From 5028e0797fd9781b9a2538092316b3349f66c208 Mon Sep 17 00:00:00 2001 From: idan Date: Mon, 25 Oct 2021 15:33:25 +0300 Subject: [PATCH 01/20] test - commit from ide --- main.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/main.py b/main.py index 1c3070e..c02bc1b 100644 --- a/main.py +++ b/main.py @@ -47,3 +47,6 @@ scanner.scan_and_report(ec2_instance_public_ip=ec2_instance_public_ip, report_service_port=report_service_port, ec2_instance_id=ec2_instance_id, snapshot_id=snapshot_id) + +# running in terminal with: +# python3 main.py --region us-east-2 --instance-id i-0a70851a2af9eec29 --keypair idan15 --log-level INFO From ba98b807fd67a85c78a6d4eab2ab3297d71b240a Mon Sep 17 00:00:00 2001 From: idan Date: Mon, 25 Oct 2021 17:42:24 +0300 Subject: [PATCH 02/20] In progress of fixing the key pair issue (os-47). --- main.py | 7 ++++--- src/scanner.py | 10 ++++++---- 2 files changed, 10 insertions(+), 7 deletions(-) diff --git a/main.py b/main.py index c02bc1b..3732a60 100644 --- a/main.py +++ b/main.py @@ -37,11 +37,12 @@ volume_id, selected_az, snapshot_id = snapper.snapshot2volume(volume_id=source_volume_id) - scanner = Scanner(logger=logger, region=snapper.region) if cmd_args.keypair: - scanner.keypair_name = cmd_args.keypair + scanner = Scanner(logger=logger, region=snapper.region, key_pair_name=cmd_args.keypair) else: + scanner = Scanner(logger=logger, region=snapper.region, key_pair_name="red_detector_key") scanner.keypair_name = scanner.create_keypair(key_name='red_detector_key') + ec2_instance_id, ec2_instance_public_ip, report_service_port = scanner.create_ec2(selected_az=selected_az) scanner.attach_volume_to_ec2(ec2_instance_id=ec2_instance_id, volume_id=volume_id) scanner.scan_and_report(ec2_instance_public_ip=ec2_instance_public_ip, @@ -49,4 +50,4 @@ snapshot_id=snapshot_id) # running in terminal with: -# python3 main.py --region us-east-2 --instance-id i-0a70851a2af9eec29 --keypair idan15 --log-level INFO +# python3 main.py --region us-east-2 --instance-id i-0a70851a2af9eec29 --keypair idan15 --log-level INFO \ No newline at end of file diff --git a/src/scanner.py b/src/scanner.py index 108831e..7bd97ed 100644 --- a/src/scanner.py +++ b/src/scanner.py @@ -12,9 +12,10 @@ class Scanner: - def __init__(self, logger, region): + def __init__(self, logger, region, key_pair_name="red_detector_key"): self.logger = logger self.region = region + self.key_pair_name = key_pair_name self.client = boto3.client('ec2', region_name=region) self.ec2 = boto3.resource('ec2', region_name=region) self.keypair_name = None @@ -31,7 +32,7 @@ def create_keypair(self, key_name='red_detector_key'): self.logger.error(f"create key pair: {err}") exit(99) self.logger.info(f'creating key pair: "red_detector_key"') - with open('red_detector_key.pem', 'w') as f: + with open('red_detector_key.pem', 'w') as f: # NEED TO OPEN A LOCAL FILE FOR "OLD" KEY PAIR TOO. f.write(new_keypair.key_material) return key_name @@ -137,7 +138,7 @@ def create_ec2(self, selected_az): MinCount=1, MaxCount=1, InstanceType='t2.large', - KeyName=self.keypair_name, + KeyName=self.key_pair_name, UserData=user_data, SecurityGroupIds=[ security_group_id, @@ -208,7 +209,8 @@ def attach_volume_to_ec2(self, ec2_instance_id, volume_id): def scan_and_report(self, ec2_instance_public_ip, report_service_port, ec2_instance_id, snapshot_id): ssh = paramiko.SSHClient() ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy()) - privet_key = paramiko.RSAKey.from_private_key_file("red_detector_key.pem") + privet_key = paramiko.RSAKey.from_private_key_file(self.key_pair_name) # the error came from here: assuming key + # pair didn't inserted? connect = 0 while not connect: try: From 14ccd6f7cddfa9813905cdb5c252414afe4008c4 Mon Sep 17 00:00:00 2001 From: idan Date: Wed, 27 Oct 2021 16:35:38 +0300 Subject: [PATCH 03/20] fixed (os-47). --- main.py | 2 -- src/scanner.py | 4 ++-- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/main.py b/main.py index 3732a60..7891d3a 100644 --- a/main.py +++ b/main.py @@ -49,5 +49,3 @@ report_service_port=report_service_port, ec2_instance_id=ec2_instance_id, snapshot_id=snapshot_id) -# running in terminal with: -# python3 main.py --region us-east-2 --instance-id i-0a70851a2af9eec29 --keypair idan15 --log-level INFO \ No newline at end of file diff --git a/src/scanner.py b/src/scanner.py index 7bd97ed..e3d6ace 100644 --- a/src/scanner.py +++ b/src/scanner.py @@ -209,8 +209,8 @@ def attach_volume_to_ec2(self, ec2_instance_id, volume_id): def scan_and_report(self, ec2_instance_public_ip, report_service_port, ec2_instance_id, snapshot_id): ssh = paramiko.SSHClient() ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy()) - privet_key = paramiko.RSAKey.from_private_key_file(self.key_pair_name) # the error came from here: assuming key - # pair didn't inserted? + privet_key = paramiko.RSAKey.from_private_key_file(self.key_pair_name+".pem") + # the error came from the line above: assuming key pair didn't inserted? connect = 0 while not connect: try: From 9d3d43215602af112fa4df62c819d5b2e91c5f30 Mon Sep 17 00:00:00 2001 From: idan Date: Wed, 27 Oct 2021 17:32:38 +0300 Subject: [PATCH 04/20] fixed (os-47)+. --- main.py | 9 +++++---- src/scanner.py | 10 +++++----- 2 files changed, 10 insertions(+), 9 deletions(-) diff --git a/main.py b/main.py index 7891d3a..b2485c1 100644 --- a/main.py +++ b/main.py @@ -1,6 +1,6 @@ import argparse from art import text2art - +import random from src.logger import setup_logger from src.snapper import Snapper from src.scanner import Scanner @@ -40,12 +40,13 @@ if cmd_args.keypair: scanner = Scanner(logger=logger, region=snapper.region, key_pair_name=cmd_args.keypair) else: - scanner = Scanner(logger=logger, region=snapper.region, key_pair_name="red_detector_key") - scanner.keypair_name = scanner.create_keypair(key_name='red_detector_key') + rand = str(random.randrange(10000)) # need to give a not taken name when creating new key pair. + key_name = "red_detector_key{random_number}".format(random_number=rand) + scanner = Scanner(logger=logger, region=snapper.region, key_pair_name=key_name) + scanner.keypair_name = scanner.create_keypair(key_name=key_name) ec2_instance_id, ec2_instance_public_ip, report_service_port = scanner.create_ec2(selected_az=selected_az) scanner.attach_volume_to_ec2(ec2_instance_id=ec2_instance_id, volume_id=volume_id) scanner.scan_and_report(ec2_instance_public_ip=ec2_instance_public_ip, report_service_port=report_service_port, ec2_instance_id=ec2_instance_id, snapshot_id=snapshot_id) - diff --git a/src/scanner.py b/src/scanner.py index e3d6ace..72c82a2 100644 --- a/src/scanner.py +++ b/src/scanner.py @@ -12,7 +12,7 @@ class Scanner: - def __init__(self, logger, region, key_pair_name="red_detector_key"): + def __init__(self, logger, region, key_pair_name): self.logger = logger self.region = region self.key_pair_name = key_pair_name @@ -20,19 +20,19 @@ def __init__(self, logger, region, key_pair_name="red_detector_key"): self.ec2 = boto3.resource('ec2', region_name=region) self.keypair_name = None - def create_keypair(self, key_name='red_detector_key'): + def create_keypair(self, key_name): try: new_keypair = self.ec2.create_key_pair(KeyName=key_name) except ClientError as err: if err.response["Error"]["Code"] == "InvalidKeyPair.Duplicate": self.logger.warning(f"key pair: {key_name} already exists.") - val = input("use the existing keypair?[Y/N]\n") + val = input("use the existing keypair?[Y/N] (if using the same keypair- you need to provide it as local pem file in the folder.)\n") if val.lower() == "y": return key_name self.logger.error(f"create key pair: {err}") exit(99) - self.logger.info(f'creating key pair: "red_detector_key"') - with open('red_detector_key.pem', 'w') as f: # NEED TO OPEN A LOCAL FILE FOR "OLD" KEY PAIR TOO. + self.logger.info('creating key pair: {red_detector_key}'.format(red_detector_key=self.key_pair_name)) + with open(self.key_pair_name+'.pem', 'w') as f: # NEED TO OPEN A LOCAL FILE FOR "OLD" KEY PAIR TOO. f.write(new_keypair.key_material) return key_name From 106ca9dfda29d3d25146c5ba0b0ee6118c6b426e Mon Sep 17 00:00:00 2001 From: idan Date: Sun, 31 Oct 2021 18:32:20 +0200 Subject: [PATCH 05/20] fixed (os-47). --- src/scanner.py | 1 - 1 file changed, 1 deletion(-) diff --git a/src/scanner.py b/src/scanner.py index 72c82a2..3f89ce6 100644 --- a/src/scanner.py +++ b/src/scanner.py @@ -210,7 +210,6 @@ def scan_and_report(self, ec2_instance_public_ip, report_service_port, ec2_insta ssh = paramiko.SSHClient() ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy()) privet_key = paramiko.RSAKey.from_private_key_file(self.key_pair_name+".pem") - # the error came from the line above: assuming key pair didn't inserted? connect = 0 while not connect: try: From fbf62d2265aca081c42c931878c8e4e65caf5d3c Mon Sep 17 00:00:00 2001 From: idan Date: Sun, 31 Oct 2021 18:34:25 +0200 Subject: [PATCH 06/20] fixed (os-47). --- main.py | 2 +- src/scanner.py | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/main.py b/main.py index b2485c1..19d48ea 100644 --- a/main.py +++ b/main.py @@ -40,7 +40,7 @@ if cmd_args.keypair: scanner = Scanner(logger=logger, region=snapper.region, key_pair_name=cmd_args.keypair) else: - rand = str(random.randrange(10000)) # need to give a not taken name when creating new key pair. + rand = str(random.randrange(10000)) # need to give an unused name when creating new key pair. key_name = "red_detector_key{random_number}".format(random_number=rand) scanner = Scanner(logger=logger, region=snapper.region, key_pair_name=key_name) scanner.keypair_name = scanner.create_keypair(key_name=key_name) diff --git a/src/scanner.py b/src/scanner.py index 3f89ce6..7cdd184 100644 --- a/src/scanner.py +++ b/src/scanner.py @@ -26,7 +26,7 @@ def create_keypair(self, key_name): except ClientError as err: if err.response["Error"]["Code"] == "InvalidKeyPair.Duplicate": self.logger.warning(f"key pair: {key_name} already exists.") - val = input("use the existing keypair?[Y/N] (if using the same keypair- you need to provide it as local pem file in the folder.)\n") + val = input("use the existing keypair?