf] [-t ttl] [-T timestamp_option] [-w deadline]
|
||||
[-W timeout] destination`
|
||||
}
|
||||
|
||||
type Wget struct {
|
||||
info.SimpleHandler
|
||||
}
|
||||
|
||||
func (wget Wget) Handle(cmdInfo *info.Info) {
|
||||
if _, urls, ok := basicFileCommandParser(cmdInfo, wget.help()); ok {
|
||||
regex := regexp.MustCompile("/((([A-Za-z]{3,9}:(?:\\/\\/)?)(?:[-;:&=\\+\\$,\\w]+@)?[A-Za-z0-9.-]+|(?:www.|[-;:&=\\+\\$,\\w]+@)[A-Za-z0-9.-]+)((?:\\/[\\+~%\\/.\\w-_]*)?\\??(?:[-\\+=&;%@.\\w_]*)#?(?:[\\w]*))?)/")
|
||||
for _, url := range urls {
|
||||
var port uint32
|
||||
schemeUrl := url
|
||||
|
||||
if strings.HasPrefix(url, "http://") {
|
||||
port = 80
|
||||
} else if strings.HasPrefix(url, "https://") {
|
||||
port = 433
|
||||
} else {
|
||||
schemeUrl = "http://" + url
|
||||
port = 433
|
||||
}
|
||||
|
||||
currentTime := time.Now().Format("2006-01-02 15:04:05")
|
||||
|
||||
if regex.MatchString(url) {
|
||||
// generates a random ip
|
||||
|
||||
mimeType := mime.TypeByExtension(url)
|
||||
if mimeType == "" {
|
||||
mimeType = "text/html"
|
||||
}
|
||||
|
||||
ip := randomIp()
|
||||
|
||||
cmdInfo.Writelnf(`--%s-- %s
|
||||
Connecting to %s (%s)|%s|:%d... connected."
|
||||
HTTP request sent, awaiting response... 200 OK
|
||||
Length: unspecified [%s]
|
||||
Saving to: '%s'`, currentTime, schemeUrl, url, url, ip, port, mimeType, url)
|
||||
|
||||
// TODO: download bar
|
||||
|
||||
// sleeps a random time to imitate the fetching process
|
||||
time.Sleep(time.Duration(rand.Intn(5000)) * time.Millisecond)
|
||||
|
||||
if cmdInfo.Terminal.Width >= 60 {
|
||||
loadingBar := 1
|
||||
if cmdInfo.Terminal.Width > 60 {
|
||||
loadingBar += int((cmdInfo.Terminal.Width - 60) / 2)
|
||||
}
|
||||
}
|
||||
} else {
|
||||
cmdInfo.Writelnf(`--%s-- %s
|
||||
Resolving %s (%s)... failed: Name or service not known.
|
||||
wget: unable to resolve host address '%s'`, currentTime, schemeUrl, url, url, url)
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
func (wget Wget) help() string {
|
||||
return `GNU Wget 1.20.1, a non-interactive network retriever.
|
||||
Usage: wget [OPTION]... [URL]...
|
||||
|
||||
Mandatory arguments to long options are mandatory for short options too.
|
||||
|
||||
Startup:
|
||||
-V, --version display the version of Wget and exit
|
||||
-h, --help print this help
|
||||
-b, --background go to background after startup
|
||||
-e, --execute=COMMAND execute a '.wgetrc'-style command
|
||||
|
||||
Logging and input file:
|
||||
-o, --output-file=FILE log messages to FILE
|
||||
-a, --append-output=FILE append messages to FILE
|
||||
-d, --debug print lots of debugging information
|
||||
-q, --quiet quiet (no output)
|
||||
-v, --verbose be verbose (this is the default)
|
||||
-nv, --no-verbose turn off verboseness, without being quiet
|
||||
--report-speed=TYPE output bandwidth as TYPE. TYPE can be bits
|
||||
-i, --input-file=FILE download URLs found in local or external FILE
|
||||
-F, --force-html treat input file as HTML
|
||||
-B, --base=URL resolves HTML input-file links (-i -F)
|
||||
relative to URL
|
||||
--config=FILE specify config file to use
|
||||
--no-config do not read any config file
|
||||
--rejected-log=FILE log reasons for URL rejection to FILE
|
||||
|
||||
Download:
|
||||
-t, --tries=NUMBER set number of retries to NUMBER (0 unlimits)
|
||||
--retry-connrefused retry even if connection is refused
|
||||
--retry-on-http-error=ERRORS comma-separated list of HTTP errors to retry
|
||||
-O, --output-document=FILE write documents to FILE
|
||||
-nc, --no-clobber skip downloads that would download to
|
||||
existing files (overwriting them)
|
||||
--no-netrc don't try to obtain credentials from .netrc
|
||||
-c, --continue resume getting a partially-downloaded file
|
||||
--start-pos=OFFSET start downloading from zero-based position OFFSET
|
||||
--progress=TYPE select progress gauge type
|
||||
--show-progress display the progress bar in any verbosity mode
|
||||
-N, --timestamping don't re-retrieve files unless newer than
|
||||
local
|
||||
--no-if-modified-since don't use conditional if-modified-since get
|
||||
requests in timestamping mode
|
||||
--no-use-server-timestamps don't set the local file's timestamp by
|
||||
the one on the server
|
||||
-S, --server-response print server response
|
||||
--spider don't download anything
|
||||
-T, --timeout=SECONDS set all timeout values to SECONDS
|
||||
--dns-timeout=SECS set the DNS lookup timeout to SECS
|
||||
--connect-timeout=SECS set the connect timeout to SECS
|
||||
--read-timeout=SECS set the read timeout to SECS
|
||||
-w, --wait=SECONDS wait SECONDS between retrievals
|
||||
--waitretry=SECONDS wait 1..SECONDS between retries of a retrieval
|
||||
--random-wait wait from 0.5*WAIT...1.5*WAIT secs between retrievals
|
||||
--no-proxy explicitly turn off proxy
|
||||
-Q, --quota=NUMBER set retrieval quota to NUMBER
|
||||
--bind-address=ADDRESS bind to ADDRESS (hostname or IP) on local host
|
||||
--limit-rate=RATE limit download rate to RATE
|
||||
--no-dns-cache disable caching DNS lookups
|
||||
--restrict-file-names=OS restrict chars in file names to ones OS allows
|
||||
--ignore-case ignore case when matching files/directories
|
||||
-4, --inet4-only connect only to IPv4 addresses
|
||||
-6, --inet6-only connect only to IPv6 addresses
|
||||
--prefer-family=FAMILY connect first to addresses of specified family,
|
||||
one of IPv6, IPv4, or none
|
||||
--user=USER set both ftp and http user to USER
|
||||
--password=PASS set both ftp and http password to PASS
|
||||
--ask-password prompt for passwords
|
||||
--use-askpass=COMMAND specify credential handler for requesting
|
||||
username and password. If no COMMAND is
|
||||
specified the WGET_ASKPASS or the SSH_ASKPASS
|
||||
environment variable is used.
|
||||
--no-iri turn off IRI support
|
||||
--local-encoding=ENC use ENC as the local encoding for IRIs
|
||||
--remote-encoding=ENC use ENC as the default remote encoding
|
||||
--unlink remove file before clobber
|
||||
--xattr turn on storage of metadata in extended file attributes
|
||||
|
||||
Directories:
|
||||
-nd, --no-directories don't create directories
|
||||
-x, --force-directories force creation of directories
|
||||
-nH, --no-host-directories don't create host directories
|
||||
--protocol-directories use protocol name in directories
|
||||
-P, --directory-prefix=PREFIX save files to PREFIX/..
