Daniel Gibbs
9 years ago
3 changed files with 63 additions and 212 deletions
@ -1,130 +0,0 @@ |
|||||
#!/bin/bash -x |
|
||||
# LGSM command_postdetails.sh function |
|
||||
# Author: CedarLUG |
|
||||
# Contributor: CedarLUG |
|
||||
# Website: https://gameservermanagers.com |
|
||||
# Description: Strips sensitive information out of Details output |
|
||||
|
|
||||
local commandname="POSTDETAILS" |
|
||||
local commandaction="Postdetails" |
|
||||
local function_selfname="$(basename $(readlink -f "${BASH_SOURCE[0]}"))" |
|
||||
|
|
||||
# POSTDETAILS variable affects the output of command_details.sh. Setting |
|
||||
# it here silences the output from sourcing command_details.sh. |
|
||||
POSTDETAILS=yes |
|
||||
|
|
||||
# Set POSTTARGET to the appropriately-defined post destination. The present |
|
||||
# option is only pastebin, but hastebin is on the todo list (and should be |
|
||||
# a lot easier than pastebin. |
|
||||
# |
|
||||
# Another reason for an alternative here is that pastebin limits guest |
|
||||
# posts to 10 per day, which might be a tight limit for some debugging situations. |
|
||||
|
|
||||
POSTTARGET="http://pastebin.com" |
|
||||
POSTEXPIRE="1W" # use 1 week as the default, other options are '24h' for a day, etc. |
|
||||
|
|
||||
# This file sources the command_details.sh file to leverage all |
|
||||
# of the already-defined functions. To keep the command_details.sh |
|
||||
# from actually producing output, the main executable statements have |
|
||||
# been wrapped in the equivalent of an ifdef clause, that looks |
|
||||
# for the variable "postdetails" to be defined. -CedarLUG |
|
||||
|
|
||||
# source all of the functions defined in the details command |
|
||||
. ${functionsdir}/command_details.sh |
|
||||
|
|
||||
fn_bad_tmpfile() { |
|
||||
echo "There was a problem creating a temporary file ${tmpfile}." |
|
||||
core_exit.sh |
|
||||
} |
|
||||
|
|
||||
fn_gen_rand() { |
|
||||
# This is just a simple random generator to generate a random |
|
||||
# name for storing the output. Named pipes would (possibly) be |
|
||||
# better. -CedarLUG |
|
||||
# |
|
||||
# len holds the number of digits in our random string |
|
||||
local len=$1 |
|
||||
# If not specified, default to 10. |
|
||||
: {len:=10} |
|
||||
# Quick generator for a random filename, pulled from /dev/urandom |
|
||||
tr -dc A-Za-z0-9_ < /dev/urandom | head -c ${len} | xargs |
|
||||
} |
|
||||
|
|
||||
# Rather than a one-pass sed parser, default to using a temporary directory |
|
||||
filedir="${lgsmdir}/tmp" |
|
||||
|
|
||||
# Not all game servers possess a tmp directory. So create it if |
|
||||
# it doesn't already exist |
|
||||
mkdir -p ${filedir} 2>&1 >/dev/null |
|
||||
|
|
||||
tmpfile=${filedir}/$(fn_gen_rand 10).tmp |
|
||||
|
|
||||
touch ${tmpfile} || fn_bad_tmpfile |
|
||||
|
|
||||
# fn_display_details is found in the command_details.sh file (which |
|
||||
# was sourced above. The output is parsed for passwords and other |
|
||||
# confidential information. -CedarLUG |
|
||||
|
|
||||
# The numerous sed lines could certainly be condensed quite a bit, |
|
||||
# but they are separated out to provide examples for how to add |
|
||||
# additional criteria in a straight-forward manner. |
|
||||
# (This was originally a sed one-liner.) -CedarLUG |
|
