first commit
This commit is contained in:
Raven Scott
commit
df3490f0c7
195
client.js
Normal file
195
client.js
Normal file
@ -0,0 +1,195 @@
|
|||||||
|
const node = require('hyper-ipc-secure')();
|
||||||
|
const crypto = require('hypercore-crypto');
|
||||||
|
const fs = require('fs');
|
||||||
|
const { exec } = require('child_process');
|
||||||
|
const net = require('net');
|
||||||
|
const http = require('http');
|
||||||
|
const ftpd = require('ftpd');
|
||||||
|
const TelnetServer = require('telnet');
|
||||||
|
const smtpServer = require('smtp-server').SMTPServer;
|
||||||
|
const dns = require('native-dns');
|
||||||
|
|
||||||
|
// Generate key pair and save to file if it doesn't exist
|
||||||
|
if (!fs.existsSync('kp.json')) {
|
||||||
|
const kp = crypto.keyPair();
|
||||||
|
fs.writeFileSync('kp.json', JSON.stringify({
|
||||||
|
publicKey: kp.publicKey.toString('hex'),
|
||||||
|
secretKey: kp.secretKey.toString('hex')
|
||||||
|
}));
|
||||||
|
}
|
||||||
|
|
||||||
|
const kp = JSON.parse(fs.readFileSync('kp.json'));
|
||||||
|
kp.publicKey = Buffer.from(kp.publicKey, 'hex');
|
||||||
|
kp.secretKey = Buffer.from(kp.secretKey, 'hex');
|
||||||
|
// Server public key (should be securely shared or known)
|
||||||
|
const serverPublicKey = '7c5b0b674e1af93a4df37a86ebc2cd58666c45fb46a78bbd02f198bbcf345f4c'; // Ensure this matches the server public key
|
||||||
|
|
||||||
|
// Register client with the server
|
||||||
|
async function registerClient() {
|
||||||
|
try {
|
||||||
|
console.log('Attempting to register client...');
|
||||||
|
console.log(`Server public key: ${serverPublicKey}`);
|
||||||
|
console.log(`Client public key: ${kp.publicKey.toString('hex')}`);
|
||||||
|
|
||||||
|
const result = await node.run(Buffer.from(serverPublicKey, 'hex'), 'register.client', { publicKey: kp.publicKey.toString('hex') });
|
||||||
|
console.log('Client registered with the server');
|
||||||
|
console.log(result);
|
||||||
|
} catch (e) {
|
||||||
|
console.error('Failed to register client:', e.message);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Simulate honeypots and report attacks
|
||||||
|
function setupHoneypots() {
|
||||||
|
// SSH Honeypot
|
||||||
|
const sshServer = net.createServer((socket) => {
|
||||||
|
const attackerIP = socket.remoteAddress;
|
||||||
|
const timestamp = new Date();
|
||||||
|
console.log(`SSH attack detected from IP: ${attackerIP}`);
|
||||||
|
reportAttack({
|
||||||
|
service: 'SSH',
|
||||||
|
ip: attackerIP,
|
||||||
|
timestamp,
|
||||||
|
data: 'SSH connection attempt'
|
||||||
|
});
|
||||||
|
socket.end();
|
||||||
|
}).listen(2222, () => console.log('SSH Honeypot running on port 2222'));
|
||||||
|
|
||||||
|
// HTTP Honeypot
|
||||||
|
const httpServer = http.createServer((req, res) => {
|
||||||
|
const attackerIP = req.connection.remoteAddress;
|
||||||
|
const timestamp = new Date();
|
||||||
|
console.log(`HTTP attack detected from IP: ${attackerIP}`);
|
||||||
|
reportAttack({
|
||||||
|
service: 'HTTP',
|
||||||
|
ip: attackerIP,
|
||||||
|
timestamp,
|
||||||
|
data: `HTTP request: ${req.method} ${req.url}`
|
||||||
|
});
|
||||||
|
res.end('Honeypot');
|
||||||
|
}).listen(88, () => console.log('HTTP Honeypot running on port 88'));
|
||||||
|
|
||||||
|
// FTP Honeypot
|
||||||
|
const ftpServer = new ftpd.FtpServer('0.0.0.0', {
|
||||||
|
getInitialCwd: () => '/',
|
||||||
|
getRoot: () => '/'
|
||||||
|
});
|
||||||
|
