diff --git a/Dockerfile b/Dockerfile index 0a03221..9d75408 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,25 +1,25 @@ -FROM ubuntu:18.04 - -MAINTAINER Sebastien Macke +FROM ubuntu:22.04 ENV DEBIAN_FRONTEND=noninteractive +# dependencies RUN apt-get update \ - && apt-get install -y \ - build-essential python3-setuptools \ - libcurl4-openssl-dev python3-dev libssl-dev \ - ldap-utils \ - libmariadbclient-dev \ - libpq-dev \ - ike-scan unzip default-jdk \ - libsqlite3-dev libsqlcipher-dev \ - python3-pip python-pip \ - && rm -rf /var/lib/apt/lists/* - -# cx_oracle + && apt-get install -y --no-install-recommends \ + build-essential python3-setuptools \ + libcurl4-openssl-dev python3-dev libssl-dev \ + ldap-utils \ + libmysqlclient-dev \ + libpq-dev \ + ike-scan unzip default-jdk \ + libsqlite3-dev \ + libsqlcipher-dev \ + python3-pip \ + && rm -rf /var/lib/apt/lists/* + +## cx_oracle RUN apt-get update \ - && apt-get install -y libaio1 wget unzip git \ - && rm -rf /var/lib/apt/lists/* + && apt-get install -y --no-install-recommends libaio1 wget unzip git \ + && rm -rf /var/lib/apt/lists/* WORKDIR /opt/oracle RUN wget https://download.oracle.com/otn_software/linux/instantclient/instantclient-basiclite-linuxx64.zip \ @@ -33,27 +33,36 @@ RUN wget https://download.oracle.com/otn_software/linux/instantclient/instantcli && echo /opt/oracle/instantclient_* > /etc/ld.so.conf.d/oracle-instantclient.conf \ && ldconfig -RUN git clone --branch 5.3 https://github.com/oracle/python-cx_Oracle \ - && cd python-cx_Oracle && export ORACLE_HOME=$(echo /opt/oracle/instantclient_*) && python2 setup.py build && python2 setup.py install - -# xfreerdp (see https://github.com/FreeRDP/FreeRDP/wiki/Compilation) -RUN apt-get update && apt-get install -y ninja-build build-essential git-core debhelper cdbs dpkg-dev autotools-dev cmake pkg-config xmlto libssl-dev docbook-xsl xsltproc libxkbfile-dev libx11-dev libwayland-dev libxrandr-dev libxi-dev libxrender-dev libxext-dev libxinerama-dev libxfixes-dev libxcursor-dev libxv-dev libxdamage-dev libxtst-dev libcups2-dev libpcsclite-dev libasound2-dev libpulse-dev libjpeg-dev libgsm1-dev libusb-1.0-0-dev libudev-dev libdbus-glib-1-dev uuid-dev libxml2-dev libgstreamer1.0-dev libgstreamer-plugins-base1.0-dev libfaad-dev libfaac-dev \ - && apt-get install -y libavutil-dev libavcodec-dev libavresample-dev \ - && rm -rf /var/lib/apt/lists/* +## xfreerdp (see https://github.com/FreeRDP/FreeRDP/wiki/Compilation) WORKDIR /opt/FreeRDP +RUN apt-get update \ + && apt-get install -y --no-install-recommends ninja-build build-essential git-core debhelper cdbs dpkg-dev autotools-dev cmake pkg-config xmlto libssl-dev docbook-xsl xsltproc libxkbfile-dev libx11-dev libwayland-dev libxrandr-dev libxi-dev libxrender-dev libxext-dev libxinerama-dev libxfixes-dev libxcursor-dev libxv-dev libxdamage-dev libxtst-dev libcups2-dev libpcsclite-dev libasound2-dev libpulse-dev libjpeg-dev libgsm1-dev libusb-1.0-0-dev libudev-dev libdbus-glib-1-dev uuid-dev libxml2-dev libgstreamer1.0-dev