w4sp.py

from w4sp_app import *
import errno
from multiprocessing import Process

from random import randrange

def test():

    docker_clean()

    r1 = container('r1', image='w4sp/testing:vrrp')
    
    r1.enter_ns(ns='mnt')

    #libc = ctypes.CDLL('libc.so.6')
    #print r1.proc_path
    #fd = open(r1.proc_path + 'mnt', 'ro')

    #if libc.setns(fd.fileno(), 0) == -1:
    #    e = ctypes.get_errno()
    #    raise OSError(e, errno.errorcode[e])

    print r('ls -sail /root')

    r1.exit_ns()



def setup_network2(h_if):

    try:
        ns_root.shutdown()

    except:
        print('[*] Did not shutdown cleanly, trying again')
        docker_clean()

    finally:
        docker_clean()

    net_1 = {'subnet' : '192.100.200.0/24',
                'hubs' : [
                    {'switch' : ['sw1'],
                        'clients' : [
                            {'vrrpd' : ['r1', 'r2']},
                            {'victims' : ['vic1',]},
                            {'samba' : ['smb1']},
                            {'ftp_tel' : ['ftp1']}
                        ]
                    }
                ]
            }

    net_2 = {'subnet' : '10.100.200.0/24',
                'hubs' : [
                    {'switch' : ['sw2'],
                        'clients' : [
                            {'vrrpd' : ['r1', 'r2']},
                            {'inet' : ['inet']},
                            {'victims' : ['vic4']},
                            {'samba' : ['smb2']},
                            {'ftp_tel' : ['ftp2']}
                        ]
                    }
                ]
            }


    create_netx(net_1)
    create_netx(net_2)

    #we are going to assume we are only dealing with one hub
    #yes....this is gross, maybe make a convenience function
    #this gets 'sw1' for example in net_1
    sw1 = [net_1['hubs'][0][x] for x in net_1['hubs'][0].keys() if x != 'clients'][0][0]
    sw2 = [net_2['hubs'][0][x] for x in net_2['hubs'][0].keys() if x != 'clients'][0][0]

    #here we fixup dns by adding the other dns servers ip to /etc/resolv.conf
    for dns in (sw1,sw2):
        for dns2 in (sw1,sw2):
            if dns != dns2:
                #should only have one ip.....
                nic,ip = next(c(dns2).get_ips()).popitem()
                echo = 'echo nameserver %s >> /etc/resolv.conf' % ip
                #add the other nameserver to resolv.conf
                #we are using subprocess here as we have a complicated command, " and ' abound
                subprocess.check_call(['docker', 'exec', dns, 'bash', '-c', echo])

    #setup inet, just making sure we are in the root ns
    ns_root.enter_ns()
    #rename our interface and move it into inet
    r('ip link set $h_if down')
    r('ip link set $h_if name root')
    r('ip link set root netns inet')

    #connect host to sw1 - hardcoding is bad
    nic = c('sw1').connect(ns_root)
    #dropping in to ns to attach interface to bridge
    c('sw1').enter_ns()
    ###########################

    r('brctl addif br0 $nic')
    r('ip link set $nic up')

    ########################### 
    ns_root.enter_ns()

    #ensure network manager doesn't mess with anything
    r('service network-manager stop')
    r('ip link set $nic name w4sp_lab')
    #p = Process(target=r, args=('dhclient -v w4sp_lab',))
    #p.start()
    r('dhclient -v w4sp_lab')
    
    c('inet').enter_ns()
    ###############################################
     
    #add the routes to the other network
    #hardcoding since I am lazy
    other_net = net_1['subnet'].strip('/24')
    other_gw = net_2['subnet'].strip('0/24') + '1'

    dfgw_set = False

    while not dfgw_set:
        for ips in c('inet').get_ips():
            if 'inet_0' in ips.keys():
                r('route add -net $other_net netmask 255.255.255.0 gw $other_gw')
                dfgw_set = True
        
