2018-01-06 15:30:56 +00:00
|
|
|
package main
|
|
|
|
|
|
|
|
import (
|
2018-01-13 06:24:40 +00:00
|
|
|
"flag"
|
2018-01-06 15:30:56 +00:00
|
|
|
"fmt"
|
2018-01-18 05:27:00 +00:00
|
|
|
"io/ioutil"
|
2018-01-06 15:30:56 +00:00
|
|
|
"log"
|
2018-01-18 00:39:01 +00:00
|
|
|
"os/exec"
|
|
|
|
"os/user"
|
|
|
|
"strings"
|
|
|
|
"syscall"
|
2018-01-08 06:05:14 +00:00
|
|
|
"time"
|
2018-01-09 02:27:01 +00:00
|
|
|
|
2018-01-06 23:58:30 +00:00
|
|
|
hkex "blitter.com/herradurakex"
|
2018-01-06 15:30:56 +00:00
|
|
|
)
|
|
|
|
|
2018-01-18 00:39:01 +00:00
|
|
|
const (
|
|
|
|
OpR = 'r' // read(file) (binary mode)
|
|
|
|
OpW = 'w' // (over)write
|
|
|
|
OpA = 'a' // append
|
|
|
|
OpRm = 'd' // rm
|
|
|
|
OpRmD = 'D' // rmdir (rm -rf)
|
|
|
|
OpM = 'm' // mkdir (-p)
|
|
|
|
OpN = 'n' // re(n)ame (mv)
|
|
|
|
OpCm = 'c' // chmod
|
|
|
|
OpCo = 'C' // chown
|
|
|
|
OpX = 'x' // exec
|
|
|
|
)
|
|
|
|
|
|
|
|
type Op uint8
|
|
|
|
|
|
|
|
type cmdRunner struct {
|
2018-01-18 04:36:53 +00:00
|
|
|
op Op
|
|
|
|
who string
|
|
|
|
arg string
|
|
|
|
authCookie string
|
|
|
|
status int
|
2018-01-18 00:39:01 +00:00
|
|
|
}
|
|
|
|
|
2018-01-18 05:27:00 +00:00
|
|
|
/*
|
|
|
|
func cmd(r *cmdRunner) {
|
2018-01-18 00:39:01 +00:00
|
|
|
switch r.op {
|
|
|
|
case OpR:
|
|
|
|
//Clean up r.cmd beforehand
|
|
|
|
r.arg = strings.TrimSpace(r.arg)
|
|
|
|
fmt.Printf("[cmd was:'%s']\n", r.arg)
|
2018-01-18 05:27:00 +00:00
|
|
|
runCmdAs(r.who, r.arg, nil)
|
2018-01-18 00:39:01 +00:00
|
|
|
fmt.Println(r.arg)
|
|
|
|
break
|
|
|
|
default:
|
|
|
|
fmt.Printf("[cmd %d ignored:%d]\n", int(r.op))
|
|
|
|
break
|
|
|
|
}
|
|
|
|
}
|
2018-01-18 05:27:00 +00:00
|
|
|
*/
|
2018-01-18 00:39:01 +00:00
|
|
|
|
|
|
|
// Run a command (via os.exec) as a specific user
|
2018-01-18 05:27:00 +00:00
|
|
|
func runCmdAs(who string, cmd string, conn hkex.Conn) (err error) {
|
2018-01-18 00:39:01 +00:00
|
|
|
u, _ := user.Lookup(who)
|
|
|
|
var uid, gid uint32
|
|
|
|
fmt.Sscanf(u.Uid, "%d", &uid)
|
|
|
|
fmt.Sscanf(u.Gid, "%d", &gid)
|
2018-01-18 05:27:00 +00:00
|
|
|
fmt.Println("uid:", uid, "gid:", gid)
|
2018-01-18 00:39:01 +00:00
|
|
|
|
|
|
|
args := strings.Split(cmd, " ")
|
|
|
|
arg0 := args[0]
|
|
|
|
args = args[1:]
|
|
|
|
c := exec.Command(arg0, args...)