|
||||
--cut-dirs=NUMBER ignore NUMBER remote directory components
|
||||
|
||||
HTTP options:
|
||||
--http-user=USER set http user to USER
|
||||
--http-password=PASS set http password to PASS
|
||||
--no-cache disallow server-cached data
|
||||
--default-page=NAME change the default page name (normally
|
||||
this is 'index.html'.)
|
||||
-E, --adjust-extension save HTML/CSS documents with proper extensions
|
||||
--ignore-length ignore 'Content-Length' header field
|
||||
--header=STRING insert STRING among the headers
|
||||
--compression=TYPE choose compression, one of auto, gzip and none. (default: none)
|
||||
--max-redirect maximum redirections allowed per page
|
||||
--proxy-user=USER set USER as proxy username
|
||||
--proxy-password=PASS set PASS as proxy password
|
||||
--referer=URL include 'Referer: URL' header in HTTP request
|
||||
--save-headers save the HTTP headers to file
|
||||
-U, --user-agent=AGENT identify as AGENT instead of Wget/VERSION
|
||||
--no-http-keep-alive disable HTTP keep-alive (persistent connections)
|
||||
--no-cookies don't use cookies
|
||||
--load-cookies=FILE load cookies from FILE before session
|
||||
--save-cookies=FILE save cookies to FILE after session
|
||||
--keep-session-cookies load and save session (non-permanent) cookies
|
||||
--post-data=STRING use the POST method; send STRING as the data
|
||||
--post-file=FILE use the POST method; send contents of FILE
|
||||
--method=HTTPMethod use method "HTTPMethod" in the request
|
||||
--body-data=STRING send STRING as data. --method MUST be set
|
||||
--body-file=FILE send contents of FILE. --method MUST be set
|
||||
--content-disposition honor the Content-Disposition header when
|
||||
choosing local file names (EXPERIMENTAL)
|
||||
--content-on-error output the received content on server errors
|
||||
--auth-no-challenge send Basic HTTP authentication information
|
||||
without first waiting for the server's
|
||||
challenge
|
||||
|
||||
HTTPS (SSL/TLS) options:
|
||||
--secure-protocol=PR choose secure protocol, one of auto, SSLv2,
|
||||
SSLv3, TLSv1, TLSv1_1, TLSv1_2 and PFS
|
||||
--https-only only follow secure HTTPS links
|
||||
--no-check-certificate don't validate the server's certificate
|
||||
--certificate=FILE client certificate file
|
||||
--certificate-type=TYPE client certificate type, PEM or DER
|
||||
--private-key=FILE private key file
|
||||
--private-key-type=TYPE private key type, PEM or DER
|
||||
--ca-certificate=FILE file with the bundle of CAs
|
||||
--ca-directory=DIR directory where hash list of CAs is stored
|
||||
--crl-file=FILE file with bundle of CRLs
|
||||
--pinnedpubkey=FILE/HASHES Public key (PEM/DER) file, or any number
|
||||
of base64 encoded sha256 hashes preceded by
|
||||
'sha256//' and separated by ';', to verify
|
||||
peer against
|
||||
|
||||
--ciphers=STR Set the priority string (GnuTLS) or cipher list string (OpenSSL) directly.
|
||||
Use with care. This option overrides --secure-protocol.
|
||||
The format and syntax of this string depend on the specific SSL/TLS engine.
|
||||
HSTS options:
|
||||
--no-hsts disable HSTS
|
||||
--hsts-file path of HSTS database (will override default)
|
||||
|
||||
FTP options:
|
||||
--ftp-user=USER set ftp user to USER
|
||||
--ftp-password=PASS set ftp password to PASS
|
||||
--no-remove-listing don't remove '.listing' files
|
||||
--no-glob turn off FTP file name globbing
|
||||
--no-passive-ftp disable the "passive" transfer mode
|
||||
--preserve-permissions preserve remote file permissions
|
||||
--retr-symlinks when recursing, get linked-to files (not dir)
|
||||
|
||||
FTPS options:
|
||||
--ftps-implicit use implicit FTPS (default port is 990)
|
||||
--ftps-resume-ssl resume the SSL/TLS session started in the control connection when
|
||||
opening a data connection
|
||||
--ftps-clear-data-connection cipher the control channel only; all the data will be in plaintext
|
||||
--ftps-fallback-to-ftp fall back to FTP if FTPS is not supported in the target server
|
||||
WARC options:
|
||||
--warc-file=FILENAME save request/response data to a .warc.gz file
|
||||
--warc-header=STRING insert STRING into the warcinfo record
|
||||
--warc-max-size=NUMBER set maximum size of WARC files to NUMBER
|
||||
--warc-cdx write CDX index files
|
||||
--warc-dedup=FILENAME do not store records listed in this CDX file
|
||||
--no-warc-compression do not compress WARC files with GZIP
|
||||
--no-warc-digests do not calculate SHA1 digests
|
||||
--no-warc-keep-log do not store the log file in a WARC record
|
||||
--warc-tempdir=DIRECTORY location for temporary files created by the
|
||||
WARC writer
|
||||
|
||||
Recursive download:
|
||||
-r, --recursive specify recursive download
|
||||
-l, --level=NUMBER maximum recursion depth (inf or 0 for infinite)
|
||||
--delete-after delete files locally after downloading them
|
||||
-k, --convert-links make links in downloaded HTML or CSS point to
|
||||
local files
|
||||
--convert-file-only convert the file part of the URLs only (usually known as the basename)
|
||||
--backups=N before writing file X, rotate up to N backup files
|
||||
-K, --backup-converted before converting file X, back up as X.orig
|
||||
-m, --mirror shortcut for -N -r -l inf --no-remove-listing
|
||||
-p, --page-requisites get all images, etc. needed to display HTML page
|
||||
--strict-comments turn on strict (SGML) handling of HTML comments
|
||||
|
||||
Recursive accept/reject:
|
||||
-A, --accept=LIST comma-separated list of accepted extensions
|
||||
-R, --reject=LIST comma-separated list of rejected extensions
|
||||
--accept-regex=REGEX regex matching accepted URLs
|
||||
--reject-regex=REGEX regex matching rejected URLs
|
||||
--regex-type=TYPE regex type (posix|pcre)
|
||||
-D, --domains=LIST comma-separated list of accepted domains
|
||||
--exclude-domains=LIST comma-separated list of rejected domains
|
||||
--follow-ftp follow FTP links from HTML documents
|
||||
--follow-tags=LIST comma-separated list of followed HTML tags
|
||||
--ignore-tags=LIST comma-separated list of ignored HTML tags
|
||||
-H, --span-hosts go to foreign hosts when recursive
|
||||
-L, --relative follow relative links only
|
||||
-I, --include-directories=LIST list of allowed directories
|
||||
--trust-server-names use the name specified by the redirection
|
||||
URL's last component
|
||||
-X, --exclude-directories=LIST list of excluded directories
|
||||
-np, --no-parent don't ascend to the parent directory
|
||||
|
||||
Email bug reports, questions, discussions to <bug-wget@gnu.org>
|
||||
and/or open issues at https://savannah.gnu.org/bugs/?func=additem&group=wget.`
|
||||
}
|
||||
12
sshoneypot/handler/out.go
Normal file
12
sshoneypot/handler/out.go
Normal file
@ -0,0 +1,12 @@
|
||||
package handler
|
||||
|
||||
import (
|
||||
"github.com/bytedream/sshoneypot/sshoneypot/info"
|
||||
"strings"
|
||||
)
|
||||
|
||||
func Echo(cmdInfo *info.Info) {
|
||||
if options, files, ok := basicFileCommandParser(cmdInfo, "--help"); ok {
|
||||
cmdInfo.Writeln(strings.Join(append(options, files...), " "))
|
||||
}
|
||||
}
|
||||
1
sshoneypot/handler/permission.go
Normal file
1
sshoneypot/handler/permission.go
Normal file
@ -0,0 +1 @@
|
||||
package handler
|
||||
7
sshoneypot/handler/screen.go
Normal file
7
sshoneypot/handler/screen.go
Normal file
@ -0,0 +1,7 @@
|
||||
package handler
|
||||
|
||||
import "github.com/bytedream/sshoneypot/sshoneypot/info"
|
||||
|
||||
func Clear(info *info.Info) {
|
||||
info.Write("\033[H\033[2J")
|
||||
}
|
||||
401
sshoneypot/info/fs.go
Normal file
401
sshoneypot/info/fs.go
Normal file
@ -0,0 +1,401 @@
|
||||
package info
|
||||
|
||||
import (
|
||||
"encoding/json"
|
||||
"os"
|
||||
"path/filepath"
|
||||
"strings"
|
||||
"time"
|
||||
)
|
||||
|
||||
// file structure extracted from a debian buster docker container including:
|
||||
// - curl 7.64.0
|
||||
// - net-tools
|
||||
// - OpenSSH_7.9p1
|
||||
// - python3.7.3
|
||||
// - wget 1.20.1
|
||||
// - and all dependencies of the installed packages
|
||||
|
||||
const (
|
||||
TypeDirectory = 4
|
||||
TypeCharacterDevice = 2
|
||||
TypeBlockDevice = 6
|
||||
TypeRegularFile = 10
|
||||
TypeFifo = 1
|
||||
TypeSymbolicLink = 12
|
||||
TypeSocketFile = 14
|
||||
)
|
||||
|
||||
type BasicFile interface {
|
||||
// This returns the directory in which the file is located.