[Y/N] \n") if val.lower() == "y": return key_name self.logger.error(f"create key pair: {err}") From f5d96b761ca38c97fb467b9c36b59008de9d8412 Mon Sep 17 00:00:00 2001 From: idan Date: Mon, 1 Nov 2021 11:16:50 +0200 Subject: [PATCH 07/20] In progress of fixing issue os-46 --- src/remote_scripts.py | 17 ++++++++--------- src/scanner.py | 4 +++- 2 files changed, 11 insertions(+), 10 deletions(-) diff --git a/src/remote_scripts.py b/src/remote_scripts.py index 2e66908..cc0f78a 100644 --- a/src/remote_scripts.py +++ b/src/remote_scripts.py @@ -1,4 +1,5 @@ script_a = '''#!/bin/bash -ex +touch /home/ubuntu/got_here1.txt exec > >(tee /var/log/user-data.log|logger -t user-data -s 2>/dev/console) 2>&1 apt-get update @@ -21,12 +22,10 @@ docker pull vuls/vuls PWD=/home/ubuntu/vuls/ -for i in `seq 2002 $(date +"%Y")`; do \ - docker run --rm -i\ - -v $PWD:/vuls \ - -v $PWD/go-cve-dictionary-log:/var/log/vuls \ - vuls/go-cve-dictionary fetchnvd -years $i; \ - done +docker run --rm -it \ + -v $PWD:/go-cve-dictionary \ + -v $PWD/go-cve-dictionary-log:/var/log/go-cve-dictionary \ + vuls/go-cve-dictionary fetch nvd docker run --rm -i \ -v $PWD:/vuls \ @@ -86,7 +85,7 @@ cat > config_scan.toml < Date: Mon, 1 Nov 2021 15:35:56 +0200 Subject: [PATCH 08/20] script_a is now running. (it used to crash) --- src/remote_scripts.py | 43 ++++++++++++++++++++----------------------- 1 file changed, 20 insertions(+), 23 deletions(-) diff --git a/src/remote_scripts.py b/src/remote_scripts.py index cc0f78a..874a1f1 100644 --- a/src/remote_scripts.py +++ b/src/remote_scripts.py @@ -13,6 +13,8 @@ tar xvf /home/ubuntu/chkrootkit.tar.gz --strip-components 1 make sense +touch /home/ubuntu/got_here15.txt + cd /home/ubuntu/vuls docker pull vuls/go-cve-dictionary docker pull vuls/goval-dictionary @@ -21,56 +23,48 @@ docker pull vuls/gost docker pull vuls/vuls +touch /home/ubuntu/got_here2.txt + PWD=/home/ubuntu/vuls/ -docker run --rm -it \ - -v $PWD:/go-cve-dictionary \ - -v $PWD/go-cve-dictionary-log:/var/log/go-cve-dictionary \ - vuls/go-cve-dictionary fetch nvd docker run --rm -i \ -v $PWD:/vuls \ - -v $PWD/goval-dictionary-log:/var/log/vuls \ - vuls/goval-dictionary fetch-redhat 5 6 7 8 + -v $PWD/go-cve-dictionary-log:/var/log/vuls \ + vuls/go-cve-dictionary fetch nvd + +touch /home/ubuntu/got_here25.txt docker run --rm -i \ -v $PWD:/vuls \ -v $PWD/goval-dictionary-log:/var/log/vuls \ - vuls/goval-dictionary fetch-debian 7 8 9 10 - -docker run --rm -i \ - -v $PWD:/vuls \ - -v $PWD/goval-dictionary-log:/var/log/vuls \ - vuls/goval-dictionary fetch-alpine 3.3 3.4 3.5 3.6 3.7 3.8 3.9 3.10 3.11 + vuls/goval-dictionary fetch redhat 5 6 7 8 docker run --rm -i \ -v $PWD:/vuls \ -v $PWD/goval-dictionary-log:/var/log/vuls \ - vuls/goval-dictionary fetch-ubuntu 14 16 18 19 20 - + vuls/goval-dictionary fetch debian 7 8 9 10 + docker run --rm -i \ -v $PWD:/vuls \ -v $PWD/goval-dictionary-log:/var/log/vuls \ - vuls/goval-dictionary fetch-suse -opensuse 13.2 + vuls/goval-dictionary fetch alpine 3.3 3.4 3.5 3.6 3.7 3.8 3.9 3.10 3.11 docker run --rm -i \ -v $PWD:/vuls \ -v $PWD/goval-dictionary-log:/var/log/vuls \ - vuls/goval-dictionary fetch-suse -suse-enterprise-server 12 + vuls/goval-dictionary fetch ubuntu 14 16 18 19 20 + docker run --rm -i \ -v $PWD:/vuls \ -v $PWD/goval-dictionary-log:/var/log/vuls \ - vuls/goval-dictionary fetch-oracle + vuls/goval-dictionary