||||
|
|
||||
fn_display_details | sed -e 's/password="[^"]*/password="--stripped--/' | |
|
||||
sed -e 's/password "[^"]*/password "--stripped--/' | |
|
||||
sed -e 's/password: .*/password: --stripped--/' | |
|
||||
sed -e 's/gslt="[^"]*/gslt="--stripped--/' | |
|
||||
sed -e 's/gslt "[^"]*/gslt "--stripped--/' | |
|
||||
sed -e 's/pushbullettoken="[^"]*/pushbullettoken="--stripped--/' | |
|
||||
sed -e 's/pushbullettoken "[^"]*/pushbullettoken "--stripped--/' | |
|
||||
sed -e 's/authkey="[^"]*/authkey="--stripped--/' | |
|
||||
sed -e 's/authkey "[^"]*/authkey "--stripped--/' | |
|
||||
sed -e 's/authkey [A-Za-z0-9]\+/authkey --stripped--/' | |
|
||||
sed -e 's/rcts_strAdminPassword="[^"]*/rcts_strAdminPassword="--stripped--/' | |
|
||||
sed -e 's/rcts_strAdminPassword "[^"]*/rcts_strAdminPassword "--stripped--/' | |
|
||||
sed -e 's/sv_setsteamaccount [A-Za-z0-9]\+/sv_setsteamaccount --stripped--/' | |
|
||||
sed -e 's/sv_password="[^"]*/sv_password="--stripped--/' | |
|
||||
sed -e 's/sv_password "[^"]*/sv_password "--stripped--/' | |
|
||||
sed -e 's/zmq_stats_password="[^"]*/zmq_stats_password="--stripped--/' | |
|
||||
sed -e 's/zmq_stats_password "[^"]*/zmq_stats_password "--stripped--/' | |
|
||||
sed -e 's/zmq_rcon_password="[^"]*/zmq_rcon_password="--stripped--/' | |
|
||||
sed -e 's/zmq_rcon_password "[^"]*/zmq_rcon_password "--stripped--/' | |
|
||||
sed -e 's/pass="[^"]*/pass="--stripped--/' | |
|
||||
sed -e 's/pass "[^"]*/pass "--stripped--/' | |
|
||||
sed -e 's/rconServerPassword="[^"]*/rconServerPassword="--stripped--/' | |
|
||||
sed -e 's/rconServerPassword "[^"]*/rconServerPassword "--stripped--/' > ${tmpfile} |
|
||||
|
|
||||
# strip off all console escape codes (colorization) |
|
||||
sed -i -r "s/[\x1B,\x0B]\[([0-9]{1,2}(;[0-9]{1,2})?)?[mGK]//g" ${tmpfile} |
|
||||
|
|
||||
# If the gameserver uses anonymous steam credentials, leave them displayed |
|
||||
# in the output. Otherwise, strip these out as well. |
|
||||
if ! grep -q "^steampass[= ]\"\"" ${tmpfile} ; then |
|
||||
sed -i -e 's/steampass[= ]"[^"]*/steampass "--stripped--/' ${tmpfile} |
|
||||
fi |
|
||||
if ! grep -q "^steamuser[= ]\"anonymous\"" ${tmpfile} ; then |
|
||||
sed -i -e 's/steamuser[= ]"[^"]*/steamuser "--stripped--/' ${tmpfile} |
|
||||
fi |
|
||||
|
|
||||
if [ "$POSTTARGET" == "http://pastebin.com" ] ; then |
|
||||
# grab the return from 'value' from an initial visit to pastebin. |
|
||||
TOKEN=$(curl -s $POSTTARGET | |
|
||||
sed -n 's/^.*input type="hidden" name="csrf_token_post" value="\(.*\)".*$/\1/p') |
|
||||
# |
|
||||
# Use the TOKEN to then post the content. |
|
||||
# |
|
||||
link=$(curl -s "$POSTTARGET/post.php" -D - -F "submit_hidden=submit_hidden" \ |
|
||||
-F "post_key=$TOKEN" -F "paste_expire_date=${POSTEXPIRE}" \ |
|
||||
-F "paste_name=${gamename} Debug Info" \ |
|
||||
-F "paste_format=8" -F "paste_private=0" \ |
|
||||
-F "paste_type=bash" -F "paste_code=<${tmpfile}" | |
|
||||
awk '/^location: / { print $2 }' | sed "s/\n//g") |
|
||||
|
|
||||
# Output the resulting link. |
|
||||
fn_print_warn_nl "You now need to visit (and verify) the content posted at ${POSTTARGET}${link}" |
|
||||
fi |
|
||||
|
|
||||
# cleanup |
|
||||
rm ${tmpfile} || /bin/true |
|
||||
|
|
||||
core_exit.sh |
|
||||
Loading…
Reference in new issue