From 7b7eeb3e155cca34b51c3f101b8740635af4f890 Mon Sep 17 00:00:00 2001 From: Mario Date: Sun, 8 May 2022 20:49:53 +0200 Subject: [PATCH] first commit --- .gitignore | 2 + .idea/.gitignore | 8 + .idea/beelzebub.iml | 9 + .idea/modules.xml | 8 + .idea/vcs.xml | 6 + Dockerfile | 36 ++ LICENSE | 596 ++++++++++++++++++ configurations/beelzebub.yaml | 6 + configurations/services/http-80.yaml | 18 + configurations/services/http-8080.yaml | 10 + configurations/services/ssh-22.yaml | 24 + docker-compose.yml | 11 + go.mod | 12 + go.sum | 30 + main.go | 77 +++ parser/configurationsParser.go | 119 ++++ parser/configurationsParser_test.go | 113 ++++ .../hypertextTransferProtocolStrategy.go | 90 +++ protocols/protocolManager.go | 19 + protocols/protocolStrategy.go | 7 + protocols/secureShellStrategy.go | 113 ++++ 21 files changed, 1314 insertions(+) create mode 100644 .gitignore create mode 100644 .idea/.gitignore create mode 100644 .idea/beelzebub.iml create mode 100644 .idea/modules.xml create mode 100644 .idea/vcs.xml create mode 100644 Dockerfile create mode 100644 LICENSE create mode 100644 configurations/beelzebub.yaml create mode 100644 configurations/services/http-80.yaml create mode 100644 configurations/services/http-8080.yaml create mode 100644 configurations/services/ssh-22.yaml create mode 100644 docker-compose.yml create mode 100644 go.mod create mode 100644 go.sum create mode 100644 main.go create mode 100644 parser/configurationsParser.go create mode 100644 parser/configurationsParser_test.go create mode 100644 protocols/hypertextTransferProtocolStrategy.go create mode 100644 protocols/protocolManager.go create mode 100644 protocols/protocolStrategy.go create mode 100644 protocols/secureShellStrategy.go diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..3d72576 --- /dev/null +++ b/.gitignore @@ -0,0 +1,2 @@ +.DS_Store +.idea \ No newline at end of file diff --git a/.idea/.gitignore b/.idea/.gitignore new file mode 100644 index 0000000..13566b8 --- /dev/null +++ b/.idea/.gitignore @@ -0,0 +1,8 @@ +# Default ignored files +/shelf/ +/workspace.xml +# Editor-based HTTP Client requests +/httpRequests/ +# Datasource local storage ignored files +/dataSources/ +/dataSources.local.xml diff --git a/.idea/beelzebub.iml b/.idea/beelzebub.iml new file mode 100644 index 0000000..5e764c4 --- /dev/null +++ b/.idea/beelzebub.iml @@ -0,0 +1,9 @@ + + + + + + + + + \ No newline at end of file diff --git a/.idea/modules.xml b/.idea/modules.xml new file mode 100644 index 0000000..f0b3182 --- /dev/null +++ b/.idea/modules.xml @@ -0,0 +1,8 @@ + + + + + + + + \ No newline at end of file diff --git a/.idea/vcs.xml b/.idea/vcs.xml new file mode 100644 index 0000000..94a25f7 --- /dev/null +++ b/.idea/vcs.xml @@ -0,0 +1,6 @@ + + + + + + \ No newline at end of file diff --git a/Dockerfile b/Dockerfile new file mode 100644 index 0000000..6ea8e52 --- /dev/null +++ b/Dockerfile @@ -0,0 +1,36 @@ +FROM golang:alpine AS builder + +ENV GO111MODULE=on \ + CGO_ENABLED=0 \ + GOOS=linux \ + GOARCH=amd64 + +RUN apk add git + +WORKDIR /build + +# Copy and download dependency using go mod +COPY go.mod . +COPY go.sum . +RUN go mod download + +# Copy the code into the container +COPY . . +COPY ./configurations /dist/configurations + +# Build the application +RUN go build -o main . + +# Move to /dist directory as the place for resulting binary folder +WORKDIR /dist + +# Copy binary from build to main folder +RUN cp /build/main . + +# Build a small image +FROM scratch + +COPY --from=builder /dist/main / +COPY --from=builder /dist/configurations /configurations + +ENTRYPOINT ["/main"] \ No newline at end of file diff --git a/LICENSE b/LICENSE new file mode 100644 index 0000000..af09c9a --- /dev/null +++ b/LICENSE @@ -0,0 +1,596 @@ +GNU GENERAL PUBLIC LICENSE +========================== + +Version 3, 29 June 2007 + +Copyright © 2007 Free Software Foundation, Inc. <> + +Everyone is permitted to copy and distribute verbatim copies of this license +document, but changing it is not allowed. + +## Preamble + +The GNU General Public License is a free, copyleft license for software and other +kinds of works. + +The licenses for most software and other practical works are designed to take away +your freedom to share and change the works. By contrast, the GNU General Public +License is intended to guarantee your freedom to share and change all versions of a +program--to make sure it remains free software for all its users. We, the Free +Software Foundation, use the GNU General Public License for most of our software; it +applies also to any other work released this way by its authors. You can apply it to +your programs, too. + +When we speak of free software, we are referring to freedom, not price. Our General +Public Licenses are designed to make sure that you have the freedom to distribute +copies of free software (and charge for them if you wish), that you receive source +code or can get it if you want it, that you can change the software or use pieces of +it in new free programs, and that you know you can do these things. + +To protect your rights, we need to prevent others from denying you these rights or +asking you to surrender the rights. Therefore, you have certain responsibilities if +you distribute copies of the software, or if you modify it: responsibilities to +respect the freedom of others. + +For example, if you distribute copies of such a program, whether gratis or for a fee, +you must pass on to the recipients the same freedoms that you received. You must make +sure that they, too, receive or can get the source code. And you must show them these +terms so they know their rights. + +Developers that use the GNU GPL protect your rights with two steps: (1) assert +copyright on the software, and (2) offer you this License giving you legal permission +to copy, distribute and/or modify it. + +For the developers' and authors' protection, the GPL clearly explains that there is +no warranty for this free software. For both users' and authors' sake, the GPL +requires that modified versions be marked as changed, so that their problems will not +be attributed erroneously to authors of previous versions. + +Some devices are designed to deny users access to install or run modified versions of +the software inside them, although the manufacturer can do so. This is fundamentally +incompatible with the aim of protecting users' freedom to change the software. The +systematic pattern of such abuse occurs in the area of products for individuals to +use, which is precisely where it is most unacceptable. Therefore, we have designed +this version of the GPL to prohibit the practice for those products. If such problems +arise substantially in other domains, we stand ready to extend this provision to +those domains in future versions of the GPL, as needed to protect the freedom of +users. + +Finally, every program is threatened constantly by software patents. States should +not allow patents to restrict development and use of software on general-purpose +computers, but in those that do, we wish to avoid the special danger that patents +applied to a free program could make it effectively proprietary. To prevent this, the +GPL assures that patents cannot be used to render the program non-free. + +The precise terms and conditions for copying, distribution and modification follow. + +## TERMS AND CONDITIONS + +### 0. Definitions. + +“This License” refers to version 3 of the GNU General Public License. + +“Copyright” also means copyright-like laws that apply to other kinds of +works, such as semiconductor masks. + +“The Program” refers to any copyrightable work licensed under this +License. Each