From d9cdae9fda434e977ad280cfb94e2d90c4cab7bc Mon Sep 17 00:00:00 2001
From: Emile <hanemile@protonmail.com>
Date: Sun, 17 Feb 2019 20:34:17 +0100
Subject: Initial commit

---
 go.mod  |   8 +++++
 go.sum  |   8 +++++
 main.go | 116 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 132 insertions(+)
 create mode 100644 go.mod
 create mode 100644 go.sum
 create mode 100644 main.go

diff --git a/go.mod b/go.mod
new file mode 100644
index 0000000..d966455
--- /dev/null
+++ b/go.mod
@@ -0,0 +1,8 @@
+module ssh-test
+
+require (
+	github.com/anmitsu/go-shlex v0.0.0-20161002113705-648efa622239 // indirect
+	github.com/gliderlabs/ssh v0.1.1
+	github.com/kr/pty v1.1.3
+	golang.org/x/crypto v0.0.0-20190211182817-74369b46fc67
+)
diff --git a/go.sum b/go.sum
new file mode 100644
index 0000000..ea59ed7
--- /dev/null
+++ b/go.sum
@@ -0,0 +1,8 @@
+github.com/anmitsu/go-shlex v0.0.0-20161002113705-648efa622239 h1:kFOfPq6dUM1hTo4JG6LR5AXSUEsOjtdm0kw0FtQtMJA=
+github.com/anmitsu/go-shlex v0.0.0-20161002113705-648efa622239/go.mod h1:2FmKhYUyUczH0OGQWaF5ceTx0UBShxjsH6f8oGKYe2c=
+github.com/gliderlabs/ssh v0.1.1 h1:j3L6gSLQalDETeEg/Jg0mGY0/y/N6zI2xX1978P0Uqw=
+github.com/gliderlabs/ssh v0.1.1/go.mod h1:U7qILu1NlMHj9FlMhZLlkCdDnU1DBEAqr0aevW3Awn0=
+github.com/kr/pty v1.1.3 h1:/Um6a/ZmD5tF7peoOJ5oN5KMQ0DrGVQSXLNwyckutPk=
+github.com/kr/pty v1.1.3/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
+golang.org/x/crypto v0.0.0-20190211182817-74369b46fc67 h1:ng3VDlRp5/DHpSWl02R4rM9I+8M2rhmsuLwAMmkLQWE=
+golang.org/x/crypto v0.0.0-20190211182817-74369b46fc67/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
diff --git a/main.go b/main.go
new file mode 100644
index 0000000..2928196
--- /dev/null
+++ b/main.go
@@ -0,0 +1,116 @@
+package main
+
+import (
+	"bytes"
+	"fmt"
+	"github.com/gliderlabs/ssh"
+	"github.com/kr/pty"
+	"io"
+	"log"
+	"net/http"
+	"os/exec"
+)
+
+var (
+	metrics_num_passwords int
+)
+
+func main() {
+	log.Println("Starting SSH listener")
+
+	//// start the ssh server
+	//go func() {
+	//	listenErr := ssh.ListenAndServe(":2222", nil, ssh.PasswordAuth(handlePass))
+	//	if listenErr != nil {
+	//		log.Fatalln(listenErr.Error())
+	//	}
+	//}()
+
+	go func() {
+		// star the metrics listener
+		log.Println("Starting HTTP metrics listener")
+		http.HandleFunc("/metrics", metricsHandler)
+		listenErr := http.ListenAndServe(":8080", nil)
+		if listenErr != nil {
+			log.Fatalln(listenErr.Error())
+		}
+	}()
+
+	ssh.Handle(handleConnection)
+	log.Fatal(ssh.ListenAndServe(":2222", nil, ssh.PasswordAuth(handlePass)))
+}
+
+func handleConnection(s ssh.Session) {
+	cmd := exec.Command("bash")
+	p, _ := pty.Start(cmd)
+
+	go func() {
+		var readErr error
+		for readErr == nil {
+			// create two buffers, one for storing the char input (buf)
+			// and the other for storing complete commands (commandBuffer)
+			buf := make([]byte, 1024)
+			commandBuffer := make([]byte, 0)
+
+			// the current char
+			var char string
+
+			// read until ENTER is pressed
+			for char != "\x0d"{
+
+				// read the char inserted by the user into the buffer
+				_, readErr = s.Read(buf)
+
+				// trim the char and append it to the commandBuffer
+				char1 := bytes.Trim(buf, "\x00")[0]
+				if char1 == []byte("\x03")[0] {
+					s.Close()
+					return
+				}
+				commandBuffer = append(commandBuffer, char1)
+
+				// write the char to stdout
+				char = string(bytes.Trim(buf, "\x00"))
+				input := string(bytes.Trim(buf, "\x00"))
+				io.WriteString(s, input)
+			}
+
+			// prepare the command for execution
+			input := string(bytes.Trim(commandBuffer, "\x00"))
+
+			// filter out unwanted commands
+			filteredInput := filter(input)
+
+			// write the string to the commandHandler
+			io.WriteString(p, filteredInput)
+			s.Close()
+			return
+		}
+	}()
+
+	io.Copy(s, p)
+	s.Close()
+}
+
+func filter(buffer string) string {
+	//if strings.Contains(buffer, "wget") == false {
+	//	return "\n"
+	//}
+	//return buffer
+
+	// all ways return a newline -> track what is input
+	log.Printf("%s", buffer)
+	return "\n"
+}
+
+func handlePass(ctx ssh.Context, pass string) bool {
+	metrics_num_passwords++
+	log.Printf("%s@%s: '%s'", ctx.User(), ctx.RemoteAddr().String(), pass)
+	return true
+}
+
+// Handle HTTP /metrics requests
+func metricsHandler(w http.ResponseWriter, req *http.Request) {
+	fmt.Fprintf(w, "num_passwords %d\n", metrics_num_passwords)
+}
+
-- 
cgit 1.4.1