    #############################################
    c('inet').exit_ns()

    """
    try:
        r('ping -c 2 192.100.200.1')

    except:
        print('[*] Bad network generated, start over')
        setup_network2(h_if)
    """


def setup_network(h_if):

    #docker_clean()

    #the key is the image name
    #net1 = {'sw' : ['sw1'], 'vrrpd' : ['r1', 'r2'],
    #    'base' : ['vic', 'attacker']}

    #net2 = {'sw' : ['sw2'], 'vrrpd' : ['r1', 'r2'],
    #     'base' : ['inet']}

  
    net_1 = {'subnet' : '192.100.200.0/24', 
                'hubs' : [ 
                    {'switch' : ['sw1'], 
                        'clients' : [
                            {'vrrpd' : ['r1', 'r2']}, 
                            {'victims' : ['vic1', 'vic2', 'vic3']},
                            {'samba' : ['smb1']},
                            {'ftp_tel' : ['ftp1']}
                        ]
                    }
                ]
            }
  
    net_2 = {'subnet' : '10.100.200.0/24', 
                'hubs' : [ 
                    {'switch' : ['sw2'], 
                        'clients' : [
                            {'vrrpd' : ['r1', 'r2']}, 
                            {'base' : ['inet']},
                            {'victims' : ['vic4', 'vic5']},
                            {'samba' : ['smb2']},
                            {'ftp_tel' : ['ftp2']}
                        ]
                    }
                ]
            }


    net_3 = {'subnet' : '10.1.1.0/24',
                'hubs' : [ 
                    {'sw' : ['sw3'],
                        'clients' : [
                            {'base' : ['vic6', 'vic7', 'inet']},
                            {'ftp_tel' : ['ftp3']},
                            {'vrrpd' : ['r3', 'r4']}

                         ]
                     }
                ]
            }

    create_net(net_1)
    create_net(net_2)
    #create_net(net_3)    
 
    #hardcoding this for now...I know these are the machines I want to run vrrp
    setup_vrrp(['r1', 'r2'])

    new_gw = setup_inet('inet', h_if, net_1['subnet'])

    #now it is time to setup routes
    #hardcoding this logic for now :(
    for router in ['r1', 'r2']:
       
        c(router).enter_ns()
        #######################################
 
        r('ip route add default via $new_gw')
    
        for nic in c(router).nics:
            #we are going to add an artificial delay here
            #add 1ms delay with a 5ms jitter
            r('tc qdisc add dev $nic root netem delay 1ms 5ms')
    
        ########################################
        c(router).exit_ns()
 
    #hardcoding is bad mmmkay
    switches = ['sw1', 'sw2']
    for dns in switches:
        for dns2 in switches:
            if dns != dns2:
                #should only have one ip.....
                nic,ip = next(c(dns2).get_ips()).popitem()
                echo = 'echo nameserver %s >> /etc/resolv.conf' % ip
                #add the other nameserver to resolv.conf
                #we are using subprocess here as we have a complicated command, " and ' abound
                subprocess.check_call(['docker', 'exec', dns, 'bash', '-c', echo])

        #add the upstream google dns and localhost server
        subprocess.check_call(['docker', 'exec', dns, 'bash', '-c', 'echo nameserver 8.8.8.8 >> /etc/resolv.conf'])

    #connect host to sw1 - hardcoding is bad
    nic = c('sw1').connect(ns_root)
    #dropping in to ns to attach interface to bridge
    c('sw1').enter_ns()
    ###########################

    r('brctl addif br0 $nic')
    r('ip link set $nic up')

    ########################### 
    ns_root.enter_ns()

    #ensure network manager doesn't mess with anything
    r('service network-manager stop')
    r('ip link set $nic name w4sp_lab')
    #p = Process(target=r, args=('dhclient -v w4sp_lab',))
    #p.start()
    r('dhclient -v w4sp_lab')