|
||||
// Be careful to not mix it up with Directory.Files
|
||||
Directory() (Directory, bool)
|
||||
RawDirectory() map[string]interface{}
|
||||
|
||||
// If the file a dir
|
||||
IsDir() bool
|
||||
|
||||
// Removes the file and all sub files if the file is a directory
|
||||
Remove()
|
||||
}
|
||||
|
||||
type Directory struct {
|
||||
BasicFile
|
||||
File
|
||||
|
||||
Files []File
|
||||
}
|
||||
|
||||
func (dir Directory) Directory() (Directory, bool) {return dir.File.Directory()}
|
||||
func (dir Directory) RawDirectory() map[string]interface{} {
|
||||
return dir.dir
|
||||
}
|
||||
func (dir Directory) IsDir() bool {
|
||||
return true
|
||||
}
|
||||
func (dir Directory) Remove() {
|
||||
dir.File.Remove()
|
||||
}
|
||||
|
||||
type File struct {
|
||||
BasicFile
|
||||
fs *FileSystem
|
||||
dir map[string]interface{}
|
||||
location string
|
||||
|
||||
Type uint8
|
||||
|
||||
Size int64
|
||||
Links int
|
||||
Permissions os.FileMode
|
||||
|
||||
Name string
|
||||
CreationTimestamp int64
|
||||
UserID uint16
|
||||
GroupID uint16
|
||||
}
|
||||
|
||||
func (f File) Directory() (Directory, bool) {
|
||||
if dir, ok, _ := f.fs.getOrCreateFile(filepath.Dir(f.location), false, false, false); !ok {
|
||||
return Directory{}, false
|
||||
} else {
|
||||
return dir.(Directory), true
|
||||
}
|
||||
}
|
||||
func (f File) RawDirectory() map[string]interface{} {return f.dir}
|
||||
func (f File) IsDir() bool {
|
||||
return false
|
||||
}
|
||||
func (f File) Remove() {
|
||||
parent, _ := filepath.Split(f.location)
|
||||
dir, _ := f.fs.GetExplicitDirectory(parent, false)
|
||||
delete(dir.dir["files"].(map[string]interface{}), strings.TrimSuffix(f.Name, string(os.PathSeparator)))
|
||||
}
|
||||
|
||||
func (f File) Location() string {
|
||||
return f.location
|
||||
}
|
||||
|
||||
type FileSystem struct {
|
||||
fs map[string]interface{}
|
||||
info []interface{}
|
||||
|
||||
currentDir string
|
||||
rawCurrentDir map[string]interface{}
|
||||
|
||||
Manipulate bool
|
||||
|
||||
root bool
|
||||
|
||||
fromFile string
|
||||
}
|
||||
|
||||
func (fs *FileSystem) Close() error {
|
||||
if fs.Manipulate && fs.fromFile != "" {
|
||||
file, err := os.Open(fs.fromFile)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
return json.NewEncoder(file).Encode(fs.fs)
|
||||
}
|
||||
return nil
|
||||
}
|
||||
|
||||
func (fs *FileSystem) CreateDirectory(path string) (Directory, error) {
|
||||
if fs.Manipulate {
|
||||
dir, exist, created := fs.getOrCreateFile(path, false, true, false)
|
||||
if exist {
|
||||
return Directory{}, os.ErrExist
|
||||
} else if !created {
|
||||
return Directory{}, os.ErrPermission
|
||||
} else {
|
||||
return dir.(Directory), nil
|
||||
}
|
||||
} else {
|
||||
return Directory{}, os.ErrPermission
|
||||
}
|
||||
}
|
||||
|
||||
func (fs *FileSystem) CreateFile(path string) (File, error) {
|
||||
if fs.Manipulate {
|
||||
file, exist, created := fs.getOrCreateFile(path, false, true, false)
|
||||
if exist {
|
||||
return File{}, os.ErrExist
|
||||
} else if !created {
|
||||
return File{}, os.ErrPermission
|
||||
} else {
|
||||
return file.(File), nil
|
||||
}
|
||||
} else {
|
||||
return File{}, os.ErrPermission
|
||||
}
|
||||
}
|
||||
|
||||
func (fs *FileSystem) Cwd() Directory {
|
||||
dir, _ := fs.GetFile("", false)
|
||||
return dir.(Directory)
|
||||
}
|
||||
|
||||
func (fs *FileSystem) Exists(path string) bool {
|
||||
_, exists, _ := fs.getOrCreateFile(path, false, false, false)
|
||||
return exists
|
||||
}
|
||||
|
||||
func (fs *FileSystem) GetFile(path string, follow bool) (BasicFile, bool) {
|
||||
file, ok, _ := fs.getOrCreateFile(path, follow, false, false)
|
||||
return file, ok
|
||||
}
|
||||
|
||||
func (fs *FileSystem) GetExplicitDirectory(path string, follow bool) (Directory, bool) {
|
||||
if file, ok, _ := fs.getOrCreateFile(path, follow, false, false); ok {
|
||||
f, ok := file.(Directory)
|
||||
return f, ok
|
||||
} else {
|
||||
return Directory{}, false
|
||||
}
|
||||
}
|
||||
|
||||
func (fs *FileSystem) GetExplicitFile(path string) (File, bool) {
|
||||
if file, ok, _ := fs.getOrCreateFile(path, false, false, false); ok {
|
||||
f, ok := file.(File)
|
||||
return f, ok
|
||||
} else {
|
||||
return File{}, false
|
||||
}
|
||||
}
|
||||
|
||||
func (fs *FileSystem) Walk(path string, walkFunc func(path string, f BasicFile)) bool {
|
||||
if dir, ok := fs.GetExplicitDirectory(path, false); ok {
|
||||
resultDir := dir.RawDirectory()["files"].(map[string]interface{})
|
||||
for name, details := range resultDir {
|
||||
switch details.(type) {
|
||||
case []interface{}:
|
||||
walkFunc(path, fs.generateFileInfo(resultDir, path, name, details.([]interface{})))
|
||||
case map[string]interface{}:
|
||||
resultDir = details.(map[string]interface{})["files"].(map[string]interface{})
|
||||
resultInfo := details.(map[string]interface{})["info"].([]interface{})
|
||||
walkFunc(path, Directory{
|
||||
File: fs.generateFileInfo(resultDir, path, name, resultInfo),
|
||||