|
|
|
|
c.SysProcAttr = &syscall.SysProcAttr{}
|
|
|
|
c.SysProcAttr.Credential = &syscall.Credential{Uid: uid, Gid: gid}
|
2018-01-18 05:27:00 +00:00
|
|
|
c.Stdin = conn
|
|
|
|
c.Stdout = conn
|
|
|
|
c.Stderr = conn
|
|
|
|
|
2018-01-18 00:39:01 +00:00
|
|
|
err = c.Run()
|
|
|
|
if err != nil {
|
|
|
|
log.Printf("Command finished with error: %v", err)
|
|
|
|
log.Printf("[%s]\n", cmd)
|
|
|
|
}
|
|
|
|
return
|
|
|
|
}
|
|
|
|
|
2018-01-09 03:16:55 +00:00
|
|
|
// Demo of a simple server that listens and spawns goroutines for each
|
|
|
|
// connecting client. Note this code is identical to standard tcp
|
|
|
|
// server code, save for declaring 'hkex' rather than 'net'
|
|
|
|
// Listener and Conns. The KEx and encrypt/decrypt is done within the type.
|
|
|
|
// Compare to 'serverp.go' in this directory to see the equivalence.
|
2018-01-06 15:30:56 +00:00
|
|
|
func main() {
|
2018-01-13 06:24:40 +00:00
|
|
|
var laddr string
|
|
|
|
|
|
|
|
flag.StringVar(&laddr, "l", ":2000", "interface[:port] to listen")
|
|
|
|
flag.Parse()
|
|
|
|
|
2018-01-18 05:27:00 +00:00
|
|
|
log.SetOutput(ioutil.Discard)
|
|
|
|
|
2018-01-06 15:30:56 +00:00
|
|
|
// Listen on TCP port 2000 on all available unicast and
|
|
|
|
// anycast IP addresses of the local system.
|
2018-01-13 06:24:40 +00:00
|
|
|
l, err := hkex.Listen("tcp", laddr)
|
2018-01-06 15:30:56 +00:00
|
|
|
if err != nil {
|
|
|
|
log.Fatal(err)
|
|
|
|
}
|
|
|
|
defer l.Close()
|
|
|
|
|
2018-01-13 06:24:40 +00:00
|
|
|
fmt.Println("Serving on", laddr)
|
2018-01-06 15:30:56 +00:00
|
|
|
for {
|
|
|
|
// Wait for a connection.
|
|
|
|
conn, err := l.Accept()
|
|
|
|
if err != nil {
|
|
|
|
log.Fatal(err)
|
|
|
|
}
|
|
|
|
fmt.Println("Accepted client")
|
|
|
|
|
|
|
|
// Handle the connection in a new goroutine.
|
|
|
|
// The loop then returns to accepting, so that
|
|
|
|
// multiple connections may be served concurrently.
|
2018-01-09 02:27:01 +00:00
|
|
|
go func(c hkex.Conn) (e error) {
|
2018-01-18 00:39:01 +00:00
|
|
|
defer c.Close()
|
2018-01-08 06:05:14 +00:00
|
|
|
ch := make(chan []byte)
|
|
|
|
chN := 0
|
|
|
|
eCh := make(chan error)
|
|
|
|
|
|
|
|
// Start a goroutine to read from our net connection
|
|
|
|
go func(ch chan []byte, eCh chan error) {
|
|
|
|
for {
|
|
|
|
// try to read the data
|
2018-01-11 17:13:18 +00:00
|
|
|
data := make([]byte, 512)
|
2018-01-08 06:05:14 +00:00
|
|
|
chN, err = c.Read(data)
|
|
|
|
if err != nil {
|
|
|
|
// send an error if it's encountered
|
|
|
|
eCh <- err
|
|
|
|
return
|
|
|
|
}
|
|
|
|
// send data if we read some.