licensee is addressed as “you”. “Licensees” and +“recipients” may be individuals or organizations. + +To “modify” a work means to copy from or adapt all or part of the work in +a fashion requiring copyright permission, other than the making of an exact copy. The +resulting work is called a “modified version” of the earlier work or a +work “based on” the earlier work. + +A “covered work” means either the unmodified Program or a work based on +the Program. + +To “propagate” a work means to do anything with it that, without +permission, would make you directly or secondarily liable for infringement under +applicable copyright law, except executing it on a computer or modifying a private +copy. Propagation includes copying, distribution (with or without modification), +making available to the public, and in some countries other activities as well. + +To “convey” a work means any kind of propagation that enables other +parties to make or receive copies. Mere interaction with a user through a computer +network, with no transfer of a copy, is not conveying. + +An interactive user interface displays “Appropriate Legal Notices” to the +extent that it includes a convenient and prominently visible feature that (1) +displays an appropriate copyright notice, and (2) tells the user that there is no +warranty for the work (except to the extent that warranties are provided), that +licensees may convey the work under this License, and how to view a copy of this +License. If the interface presents a list of user commands or options, such as a +menu, a prominent item in the list meets this criterion. + +### 1. Source Code. + +The “source code” for a work means the preferred form of the work for +making modifications to it. “Object code” means any non-source form of a +work. + +A “Standard Interface” means an interface that either is an official +standard defined by a recognized standards body, or, in the case of interfaces +specified for a particular programming language, one that is widely used among +developers working in that language. + +The “System Libraries” of an executable work include anything, other than +the work as a whole, that (a) is included in the normal form of packaging a Major +Component, but which is not part of that Major Component, and (b) serves only to +enable use of the work with that Major Component, or to implement a Standard +Interface for which an implementation is available to the public in source code form. +A “Major Component”, in this context, means a major essential component +(kernel, window system, and so on) of the specific operating system (if any) on which +the executable work runs, or a compiler used to produce the work, or an object code +interpreter used to run it. + +The “Corresponding Source” for a work in object code form means all the +source code needed to generate, install, and (for an executable work) run the object +code and to modify the work, including scripts to control those activities. However, +it does not include the work's System Libraries, or general-purpose tools or +generally available free programs which are used unmodified in performing those +activities but which are not part of the work. For example, Corresponding Source +includes interface definition files associated with source files for the work, and +the source code for shared libraries and dynamically linked subprograms that the work +is specifically designed to require, such as by intimate data communication or +control flow between those subprograms and other parts of the work. + +The Corresponding Source need not include anything that users can regenerate +automatically from other parts of the Corresponding Source. + +The Corresponding Source for a work in source code form is that same work. + +### 2. Basic Permissions. + +All rights granted under this License are granted for the term of copyright on the +Program, and are irrevocable provided the stated conditions are met. This License +explicitly affirms your unlimited permission to run the unmodified Program. The +output from running a covered work is covered by this License only if the output, +given its content, constitutes a covered work. This License acknowledges your rights +of fair use or other equivalent, as provided by copyright law. + +You may make, run and propagate covered works that you do not convey, without +conditions so long as your license otherwise remains in force. You may convey covered +works to others for the sole purpose of having them make modifications exclusively +for you, or provide you with facilities for running those works, provided that you +comply with the terms of this License in conveying all material for which you do not +control copyright. Those thus making or running the covered works for you must do so +exclusively on your behalf, under your direction and control, on terms that prohibit +them from making any copies of your copyrighted material outside their relationship +with you. + +Conveying under any other circumstances is permitted solely under the conditions +stated below. Sublicensing is not allowed; section 10 makes it unnecessary. + +### 3. Protecting Users' Legal Rights From Anti-Circumvention Law. + +No covered work shall be deemed part of an effective technological measure under any +applicable law fulfilling obligations under article 11 of the WIPO copyright treaty +adopted on 20 December 1996, or similar laws prohibiting or restricting circumvention +of such measures. + +When you convey a covered work, you waive any legal power to forbid circumvention of +technological measures to the extent such circumvention is effected by exercising +rights under this License with respect to the covered work, and you disclaim any +intention to limit operation or modification of the work as a means of enforcing, +against the work's users, your or third parties' legal rights to forbid circumvention +of technological measures. + +### 4. Conveying Verbatim Copies. + +You may convey verbatim copies of the Program's source code as you receive it, in any +medium, provided that you conspicuously and appropriately publish on each copy an +appropriate copyright notice; keep intact all notices stating that this License and +any non-permissive terms added in accord with section 7 apply to the code; keep +intact all notices of the absence of any warranty; and give all recipients a copy of +this License along with the Program. + +You may charge any price or no price for each copy that you convey, and you may offer +support or warranty protection for a fee. + +### 5. Conveying Modified Source Versions. + +You may convey a work based on the Program, or the modifications to produce it from +the Program, in the form of source code under the terms of section 4, provided that +you also meet all of these conditions: + +* **a)** The work must carry prominent notices stating that you modified it, and giving a +relevant date. +* **b)** The work must carry prominent notices stating that it is released under this +License and any conditions added under section 7. This requirement modifies the +requirement in section 4 to “keep intact all notices”. +* **c)** You must license the entire work, as a whole, under this License to anyone who +comes into possession of a copy. This License will therefore apply, along with any +applicable section 7 additional terms, to the whole of the work, and all its parts, +regardless of how they are packaged. This License gives no permission to license the +work in any other way, but it does not invalidate such permission if you have +separately received it. +* **d)** If the work has interactive user interfaces, each must display Appropriate