Files: fs.directoryFiles(resultDir, path),
|
||||
})
|
||||
}
|
||||
}
|
||||
return true
|
||||
} else {
|
||||
return false
|
||||
}
|
||||
}
|
||||
|
||||
func (fs *FileSystem) generateFileInfo(resultDir map[string]interface{}, location string, name string, rawInfos []interface{}) File {
|
||||
permissions := os.FileMode(uint32(rawInfos[3].(float64)))
|
||||
|
||||
if uint8(rawInfos[0].(float64)) == 4 {
|
||||
permissions |= os.ModeDir
|
||||
}
|
||||
|
||||
if permissions.IsDir() && !strings.HasSuffix(name, "/") {
|
||||
name += "/"
|
||||
}
|
||||
if strings.Contains(name, " ") && !strings.HasPrefix(name, "'") && !strings.HasSuffix(name, "'") {
|
||||
name = "'" + name + "'"
|
||||
}
|
||||
|
||||
return File{
|
||||
fs: fs,
|
||||
dir: resultDir,
|
||||
location: location,
|
||||
|
||||
Type: uint8(rawInfos[0].(float64)),
|
||||
Size: int64(rawInfos[1].(float64)),
|
||||
Links: int(rawInfos[2].(float64)),
|
||||
Permissions: permissions,
|
||||
|
||||
Name: name,
|
||||
CreationTimestamp: int64(rawInfos[4].(float64)),
|
||||
UserID: uint16(rawInfos[5].(float64)),
|
||||
GroupID: uint16(rawInfos[6].(float64)),
|
||||
}
|
||||
}
|
||||
|
||||
func (fs *FileSystem) getOrCreateFile(path string, follow bool, create bool, createDir bool) (file BasicFile, exists bool, created bool) {
|
||||
var isFile bool
|
||||
rawDirectory := fs.rawCurrentDir
|
||||
resultDir := fs.rawCurrentDir["files"].(map[string]interface{})
|
||||
var resultFile []interface{}
|
||||
|
||||
if !strings.HasPrefix(path, "/") {
|
||||
path = filepath.Join(fs.currentDir, path)
|
||||
}
|
||||
|
||||
location, name := filepath.Split(path)
|
||||
splitPath := strings.Split(path, string(os.PathSeparator))[1:]
|
||||
|
||||
if path == "/" {
|
||||
resultDir = fs.fs
|
||||
resultFile = fs.info
|
||||
|
||||
location = ""
|
||||
name = "/"
|
||||
splitPath = make([]string, 0)
|
||||
}
|
||||
|
||||
for i, s := range splitPath {
|
||||
if s == "" {
|
||||
splitPath = append(splitPath[:i], splitPath[i+1:]...)
|
||||
}
|
||||
}
|
||||
|
||||
for _, file := range splitPath {
|
||||
if dir, ok := resultDir[file]; ok {
|
||||
if preCurrentFile, ok := dir.(map[string]interface{}); ok {
|
||||
rawDirectory = preCurrentFile
|
||||
resultDir = preCurrentFile["files"].(map[string]interface{})
|
||||
resultFile = preCurrentFile["info"].([]interface{})
|
||||
} else if preCurrentFile, ok := dir.([]interface{}); ok {
|
||||
isFile = true
|
||||
resultFile = preCurrentFile
|
||||
break
|
||||
}
|
||||
} else {
|
||||
return nil, false, false
|
||||
}
|
||||
}
|
||||
|
||||
if resultFile == nil {
|
||||
if create {
|
||||
timestamp := time.Now().Unix()
|
||||
file := File{
|
||||
fs: fs,
|
||||
dir: resultDir,
|
||||
location: location,
|
||||
|
||||
Type: TypeRegularFile,
|
||||
Size: 0,
|
||||
// i dont really know why its 1, linux logic i think
|
||||
Links: 1,
|
||||
Permissions: os.ModeType,
|
||||
|
||||
Name: name,
|
||||
CreationTimestamp: timestamp,
|
||||
UserID: 1000,
|
||||
GroupID: 1000,
|
||||
}
|
||||
if fs.root {
|
||||
file.UserID = 0
|
||||
file.GroupID = 0
|
||||
}
|
||||
if createDir {
|
||||
file.Type = TypeDirectory
|
||||
// i dont really know why its 2, linux logic i think
|
||||
file.Links = 2
|
||||
file.Permissions = os.ModeDir
|
||||
resultDir[name] = map[string]interface{} {"files": make([]string, 0),
|
||||
"info": []interface{} {file.Type, file.Size, file.Links, file.Permissions, file.CreationTimestamp, file.UserID, file.GroupID}}
|
||||
return Directory{
|
||||
BasicFile: file,
|
||||
Files: make([]File, 0),
|
||||
}, false, true
|
||||
} else {
|
||||
resultDir[name] = []interface{} {file.Type, file.Size, file.Links, file.Permissions, file.CreationTimestamp, file.UserID, file.GroupID}
|
||||
}
|
||||
if follow && strings.HasPrefix(path, "/") {
|
||||
fs.currentDir = path
|
||||
} else {
|
||||
fs.currentDir = filepath.Join(fs.currentDir, path)
|
||||
}
|
||||
return file, false, true
|
||||
} else {
|
||||
return nil, false, false
|
||||
}
|
||||
}
|
||||
|
||||
file = fs.generateFileInfo(rawDirectory, location, name, resultFile)
|
||||
|
||||
if !isFile {
|
||||
var files []File
|
||||
|
||||
for fname, info := range resultDir {
|
||||
switch info.(type) {
|
||||
// case normal file
|
||||
case []interface{}:
|
||||
info := info.([]interface{})
|
||||
files = append(files, fs.generateFileInfo(rawDirectory, location, fname, info))
|
||||
// case dir
|
||||
case map[string]interface{}:
|
||||
info := info.(map[string]interface{})["info"].([]interface{})
|
||||
files = append(files, fs.generateFileInfo(rawDirectory, location, fname, info))
|
||||
}
|
||||
}
|
||||
|
||||
if follow {
|
||||
fs.currentDir = path
|
||||
}
|
||||
|
||||
return Directory{
|
||||
File: file.(File),
|
||||
Files: fs.directoryFiles(resultDir, location),
|
||||
}, true, false
|
||||
} else {
|
||||
return file, true, false
|
||||
}
|
||||
}
|
||||
|
||||
func (fs *FileSystem) directoryFiles(rawDirectory map[string]interface{}, location string) []File {
|
||||
var files []File
|
||||
|
||||
for fname, info := range rawDirectory {