libgstreamer-plugins-base1.0-dev libfaad-dev libfaac-dev libsdl2-dev libcjson-dev libpkcs11-helper1-dev \ + && apt-get install -y --no-install-recommends libavutil-dev libavcodec-dev libswresample-dev \ + && rm -rf /var/lib/apt/lists/* RUN git clone https://github.com/FreeRDP/FreeRDP/ . -RUN cmake -DCMAKE_BUILD_TYPE=Debug -DWITH_SSE2=ON . && cmake --build . && cmake --build . --target install +RUN cmake -DCMAKE_BUILD_TYPE=Debug -DWITH_CLIENT_SDL=OFF -DWITH_KRB5=OFF -DWITH_SWSCALE=OFF -DWITTH_SSE2=ON -DWITH_FUSE=OFF . \ + && cmake --build . \ + && cmake --build . --target install \ + && cmake --build . --target clean \ + && rm -rf /opt/FreeRDP +# patator WORKDIR /opt/patator COPY ./requirements.txt ./ RUN python3 -m pip install --upgrade pip \ && python3 -m pip install -r requirements.txt -RUN sed -e '/cx_Oracle/d' -e 's,pysqlcipher3,pysqlcipher,' requirements.txt | python2 -m pip install -r /dev/stdin +# uncomment for python2 +# RUN apt-get update \ +# && apt-get install -y --no-install-recommends python-pip ipython \ +# && sed -e '/cx_Oracle/d' -e 's,pysqlcipher3,pysqlcipher,' requirements.txt | python2 -m pip install -r /dev/stdin \ +# RUN git clone --branch 5.3 https://github.com/oracle/python-cx_Oracle \ +# && cd python-cx_Oracle && export ORACLE_HOME=$(echo /opt/oracle/instantclient_*) && python2 setup.py build && python2 setup.py install # utils -RUN apt-get update && apt-get install -y ipython3 ipython iputils-ping iproute2 netcat curl rsh-client telnet vim mlocate nmap \ - && rm -rf /var/lib/apt/lists/* +RUN apt-get update \ + && apt-get install -y --no-install-recommends ipython3 iputils-ping iproute2 netcat curl rsh-client telnet vim mlocate nmap \ + && rm -rf /var/lib/apt/lists/* RUN echo 'set bg=dark' > /root/.vimrc COPY ./patator.py ./ diff --git a/patator.py b/patator.py index 028d3cf..597bb2d 100755 --- a/patator.py +++ b/patator.py @@ -2754,6 +2754,7 @@ class SMTP_Base(TCP_Cache): resp = fp.helo(name) if not starttls == '0': + fp._host = host resp = fp.starttls() return TCP_Connection(fp, resp) @@ -3569,7 +3570,11 @@ class MySQL_query(TCP_Cache): Response = Response_Base def connect(self, host, port, user, password): - fp = _mysql.connect(host=host, port=int(port), user=user, passwd=password) # db=db + if PY3: + fp = _mysql.connect(host=host, port=int(port), user=user, password=password) # db=db + else: + fp = _mysql.connect(host=host, port=int(port), user=user, passwd=password) + return TCP_Connection(fp) def execute(self, host, port='3306', user='', password='', query='select @@version'): @@ -4690,8 +4695,10 @@ class DNS_reverse: with Timing() as timing: response = dns_query(server, int(timeout), protocol, dns.reversename.from_address(host), qtype='PTR', qclass='IN') - code = response.rcode() - status = dns.rcode.to_text(code) + rcode = response.rcode() + code = int(rcode) + status = dns.rcode.to_text(rcode) + rrs = [[host, c, t, d] for _, _, c, t, d in [rr.to_text().split(' ', 4) for rr in response.answer]] mesg = '%s %s' % (status, ''.join('[%s]' % ' '.join(rr) for rr