Legal +Notices; however, if the Program has interactive interfaces that do not display +Appropriate Legal Notices, your work need not make them do so. + +A compilation of a covered work with other separate and independent works, which are +not by their nature extensions of the covered work, and which are not combined with +it such as to form a larger program, in or on a volume of a storage or distribution +medium, is called an “aggregate” if the compilation and its resulting +copyright are not used to limit the access or legal rights of the compilation's users +beyond what the individual works permit. Inclusion of a covered work in an aggregate +does not cause this License to apply to the other parts of the aggregate. + +### 6. Conveying Non-Source Forms. + +You may convey a covered work in object code form under the terms of sections 4 and +5, provided that you also convey the machine-readable Corresponding Source under the +terms of this License, in one of these ways: + +* **a)** Convey the object code in, or embodied in, a physical product (including a +physical distribution medium), accompanied by the Corresponding Source fixed on a +durable physical medium customarily used for software interchange. +* **b)** Convey the object code in, or embodied in, a physical product (including a +physical distribution medium), accompanied by a written offer, valid for at least +three years and valid for as long as you offer spare parts or customer support for +that product model, to give anyone who possesses the object code either (1) a copy of +the Corresponding Source for all the software in the product that is covered by this +License, on a durable physical medium customarily used for software interchange, for +a price no more than your reasonable cost of physically performing this conveying of +source, or (2) access to copy the Corresponding Source from a network server at no +charge. +* **c)** Convey individual copies of the object code with a copy of the written offer to +provide the Corresponding Source. This alternative is allowed only occasionally and +noncommercially, and only if you received the object code with such an offer, in +accord with subsection 6b. +* **d)** Convey the object code by offering access from a designated place (gratis or for +a charge), and offer equivalent access to the Corresponding Source in the same way +through the same place at no further charge. You need not require recipients to copy +the Corresponding Source along with the object code. If the place to copy the object +code is a network server, the Corresponding Source may be on a different server +(operated by you or a third party) that supports equivalent copying facilities, +provided you maintain clear directions next to the object code saying where to find +the Corresponding Source. Regardless of what server hosts the Corresponding Source, +you remain obligated to ensure that it is available for as long as needed to satisfy +these requirements. +* **e)** Convey the object code using peer-to-peer transmission, provided you inform +other peers where the object code and Corresponding Source of the work are being +offered to the general public at no charge under subsection 6d. + +A separable portion of the object code, whose source code is excluded from the +Corresponding Source as a System Library, need not be included in conveying the +object code work. + +A “User Product” is either (1) a “consumer product”, which +means any tangible personal property which is normally used for personal, family, or +household purposes, or (2) anything designed or sold for incorporation into a +dwelling. In determining whether a product is a consumer product, doubtful cases +shall be resolved in favor of coverage. For a particular product received by a +particular user, “normally used” refers to a typical or common use of +that class of product, regardless of the status of the particular user or of the way +in which the particular user actually uses, or expects or is expected to use, the +product. A product is a consumer product regardless of whether the product has +substantial commercial, industrial or non-consumer uses, unless such uses represent +the only significant mode of use of the product. + +“Installation Information” for a User Product means any methods, +procedures, authorization keys, or other information required to install and execute +modified versions of a covered work in that User Product from a modified version of +its Corresponding Source. The information must suffice to ensure that the continued +functioning of the modified object code is in no case prevented or interfered with +solely because modification has been made. + +If you convey an object code work under this section in, or with, or specifically for +use in, a User Product, and the conveying occurs as part of a transaction in which +the right of possession and use of the User Product is transferred to the recipient +in perpetuity or for a fixed term (regardless of how the transaction is +characterized), the Corresponding Source conveyed under this section must be +accompanied by the Installation Information. But this requirement does not apply if +neither you nor any third party retains the ability to install modified object code +on the User Product (for example, the work has been installed in ROM). + +The requirement to provide Installation Information does not include a requirement to +continue to provide support service, warranty, or updates for a work that has been +modified or installed by the recipient, or for the User Product in which it has been +modified or installed. Access to a network may be denied when the modification itself +materially and adversely affects the operation of the network or violates the rules +and protocols for communication across the network. + +Corresponding Source conveyed, and Installation Information provided, in accord with +this section must be in a format that is publicly documented (and with an +implementation available to the public in source code form), and must require no +special password or key for unpacking, reading or copying. + +### 7. Additional Terms. + +“Additional permissions” are terms that supplement the terms of this +License by making exceptions from one or more of its conditions. Additional +permissions that are applicable to the entire Program shall be treated as though they +were included in this License, to the extent that they are valid under applicable +law. If additional permissions apply only to part of the Program, that part may be +used separately under those permissions, but the entire Program remains governed by +this License without regard to the additional permissions. + +When you convey a copy of a covered work, you may at your option remove any +additional permissions from that copy, or from any part of it. (Additional +permissions may be written to require their own removal in certain cases when you +modify the work.) You may place additional permissions on material, added by you to a +covered work, for which you have or can give appropriate copyright permission. + +Notwithstanding any other provision of this License, for material you add to a +covered work, you may (if authorized by the copyright holders of that material) +supplement the terms of this License with terms: + +* **a)** Disclaiming warranty or limiting liability differently from the terms of +sections 15 and 16 of this License; or +* **b)** Requiring preservation of specified reasonable legal notices or author +attributions in that material or in the Appropriate Legal Notices displayed by works +containing it; or +* **c)** Prohibiting misrepresentation