fetch oracle docker run --rm -i \ -v $PWD:/vuls \ -v $PWD/goval-dictionary-log:/var/log/vuls \ - vuls/goval-dictionary fetch-amazon + vuls/goval-dictionary fetch amazon -docker run --rm -i \ - -v $PWD:/vuls \ - -v $PWD/gost-log:/var/log/gost \ - vuls/gost fetch redhat docker run --rm -i \ -v $PWD:/vuls \ @@ -82,6 +76,9 @@ -v $PWD/go-msfdb-log:/var/log/go-msfdb \ vuls/go-msfdb fetch msfdb +touch /home/ubuntu/got_here27.txt +touch config_scan.toml + cat > config_scan.toml < Date: Mon, 1 Nov 2021 15:39:06 +0200 Subject: [PATCH 09/20] script_a is now running. (used to crash) --- src/remote_scripts.py | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/src/remote_scripts.py b/src/remote_scripts.py index 874a1f1..ab132ac 100644 --- a/src/remote_scripts.py +++ b/src/remote_scripts.py @@ -1,5 +1,5 @@ script_a = '''#!/bin/bash -ex -touch /home/ubuntu/got_here1.txt + exec > >(tee /var/log/user-data.log|logger -t user-data -s 2>/dev/console) 2>&1 apt-get update @@ -13,7 +13,7 @@ tar xvf /home/ubuntu/chkrootkit.tar.gz --strip-components 1 make sense -touch /home/ubuntu/got_here15.txt + cd /home/ubuntu/vuls docker pull vuls/go-cve-dictionary @@ -23,7 +23,7 @@ docker pull vuls/gost docker pull vuls/vuls -touch /home/ubuntu/got_here2.txt + PWD=/home/ubuntu/vuls/ @@ -32,7 +32,7 @@ -v $PWD/go-cve-dictionary-log:/var/log/vuls \ vuls/go-cve-dictionary fetch nvd -touch /home/ubuntu/got_here25.txt + docker run --rm -i \ -v $PWD:/vuls \ @@ -76,7 +76,7 @@ -v $PWD/go-msfdb-log:/var/log/go-msfdb \ vuls/go-msfdb fetch msfdb -touch /home/ubuntu/got_here27.txt + touch config_scan.toml cat > config_scan.toml < Date: Mon, 8 Nov 2021 17:15:08 +0200 Subject: [PATCH 10/20] fixed some issues --- main.py | 21 +++++++++++++++++++-- src/remote_scripts.py | 42 +++++++++++++++++++++++++++++++++--------- 2 files changed, 52 insertions(+), 11 deletions(-) diff --git a/main.py b/main.py index 19d48ea..b7aa85f 100644 --- a/main.py +++ b/main.py @@ -1,10 +1,22 @@ import argparse from art import text2art import random +import boto3 from src.logger import setup_logger from src.snapper import Snapper from src.scanner import Scanner + +def used_key_pairs(): + keypairs = [] # list of used keyPair names + ec2 = boto3.client('ec2') + response = ec2.describe_key_pairs() + + for i in response["KeyPairs"]: + keypairs.append(i["KeyName"]) + return keypairs + + if __name__ == "__main__": parser = argparse.ArgumentParser() parser.add_argument('--region', action='store', dest='region', type=str, @@ -40,8 +52,13 @@ if cmd_args.keypair: scanner = Scanner(logger=logger, region=snapper.region, key_pair_name=cmd_args.keypair) else: - rand = str(random.randrange(10000)) # need to give an unused name when creating new key pair. - key_name = "red_detector_key{random_number}".format(random_number=rand) + used_key_pairs_list = used_key_pairs() + num = 0 + key_name = "red_detector_key{number}".format(number=str(num)) + while key_name in used_key_pairs_list: + num += 1 + key_name = "red_detector_key{number}".format(number=str(num)) + scanner = Scanner(logger=logger, region=snapper.region, key_pair_name=key_name) scanner.keypair_name = scanner.create_keypair(key_name=key_name) diff --git a/src/remote_scripts.py b/src/remote_scripts.py index ab132ac..3577a1e 100644 --- a/src/remote_scripts.py +++ b/src/remote_scripts.py @@ -24,9 +24,7 @@ docker pull vuls/vuls - -PWD=/home/ubuntu/vuls/ - +cd /home/ubuntu/vuls/ docker run --rm -i \ -v $PWD:/vuls \ -v $PWD/go-cve-dictionary-log:/var/log/vuls \ @@ -77,12 +75,13 @@ vuls/go-msfdb fetch msfdb + touch config_scan.toml cat > config_scan.toml < /home/ubuntu/nginx/default.conf < EOF + + sudo docker run --name docker-nginx -p {port}:80 -d -v /home/ubuntu/nginx/html:/usr/share/nginx/html -v /home/ubuntu/nginx/default.conf:/etc/nginx/conf.d/default.conf nginx + # Lynis audit +touch /home/ubuntu/bStartingLynis.txt + + sudo cp /home/ubuntu/lynis-3.0.3.tar.gz /vol/root/ + + sudo su -c "chroot /vol tar xvf /root/lynis-3.0.3.tar.gz -C /root/" + + sudo su -c "chroot /vol printf 'cd /root/lynis/\n./lynis audit system\n' > /vol/root/lynis/run.sh && chmod +x /vol/root/lynis/run.sh" -sudo su -c "chroot /vol /root/lynis/run.sh" | ansi2html -l > /home/ubuntu/nginx/html/lynis_report.html + +sudo su -c "chroot /vol lynis audit system" | ansi2html > /home/ubuntu/nginx/html/lynis_report.html + + +touch /home/ubuntu/bEndedLynis.txt # Chkrootkit scan cd /home/ubuntu/chkrootkit # sudo ./chkrootkit -r /vol | sed -n '/INFECTED/,/Searching/p' | head -n -1 | ansi2html -l > /home/ubuntu/nginx/html/chkrootkit_report.html sudo ./chkrootkit -r /vol | ansi2html -l > /home/ubuntu/nginx/html/chkrootkit_report.html + # Vuls scan sudo su -c "chroot /vol /usr/sbin/sshd -p 2222 -o 'AuthorizedKeysFile=/root/.ssh/tmp_authorized_keys' -o 'AuthorizedKeysCommand=none' -o 'AuthorizedKeysCommandUser=none' -o 'GSSAPIAuthentication=no' -o 'UseDNS=no'" -echo "Creating ssh config" +touch /home/ubuntu/b1 .txt + sudo cat > ~/.ssh/config < Date: Mon, 15 Nov 2021 09:09:02 +0200 Subject: [PATCH 11/20] in progress of fixing os-46 --- main.py | 23 ++- src/logger.py | 11 -- src/remote_scripts.py | 334 ------------------------------------------ src/scanner.py | 287 ------------------------------------ src/snapper.py | 193 ------------------------ 5 files changed, 21 insertions(+), 827 deletions(-) delete mode 100644 src/logger.py delete mode 100644 src/remote_scripts.py delete mode 100644 src/scanner.py delete mode 100644 src/snapper.py diff --git a/main.py b/main.py index b7aa85f..2b93323 100644 --- a/main.py +++ b/main.py @@ -2,11 +2,29 @@ from art import text2art import random import boto3 +import os +import glob from src.logger import setup_logger from src.snapper import Snapper from src.scanner import Scanner +def getting_all_pem_file_names(): + """ + :return: .pem file names from the red-detector directory. + """ + file_path = os.path.realpath(__file__) # getting the script's path + file_path = file_path.split("red-detector") + files_path = file_path[0] + "red-detector" # (the pem files arent in the same directory as the script.) + + lst = (glob.glob(files_path+"/*.pem")) + index = 0 + for i in lst: + lst[index] = lst[index].replace(files_path+"/", "").replace(".pem","") + index += 1 + return lst + + def used_key_pairs(): keypairs = [] # list of used keyPair names ec2 = boto3.client('ec2') @@ -52,10 +70,11 @@ def used_key_pairs(): if cmd_args.keypair: scanner = Scanner(logger=logger, region=snapper.region, key_pair_name=cmd_args.keypair) else: - used_key_pairs_list = used_key_pairs() + used_key_pairs_list_from_aws = used_key_pairs() + used_key_pairs_list_locally = getting_all_pem_file_names() num = 0 key_name = "red_detector_key{number}".format(number=str(num)) - while key_name in used_key_pairs_list: + while key_name in used_key_pairs_list_from_aws or key_name in used_key_pairs_list_locally: num += 1 key_name = "red_detector_key{number}".format(number=str(num)) diff --git a/src/logger.py b/src/logger.py deleted file mode 100644 index 4068769..0000000 --- a/src/logger.py +++ /dev/null @@ -1,11 +0,0 @@ -import logging - - -def setup_logger(log_level="INFO"): - logger = logging.getLogger(__name__) - log_handler = logging.StreamHandler() - logger.setLevel(log_level) - log_format = logging.Formatter('%(asctime)s - %(levelname)s - %(message)s') - log_handler.setFormatter(log_format) - logger.addHandler(log_handler) - return logger diff --git a/src/remote_scripts.py b/src/remote_scripts.py deleted file mode 100644 index 3577a1e..0000000 --- a/src/remote_scripts.py +++ /dev/null @@ -1,334 +0,0 @@ -script_a = '''#!/bin/bash -ex - -exec > >(tee /var/log/user-data.log|logger -t user-data -s 2>/dev/console) 2>&1 - -apt-get update -apt install docker.io build-essential binutils colorized-logs -y - -mkdir -p /home/ubuntu/vuls -cd /home/ubuntu/ -wget https://downloads.cisofy.com/lynis/lynis-3.0.3.tar.gz -wget ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz -mkdir -p chkrootkit && cd chkrootkit -tar xvf /home/ubuntu/chkrootkit.tar.gz --strip-components 1 -make sense - - - -cd /home/ubuntu/vuls -docker pull vuls/go-cve-dictionary -docker pull vuls/goval-dictionary -docker pull vuls/gost -docker pull vuls/go-exploitdb -docker pull vuls/gost -docker pull vuls/vuls - - -cd /home/ubuntu/vuls/ -docker run --rm -i \ - -v $PWD:/vuls \ - -v $PWD/go-cve-dictionary-log:/var/log/vuls \ - vuls/go-cve-dictionary fetch nvd - - - -docker run --rm -i \ - -v $PWD:/vuls \ - -v $PWD/goval-dictionary-log:/var/log/vuls \ - vuls/goval-dictionary fetch redhat 5 6 7 8 - -docker run --rm -i \ - -v $PWD:/vuls \ - -v $PWD/goval-dictionary-log:/var/log/vuls \ - vuls/goval-dictionary fetch debian 7 8 9 10 - -docker run --rm -i \ - -v $PWD:/vuls \ - -v $PWD/goval-dictionary-log:/var/log/vuls \ - vuls/goval-dictionary fetch alpine 3.3 3.4 3.5 3.6 3.7 3.8 3.9 3.10 3.11 - -docker run --rm -i \ - -v $PWD:/vuls \ - -v $PWD/goval-dictionary-log:/var/log/vuls \ - vuls/goval-dictionary fetch ubuntu 14 16 18 19 20 - - -docker run --rm -i \ - -v $PWD:/vuls \ - -v $PWD/goval-dictionary-log:/var/log/vuls \ - vuls/goval-dictionary fetch oracle - -docker run --rm -i \ - -v $PWD:/vuls \ - -v $PWD/goval-dictionary-log:/var/log/vuls \ - vuls/goval-dictionary fetch amazon - - -docker run --rm -i \ - -v $PWD:/vuls \ - -v $PWD/go-exploitdb-log:/var/log/go-exploitdb \ - vuls/go-exploitdb fetch exploitdb - -docker run --rm -i \ - -v $PWD:/vuls \ - -v $PWD/go-msfdb-log:/var/log/go-msfdb \ - vuls/go-msfdb fetch msfdb - - - -touch config_scan.toml - -cat > config_scan.toml < config_db.toml < /tmp/tmp_authorized_keys -sudo mv /tmp/tmp_authorized_keys /vol/root/.ssh/tmp_authorized_keys -sudo chown root:root /vol/root/.ssh/tmp_authorized_keys -sudo chmod 600 /vol/root/.ssh/tmp_authorized_keys - - -sudo mount -t proc none /vol/proc -sudo mount -o bind /dev /vol/dev -sudo mount -o bind /sys /vol/sys -sudo mount -o bind /run /vol/run - - -sudo chroot /vol /bin/mount devpts /dev/pts -t devpts -# Reporting -mkdir -p /home/ubuntu/nginx/html -cat > /home/ubuntu/nginx/default.conf < /home/ubuntu/nginx/html/index.html < - - - - - - - - - - -
-
-
-
- -
-
-
-
- - - -
-
-
-
-