in rrs)) @@ -4732,8 +4739,10 @@ class DNS_forward: with Timing() as timing: response = dns_query(server, int(timeout), protocol, name, qtype=qtype, qclass=qclass) - code = response.rcode() - status = dns.rcode.to_text(code) + rcode = response.rcode() + code = int(rcode) + status = dns.rcode.to_text(rcode) + rrs = [[n, c, t, d] for n, _, c, t, d in [rr.to_text().split(' ', 4) for rr in response.answer + response.additional + response.authority]] mesg = '%s %s' % (status, ''.join('[%s]' % ' '.join(rr) for rr in rrs)) diff --git a/run-tests.sh b/run-tests.sh index c4123ad..7c085c6 100755 --- a/run-tests.sh +++ b/run-tests.sh @@ -1,19 +1,19 @@ #!/bin/bash -if ! type docker-compose &>/dev/null; then - echo 'docker-compose is required' +if ! docker compose version &>/dev/null; then + echo 'docker compose is required' exit 1 fi +docker compose up -d --build + case "$1" in python2|python3) PYTHON=$1 ;; *) - docker-compose up -d --build - $0 python3 - $0 python2 + # $0 python2 exit 0 ;; @@ -31,7 +31,7 @@ run() { echo echo "$ $@" - docker-compose run --no-deps --rm --entrypoint "$PYTHON patator.py" patator "$@" + docker compose run --no-deps --rm --entrypoint "$PYTHON patator.py" patator "$@" } echo diff --git a/testing/unix/Dockerfile b/testing/unix/Dockerfile index a1a027b..942cadb 100644 --- a/testing/unix/Dockerfile +++ b/testing/unix/Dockerfile @@ -1,21 +1,32 @@ -FROM ubuntu:18.04 +FROM ubuntu:22.04 -MAINTAINER Sebastien Macke +ENV DEBIAN_FRONTEND=noninteractive SHELL ["/bin/bash", "-o", "pipefail", "-c"] RUN { for i in {3..5}; do useradd -m -s /bin/bash user$i; echo -e "Password$i\nPassword$i" | passwd user$i; done; } \ && useradd -m user9 && echo -e 'p\x1fssw\x09rd\np\x1fssw\x09rd' | passwd user9 -ENV DEBIAN_FRONTEND=noninteractive +RUN apt-get update \ + && apt-get install -y --no-install-recommends vsftpd openssh-server telnetd rsh-redone-server fingerd apache2 socat \ + && rm -rf /var/lib/apt/lists/* \ + && echo 'background=YES' >> /etc/vsftpd.conf \ + && sed -i -e 's,start-stop-daemon --start --background,start-stop-daemon --start,' /etc/init.d/vsftpd -RUN apt-get update && apt-get install -y vsftpd openssh-server telnetd rsh-redone-server fingerd apache2 socat - -RUN { echo "postfix postfix/mailname string ubuntu-bionic"; \ +RUN { echo "postfix postfix/mailname string ubuntu-blah"; \ echo "postfix postfix/main_mailer_type string 'Internet Site'"; \ } | debconf-set-selections \ - && apt-get update && apt-get install -y postfix mail-stack-delivery \ - && postconf -e 'smtpd_sasl_exceptions_networks=' + && apt-get update && apt-get install -y --no-install-recommends postfix dovecot-pop3d dovecot-imapd \ + && rm -rf /var/lib/apt/lists/* \ + && postconf 'smtpd_sasl_exceptions_networks=' 'smtpd_sasl_auth_enable=yes' 'smtpd_sasl_type=dovecot' 'smtpd_sasl_path=private/dovecot-auth' \ + && echo -e 'auth_mechanisms = plain login\n\ +service auth {\n\ + unix_listener /var/spool/postfix/private/dovecot-auth {\n\ + mode = 0660\n\ + user = postfix\n\ + group = postfix\n\ + }\n\ +}\n' > /etc/dovecot/conf.d/99-blah.conf RUN echo 'ServerName localhost' >> /etc/apache2/apache2.conf \ && mkdir /var/www/html/{wp,pma,bak} && echo secret > /var/www/html/key @@ -29,31 +40,36 @@ RUN LDAPPW=Password1; \ echo slapd slapd/domain string example.com; \ echo slapd shared/organization string example.com; \ } | debconf-set-selections \ - && apt-get update && apt-get install -y slapd ldap-utils + && apt-get update && apt-get install -y --no-install-recommends slapd ldap-utils \ + && rm -rf /var/lib/apt/lists/* RUN MYSRP=Password1; \ { echo "mysql-server mysql-server/root_password password $MYSRP"; \ echo "mysql-server mysql-server/root_password_again password $MYSRP"; \ } | debconf-set-selections \ - && apt-get update && apt-get install -y mysql-server \ + && apt-get update && apt-get install -y --no-install-recommends mysql-server \ + && rm -rf /var/lib/apt/lists/* \ && sed -i "s/bind-address.*/bind-address = 0.0.0.0/" /etc/mysql/mysql.conf.d/mysqld.cnf \ && echo secure_file_priv= >> /etc/mysql/mysql.conf.d/mysqld.cnf \ - && Q1="GRANT ALL ON *.* TO 'root'@'%' IDENTIFIED BY '$MYSRP' WITH GRANT OPTION;" \ - && Q2="FLUSH PRIVILEGES;" \ - && SQL="${Q1}${Q2}" \ && rm -f /etc/apparmor.d/usr.sbin.mysqld \ && service mysql start \ + && Q1="CREATE USER 'root'@'%' identified by 'Password1';" \ + && Q2="GRANT ALL PRIVILEGES ON *.* TO 'root'@'%';" \ + && Q3="FLUSH PRIVILEGES;" \ + && SQL="${Q1}${Q2}${Q3}" \ && mysql -uroot -p"$MYSRP" -e "$SQL" RUN PGPW=Password1 \ - && apt-get update && apt-get install -y postgresql \ - && sed -ie 's,127.0.0.1/32,0.0.0.0/0,' /etc/postgresql/10/main/pg_hba.conf \ - && sed -ie "s,^#listen_addresses = 'localhost',listen_addresses = '*'," /etc/postgresql/10/main/postgresql.conf \ + && apt-get update && apt-get install -y --no-install-recommends postgresql \ + && rm -rf /var/lib/apt/lists/* \ + && sed -ie 's,127.0.0.1/32,0.0.0.0/0,' /etc/postgresql/14/main/pg_hba.conf \ + && sed -ie "s,^#listen_addresses = 'localhost',listen_addresses = '*'," /etc/postgresql/14/main/postgresql.conf \ && service postgresql start \ && su - postgres -c "psql -c \"ALTER USER postgres WITH PASSWORD '$PGPW';\" -c '\\q'" \ && su - postgres -c "PGPASSWORD='$PGPW' psql -d postgres -w --no-password -h localhost -p 5432 -t -c 'SELECT version()'" -RUN apt-get update && apt-get install -y tomcat9 tomcat9-admin \ +RUN apt-get update && apt-get install -y --no-install-recommends tomcat9 tomcat9-admin \ + && rm -rf /var/lib/apt/lists/* \ && TOMCATPW=Password1 \ && echo '' > /etc/tomcat9/tomcat-users.xml \ && sed -ie 's,^.*Define an AJP .* Connector on port.*$,,' /etc/tomcat9/server.xml \ @@ -67,36 +83,46 @@ export JAVA_OPTS=-Djava.awt.headless=true\n\ /usr/libexec/tomcat9/tomcat-update-policy.sh\n\ /usr/libexec/tomcat9/tomcat-start.sh &\n" > /usr/local/sbin/start-tomcat.sh -RUN apt-get update && apt-get install -y dovecot-imapd dovecot-pop3d poppassd \ +RUN apt-get update && apt-get install -y --no-install-recommends dovecot-imapd dovecot-pop3d poppassd \ + && rm -rf /var/lib/apt/lists/* \ && sed -ie 