WIP JSONRPC2 implementation
This commit is contained in:
Brendan LE GLAUNEC
committed by
Brendan Le Glaunec
Brendan Le Glaunec
parent
5a8417cf18
commit
6ea4f6e123
@@ -0,0 +1,110 @@
|
||||
// Licensed under the Apache License, Version 2.0 (the "License");
|
||||
// you may not use this file except in compliance with the License.
|
||||
// You may obtain a copy of the License at
|
||||
//
|
||||
// http://www.apache.org/licenses/LICENSE-2.0
|
||||
//
|
||||
// Unless required by applicable law or agreed to in writing, software
|
||||
// distributed under the License is distributed on an "AS IS" BASIS,
|
||||
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
// See the License for the specific language governing permissions and
|
||||
// limitations under the License.
|
||||
|
||||
package service
|
||||
|
||||
import (
|
||||
"encoding/json"
|
||||
"fmt"
|
||||
|
||||
"github.com/EtixLabs/cameradar"
|
||||
"github.com/EtixLabs/cameradar/server/adaptor/jsonrpc2"
|
||||
v "gopkg.in/go-playground/validator.v9"
|
||||
)
|
||||
|
||||
func (c *Cameradar) handleRequest(message string) {
|
||||
var ret []cmrdr.Stream
|
||||
var JSONRPCErr jsonrpc2.Error
|
||||
|
||||
var request jsonrpc2.Request
|
||||
err := json.Unmarshal([]byte(message), &request)
|
||||
if err != nil {
|
||||
JSONRPCErr = jsonrpc2.Error{
|
||||
Code: jsonrpc2.ParseError,
|
||||
Message: jsonrpc2.ParseErrorMessage,
|
||||
Data: err.Error(),
|
||||
}
|
||||
}
|
||||
|
||||
validate := v.New()
|
||||
err = validate.Struct(request)
|
||||
if err != nil {
|
||||
JSONRPCErr = jsonrpc2.Error{
|
||||
Code: jsonrpc2.InvalidRequest,
|
||||
Message: jsonrpc2.InvalidRequestMessage,
|
||||
Data: err.Error(),
|
||||
}
|
||||
}
|
||||
|
||||
var options Options
|
||||
err = json.Unmarshal([]byte(request.Params), &options)
|
||||
if err != nil {
|
||||
JSONRPCErr = jsonrpc2.Error{
|
||||
Code: jsonrpc2.InvalidParams,
|
||||
Message: jsonrpc2.InvalidParamsMessage,
|
||||
Data: err.Error(),
|
||||
}
|
||||
}
|
||||
|
||||
c.SetOptions(options)
|
||||
|
||||
switch request.Method {
|
||||
case "discover":
|
||||
ret, err = c.Discover()
|
||||
case "attack_credentials":
|
||||
ret, err = c.Discover()
|
||||
case "attack_routes":
|
||||
ret, err = c.Discover()
|
||||
case "discover_and_attack":
|
||||
ret, err = c.DiscoverAndAttack()
|
||||
default:
|
||||
JSONRPCErr = jsonrpc2.Error{
|
||||
Code: jsonrpc2.MethodNotFound,
|
||||
Message: jsonrpc2.MethodNotFoundMessage,
|
||||
Data: err.Error(),
|
||||
}
|
||||
}
|
||||
if err != nil {
|
||||
JSONRPCErr = jsonrpc2.Error{
|
||||
Code: jsonrpc2.InternalError,
|
||||
Message: jsonrpc2.InternalErrorMessage,
|
||||
Data: err.Error(),
|
||||
}
|
||||
}
|
||||
|
||||
result, err := json.Marshal(ret)
|
||||
if err != nil {
|
||||
JSONRPCErr = jsonrpc2.Error{
|
||||
Code: jsonrpc2.InternalError,
|
||||
Message: jsonrpc2.InternalErrorMessage,
|
||||
Data: err.Error(),
|
||||
}
|
||||
}
|
||||
c.respondToClient(string(result), request.ID, JSONRPCErr)
|
||||
}
|
||||
|
||||
func (c *Cameradar) respondToClient(result, ID string, JSONRPCErr jsonrpc2.Error) {
|
||||
println(result)
|
||||
r := jsonrpc2.Response{
|
||||
JSONRPC: "2.0",
|
||||
Result: result,
|
||||
Error: JSONRPCErr,
|
||||
ID: ID,
|
||||
}
|
||||
|
||||
response, err := json.Marshal(r)
|
||||
if err != nil {
|
||||
c.toClient <- "{\"jsonrpc\": \"2.0\",\"result\":null,\"error\":{\"code\":" + fmt.Sprint(jsonrpc2.InternalError) + ",\"" + jsonrpc2.InternalErrorMessage + "\",\"data\":\"could not marshal response\"},\"id\":\"" + ID + "\"}"
|
||||
}
|
||||
|
||||
c.toClient <- string(response)
|
||||
}
|
||||
+37
-31
@@ -13,7 +13,6 @@
|
||||
package service
|
||||
|
||||
