2014-09-11 08:10:33 +02:00
|
|
|
/*
|
|
|
|
* http.c: HTTP service detection plugin
|
|
|
|
*
|
2018-06-24 05:11:10 +02:00
|
|
|
* Copyright (c) 2014, Přemysl Janouch <p@janouch.name>
|
2014-09-11 08:10:33 +02:00
|
|
|
*
|
|
|
|
* Permission to use, copy, modify, and/or distribute this software for any
|
2018-06-24 05:11:10 +02:00
|
|
|
* purpose with or without fee is hereby granted.
|
2014-09-11 08:10:33 +02:00
|
|
|
*
|
|
|
|
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
|
|
|
|
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
|
|
|
|
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
|
|
|
|
* SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
|
|
|
|
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
|
|
|
|
* OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
|
|
|
|
* CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
|
2015-02-28 21:57:57 +01:00
|
|
|
#include "config.h"
|
|
|
|
#include "../liberty/liberty.c"
|
2014-09-11 08:10:33 +02:00
|
|
|
#include "../plugin-api.h"
|
2015-02-28 21:57:57 +01:00
|
|
|
|
2014-09-21 00:58:19 +02:00
|
|
|
#include "../http-parser/http_parser.h"
|
2014-09-11 08:10:33 +02:00
|
|
|
|
|
|
|
// --- Service detection -------------------------------------------------------
|
|
|
|
|
|
|
|
static struct plugin_data
|
|
|
|
{
|
|
|
|
void *ctx; ///< Application context
|
|
|
|
struct plugin_api *api; ///< Plugin API vtable
|
|
|
|
}
|
|
|
|
g_data;
|
|
|
|
|
2014-09-21 00:58:19 +02:00
|
|
|
enum header_state
|
|
|
|
{
|
|
|
|
STATE_FIELD, ///< We've been parsing a field so far
|
|
|
|
STATE_VALUE ///< We've been parsing a value so far
|
|
|
|
};
|
|
|
|
|
2014-09-20 18:10:29 +02:00
|
|
|
struct scan_data
|
|
|
|
{
|
2014-09-21 00:58:19 +02:00
|
|
|
struct unit *u; ///< Scan unit
|
|
|
|
|
|
|
|
http_parser parser; ///< HTTP parser
|
|
|
|
enum header_state state; ///< What did we get last time?
|
|
|
|
struct str field; ///< Field part buffer
|
|
|
|
struct str value; ///< Value part buffer
|
2014-09-20 18:10:29 +02:00
|
|
|
};
|
|
|
|
|
2014-09-21 00:58:19 +02:00
|
|
|
static void
|
2014-09-23 22:59:01 +02:00
|
|
|
on_header_read (struct scan_data *scan)
|
2014-09-21 00:58:19 +02:00
|
|
|
{
|
2017-02-06 18:25:55 +01:00
|
|
|
if (!strcasecmp_ascii (scan->field.str, "Server"))
|
2014-09-21 00:58:19 +02:00
|
|
|
{
|
|
|
|
char *info = xstrdup_printf ("%s: %s",
|
2014-09-23 22:59:01 +02:00
|
|
|
"server software", scan->value.str);
|
|
|
|
g_data.api->unit_add_info (scan->u, info);
|
2014-09-21 00:58:19 +02:00
|
|
|
free (info);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
|
|
on_header_field (http_parser *parser, const char *at, size_t len)
|
|
|
|
{
|
2014-09-23 22:59:01 +02:00
|
|
|
struct scan_data *scan = parser->data;
|
|
|
|
if (scan->state == STATE_VALUE)
|
2014-09-21 00:58:19 +02:00
|
|
|
{
|
2014-09-23 22:59:01 +02:00
|
|
|
on_header_read (scan);
|
|
|
|
str_reset (&scan->field);
|
|
|
|
str_reset (&scan->value);
|
2014-09-21 00:58:19 +02:00
|
|
|
}
|
2014-09-23 22:59:01 +02:00
|
|
|
str_append_data (&scan->field, at, len);
|
|
|
|
scan->state = STATE_FIELD;
|
2014-09-21 00:58:19 +02:00
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
|
|
on_header_value (http_parser *parser, const char *at, size_t len)
|
|
|
|
{
|
|
|
|
struct scan_data *data = parser->data;
|
|
|
|
str_append_data (&data->value, at, len);
|
|
|
|
data->state = STATE_VALUE;
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int
|
|
|
|
on_headers_complete (http_parser *parser)
|
|
|
|
{
|
2014-09-23 22:59:01 +02:00
|
|
|
struct scan_data *scan = parser->data;
|
2017-02-06 18:25:55 +01:00
|
|
|
if (scan->state == STATE_VALUE)
|
|
|
|
on_header_read (scan);
|
|
|
|
|
2014-09-21 00:58:19 +02:00
|
|
|
// We've got this far, this must be an HTTP server
|
2014-09-23 22:59:01 +02:00
|
|
|
g_data.api->unit_set_success (scan->u, true);
|