of the origin of that material, or requiring that +modified versions of such material be marked in reasonable ways as different from the +original version; or +* **d)** Limiting the use for publicity purposes of names of licensors or authors of the +material; or +* **e)** Declining to grant rights under trademark law for use of some trade names, +trademarks, or service marks; or +* **f)** Requiring indemnification of licensors and authors of that material by anyone +who conveys the material (or modified versions of it) with contractual assumptions of +liability to the recipient, for any liability that these contractual assumptions +directly impose on those licensors and authors. + +All other non-permissive additional terms are considered “further +restrictions” within the meaning of section 10. If the Program as you received +it, or any part of it, contains a notice stating that it is governed by this License +along with a term that is a further restriction, you may remove that term. If a +license document contains a further restriction but permits relicensing or conveying +under this License, you may add to a covered work material governed by the terms of +that license document, provided that the further restriction does not survive such +relicensing or conveying. + +If you add terms to a covered work in accord with this section, you must place, in +the relevant source files, a statement of the additional terms that apply to those +files, or a notice indicating where to find the applicable terms. + +Additional terms, permissive or non-permissive, may be stated in the form of a +separately written license, or stated as exceptions; the above requirements apply +either way. + +### 8. Termination. + +You may not propagate or modify a covered work except as expressly provided under +this License. Any attempt otherwise to propagate or modify it is void, and will +automatically terminate your rights under this License (including any patent licenses +granted under the third paragraph of section 11). + +However, if you cease all violation of this License, then your license from a +particular copyright holder is reinstated (a) provisionally, unless and until the +copyright holder explicitly and finally terminates your license, and (b) permanently, +if the copyright holder fails to notify you of the violation by some reasonable means +prior to 60 days after the cessation. + +Moreover, your license from a particular copyright holder is reinstated permanently +if the copyright holder notifies you of the violation by some reasonable means, this +is the first time you have received notice of violation of this License (for any +work) from that copyright holder, and you cure the violation prior to 30 days after +your receipt of the notice. + +Termination of your rights under this section does not terminate the licenses of +parties who have received copies or rights from you under this License. If your +rights have been terminated and not permanently reinstated, you do not qualify to +receive new licenses for the same material under section 10. + +### 9. Acceptance Not Required for Having Copies. + +You are not required to accept this License in order to receive or run a copy of the +Program. Ancillary propagation of a covered work occurring solely as a consequence of +using peer-to-peer transmission to receive a copy likewise does not require +acceptance. However, nothing other than this License grants you permission to +propagate or modify any covered work. These actions infringe copyright if you do not +accept this License. Therefore, by modifying or propagating a covered work, you +indicate your acceptance of this License to do so. + +### 10. Automatic Licensing of Downstream Recipients. + +Each time you convey a covered work, the recipient automatically receives a license +from the original licensors, to run, modify and propagate that work, subject to this +License. You are not responsible for enforcing compliance by third parties with this +License. + +An “entity transaction” is a transaction transferring control of an +organization, or substantially all assets of one, or subdividing an organization, or +merging organizations. If propagation of a covered work results from an entity +transaction, each party to that transaction who receives a copy of the work also +receives whatever licenses to the work the party's predecessor in interest had or +could give under the previous paragraph, plus a right to possession of the +Corresponding Source of the work from the predecessor in interest, if the predecessor +has it or can get it with reasonable efforts. + +You may not impose any further restrictions on the exercise of the rights granted or +affirmed under this License. For example, you may not impose a license fee, royalty, +or other charge for exercise of rights granted under this License, and you may not +initiate litigation (including a cross-claim or counterclaim in a lawsuit) alleging +that any patent claim is infringed by making, using, selling, offering for sale, or +importing the Program or any portion of it. + +### 11. Patents. + +A “contributor” is a copyright holder who authorizes use under this +License of the Program or a work on which the Program is based. The work thus +licensed is called the contributor's “contributor version”. + +A contributor's “essential patent claims” are all patent claims owned or +controlled by the contributor, whether already acquired or hereafter acquired, that +would be infringed by some manner, permitted by this License, of making, using, or +selling its contributor version, but do not include claims that would be infringed +only as a consequence of further modification of the contributor version. For +purposes of this definition, “control” includes the right to grant patent +sublicenses in a manner consistent with the requirements of this License. + +Each contributor grants you a non-exclusive, worldwide, royalty-free patent license +under the contributor's essential patent claims, to make, use, sell, offer for sale, +import and otherwise run, modify and propagate the contents of its contributor +version. + +In the following three paragraphs, a “patent license” is any express +agreement or commitment, however denominated, not to enforce a patent (such as an +express permission to practice a patent or covenant not to sue for patent +infringement). To “grant” such a patent license to a party means to make +such an agreement or commitment not to enforce a patent against the party. + +If you convey a covered work, knowingly relying on a patent license, and the +Corresponding Source of the work is not available for anyone to copy, free of charge +and under the terms of this License, through a publicly available network server or +other readily accessible means, then you must either (1) cause the Corresponding +Source to be so available, or (2) arrange to deprive yourself of the benefit of the +patent license for this particular work, or (3) arrange, in a manner consistent with +the requirements of this License, to extend the patent license to downstream +recipients. “Knowingly relying” means you have actual knowledge that, but +for the patent license, your conveying the covered work in a country, or your +recipient's use of the covered work in a country, would infringe one or more +identifiable patents in that country that you have reason to believe are valid. + +If, pursuant to or in connection with a single transaction or arrangement, you +convey, or propagate by procuring conveyance of, a covered work, and grant a patent +license to some of the parties receiving the covered work authorizing them to