|
|
|
|
ch <- data[0:chN]
|
|
|
|
}
|
|
|
|
}(ch, eCh)
|
|
|
|
|
2018-01-13 18:01:27 +00:00
|
|
|
ticker := time.Tick(time.Second / 100)
|
2018-01-18 04:36:53 +00:00
|
|
|
//var r cmdRunner
|
2018-01-18 00:39:01 +00:00
|
|
|
var connOp *byte = nil
|
2018-01-08 06:05:14 +00:00
|
|
|
Term:
|
|
|
|
// continuously read from the connection
|
|
|
|
for {
|
|
|
|
select {
|
|
|
|
// This case means we recieved data on the connection
|
|
|
|
case data := <-ch:
|
|
|
|
// Do something with the data
|
|
|
|
fmt.Printf("Client sent %+v\n", data[0:chN])
|
2018-01-18 00:39:01 +00:00
|
|
|
if connOp == nil {
|
|
|
|
// Initial xmit - get op byte
|
|
|
|
// (TODO: determine valid ops
|
|
|
|
// for now 'e' (echo), 'i' (interactive), 'x' (exec), ... ?)
|
|
|
|
connOp = new(byte)
|
|
|
|
*connOp = data[0]
|
|
|
|
data = data[1:chN]
|
|
|
|
chN -= 1
|
2018-01-18 00:55:10 +00:00
|
|
|
// Have op here and first block of data[]
|
|
|
|
|
2018-01-18 00:39:01 +00:00
|
|
|
fmt.Printf("[* connOp '%c']\n", *connOp)
|
|
|
|
// The CloseHandler typically handles the
|
|
|
|
// accumulated command data
|
2018-01-18 04:36:53 +00:00
|
|
|
//r = cmdRunner{op: Op(*connOp),
|
|
|
|
// who: "larissa", arg: string(data),
|
|
|
|
// authCookie: "c00ki3",
|
|
|
|
// status: 0}
|
|
|
|
}
|
2018-01-18 05:27:00 +00:00
|
|
|
|
2018-01-18 04:36:53 +00:00
|
|
|
// From here, one could pass all subsequent data
|
|
|
|
// between client/server attached to an exec.Cmd,
|
|
|
|
// as data to/from a file, etc.
|
2018-01-18 05:27:00 +00:00
|
|
|
if *connOp == 's' {
|
|
|
|
fmt.Println("[Running shell]")
|
|
|
|
runCmdAs("larissa", "bash -l -i", conn)
|
|
|
|
// Returned hopefully via an EOF or exit/logout;
|
|
|
|
// Clear current op so user can enter next, or EOF
|
|
|
|
connOp = nil
|
|
|
|
fmt.Println("[Exiting shell]")
|
|
|
|
}
|
2018-01-18 04:36:53 +00:00
|
|
|
if strings.Trim(string(data), "\r\n") == "exit" {
|
|
|
|
conn.Close()
|
2018-01-18 00:39:01 +00:00
|
|
|
}
|
|
|
|
|
2018-01-08 06:05:14 +00:00
|
|
|
//fmt.Printf("Client sent %s\n", string(data))
|
|
|
|
// This case means we got an error and the goroutine has finished
|
|
|
|
case err := <-eCh:
|
|
|
|
// handle our error then exit for loop
|
|
|
|
if err.Error() == "EOF" {
|
|
|
|
fmt.Printf("[Client disconnected]\n")
|
|
|
|
} else {
|
|
|
|
fmt.Printf("Error reading client data! (%+v)\n", err)
|
|
|
|
}
|
|
|
|
break Term
|
|
|
|
// This will timeout on the read.
|
|
|
|
case <-ticker:
|
|
|
|
// do nothing? this is just so we can time out if we need to.
|
|
|
|
// you probably don't even need to have this here unless you want
|
|
|
|
// do something specifically on the timeout.
|
|
|
|
}
|
|
|
|
}
|
2018-01-06 15:30:56 +00:00
|
|
|
// Shut down the connection.
|
2018-01-18 00:39:01 +00:00
|
|
|
//c.Close()
|
2018-01-08 06:05:14 +00:00
|
|
|
return
|
2018-01-06 15:30:56 +00:00
|
|
|
}(conn)
|
|
|
|
}
|
|
|
|
}
|