|
||||
switch info.(type) {
|
||||
// case normal file
|
||||
case []interface{}:
|
||||
info := info.([]interface{})
|
||||
files = append(files, fs.generateFileInfo(rawDirectory, location, fname, info))
|
||||
// case dir
|
||||
case map[string]interface{}:
|
||||
info := info.(map[string]interface{})["info"].([]interface{})
|
||||
files = append(files, fs.generateFileInfo(rawDirectory, location, fname, info))
|
||||
}
|
||||
}
|
||||
|
||||
return files
|
||||
}
|
||||
|
||||
func LoadFSFromJson(fsFile string) (*FileSystem, error) {
|
||||
file, err := os.Open(fsFile)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
fs := make(map[string]interface{})
|
||||
if err := json.NewDecoder(file).Decode(&fs); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return &FileSystem{
|
||||
fs: fs["files"].(map[string]interface{}),
|
||||
info: fs["info"].([]interface{}),
|
||||
|
||||
rawCurrentDir: fs,
|
||||
currentDir: "/",
|
||||
|
||||
fromFile: fsFile,
|
||||
}, nil
|
||||
}
|
||||
28
sshoneypot/info/handler.go
Normal file
28
sshoneypot/info/handler.go
Normal file
@ -0,0 +1,28 @@
|
||||
package info
|
||||
|
||||
type Handler interface {
|
||||
//AutoCompleteOptions returns the extra arguments for a command (e.g. the `-a` or `-R` option in the `ls` command)
|
||||
AutoCompleteOptions() []string
|
||||
|
||||
//AutoCompleteRequest gets called if the client request auto complete (e.g. if double pressing the `tab` key)
|
||||
AutoCompleteRequest(info *Info) (accepted bool)
|
||||
|
||||
//Handle will execute / handle the command the client has entered
|
||||
Handle(info *Info)
|
||||
|
||||
//Kill gets called if the user hard stops the command (ctrl + c)
|
||||
Kill()
|
||||
}
|
||||
|
||||
type SimpleHandler struct {
|
||||
Handler
|
||||
}
|
||||
|
||||
func (sh SimpleHandler) AutoCompleteOptions() []string {
|
||||
return make([]string, 0)
|
||||
}
|
||||
func (sh SimpleHandler) AutoCompleteRequest(info *Info) (accepted bool) {
|
||||
return false
|
||||
}
|
||||
func (sh SimpleHandler) Handle(info *Info) {}
|
||||
func (sh SimpleHandler) Kill(){}
|
||||
109
sshoneypot/info/info.go
Normal file
109
sshoneypot/info/info.go
Normal file
@ -0,0 +1,109 @@
|
||||
package info
|
||||
|
||||
import (
|
||||
"fmt"
|
||||
"golang.org/x/crypto/ssh"
|
||||
"golang.org/x/term"
|
||||
"net"
|
||||
)
|
||||
|
||||
type Termina struct {
|
||||
*term.Terminal
|
||||
|
||||
// The current prompt string
|
||||
Prompt string
|
||||
|
||||
Width, Height uint32
|
||||
}
|
||||
|
||||
func (t *Termina) SetPrompt(prompt string) {
|
||||
t.Prompt = prompt
|
||||
|
||||
t.Terminal.SetPrompt(prompt)
|
||||
}
|
||||
|
||||
type Info struct {
|
||||
Conn net.Conn
|
||||
Terminal *Termina
|
||||
|
||||
FS *FileSystem
|
||||
User *ssh.ServerConn
|
||||
|
||||
FullArgs []string
|
||||
Command string
|
||||
Args []string
|
||||
|
||||
Stdout bool
|
||||
Stderr bool
|
||||
}
|
||||
|
||||
func (info Info) Read() (content string, err error) {
|
||||
if info.Terminal != nil {
|
||||
oldPrompt := info.Terminal.Prompt
|
||||
info.Terminal.SetPrompt("")
|
||||
content, err = info.Terminal.ReadLine()
|
||||
info.Terminal.SetPrompt(oldPrompt)
|
||||
} else {
|
||||
var buffer []byte
|
||||
_, err = info.Conn.Read(buffer)
|
||||
content = string(buffer)
|
||||
}
|
||||
return content, err
|
||||
}
|
||||
|
||||
func (info Info) ReadPrompt() (content string, err error) {
|
||||
if info.Terminal != nil {
|
||||
content, err = info.Terminal.ReadLine()
|
||||
} else {
|
||||
var buffer []byte
|
||||
_, err = info.Conn.Read(buffer)
|
||||
content = string(buffer)
|
||||
}
|
||||
return content, err
|
||||
}
|
||||
|
||||
func (info Info) Write(content string) (err error) {
|
||||
if info.Stdout {
|
||||
if info.Terminal != nil {
|
||||
_, err = info.Terminal.Write([]byte(content))
|
||||
} else {
|
||||
_, err = info.Conn.Write([]byte(content))
|
||||
}
|
||||
}
|
||||
return err
|
||||
}
|
||||
|
||||
func (info Info) Writef(format string, args... interface{}) error {
|
||||
return info.Write(fmt.Sprintf(format, args...))
|
||||
}
|
||||
|
||||
func (info Info) Writeln(content string) (err error) {
|
||||
return info.Write(content + "\n")
|
||||
}
|
||||
|
||||
func (info Info) Writelnf(format string, args... interface{}) (err error) {
|
||||
return info.Writeln(fmt.Sprintf(format, args...))
|
||||
}
|
||||
|
||||
func (info Info) Error(content string) (err error) {
|
||||
if info.Stderr {
|
||||
if info.Terminal != nil {
|
||||
_, err = info.Terminal.Write([]byte(content))
|
||||
} else {
|
||||
_, err = info.Conn.Write([]byte(content))
|
||||
}
|
||||
}
|
||||
return err
|
||||
}
|
||||
|
||||
func (info Info) Errorf(format string, args... interface{}) error {
|
||||
return info.Error(fmt.Sprintf(format, args...))
|
||||
}
|
||||
|
||||
func (info Info) Errorln(content string) (err error) {
|
||||
return info.Error(content + "\n")
|
||||
}
|
||||
|
||||
func (info Info) Errorlnf(format string, args... interface{}) (err error) {
|
||||
return info.Errorln(fmt.Sprintf(format, args...))