use, +propagate, modify or convey a specific copy of the covered work, then the patent +license you grant is automatically extended to all recipients of the covered work and +works based on it. + +A patent license is “discriminatory” if it does not include within the +scope of its coverage, prohibits the exercise of, or is conditioned on the +non-exercise of one or more of the rights that are specifically granted under this +License. You may not convey a covered work if you are a party to an arrangement with +a third party that is in the business of distributing software, under which you make +payment to the third party based on the extent of your activity of conveying the +work, and under which the third party grants, to any of the parties who would receive +the covered work from you, a discriminatory patent license (a) in connection with +copies of the covered work conveyed by you (or copies made from those copies), or (b) +primarily for and in connection with specific products or compilations that contain +the covered work, unless you entered into that arrangement, or that patent license +was granted, prior to 28 March 2007. + +Nothing in this License shall be construed as excluding or limiting any implied +license or other defenses to infringement that may otherwise be available to you +under applicable patent law. + +### 12. No Surrender of Others' Freedom. + +If conditions are imposed on you (whether by court order, agreement or otherwise) +that contradict the conditions of this License, they do not excuse you from the +conditions of this License. If you cannot convey a covered work so as to satisfy +simultaneously your obligations under this License and any other pertinent +obligations, then as a consequence you may not convey it at all. For example, if you +agree to terms that obligate you to collect a royalty for further conveying from +those to whom you convey the Program, the only way you could satisfy both those terms +and this License would be to refrain entirely from conveying the Program. + +### 13. Use with the GNU Affero General Public License. + +Notwithstanding any other provision of this License, you have permission to link or +combine any covered work with a work licensed under version 3 of the GNU Affero +General Public License into a single combined work, and to convey the resulting work. +The terms of this License will continue to apply to the part which is the covered +work, but the special requirements of the GNU Affero General Public License, section +13, concerning interaction through a network will apply to the combination as such. + +### 14. Revised Versions of this License. + +The Free Software Foundation may publish revised and/or new versions of the GNU +General Public License from time to time. Such new versions will be similar in spirit +to the present version, but may differ in detail to address new problems or concerns. + +Each version is given a distinguishing version number. If the Program specifies that +a certain numbered version of the GNU General Public License “or any later +version” applies to it, you have the option of following the terms and +conditions either of that numbered version or of any later version published by the +Free Software Foundation. If the Program does not specify a version number of the GNU +General Public License, you may choose any version ever published by the Free +Software Foundation. + +If the Program specifies that a proxy can decide which future versions of the GNU +General Public License can be used, that proxy's public statement of acceptance of a +version permanently authorizes you to choose that version for the Program. + +Later license versions may give you additional or different permissions. However, no +additional obligations are imposed on any author or copyright holder as a result of +your choosing to follow a later version. + +### 15. Disclaimer of Warranty. + +THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. +EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES +PROVIDE THE PROGRAM “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER +EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF +MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE +QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE +DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. + +### 16. Limitation of Liability. + +IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY +COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS THE PROGRAM AS +PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, +INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE +PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE +OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE +WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE +POSSIBILITY OF SUCH DAMAGES. + +### 17. Interpretation of Sections 15 and 16. + +If the disclaimer of warranty and limitation of liability provided above cannot be +given local legal effect according to their terms, reviewing courts shall apply local +law that most closely approximates an absolute waiver of all civil liability in +connection with the Program, unless a warranty or assumption of liability accompanies +a copy of the Program in return for a fee. + +END OF TERMS AND CONDITIONS + +## How to Apply These Terms to Your New Programs + +If you develop a new program, and you want it to be of the greatest possible use to +the public, the best way to achieve this is to make it free software which everyone +can redistribute and change under these terms. + +To do so, attach the following notices to the program. It is safest to attach them +to the start of each source file to most effectively state the exclusion of warranty; +and each file should have at least the “copyright” line and a pointer to +where the full notice is found. + + + Copyright (C) + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see . + +Also add information on how to contact you by electronic and paper mail. + +If the program does terminal interaction, make it output a short notice like this +when it starts in an interactive mode: + + Beelzebub Copyright (C) 2022 Mario Candela + This program comes with ABSOLUTELY NO WARRANTY; for details type 'show w'. + This is free software, and you are welcome to redistribute it + under certain conditions; type 'show c' for details. + +The hypothetical commands 'show w' and 'show c' should show the appropriate parts of +the General Public License. Of course, your program's commands might be different; +for a GUI interface, you would use an “about box”. + +You should also get your employer (if you work as a programmer) or school, if any, to +sign a “copyright disclaimer” for the program, if necessary. For more +information on this, and how to apply and follow the GNU GPL, see +<>. + +The GNU General Public License does not permit incorporating your program into +proprietary programs. If your program is a subroutine library, you may consider it +more useful to permit linking proprietary applications with the library. If this is +what you want to do, use the GNU Lesser General Public License instead of this +License. But first, please read +<>. \ No newline at end of file diff --git a/configurations/beelzebub.yaml b/configurations/beelzebub.yaml new file mode 100644 index 0000000..9bfe9eb --- /dev/null +++ b/configurations/beelzebub.yaml @@ -0,0 +1,6 @@ +core: + logging: + debug: false + debugReportCaller: false + logDisableTimestamp: true + logsPath: ./logs \ No newline at end of file diff --git a/configurations/services/http-80.yaml b/configurations/services/http-80.yaml new file mode 100644 index 0000000..168e973 --- /dev/null +++ b/configurations/services/http-80.yaml @@ -0,0 +1,18 @@ +apiVersion: "v1" +protocol: "http" +address: ":80" +commands: + - regex: "microtick" + handler: "\r\n\r\n\r\n\r\n\r\nRouterOS router configuration page\r\n\r\n\r\n\r\n\r\n\r\n\r\n