ftpServer.on('client:connected', (connection) => {
|
||||||
|
const attackerIP = connection.socket.remoteAddress;
|
||||||
|
const timestamp = new Date();
|
||||||
|
console.log(`FTP attack detected from IP: ${attackerIP}`);
|
||||||
|
reportAttack({
|
||||||
|
service: 'FTP',
|
||||||
|
ip: attackerIP,
|
||||||
|
timestamp,
|
||||||
|
data: 'FTP connection attempt'
|
||||||
|
});
|
||||||
|
});
|
||||||
|
ftpServer.listen(21);
|
||||||
|
console.log('FTP Honeypot running on port 21');
|
||||||
|
|
||||||
|
// Telnet Honeypot
|
||||||
|
const telnetServer = new TelnetServer({ shellPrompt: '/ # ' });
|
||||||
|
telnetServer.on('client', (client) => {
|
||||||
|
const attackerIP = client.socket.remoteAddress;
|
||||||
|
const timestamp = new Date();
|
||||||
|
console.log(`Telnet attack detected from IP: ${attackerIP}`);
|
||||||
|
reportAttack({
|
||||||
|
service: 'Telnet',
|
||||||
|
ip: attackerIP,
|
||||||
|
timestamp,
|
||||||
|
data: 'Telnet connection attempt'
|
||||||
|
});
|
||||||
|
client.on('data', (data) => {
|
||||||
|
console.log(`Received Telnet data: ${data.toString()}`);
|
||||||
|
reportAttack({
|
||||||
|
service: 'Telnet',
|
||||||
|
ip: attackerIP,
|
||||||
|
timestamp: new Date(),
|
||||||
|
data: `Telnet data: ${data.toString()}`
|
||||||
|
});
|
||||||
|
});
|
||||||
|
client.end();
|
||||||
|
});
|
||||||
|
telnetServer.listen(23);
|
||||||
|
console.log('Telnet Honeypot running on port 23');
|
||||||
|
|
||||||
|
// SMTP Honeypot
|
||||||
|
const smtp = new smtpServer({
|
||||||
|
onData(stream, session, callback) {
|
||||||
|
let emailData = '';
|
||||||
|
stream.on('data', (chunk) => {
|
||||||
|
emailData += chunk;
|
||||||
|
});
|
||||||
|
stream.on('end', () => {
|
||||||
|
const attackerIP = session.remoteAddress;
|
||||||
|
const timestamp = new Date();
|
||||||
|
console.log(`SMTP attack detected from IP: ${attackerIP}`);
|
||||||
|
reportAttack({
|
||||||
|
service: 'SMTP',
|
||||||
|
ip: attackerIP,
|
||||||
|
timestamp,
|
||||||
|
data: `SMTP data: ${emailData}`
|
||||||
|
});
|
||||||
|
callback();
|
||||||
|
});
|
||||||
|
}
|
||||||
|
});
|
||||||
|
smtp.listen(25, () => console.log('SMTP Honeypot running on port 25'));
|
||||||
|
|
||||||
|
// DNS Honeypot
|
||||||
|
const dnsServer = dns.createServer();
|
||||||
|
dnsServer.on('request', (request, response) => {
|
||||||
|
const attackerIP = request.address.address;
|
||||||
|
const timestamp = new Date();
|
||||||
|
console.log(`DNS attack detected from IP: ${attackerIP}`);
|
||||||
|
reportAttack({
|
||||||
|
service: 'DNS',
|
||||||
|
ip: attackerIP,
|
||||||
|
timestamp,
|
||||||
|
data: `DNS request: ${request.question[0].name}`
|
||||||
|
});
|
||||||
|
response.answer.push(dns.A({
|
||||||
|
name: request.question[0].name,
|
||||||
|
address: '127.0.0.1',
|
||||||
|
ttl: 600,
|
||||||
|
}));
|
||||||
|
response.send();
|
||||||
|
});
|
||||||
|
dnsServer.serve(53);
|
||||||
|
console.log('DNS Honeypot running on port 53');
|
||||||
|
}
|
||||||
|
|
||||||
|
// Report attack to the server
|
||||||
|
async function reportAttack(details) {
|
||||||
|
try {
|
||||||
|
console.log(`Reporting attack: ${JSON.stringify(details)}`);
|
||||||
|
const result = await node.run(Buffer.from(serverPublicKey, 'hex'), 'report.attack', { details });
|
||||||
|
console.log('Reported attack to server:', result);
|
||||||
|
} catch (e) {
|
||||||
|
console.error('Failed to report attack:', e.message);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Define ban IP service