|
||||
}
|
||||
179
sshoneypot/info/terminal.go
Normal file
179
sshoneypot/info/terminal.go
Normal file
@ -0,0 +1,179 @@
|
||||
package info
|
||||
|
||||
import (
|
||||
"errors"
|
||||
"fmt"
|
||||
"golang.org/x/crypto/ssh"
|
||||
"strconv"
|
||||
"sync"
|
||||
)
|
||||
|
||||
type Terminal struct {
|
||||
// the chan
|
||||
channel ssh.Channel
|
||||
|
||||
// The current prompt string
|
||||
prompt string
|
||||
|
||||
width, height int
|
||||
|
||||
isListening bool
|
||||
buffer []byte
|
||||
|
||||
lock *sync.Mutex
|
||||
}
|
||||
|
||||
const (
|
||||
keyCtrlC = 3
|
||||
keyCtrlD = 4
|
||||
keyEnter = 13
|
||||
keyEscape = 27
|
||||
keyReturn = 127
|
||||
keyUnknown = 0xd800 /* UTF-16 surrogate area */ + iota
|
||||
keyUp
|
||||
keyDown
|
||||
keyLeft
|
||||
keyRight
|
||||
keyAltLeft
|
||||
keyAltRight
|
||||
keyHome
|
||||
keyEnd
|
||||
keyDeleteWord
|
||||
keyDeleteLine
|
||||
keyClearScreen
|
||||
keyPasteStart
|
||||
keyPasteEnd
|
||||
)
|
||||
|
||||
var (
|
||||
CtrlC = errors.New("CtrlC")
|
||||
CtrlD = errors.New("CtrlD")
|
||||
)
|
||||
|
||||
func (term *Terminal) GetSize() (width int, height int) {
|
||||
return term.width, term.height
|
||||
}
|
||||
|
||||
func (term *Terminal) SetSize(width int, height int) {
|
||||
term.width = width
|
||||
term.height = height
|
||||
}
|
||||
|
||||
func (term *Terminal) GetPrompt() string {
|
||||
return term.prompt
|
||||
}
|
||||
|
||||
func (term *Terminal) SetPrompt(prompt string) {
|
||||
term.prompt = prompt
|
||||
}
|
||||
|
||||
func (term *Terminal) ReadLine() (string, error) {
|
||||
var content []byte
|
||||
for {
|
||||
data, _ := term.listen()
|
||||
for _, b := range data {
|
||||
fmt.Println(b)
|
||||
switch []rune(data) {
|
||||
case keyCtrlD:
|
||||
if len(content) == 0 {
|
||||
return "", CtrlD
|
||||
}
|
||||
case keyEnter:
|
||||
term.channel.Write([]byte("\r\n" + term.prompt))
|
||||
return string(data), nil
|
||||
case keyReturn:
|
||||
if len(content) - 1 > len(term.prompt) {
|
||||
content = content[:len(content) - 1]
|
||||
term.MoveCursor(0, 0, 1, 0)
|
||||
term.channel.Write(content)
|
||||
}
|
||||
case keyRight:
|
||||
fmt.Println("aaa")
|
||||
default:
|
||||
content = append(content, b)
|
||||
term.channel.Write(data)
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
func (term *Terminal) Write(data []byte) (n int, err error) {
|
||||
return term.channel.Write(data)
|
||||
}
|
||||
|
||||
func (term *Terminal) MoveCursor(up, down, left, right int) {
|
||||
var m []rune
|
||||
|
||||
// 1 unit up can be expressed as ^[[A or ^[A
|
||||
// 5 units up can be expressed as ^[[5A
|
||||
|
||||
if up == 1 {
|
||||
m = append(m, keyEscape, '[', 'A')
|
||||
} else if up > 1 {
|
||||
m = append(m, keyEscape, '[')
|
||||
m = append(m, []rune(strconv.Itoa(up))...)
|
||||
m = append(m, 'A')
|
||||
}
|
||||
|
||||
if down == 1 {
|
||||
m = append(m, keyEscape, '[', 'B')
|
||||
} else if down > 1 {
|
||||
m = append(m, keyEscape, '[')
|
||||
m = append(m, []rune(strconv.Itoa(down))...)
|
||||
m = append(m, 'B')
|
||||
}
|
||||
|
||||
if right == 1 {
|
||||
m = append(m, keyEscape, '[', 'C')
|
||||
} else if right > 1 {
|
||||
m = append(m, keyEscape, '[')
|
||||
m = append(m, []rune(strconv.Itoa(right))...)
|
||||
m = append(m, 'C')
|
||||
}
|
||||
|
||||
if left == 1 {
|
||||
m = append(m, keyEscape, '[', 'D')
|
||||
} else if left > 1 {
|
||||
m = append(m, keyEscape, '[')
|
||||
m = append(m, []rune(strconv.Itoa(left))...)
|
||||
m = append(m, 'D')
|
||||
}
|
||||
|
||||
term.Write([]byte(string(m)))
|
||||
}
|
||||
|
||||
func (term *Terminal) ListenCtrlC() chan bool {
|
||||
ctrlc := make(chan bool, 1)
|
||||
go func() {
|
||||
if term.isListening {
|
||||
return
|
||||
}
|
||||
for {
|
||||
data, err := term.listen()
|
||||
if err == CtrlC {
|
||||
ctrlc <- false
|
||||
return
|
||||
}
|
||||
if term.isListening {
|
||||
ctrlc <- false
|
||||
term.buffer = data
|
||||
}
|
||||
}
|
||||
}()
|
||||
return ctrlc
|
||||
}
|
||||
|
||||
func (term *Terminal) listen() ([]byte, error) {
|
||||
buffer := make([]byte, 512)
|
||||
n, err := term.channel.Read(buffer)
|
||||
return buffer[:n], err
|
||||
}
|
||||
|
||||
func NewTerminal(channel ssh.Channel) *Terminal {
|
||||
return &Terminal{
|
||||
channel: channel,
|
||||
|
||||
lock: &sync.Mutex{},
|
||||
}
|
||||
}
|
||||
|
||||
41
sshoneypot/logging.go
Normal file
41
sshoneypot/logging.go
Normal file
@ -0,0 +1,41 @@
|
||||
package sshoneypot
|
||||
|
||||
import (
|
||||
"fmt"
|
||||
"log"
|
||||
)
|
||||
|
||||
// A simple high changeable logging interface
|
||||
type Logging struct {
|
||||
enable bool
|
||||
}
|
||||
|
||||
func (l *Logging) Info(content string) {
|
||||
if l.enable {
|
||||
log.Println(content)
|
||||
}
|
||||
}
|
||||
|
||||
func (l *Logging) Infof(format string, args... interface{}) {
|
||||
log.Printf(fmt.Sprintf(format, args))
|
||||
}
|
||||
|
||||
func (l *Logging) Warn(content string) {
|
||||
if l.enable {
|
||||
log.Println(content)
|
||||
}
|
||||
}
|
||||
|
||||
func (l *Logging) Warnf(format string, args... interface{}) {
|
||||
log.Printf(fmt.Sprintf(format, args))
|
||||
}
|
||||
|
||||
func (l *Logging) Error(content string) {
|
||||
if l.enable {
|
||||
log.Println(content)
|
||||
}
|
||||
}
|
||||
|
||||
func (l *Logging) Errorf(format string, args... interface{}) {
|
||||
l.Error(fmt.Sprintf(format, args))
|
||||
}
|
||||
45
sshoneypot/rsa.go
Normal file
45
sshoneypot/rsa.go
Normal file
@ -0,0 +1,45 @@
|
||||
package sshoneypot
|
||||
|
||||
import (
|
||||
"crypto/rand"
|
||||
"crypto/rsa"
|
||||
"crypto/x509"
|
||||
"encoding/pem"
|
||||
"golang.org/x/crypto/ssh"
|
||||
"io/ioutil"
|
||||
)
|
||||
|
||||
// LoadSSHKey loads a ssh key out of bytes
|
||||
func LoadSSHKey(keyBytes []byte) (ssh.Signer, error) {
|
||||
// parse the read key bytes
|
||||
key, err := ssh.ParsePrivateKey(keyBytes)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return key, nil
|
||||
}
|
||||
|
||||
// LoadSSHKeyFromFile loads a ssh key out of a file
|
||||
func LoadSSHKeyFromFile(file string) (ssh.Signer, error) {
|
||||
keyBytes, err := ioutil.ReadFile(file)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
||||
return LoadSSHKey(keyBytes)
|
||||
}
|
||||
|
||||
// GenerateSSHKey generates a new rsa ssh key