2015-05-13 06:57:06 +02:00
|
|
|
g_data.api->unit_stop (scan->u);
|
2014-09-21 00:58:19 +02:00
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
|
2014-09-11 08:10:33 +02:00
|
|
|
static void *
|
2015-01-18 04:07:05 +01:00
|
|
|
scan_init (struct service *service, struct unit *u)
|
2014-09-11 08:10:33 +02:00
|
|
|
{
|
2015-01-18 04:07:05 +01:00
|
|
|
(void) service;
|
|
|
|
|
2018-06-24 05:10:23 +02:00
|
|
|
struct str hello = str_make ();
|
2014-09-20 18:10:29 +02:00
|
|
|
str_append_printf (&hello, "GET / HTTP/1.0\r\n"
|
|
|
|
"Host: %s\r\n\r\n", g_data.api->unit_get_address (u));
|
|
|
|
g_data.api->unit_write (u, hello.str, hello.len);
|
|
|
|
str_free (&hello);
|
|
|
|
|
|
|
|
struct scan_data *scan = xcalloc (1, sizeof *scan);
|
2014-09-21 00:58:19 +02:00
|
|
|
http_parser_init (&scan->parser, HTTP_RESPONSE);
|
|
|
|
scan->parser.data = scan;
|
|
|
|
|
|
|
|
scan->state = STATE_FIELD;
|
2018-06-24 05:10:23 +02:00
|
|
|
scan->field = str_make ();
|
|
|
|
scan->value = str_make ();
|
2014-09-21 00:58:19 +02:00
|
|
|
|
|
|
|
scan->u = u;
|
2014-09-20 18:10:29 +02:00
|
|
|
return scan;
|
2014-09-11 08:10:33 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
static void
|
|
|
|
scan_free (void *handle)
|
|
|
|
{
|
2014-09-20 18:10:29 +02:00
|
|
|
struct scan_data *scan = handle;
|
2014-09-21 00:58:19 +02:00
|
|
|
str_free (&scan->field);
|
|
|
|
str_free (&scan->value);
|
2014-09-20 18:10:29 +02:00
|
|
|
free (scan);
|
2014-09-11 08:10:33 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
static void
|
2014-09-23 22:59:01 +02:00
|
|
|
on_data (void *handle, const void *data, size_t len)
|
2014-09-11 08:10:33 +02:00
|
|
|
{
|
2014-09-21 01:12:15 +02:00
|
|
|
static const http_parser_settings http_settings =
|
|
|
|
{
|
|
|
|
.on_header_field = on_header_field,
|
|
|
|
.on_header_value = on_header_value,
|
|
|
|
.on_headers_complete = on_headers_complete,
|
|
|
|
};
|
|
|
|
|
2014-09-21 00:58:19 +02:00
|
|
|
struct scan_data *scan = handle;
|
|
|
|
http_parser *parser = &scan->parser;
|
2014-09-23 22:59:01 +02:00
|
|
|
size_t n_parsed = http_parser_execute (parser, &http_settings, data, len);
|
2014-09-21 00:58:19 +02:00
|
|
|
|
|
|
|
if (parser->upgrade)
|
|
|
|
{
|
|
|
|
// We should never get here though because `on_headers_complete'
|
2015-05-13 06:57:06 +02:00
|
|
|
// is called first and ends up stopping the unit.
|
2014-09-23 22:59:01 +02:00
|
|
|
g_data.api->unit_add_info (scan->u, "upgrades to a different protocol");
|
2015-05-13 06:57:06 +02:00
|
|
|
g_data.api->unit_stop (scan->u);
|
2014-09-21 00:58:19 +02:00
|
|
|
}
|
|
|
|
else if (n_parsed != len && parser->http_errno != HPE_CB_headers_complete)
|
2015-05-13 06:57:06 +02:00
|
|
|
g_data.api->unit_stop (scan->u);
|
2014-09-21 00:58:19 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
static void
|
2014-09-23 22:59:01 +02:00
|
|
|
on_eof (void *handle)
|
2014-09-21 00:58:19 +02:00
|
|
|
{
|
2014-09-23 22:59:01 +02:00
|
|
|
on_data (handle, NULL, 0);
|
2014-09-11 08:10:33 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
static struct service g_http_service =
|
|
|
|
{
|
|
|
|
.name = "HTTP",
|
|
|
|
.flags = SERVICE_SUPPORTS_TLS,
|
|
|
|
|
|
|
|
.scan_init = scan_init,
|
|
|
|
.scan_free = scan_free,
|
|
|
|
.on_data = on_data,
|
2014-09-21 00:58:19 +02:00
|
|
|
.on_eof = on_eof,
|
2014-09-18 23:41:07 +02:00
|
|
|
.on_error = NULL,
|
2015-05-13 06:57:06 +02:00
|
|
|
.on_stopped = NULL
|
2014-09-11 08:10:33 +02:00
|
|
|
};
|
|
|
|
|
|
|
|
static bool
|
|
|
|
initialize (void *ctx, struct plugin_api *api)
|
|
|
|
{
|
|
|
|
g_data = (struct plugin_data) { .ctx = ctx, .api = api };
|
|
|
|
api->register_service (ctx, &g_http_service);
|
|
|
|
return true;
|
|
|
|
}
|
|
|
|
|
|
|
|
struct plugin_info ponymap_plugin_info =
|
|
|
|
{
|
|
|
|
.api_version = API_VERSION,
|
|
|
|
.initialize = initialize
|
|
|
|
};
|