|
||||||
|
node.serve(kp, 'ban.ip', async (args) => {
|
||||||
|
const ipToBan = args.ip;
|
||||||
|
console.log(`Received ban command for IP: ${ipToBan}`);
|
||||||
|
exec(`csf -d ${ipToBan}`, (error, stdout, stderr) => {
|
||||||
|
if (error) {
|
||||||
|
console.error(`Error executing ban command: ${error.message}`);
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
if (stderr) {
|
||||||
|
console.error(`Command stderr: ${stderr}`);
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
console.log(`Ban command executed: ${stdout}`);
|
||||||
|
});
|
||||||
|
return { status: 'banned', ip: ipToBan };
|
||||||
|
});
|
||||||
|
|
||||||
|
// Start the client
|
||||||
|
console.log('Client is running...');
|
||||||
|
registerClient();
|
||||||
|
setupHoneypots();
|
||||||
60
server.js
Normal file
60
server.js
Normal file
@ -0,0 +1,60 @@
|
|||||||
|
const node = require('hyper-ipc-secure')();
|
||||||
|
const crypto = require('hypercore-crypto');
|
||||||
|
const fs = require('fs');
|
||||||
|
|
||||||
|
// Generate key pair and save to file if it doesn't exist
|
||||||
|
if (!fs.existsSync('kp.json')) {
|
||||||
|
const kp = crypto.keyPair();
|
||||||
|
fs.writeFileSync('kp.json', JSON.stringify({
|
||||||
|
publicKey: kp.publicKey.toString('hex'),
|
||||||
|
secretKey: kp.secretKey.toString('hex')
|
||||||
|
}));
|
||||||
|
}
|
||||||
|
|
||||||
|
// Read key pair from file
|
||||||
|
const kp = JSON.parse(fs.readFileSync('kp.json'));
|
||||||
|
kp.publicKey = Buffer.from(kp.publicKey, 'hex');
|
||||||
|
kp.secretKey = Buffer.from(kp.secretKey, 'hex');
|
||||||
|
|
||||||
|
// Store clients
|
||||||
|
let clients = [];
|
||||||
|
|
||||||
|
// Function to extract IPv4 address from potential IPv6 format
|
||||||
|
function extractIPv4(ip) {
|
||||||
|
const ipv4Match = ip.match(/(\d{1,3}\.){3}\d{1,3}/);
|
||||||
|
return ipv4Match ? ipv4Match[0] : ip;
|
||||||
|
}
|
||||||
|
|
||||||
|
// Define services
|
||||||
|
node.serve(kp, 'report.attack', async (args) => {
|
||||||
|
const attackDetails = args.details;
|
||||||
|
console.log(`Received attack report from client. Details: ${JSON.stringify(attackDetails, null, 2)}`);
|
||||||
|
|
||||||
|
// Extract and use IPv4 address
|
||||||
|
const attackerIP = extractIPv4(attackDetails.ip);
|
||||||
|
for (const client of clients) {
|
||||||
|
try {
|
||||||
|
await node.run(client, 'ban.ip', { ip: attackerIP });
|
||||||
|
console.log(`Sent ban command to client for IP: ${attackerIP}`);
|
||||||
|
} catch (e) {
|
||||||
|
console.error(`Failed to send ban command to client: ${e.message}`);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return { status: 'ban commands sent' };
|
||||||
|
});
|
||||||
|
|
||||||
|
node.serve(kp, 'register.client', async (args) => {
|
||||||
|
try {
|
||||||
|
console.log('Received register client request:', args);
|
||||||
|
const clientPublicKey = Buffer.from(args.publicKey, 'hex');
|
||||||
|
clients.push(clientPublicKey);
|
||||||
|
console.log(`Client registered: ${args.publicKey}`);
|
||||||
|
return { status: 'registered' };
|
||||||
|
} catch (e) {
|
||||||
|
console.error('Failed to register client:', e.message);
|
||||||
|
return { status: 'error', message: e.message };
|
||||||
|
}
|
||||||
|
});
|
||||||
|
|
||||||
|
// Start the server
|
||||||
|
// Add server start logic if required
|
||||||
Loading…
Reference in New Issue
Block a user