|
||||
func GenerateSSHKey() ([]byte, error) {
|
||||
// create a key
|
||||
privateKey, err := rsa.GenerateKey(rand.Reader, 2048)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
privateKeyBlock := pem.Block{
|
||||
Type: "RSA PRIVATE KEY",
|
||||
Headers: nil,
|
||||
Bytes: x509.MarshalPKCS1PrivateKey(privateKey),
|
||||
}
|
||||
return pem.EncodeToMemory(&privateKeyBlock), nil
|
||||
}
|
||||
362
sshoneypot/sshoneypot.go
Normal file
362
sshoneypot/sshoneypot.go
Normal file
@ -0,0 +1,362 @@
|
||||
package sshoneypot
|
||||
|
||||
import (
|
||||
"errors"
|
||||
"fmt"
|
||||
"github.com/bytedream/sshoneypot/sshoneypot/handler"
|
||||
"github.com/bytedream/sshoneypot/sshoneypot/info"
|
||||
"golang.org/x/crypto/ssh"
|
||||
"golang.org/x/crypto/ssh/terminal"
|
||||
"io"
|
||||
"net"
|
||||
"os"
|
||||
"path/filepath"
|
||||
"runtime"
|
||||
"sort"
|
||||
"strings"
|
||||
)
|
||||
|
||||
const keyTab = 9
|
||||
|
||||
type SSHoneypot struct {
|
||||
AllowedUsers []string
|
||||
AllowedPasswords []string
|
||||
|
||||
Panic bool
|
||||
Logger *Logging
|
||||
Handler map[string]info.Handler
|
||||
FS *info.FileSystem
|
||||
|
||||
Port uint16
|
||||
ServerConfig *ssh.ServerConfig
|
||||
}
|
||||
|
||||
func (honeypot SSHoneypot) AddHandler(name string, handler info.Handler, aliases... string) error {
|
||||
for _, name := range append([]string{name}, aliases...) {
|
||||
if _, exist := honeypot.Handler[name]; exist {
|
||||
return errors.New("The handler name '" + name + "' already exists")
|
||||
}
|
||||
honeypot.Handler[name] = handler
|
||||
}
|
||||
return nil
|
||||
}
|
||||
|
||||
type HandlerFunc func(info *info.Info)
|
||||
|
||||
//simpleHandler is a easy implementation of Handler / SimpleHandler for the AddHandlerFunc method below
|
||||
type simpleHandler struct {
|
||||
info.Handler
|
||||
|
||||
HandlerName string
|
||||
handleFunc HandlerFunc
|
||||
}
|
||||
|
||||
func (sh simpleHandler) AutoCompleteOptions() []string {
|
||||
return make([]string, 0)
|
||||
}
|
||||
func (sh simpleHandler) AutoCompleteRequest(info *info.Info) (accepted bool) {
|
||||
return false
|
||||
}
|
||||
func (sh simpleHandler) Handle(info *info.Info) {
|
||||
sh.handleFunc(info)
|
||||
}
|
||||
func (sh simpleHandler) Kill() {}
|
||||
|
||||
func (honeypot SSHoneypot) AddHandlerFunc(name string, handler HandlerFunc, aliases... string) error {
|
||||
return honeypot.AddHandler(name, simpleHandler{handleFunc: handler}, aliases...)
|
||||
}
|
||||
|
||||
// Serve starts the ssh server and serve it until the program ends
|
||||
func (honeypot SSHoneypot) Serve() error {
|
||||
// starts the ssh listener
|
||||
listener, err := net.Listen("tcp", fmt.Sprintf(":%d", honeypot.Port))
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
defer listener.Close()
|
||||
|
||||
for {
|
||||
conn, err := listener.Accept()
|
||||
if err != nil {
|
||||
honeypot.Logger.Warnf("Failed to accept new client %s: %s\n", conn.RemoteAddr(), err)
|
||||
continue
|
||||
}
|
||||
go honeypot.handleConn(conn)
|
||||
}
|
||||
}
|
||||
|
||||
func (honeypot SSHoneypot) handleConn(conn net.Conn) {
|
||||
defer conn.Close()
|
||||
|
||||
serverConn, channels, requests, err := ssh.NewServerConn(conn, honeypot.ServerConfig)
|
||||
if err != nil {
|
||||
honeypot.Logger.Warnf("Failed to create new connection with %s: %s\n", conn.RemoteAddr(), err)
|
||||
return
|
||||
}
|
||||
term := &info.Termina{}
|
||||
go handleRequest(requests, term)
|
||||
for channel := range channels {
|
||||
go honeypot.handleChannel(conn, channel, serverConn, term)
|
||||
}
|
||||
honeypot.Logger.Infof("%s closed the connection\n", conn.RemoteAddr())
|
||||
}
|
||||
|
||||
func (honeypot SSHoneypot) handleChannel(conn net.Conn, newChannel ssh.NewChannel, serverConn *ssh.ServerConn, term *info.Termina) {
|
||||
channel, request, err := newChannel.Accept()
|
||||
if err != nil {
|
||||
return
|
||||
}
|
||||
|
||||
for {
|
||||
info.NewTerminal(channel).ReadLine()
|
||||
}
|
||||
|
||||
term.Terminal = terminal.NewTerminal(channel, "")
|
||||
term.SetPrompt(fmt.Sprintf("%s:%s $ ", serverConn.User(), "/"))
|
||||
term.AutoCompleteCallback = func(line string, pos int, key rune) (newLine string, newPos int, ok bool) {
|
||||
if key == keyTab {
|
||||
if command, err := parseCommand(line); len(command) > 0 && err == nil {
|
||||
if cmd, exists := honeypot.Handler[command[0]]; exists {
|
||||
cmdInfo := &info.Info{Conn: conn, Terminal: term, FS: honeypot.FS, User: serverConn, FullArgs: command, Command: command[0], Args: command[1:], Stdout: true, Stderr: true}
|
||||
if cmd.AutoCompleteRequest != nil && !cmd.AutoCompleteRequest(cmdInfo){
|
||||
if options := cmd.AutoCompleteOptions(); options != nil && len(options) == 0 {
|
||||
newLine, newPos, ok = honeypot.fileAutoComplete(cmdInfo, line)
|
||||
} else if len(options) == 1 {
|
||||
newLine = line + options[0]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
return
|
||||
}
|
||||
go handleRequest(request, term)
|
||||
for {
|
||||
line, err := term.ReadLine()
|
||||
if err != nil {
|
||||
if err == io.EOF {
|
||||
if honeypot.OnClose(channel) {
|
||||
return
|
||||
}
|
||||
}
|
||||
} else {
|
||||
fmt.Println(line)
|
||||
/*if !honeypot.handleLine(line, conn, channel, serverConn, term) {
|
||||
if honeypot.OnClose(channel) {
|
||||
return
|
||||
}
|
||||
}*/
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
func (honeypot SSHoneypot) handleLine(line string, conn net.Conn, channel ssh.Channel, serverConn *ssh.ServerConn, term *info.Termina) string {
|
||||
command, err := parseCommand(line)
|
||||
if err == nil && len(command) > 0 {
|
||||
clientInfo := &info.Info{Conn: conn, Terminal: term, FS: honeypot.FS, User: serverConn, FullArgs: command, Command: command[0], Args: command[1:], Stdout: true, Stderr: true}
|
||||
var redirect bool
|
||||
for i, arg := range clientInfo.Args {
|
||||
if redirect {
|
||||
redirect = false
|
||||
clientInfo.Args = append(clientInfo.Args[:i], clientInfo.Args[i+1:]...)
|
||||
}
|
||||
switch arg {
|
||||
case "2>", "&>":
|
||||
clientInfo.Stderr = false
|
||||
fallthrough
|
||||
case ">", "1>", ">>":
|
||||
clientInfo.Stdout = false
|
||||
|
||||
clientInfo.Args = append(clientInfo.Args[:i], clientInfo.Args[i+1:]...)