\r\n\r\n
\r\n \r\n\r\n
\r\n \r\n\t\t

RouterOS v6.42.12

\r\n \r\n

You have connected to a router. Administrative access only. If this device is not in your possession, please contact your local network administrator.

\r\n \r\n \r\n\t

WebFig Login:

\r\n
Login: \r\n\t \r\n \r\n
Password: \r\n\t
\r\n\t
\r\n
\r\n \r\n
\r\n
\r\n \t
\r\n \r\n
\r\n \r\n
\r\n \t
\r\n \r\n
\r\n\r\n \r\n \r\n
\r\n \t
\r\n \r\n
\r\n \r\n \r\n
\r\n \t
\r\n \r\n
\r\n \r\n\t\t\t
\r\n \t
\r\n \r\n
\r\n\r\n
\r\n \r\n
\r\n
© mikrotik
\r\n\r\n
\r\n
\r\n\r\n\r\n\r\n\r\n\r\n" + headers: + - "Content-Type: text/html" + - "Expires: 0" + - "Version: 6.42.12" + statusCode: 200 + - regex: "hello" + handler: "world!" + headers: + - "Content-Type: text/html" + - "Expires: 0" + - "Version: 6.42.12" + statusCode: 500 \ No newline at end of file diff --git a/configurations/services/http-8080.yaml b/configurations/services/http-8080.yaml new file mode 100644 index 0000000..2c76529 --- /dev/null +++ b/configurations/services/http-8080.yaml @@ -0,0 +1,10 @@ +apiVersion: "v1" +protocol: "http" +address: ":8080" +commands: + - regex: "wp-admin" + handler: "login" + headers: + - "Content-Type: text/html" + - "Expires: 0" + - "Version: 6.42.12" \ No newline at end of file diff --git a/configurations/services/ssh-22.yaml b/configurations/services/ssh-22.yaml new file mode 100644 index 0000000..3425fe1 --- /dev/null +++ b/configurations/services/ssh-22.yaml @@ -0,0 +1,24 @@ +apiVersion: "v1" +protocol: "ssh" +address: ":22" +commands: + - regex: "^ls$" + handler: "Documents Images Desktop Downloads .m2 .kube .ssh .docker" + - regex: "^pwd$" + handler: "/home/" + - regex: "^uname -m$" + handler: "x86_64" + - regex: "^docker ps$" + handler: "CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES" + - regex: "^docker .*$" + handler: "Error response from daemon: dial unix docker.raw.sock: connect: connection refused" + - regex: "^uname$" + handler: "Linux" + - regex: "^ps$" + handler: " PID TTY TIME CMD\n21642 ttys000 0:00.07 /bin/dockerd" + - regex: "^(.+)$" + handler: "command not found" +serverVersion: "OpenSSH" +serverName: "ubuntu" +passwordRegex: "^(root|qwerty)$" +deadlineTimeoutSeconds: 60 \ No newline at end of file diff --git a/docker-compose.yml b/docker-compose.yml new file mode 100644 index 0000000..cccf9a2 --- /dev/null +++ b/docker-compose.yml @@ -0,0 +1,11 @@ +version: "3.9" + +services: + beelzebub: + build: . + #network_mode: host #baby jesus mac os + container_name: beelzebub + ports: + - "22:22" + - "8080:8080" + - "80:80" \ No newline at end of file diff --git a/go.mod b/go.mod new file mode 100644 index 0000000..b9bdd6b --- /dev/null +++ b/go.mod @@ -0,0 +1,12 @@ +module beelzebub + +go 1.16 + +require ( + github.com/gliderlabs/ssh v0.3.3 // indirect + github.com/google/uuid v1.3.0 // indirect + github.com/sirupsen/logrus v1.8.1 + github.com/stretchr/testify v1.2.2 // indirect + golang.org/x/crypto v0.0.0-20210616213533-5ff15b29337e // indirect + gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b // indirect +) diff --git a/go.sum b/go.sum new file mode 100644 index 0000000..8473d44 --- /dev/null +++ b/go.sum @@ -0,0 +1,30 @@ +github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be h1:9AeTilPcZAjCFIImctFaOjnTIavg87rW78vTPkQqLI8= +github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be/go.mod h1:ySMOLuWl6zY27l47sB3qLNK6tF2fkHG55UZxx8oIVo4= +github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c= +github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= +github.com/gliderlabs/ssh v0.3.3 h1:mBQ8NiOgDkINJrZtoizkC3nDNYgSaWtxyem6S2XHBtA= +github.com/gliderlabs/ssh v0.3.3/go.mod h1:ZSS+CUoKHDrqVakTfTWUlKSr9MtMFkC4UvtQKD7O914= +github.com/google/uuid v1.3.0 h1:t6JiXgmwXMjEs8VusXIJk2BXHsn+wx8BZdTaoZ5fu7I= +github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= +github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM= +github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= +github.com/sirupsen/logrus v1.8.1 h1:dJKuHgqk1NNQlqoA6BTlM1Wf9DOH3NBjQyu0h9+AZZE= +github.com/sirupsen/logrus v1.8.1/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0= +github.com/stretchr/testify v1.2.2 h1:bSDNvY7ZPG5RlJ8otE/7V6gMiyenm9RtJ7IUVIAoJ1w= +github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs= +golang.org/x/crypto v0.0.0-20210616213533-5ff15b29337e h1:gsTQYXdTw2Gq7RBsWvlQ91b+aEQ6bXFUngBGuR8sPpI= +golang.org/x/crypto v0.0.0-20210616213533-5ff15b29337e/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= +golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg= +golang.org/x/sys v0.0.0-20191026070338-33540a1f6037 h1:YyJpGZS1sBuBCzLAR1VEpK193GlqGZbnPFnPV/5Rsb4= +golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20210616094352-59db8d763f22 h1:RqytpXGR1iVNX7psjB3ff8y7sNFinVFvkx1c8SjBkio= +golang.org/x/sys v0.0.0-20210616094352-59db8d763f22/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1 h1:v+OssWQX+hTHEmOBgwxdZxK4zHq3yOs8F9J7mk0PY8E= +golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= +golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= +golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= +gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b h1:h8qDotaEPuJATrMmW04NCwg7v22aHH28wwpauUhK9Oo= +gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= diff --git a/main.go b/main.go new file mode 100644 index 0000000..fb99c1f --- /dev/null +++ b/main.go @@ -0,0 +1,77 @@ +package main + +import ( + "beelzebub/parser" + "beelzebub/protocols" + log "github.com/sirupsen/logrus" + "io" + "os" +) + +var quit = make(chan struct{}) + +func main() { + configurationsParser := parser.Init("./configurations/beelzebub.yaml", "./configurations/services/") + + coreConfigurations, err := configurationsParser.ReadConfigurationsCore() + if err != nil { + log.Fatal(err) + } + + fileLogs := configureLogging(coreConfigurations.Core.Logging) + defer fileLogs.Close() + + beelzebubServicesConfiguration, err := configurationsParser.ReadConfigurationsServices() + if err != nil { + log.Fatal(err) + } + + // Protocol strategies + secureShellStrategy := &protocols.SecureShellStrategy{} + hypertextTransferProtocolStrategy := &protocols.HypertextTransferProtocolStrategy{} + + // Protocol manager + manager := protocols.ProtocolManager{} + serviceManager := manager.InitServiceManager() + + for _, beelzebubServiceConfiguration := range beelzebubServicesConfiguration { + switch beelzebubServiceConfiguration.Protocol { + case "http": + serviceManager.SetProtocolStrategy(hypertextTransferProtocolStrategy) + break + case "ssh": + serviceManager.SetProtocolStrategy(secureShellStrategy) + break + default: + log.Fatalf("Protocol %s not managed", beelzebubServiceConfiguration.Protocol) + continue + } + + err := serviceManager.InitService(beelzebubServiceConfiguration) + if err != nil { + log.Errorf("Error during init protocol: %s, %s", beelzebubServiceConfiguration.Protocol, err.Error()) + } + } + <-quit +} + +func configureLogging(configurations parser.Logging) *os.File { + file, err := os.OpenFile(configurations.LogsPath, os.O_APPEND|os.O_CREATE|os.O_RDWR, 0666) + if err != nil { + log.Fatalf("error opening file: %v", err) + } + mw := io.MultiWriter(os.Stdout, file) + + log.SetOutput(mw) + + log.SetFormatter(&log.JSONFormatter{ + DisableTimestamp: configurations.LogDisableTimestamp, + }) + log.SetReportCaller(configurations.DebugReportCaller) + if configurations.Debug { + log.SetLevel(log.DebugLevel) + } else { + log.SetLevel(log.InfoLevel) + } + return file +} diff --git a/parser/configurationsParser.go b/parser/configurationsParser.go new file mode 100644 index 0000000..73a30ed --- /dev/null +++ b/parser/configurationsParser.go @@ -0,0 +1,119 @@ +package parser + +import ( + "fmt" + log "github.com/sirupsen/logrus" + "gopkg.in/yaml.v3" + "io/ioutil" + "os" + "path/filepath" +) + +type BeelzebubCoreConfigurations struct { + Core struct { + Logging Logging `yaml:"logging"` + } +} + +type Logging struct { + Debug bool `yaml:"debug"` + DebugReportCaller bool `yaml:"debugReportCaller"` + LogDisableTimestamp bool `yaml:"logDisableTimestamp"` + LogsPath string `yaml:"logsPath,omitempty"` +} + +type BeelzebubServiceConfiguration struct { + ApiVersion string `yaml:"apiVersion"` + Protocol string `yaml:"protocol"` + Address string `yaml:"address"` + Commands []Command `yaml:"commands"` + ServerVersion string `yaml:"serverVersion"` + ServerName string `yaml:"serverName"` + DeadlineTimeoutSeconds int `yaml:"deadlineTimeoutSeconds"` + PasswordRegex string `yaml:"passwordRegex"` +} + +type Command struct { + Regex string `yaml:"regex"` + Handler string `yaml:"handler"` + Headers []string `yaml:"headers"` + StatusCode int `yaml:"statusCode"` +} + +type configurationsParser struct { + configurationsCorePath string + configurationsServicesDirectory string + readFileBytes ReadFileBytes + readDir ReadDir +} + +type ReadFileBytes func(filePath string) ([]byte, error) + +type ReadDir func(dirName string) ([]string, error) + +// Init Parser, return a configurationsParser and use the DI Pattern to inject the dependencies +func Init(configurationsCorePath, configurationsServicesDirectory string) *configurationsParser { + return &configurationsParser{ + configurationsCorePath: configurationsCorePath, + configurationsServicesDirectory: configurationsServicesDirectory, + readFileBytes: readFileBytes, + readDir: readDir, + } +} + +func (bp configurationsParser) ReadConfigurationsCore() (*BeelzebubCoreConfigurations, error) { + buf, err := bp.readFileBytes(bp.configurationsCorePath) + if err != nil { + return nil, fmt.Errorf("in file %s: %v", bp.configurationsCorePath, err) + } + + beelzebubConfiguration := &BeelzebubCoreConfigurations{} + err = yaml.Unmarshal(buf, beelzebubConfiguration) + if err != nil { + return nil, fmt.Errorf("in file %s: %v", bp.configurationsCorePath, err) + } + + return beelzebubConfiguration, nil +} + +func (bp configurationsParser) ReadConfigurationsServices() ([]BeelzebubServiceConfiguration, error) { + services, err := bp.readDir(bp.configurationsServicesDirectory) + if err != nil { + return nil, fmt.Errorf("in directory %s: %v", bp.configurationsServicesDirectory, err) + } + + var servicesConfiguration []BeelzebubServiceConfiguration + for _, servicesName := range services { + filePath := filepath.Join(bp.configurationsServicesDirectory, servicesName) + buf, err := bp.readFileBytes(filePath) + if err != nil { + return nil, fmt.Errorf("in file %s: %v", filePath, err) + } + beelzebubServiceConfiguration := &BeelzebubServiceConfiguration{} + err = yaml.Unmarshal(buf, beelzebubServiceConfiguration) + if err != nil { + return nil, fmt.Errorf("in file %s: %v", filePath, err) + } + log.Debug(beelzebubServiceConfiguration) + servicesConfiguration = append(servicesConfiguration, *beelzebubServiceConfiguration) + } + + return servicesConfiguration, nil +} + +func readDir(dirName string) ([]string, error) { + var filesName []string + files, err := ioutil.ReadDir(dirName) + if err != nil { + return nil, err + } + + for _, file := range files { + filesName = append(filesName, file.Name()) + } + return filesName, nil +} + +func readFileBytes(filePath string) ([]byte, error) { + return os.ReadFile(filePath) +} diff --git a/parser/configurationsParser_test.go b/parser/configurationsParser_test.go new file mode 100644 index 0000000..fd71227 --- /dev/null +++ b/parser/configurationsParser_test.go @@ -0,0 +1,113 @@ +package parser + +import ( + "errors" + "github.com/stretchr/testify/assert" + "testing" +) + +func mockReadfilebytesConfigurationsCore(filePath string) ([]byte, error) { + configurationsCoreBytes := []byte(` +core: + logging: + debug: false + debugReportCaller: false + logDisableTimestamp: true + logsPath: ./logs`) + return configurationsCoreBytes, nil +} + +func mockReadfilebytesFormatError(filePath string) ([]byte, error) { + configurationsCoreBytes := []byte(`{{}`) + return configurationsCoreBytes, nil +} + +func mockReadfilebytesError(filePath string) ([]byte, error) { + return nil, errors.New("mockErrorReadFileBytes") +} + +func mockReadDirError(dirPath string) ([]string, error) { + return nil, errors.New("mockErrorReadFileBytes") +} + +func mockReadDirValid(dirPath string) ([]string, error) { + return []string{""}, nil +} + +func mockReadfilebytesBeelzebubServiceConfiguration(filePath string) ([]byte, error) { + beelzebubServiceConfiguration := []byte(` +apiVersion: "v1" +protocol: "http" +address: ":8080" +commands: + - regex: "wp-admin" + handler: "login" + headers: + - "Content-Type: text/html"`) + return beelzebubServiceConfiguration, nil +} + +func TestReadConfigurationsCoreError(t *testing.T) { + configurationsParser := Init("mockConfigurationsCorePath", "mockConfigurationsServicesDirectory") + + configurationsParser.readFileBytes = mockReadfilebytesError + beelzebubCoreConfigurations, err := configurationsParser.ReadConfigurationsCore() + + assert.Nil(t, beelzebubCoreConfigurations) + assert.Error(t, err) + assert.Equal(t, "in file mockConfigurationsCorePath: mockErrorReadFileBytes", err.Error()) + + configurationsParser.readFileBytes = mockReadfilebytesFormatError + + beelzebubCoreConfigurations, err = configurationsParser.ReadConfigurationsCore() + assert.Nil(t, beelzebubCoreConfigurations) + assert.Error(t, err) + assert.Equal(t, "in file mockConfigurationsCorePath: yaml: line 1: did not find expected ',' or '}'", err.Error()) +} + +func TestReadConfigurationsCoreValid(t *testing.T) { + configurationsParser := Init("", "") + configurationsParser.readFileBytes = mockReadfilebytesConfigurationsCore + + coreConfigurations, err := configurationsParser.ReadConfigurationsCore() + assert.Nil(t, err) + assert.NotNil(t, coreConfigurations.Core) + assert.NotNil(t, coreConfigurations.Core.Logging) + assert.Equal(t, coreConfigurations.Core.Logging.Debug, false) + assert.Equal(t, coreConfigurations.Core.Logging.LogDisableTimestamp, true) + assert.Equal(t, coreConfigurations.Core.Logging.DebugReportCaller, false) + assert.Equal(t, coreConfigurations.Core.Logging.LogsPath, "./logs") +} + +func TestReadConfigurationsServicesFail(t *testing.T) { + configurationsParser := Init("", "") + + configurationsParser.readFileBytes = mockReadfilebytesError + configurationsParser.readDir = mockReadDirError + + beelzebubServiceConfiguration, err := configurationsParser.ReadConfigurationsServices() + assert.Nil(t, beelzebubServiceConfiguration) + assert.Error(t, err) +} + +func TestReadConfigurationsServicesValid(t *testing.T) { + configurationsParser := Init("", "") + + configurationsParser.readFileBytes = mockReadfilebytesBeelzebubServiceConfiguration + configurationsParser.readDir = mockReadDirValid + + beelzebubServicesConfiguration, err := configurationsParser.ReadConfigurationsServices() + + firstBeelzebubServiceConfiguration := beelzebubServicesConfiguration[0] + + assert.Nil(t, err) + assert.Equal(t, firstBeelzebubServiceConfiguration.Protocol, "http") + assert.Equal(t, firstBeelzebubServiceConfiguration.ApiVersion, "v1") + assert.Equal(t, firstBeelzebubServiceConfiguration.Address, ":8080") + assert.Equal(t, len(firstBeelzebubServiceConfiguration.Commands), 