's,^#login_trusted_networks = *$,login_trusted_networks = 0.0.0.0/0,' /etc/dovecot/dovecot.conf -RUN apt-get update && apt-get install -y p7zip-full \ +RUN apt-get update && apt-get install -y --no-install-recommends p7zip-full \ + && rm -rf /var/lib/apt/lists/* \ && 7za a -pPassword1 /root/enc.zip /etc/passwd -RUN apt-get update && apt-get install -y openjdk-11-jre-headless \ - && keytool -genkey -alias test -storepass Password1 -keypass Password1 -keystore /root/keystore.jks -dname "CN=a,OU=b,O=c,L=d,ST=e,C=f" +RUN apt-get update && apt-get install -y --no-install-recommends openjdk-18-jre-headless \ + && rm -rf /var/lib/apt/lists/* \ + && keytool -genkey -alias test -storepass Password1 -keypass Password1 -keystore /root/keystore.jks -dname "CN=a,OU=b,O=c,L=d,ST=e,C=f" -keyalg RSA -RUN apt-get update && apt-get install -y sqlcipher \ +RUN apt-get update && apt-get install -y --no-install-recommends sqlcipher \ + && rm -rf /var/lib/apt/lists/* \ && sqlcipher /root/enc.db "PRAGMA key = 'Password1';create table a(id int);" RUN echo -e 'user1:kW+7AlKMnSZQIRluNxwJOMiohAw=\nuser2:oBk37hmkFgZdZ247+g6c0Ay6Vw8=\nuser3:kW+7AlKMnSZQIRluNxwJOMiohAw=' > /root/umbraco_users.pw -RUN apt-get update && apt-get install -y tightvncserver \ +RUN apt-get update && apt-get install -y --no-install-recommends tightvncserver \ + && rm -rf /var/lib/apt/lists/* \ && useradd -m vncuser && mkdir ~vncuser/.vnc && echo Password | vncpasswd -f > ~vncuser/.vnc/passwd \ && chmod 400 ~vncuser/.vnc/passwd && chown -R vncuser:vncuser ~vncuser/.vnc # utils RUN sed -i 's:^path-exclude=/usr/share/man:#path-exclude=/usr/share/man:' /etc/dpkg/dpkg.cfg.d/excludes \ - && apt-get update && apt-get install -y man manpages-posix iproute2 mlocate lsof sudo vim less \ -telnet finger rsh-client smbclient \ + && apt-get update \ + && apt-get install -y --no-install-recommends man manpages-posix iproute2 mlocate lsof sudo vim less telnet finger rsh-client smbclient \ + && rm -rf /var/lib/apt/lists/* \ && echo 'set bg=dark' > /root/.vimrc \ && usermod -aG sudo user3 -RUN apt-get update && apt-get install -y samba \ +RUN apt-get update \ + && apt-get install -y --no-install-recommends samba \ + && rm -rf /var/lib/apt/lists/* \ && { for i in {3..5}; do echo -e "Password$i\nPassword$i" | smbpasswd -a "user$i"; done; } \ && sed -ie 's,map to guest =,#map to guest =,' /etc/samba/smb.conf -RUN apt-get update && apt-get install -y snmpd snmp \ +RUN apt-get update \ + && apt-get install -y --no-install-recommends snmpd snmp \ + && rm -rf /var/lib/apt/lists/* \ && sed -ie 's,agentAddress udp:127.0.0.1:161,agentAddress udp:161,' /etc/snmp/snmpd.conf \ && echo 'createUser user3 SHA authPass AES privPass' >> /var/lib/snmp/snmpd.conf \ && echo 'rouser user3 priv .1' >> /etc/snmp/snmpd.conf @@ -120,4 +146,5 @@ service smbd start\n\ service snmpd start\n\ tail -f /dev/null\n" > /usr/local/sbin/start-all-services.sh -CMD ["bash", "/usr/local/sbin/start-all-services.sh"] + +CMD ["bash", "/usr/local/sbin/start-all-services.sh"] \ No newline at end of file