|
||||
}
|
||||
}
|
||||
if redirect {
|
||||
clientInfo.Errorln("-bash: syntax error near unexpected token 'newline'")
|
||||
return ""
|
||||
}
|
||||
|
||||
finished := make(chan bool, 1)
|
||||
newLine := ""
|
||||
|
||||
go func() {
|
||||
for {
|
||||
var buffer = make([]byte, 512)
|
||||
n, _ := channel.Read(buffer)
|
||||
select {
|
||||
case <- finished:
|
||||
newLine = string(buffer[:n])
|
||||
return
|
||||
default:
|
||||
if buffer[0] == 3 {
|
||||
clientInfo.Stderr = false
|
||||
clientInfo.Stdout = false
|
||||
finished <- true
|
||||
}
|
||||
}
|
||||
}
|
||||
}()
|
||||
|
||||
if commandHandler, ok := honeypot.Handler[command[0]]; ok {
|
||||
if honeypot.Panic {
|
||||
commandHandler.Handle(clientInfo)
|
||||
} else {
|
||||
func() {
|
||||
defer func() {
|
||||
if r := recover(); r != nil {
|
||||
buffer := make([]byte, 2048)
|
||||
written := runtime.Stack(buffer, false)
|
||||
honeypot.Logger.Warnf("Unexpected panic: %s\n%s", r, buffer[:written])
|
||||
}
|
||||
}()
|
||||
commandHandler.Handle(clientInfo)
|
||||
}()
|
||||
}
|
||||
|
||||
// the following part is the implementation of ctrl + c / ctrl + d when a process is running.
|
||||
// sadly the ssh library doesn't support ctrl + c / some other keys to handle their input directly,
|
||||
// so a second empty terminal has to be opened.
|
||||
// and because of this ugly implementation, the key up / down buttons to get the recent entered command are not working :/
|
||||
|
||||
|
||||
|
||||
return newLine
|
||||
} else {
|
||||
handler.Default(clientInfo)
|
||||
}
|
||||
}
|
||||
return ""
|
||||
}
|
||||
|
||||
func (honeypot SSHoneypot) fileAutoComplete(cmdInfo *info.Info, line string) (newLine string, newPos int, ok bool) {
|
||||
var names []string
|
||||
|
||||
if len(cmdInfo.Args) > 0 {
|
||||
var dir info.Directory
|
||||
search := cmdInfo.Args[len(cmdInfo.Args) - 1]
|
||||
|
||||
if strings.HasPrefix(search, string(os.PathSeparator)) {
|
||||
dir, _ = honeypot.FS.GetExplicitDirectory("/", false)
|
||||
} else {
|
||||
dir = honeypot.FS.Cwd()
|
||||
}
|
||||
|
||||
for _, file := range dir.Files {
|
||||
if strings.HasPrefix(file.Name, search) && file.Name != search {
|
||||
names = append(names, file.Name)
|
||||
}
|
||||
}
|
||||
if len(names) == 1 && strings.HasPrefix(search, string(os.PathSeparator)) {
|
||||
names[0] = filepath.Join(string(os.PathSeparator), names[0])
|
||||
} else if len(names) == 0 && strings.Contains(search, string(os.PathSeparator)) {
|
||||
parent, _ := filepath.Split(search)
|
||||
if dir, ok := honeypot.FS.GetExplicitDirectory(parent, false); ok {
|
||||
for _, file := range dir.Files {
|
||||
if strings.HasPrefix(filepath.Join(parent, file.Name), search) && file.Name != search {
|
||||
names = append(names, file.Name)
|
||||
}
|
||||
}
|
||||
}
|
||||
if len(names) == 1 {
|
||||
names[0] = filepath.Join(parent, names[0]) + string(os.PathSeparator)
|
||||
}
|
||||
}
|
||||
} else {
|
||||
|
||||
dir := honeypot.FS.Cwd()
|
||||
for _, file := range dir.Files {
|
||||
names = append(names, file.Name)
|
||||
}
|
||||
}
|
||||
|
||||
if len(names) == 0 {
|
||||
return
|
||||
} else if len(names) == 1 {
|
||||
ok = true
|
||||
if len(cmdInfo.Args) == 0 {
|
||||
newLine += names[0]
|
||||
} else {
|
||||
newLine = line[:strings.LastIndex(line, " ")] + " " + names[0]
|
||||
}
|
||||
newPos = len(newLine)
|
||||
} else {
|
||||
honeypot.OptionsAutoComplete(names, cmdInfo, line)
|
||||
}
|
||||
return
|
||||
}
|
||||
|
||||
// OptionsAutoComplete will show all given options in the console.
|
||||
// e.g. all files in the current directory when double pressing `tab` after the `ls` command
|
||||
func (honeypot SSHoneypot) OptionsAutoComplete(options []string, info *info.Info, line string) {
|
||||
sort.Strings(options)
|
||||
|
||||
var length int
|
||||
for _, option := range options {
|
||||
if l := len(option); length < l {
|
||||
length = l
|
||||
}
|
||||
}
|
||||
length++
|
||||
|
||||
var builder strings.Builder
|
||||
var perline int
|
||||
if info.Terminal.Width > 0 {
|
||||
perline = int(info.Terminal.Width) / length
|
||||
} else {
|
||||
perline = 80 / length
|
||||
}
|
||||
builder.WriteString(info.Terminal.Prompt + line + "\n")
|
||||
for i, option := range options {
|
||||
if i % perline == 0 && i != 0 {
|
||||
builder.WriteString("\n")
|
||||
}
|
||||
builder.WriteString(option + strings.Repeat(" ", length - len(option)))
|
||||
}
|
||||
builder.WriteString("\n")
|
||||
|
||||
info.Write(builder.String())
|
||||
}
|
||||
|
||||
// --- The following methods were created to allow user to manipulate the ssh process as they wish --- //
|
||||
|
||||
// OnClose gets called when the client send an exit signal.
|
||||
// If the return bool is true, the channel will be closed an the client disconnected
|
||||
func (honeypot SSHoneypot) OnClose(channel ssh.Channel) (close bool) {
|
||||
channel.SendRequest("exit-status", false, ssh.Marshal(struct {Status uint32}{Status: 0}))
|
||||
channel.Close()
|
||||
return true
|
||||
}
|
||||
|
||||
// --- //
|
||||
|
||||
func DefaultSSHoneypot(fs *info.FileSystem, key ssh.Signer) SSHoneypot {
|
||||
serverConfig := &ssh.ServerConfig{
|
||||
PasswordCallback: func(conn ssh.ConnMetadata, password []byte) (*ssh.Permissions, error) {
|
||||
return nil, nil
|
||||
},
|
||||
ServerVersion: "SSH-2.0-OpenSSH_8.5",
|
||||
}
|
||||
serverConfig.AddHostKey(key)
|
||||
|
||||
honeypot := SSHoneypot{
|
||||
Logger: &Logging{enable: true},
|
||||
Port: 2222,
|
||||
ServerConfig: serverConfig,
|
||||
|
||||
Handler: map[string]info.Handler{},
|
||||
|
||||
FS: fs,
|
||||
}
|
||||
honeypot.AddHandler("cat", handler.Cat{}, "/bin/cat")
|
||||
honeypot.AddHandler("cd", handler.CD{})
|
||||
honeypot.AddHandler("ls", handler.LS{}, "/bin/ls")
|
||||
honeypot.AddHandler("mkdir", handler.Mkdir{}, "/bin/mkdir")
|
||||
honeypot.AddHandler("rm", handler.RM{}, "/bin/rm")
|
||||
|
||||
honeypot.AddHandlerFunc("clear", handler.Clear, "/bin/clear")
|
||||
honeypot.AddHandlerFunc("echo", handler.Echo, "/bin/echo")
|
||||
|
||||
honeypot.AddHandlerFunc("ifconfig", handler.Ifconfig, "/sbin/ifconfig")
|
||||
honeypot.AddHandler("ping", handler.Ping{}, "/bin/ping", "/bin/ping4", "/bin/ping6")
|
||||
|
||||
return honeypot
|
||||
}
|
||||
Reference in New Issue
Block a user