1) + assert.Equal(t, len(firstBeelzebubServiceConfiguration.Commands), 1) + assert.Equal(t, firstBeelzebubServiceConfiguration.Commands[0].Regex, "wp-admin") + assert.Equal(t, firstBeelzebubServiceConfiguration.Commands[0].Handler, "login") + assert.Equal(t, len(firstBeelzebubServiceConfiguration.Commands[0].Headers), 1) + assert.Equal(t, firstBeelzebubServiceConfiguration.Commands[0].Headers[0], "Content-Type: text/html") +} diff --git a/protocols/hypertextTransferProtocolStrategy.go b/protocols/hypertextTransferProtocolStrategy.go new file mode 100644 index 0000000..a5fca0e --- /dev/null +++ b/protocols/hypertextTransferProtocolStrategy.go @@ -0,0 +1,90 @@ +package protocols + +import ( + "beelzebub/parser" + "fmt" + log "github.com/sirupsen/logrus" + "io" + "net/http" + "regexp" + "strings" +) + +type HypertextTransferProtocolStrategy struct { + serverMux *http.ServeMux + beelzebubServiceConfiguration parser.BeelzebubServiceConfiguration +} + +func (httpStrategy HypertextTransferProtocolStrategy) Init(beelzebubServiceConfiguration parser.BeelzebubServiceConfiguration) error { + httpStrategy.beelzebubServiceConfiguration = beelzebubServiceConfiguration + httpStrategy.serverMux = http.NewServeMux() + + httpStrategy.buildHandler() + + go func() { + httpStrategy.listenAndServe() + }() + + log.WithFields(log.Fields{ + "port": beelzebubServiceConfiguration.Address, + "commands": len(beelzebubServiceConfiguration.Commands), + }).Infof("Init service %s", beelzebubServiceConfiguration.Protocol) + return nil +} + +func (httpStrategy HypertextTransferProtocolStrategy) listenAndServe() { + err := http.ListenAndServe(httpStrategy.beelzebubServiceConfiguration.Address, httpStrategy.serverMux) + if err != nil { + log.Errorf("Error during init HTTP Protocol: %s", err.Error()) + return + } +} + +func (httpStrategy HypertextTransferProtocolStrategy) buildHandler() { + httpStrategy.serverMux.HandleFunc("/", func(responseWriter http.ResponseWriter, request *http.Request) { + traceRequest(request) + for _, command := range httpStrategy.beelzebubServiceConfiguration.Commands { + matched, err := regexp.MatchString(command.Regex, request.RequestURI) + if err != nil { + log.Errorf("Error regex: %s, %s", command.Regex, err.Error()) + continue + } + + if matched { + setResponseHeaders(responseWriter, command.Headers, command.StatusCode) + fmt.Fprintf(responseWriter, command.Handler) + break + } + } + }) +} + +func traceRequest(request *http.Request) { + bodyBytes, err := io.ReadAll(request.Body) + body := "" + if err == nil { + body = string(bodyBytes) + } + log.WithFields(log.Fields{ + "requestURI": request.RequestURI, + "proto": request.Proto, + "method": request.Method, + "body": body, + "host": request.Host, + "userAgent": request.UserAgent(), + "cookies": request.Cookies(), + "ip": request.RemoteAddr, + "headers": request.Header, + "remoteAddr": request.RemoteAddr, + }).Info("New HTTP request") +} + +func setResponseHeaders(responseWriter http.ResponseWriter, headers []string, statusCode int) { + responseWriter.WriteHeader(statusCode) + for _, headerStr := range headers { + keyValue := strings.Split(headerStr, ":") + if len(keyValue) > 1 { + responseWriter.Header().Add(keyValue[0], keyValue[1]) + } + } +} diff --git a/protocols/protocolManager.go b/protocols/protocolManager.go new file mode 100644 index 0000000..51e2105 --- /dev/null +++ b/protocols/protocolManager.go @@ -0,0 +1,19 @@ +package protocols + +import "beelzebub/parser" + +type ProtocolManager struct { + strategy ServiceStrategy +} + +func (pm *ProtocolManager) InitServiceManager() *ProtocolManager { + return &ProtocolManager{} +} + +func (pm *ProtocolManager) SetProtocolStrategy(strategy ServiceStrategy) { + pm.strategy = strategy +} + +func (pm *ProtocolManager) InitService(beelzebubServiceConfiguration parser.BeelzebubServiceConfiguration) error { + return pm.strategy.Init(beelzebubServiceConfiguration) +} diff --git a/protocols/protocolStrategy.go b/protocols/protocolStrategy.go new file mode 100644 index 0000000..55fd83b --- /dev/null +++ b/protocols/protocolStrategy.go @@ -0,0 +1,7 @@ +package protocols + +import "beelzebub/parser" + +type ServiceStrategy interface { + Init(beelzebubServiceConfiguration parser.BeelzebubServiceConfiguration) error +} diff --git a/protocols/secureShellStrategy.go b/protocols/secureShellStrategy.go new file mode 100644 index 0000000..1540ef9 --- /dev/null +++ b/protocols/secureShellStrategy.go @@ -0,0 +1,113 @@ +package protocols + +import ( + "beelzebub/parser" + "fmt" + "github.com/gliderlabs/ssh" + "github.com/google/uuid" + log "github.com/sirupsen/logrus" + "golang.org/x/crypto/ssh/terminal" + "regexp" + "time" +) + +type SecureShellStrategy struct { +} + +func (SSHStrategy *SecureShellStrategy) Init(beelzebubServiceConfiguration parser.BeelzebubServiceConfiguration) error { + go func() { + server := &ssh.Server{ + Addr: beelzebubServiceConfiguration.Address, + MaxTimeout: time.Duration(beelzebubServiceConfiguration.DeadlineTimeoutSeconds) * time.Second, + IdleTimeout: time.Duration(beelzebubServiceConfiguration.DeadlineTimeoutSeconds) * time.Second, + Version: beelzebubServiceConfiguration.ServerVersion, + Handler: func(sess ssh.Session) { + uuidSession := uuid.New() + traceSessionStart(sess, uuidSession) + term := terminal.NewTerminal(sess, buildPrompt(sess.User(), beelzebubServiceConfiguration.ServerName)) + for { + commandInput, err := term.ReadLine() + if err != nil { + break + } + traceCommand(commandInput, uuidSession) + if commandInput == "exit" { + break + } + for _, command := range beelzebubServiceConfiguration.Commands { + matched, err := regexp.MatchString(command.Regex, commandInput) + if err != nil { + log.Errorf("Error regex: %s, %s", command.Regex, err.Error()) + continue + } + + if matched { + term.Write(append([]byte(command.Handler), '\n')) + break + } + } + } + traceSessionEnd(sess, uuidSession) + }, + PasswordHandler: func(ctx ssh.Context, password string) bool { + traceAttempt(ctx, password) + matched, err := regexp.MatchString(beelzebubServiceConfiguration.PasswordRegex, password) + if err != nil { + log.Errorf("Error regex: %s, %s", beelzebubServiceConfiguration.PasswordRegex, err.Error()) + return false + } + return matched + }, + } + err := server.ListenAndServe() + if err != nil { + log.Errorf("Error during init SSH Protocol: %s", err.Error()) + } + }() + + log.WithFields(log.Fields{ + "port": beelzebubServiceConfiguration.Address, + "commands": len(beelzebubServiceConfiguration.Commands), + }).Infof("Init service %s", beelzebubServiceConfiguration.Protocol) + return nil +} + +func buildPrompt(user string, serverName string) string { + return fmt.Sprintf("%s@%s:~$ ", user, serverName) +} + +func traceAttempt(ctx ssh.Context, password string) { + log.WithFields(log.Fields{ + "remoteAddr": ctx.RemoteAddr(), + "user": ctx.User(), + "password": password, + "client": ctx.ClientVersion(), + }).Info("New SSH attempt") +} + +func traceSessionStart(sess ssh.Session, uuidSession uuid.UUID) { + log.WithFields(log.Fields{ + "uuidSession": uuidSession, + "remoteAddr": sess.RemoteAddr(), + "command": sess.Command(), + "environ": sess.Environ(), + "user": sess.User(), + }).Info("New SSH Session") +} + +func traceSessionEnd(sess ssh.Session, uuidSession uuid.UUID) { + log.WithFields(log.Fields{ + "uuidSession": uuidSession, + "remoteAddr": sess.RemoteAddr(), + "command": sess.Command(), + "environ": sess.Environ(), + "user": sess.User(), + }).Info("End SSH Session") +} + +func traceCommand(command string, uuidSession uuid.UUID) { + log.WithFields(log.Fields{ + "uuidSession": uuidSession, + "command": command, + }).Info("New SSH Command") +}