import (
|
||||
"encoding/json"
|
||||
"fmt"
|
||||
"time"
|
||||
|
||||
@@ -31,12 +30,6 @@ type Cameradar struct {
|
||||
fromClient <-chan string
|
||||
}
|
||||
|
||||
type request struct {
|
||||
Method string
|
||||
Target string
|
||||
Ports string
|
||||
}
|
||||
|
||||
// Options contains all options needed to launch a complete cameradar scan
|
||||
type Options struct {
|
||||
Target string
|
||||
@@ -84,56 +77,69 @@ func (c *Cameradar) Run() {
|
||||
for {
|
||||
msg, ok := <-c.fromClient
|
||||
if !ok {
|
||||
println("disconnected")
|
||||
println("client disconnected")
|
||||
return
|
||||
}
|
||||
go c.handleRequest(msg)
|
||||
}
|
||||
}
|
||||
|
||||
var req request
|
||||
err := json.Unmarshal([]byte(msg), &req)
|
||||
if err != nil {
|
||||
c.toClient <- "invalid request: " + err.Error()
|
||||
continue
|
||||
}
|
||||
|
||||
switch req.Method {
|
||||
case "discover":
|
||||
c.toClient <- "<discover results>"
|
||||
case "attack":
|
||||
c.toClient <- "<attack results>"
|
||||
default:
|
||||
c.toClient <- "invalid method: " + req.Method
|
||||
// DiscoverAndAttack launches a Cameradar scan followed by all necessary
|
||||
// attacks to access the cameras
|
||||
func (c *Cameradar) DiscoverAndAttack() ([]cmrdr.Stream, error) {
|
||||
streams, err := c.Discover()
|
||||
if err != nil {
|
||||
return streams, err
|
||||
}
|
||||
streams, err = c.AttackRoute()
|
||||
if err != nil {
|
||||
return streams, err
|
||||
}
|
||||
streams, err = c.AttackCredentials()
|
||||
if err != nil {
|
||||
return streams, err
|
||||
}
|
||||
for _, stream := range streams {
|
||||
if stream.RouteFound == false {
|
||||
return c.AttackCredentials()
|
||||
}
|
||||
}
|
||||
return streams, nil
|
||||
}
|
||||
|
||||
// Discover launches a Cameradar scan using the service's options
|
||||
func (c *Cameradar) Discover() error {
|
||||
func (c *Cameradar) Discover() ([]cmrdr.Stream, error) {
|
||||
streams, err := cmrdr.Discover(c.options.Target, c.options.Ports, c.options.OutputFile, c.options.Speed, true)
|
||||
if err != nil {
|
||||
return errors.Wrap(err, "could not discover streams")
|
||||
return streams, errors.Wrap(err, "could not discover streams")
|
||||
}
|
||||
c.Streams = streams
|
||||
return nil
|
||||
return streams, nil
|
||||
}
|
||||
|
||||
// AttackRoute launches a Cameradar route attack using the service's options
|
||||
func (c *Cameradar) AttackRoute() error {
|
||||
func (c *Cameradar) AttackRoute() ([]cmrdr.Stream, error) {
|
||||
streams, err := cmrdr.AttackRoute(c.Streams, c.options.Routes, c.options.Timeout, true)
|
||||
if err != nil {
|
||||
return errors.Wrap(err, "could not discover streams")
|
||||
return streams, errors.Wrap(err, "could not discover streams")
|
||||
}
|
||||
c.Streams = streams
|
||||
return nil
|
||||
return streams, nil
|
||||
}
|
||||
|
||||
// AttackCredentials launches a Cameradar credential attack using the service's options
|
||||
func (c *Cameradar) AttackCredentials() error {
|
||||
func (c *Cameradar) AttackCredentials() ([]cmrdr.Stream, error) {
|
||||
streams, err := cmrdr.AttackCredentials(c.Streams, c.options.Credentials, c.options.Timeout, true)
|
||||
if err != nil {
|
||||
return errors.Wrap(err, "could not discover streams")
|
||||
return streams, errors.Wrap(err, "could not discover streams")
|
||||
}
|
||||
c.Streams = streams
|
||||
return nil
|
||||
return streams, nil
|
||||
}
|
||||
|
||||
// SetOptions sets all options using an option structure
|
||||
func (c *Cameradar) SetOptions(options Options) {
|
||||
c.options = &options
|
||||
}
|
||||
|
||||
// SetNmapOutputFile sets the OutputFile option
|
||||
|
||||
Reference in New Issue
Block a user