One Hat Cyber Team
Your IP :
52.15.210.243
Server IP :
192.145.235.60
Server :
Linux ngx365.inmotionhosting.com 5.14.0-427.33.1.el9_4.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 30 09:45:56 EDT 2024 x86_64
Server Software :
Apache
PHP Version :
8.2.27
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
opt
/
sharedrads
/
__pycache__
/
View File Name :
cms_counter.cpython-39.pyc
a �gt � @ s� d Z ddlZddlZddlZddlZddlZddlmZ ddlZddl Z ddl Z d dd�Z dd� Z d d � Z d d � Zd d d�Zd dd�Zd dd�Zd!dd�Zdddg fdd�Zd"dd�Zdd� Zed kr�e� dS )#a� CMS Counter 2.1 06/03/2024 Corey S ------- All Server Version - Should be acceptable for any server environment - Server Type determined by Fabric wrapper ckx.run_cms_counter() and passed to script via '-s' - 3rd Party/Additional Panels added to determine_panel_type() - Refactored NodeJS detection split into its own module - '--new' switch added to only check newly provisioned accounts - Overall code refactored to be more efficient � N)�PathTc C s� d}| rlt | �rl|dkrlz$tj| d|tjd�j�d��� }W q� tyh } zt|� W Y d}~q�d}~0 0 nL| r�t | �r�|dkr�z(tj| d|tjtj d�j�d��� }W n Y dS 0 |S )z� check_flag ignores if the command exits w/ anything other than 0 if True error_flag sends errors to /dev/null if set to True NT)�shell�check�stdout�utf-8F)r r r �stderr) �str� subprocess�run�PIPEr �decode�strip� Exception�printZDEVNULL)�command� check_flag� error_flag�output�e� r � ./opt/sharedrads/cms_counter.pyr s6 �� �� r c C s� t j�d�rdS t j�d�r dS t j�d�r0dS t j�d�r@dS t j�d �sXt j�d �r\d S t j�d �rld S t j�d�r|dS t j�d�r�dS t j�d�r�dS dS )a Determines type of Panel in use on server, i.e. CWP, Platform i, Plesk, etc Panels Currently Supported: - cPanel - CWP - Platform i - Webmin - Plesk - ISPConfig - DirectAdmin - CloudPanel � /var/cpanelZcPanelz/usr/local/cwpZCWPz/etc/profile.d/wp3.shZ Platform_iz /etc/webminZWebminz&/etc/httpd/conf.d/zz010_psa_httpd.confz(/etc/apache2/conf.d/zz010_psa_httpd.confZPleskz/usr/local/directadminZ DirectAdminz/usr/local/bin/dployZ CloudPanelz//home/admispconfig/ispconfig/lib/config.inc.phpz ISPConfig-2z1/usr/local/ispconfig/interface/lib/config.inc.phpz ISPConfig-3ZcVPS��os�path�existsr r r r �determine_panel_type8 s& r c C sR d} t j�d�rdS t j�d�r$dS t j�d�r4dS t j�d�rDdS t�d� dS )z� Function to determine Apache config file to use to check domains as different installs/versions can store the config in different files, starting w/ config for 2.2 and checking different 2.4 config locations to end Nz!/usr/local/apache/conf/httpd.confz/etc/httpd/conf/httpd.confz/etc/apache2/httpd.confz /etc/apache2/conf/httpd.confz.Unable to determine Apache config! Quitting...�r r r �sys�exit)� config_filer r r �identify_apache_config] s r! c C s> t j�d�rdS t j�d�r dS t j�d�r0dS t�d� dS )z, Function to find NGINX config file z/etc/nginx/vhostsz/etc/nginx/conf.d/vhostsz/etc/nginx/nginx.confz/Unable to locate NGINX config file! Quitting...Nr r r r r �identify_nginx_configm s r" c C s� g }| �r�dt | �v�r�| �d�d }tj�| � d��r�z�t| � d�dd��b}|�� D ]H}d|v rV|�� d �� �d �}|� d |� �|vrV|�|� d |� �� qVW d � n1 s�0 Y W n Y d S 0 t |�d k�r�t d |� �ddd�}|�r�|� � �r�t d|� d�ddd��d�}t |�d k�r�|D ]�} zFt d| � d�ddd�} t d| � d�d ddd��d�d } | | }W n Y d S 0 |�r0tj�|��r0|� d |� �|v�r0|�|� d |� �� �q0|S )z5 Find possible Node.JS installs per doc root � �/� z /.htaccessr ��encodingZPassengerAppRoot� �"�:Nr zid -u F)r r z pgrep -U z nodezpwdx z | cut -d ':' -f 2zps --no-headers -o command � | zawk '{print $2}'�.) r �splitr r r �open� readlinesr �append�lenr �isdigit) �docroot�domain� install_list�userZhtaccess�lineZ install_dirZuser_idZ node_procs�pid�cwdr r r r � find_nodejs{ s8 8 $ (r: c C s� d}t | �} | � d�d| � d�d| � d�d| � d�d | � d �d | � d �d | � d�d| � d�d| � d�d| � d�d| � d�d| � d�d| � d�d| � d�d| � d�d i}|�� D ] \}}tj�|�r�| S q�tj�| � d ���rzzjt| � d �d d ��B}|�� D ](}t�d |tj �r� W d � W d S q�W d � n1 �s>0 Y W n. t �yx } zt |� W Y d}~n d}~0 0 tj�| � d!���r�d"S tj�| � d#���r`tj�| � d ���r\zpt| � d �d d ��F}|�� D ],}t�d$|tj ��r� W d � W d%S �q�W d � n1 �s 0 Y W d&S t �yX } zt |� W Y d}~n d}~0 0 nd&S tj�| � d'���r�tj�| � d(���r�d)S �z t| � d'�d d ���}|�� D ]$}d*|v �r� W d � W d*S �q�tj�| � d+���rft| � d+�d d ��J} | �� D ]0}d,|v �r W d � W d � W d,S �qW d � n1 �sJ0 Y W d � W d-S W d � W d-S W d � n1 �s�0 Y W n. t �y� } zt |� W Y d}~n d}~0 0 tj�| � d.���r�d/S dS )0zl Determine CMS manually with provided document root by matching expected config files for known CMS Nz /concrete.phpZConcretez /Mage.php�Magentoz/clientarea.phpZWHMCSz/configuration.phpZJoomlaz/ut.phpZPHPListz/passenger_wsgi.pyZDjango�)/wp-content/plugins/boldgrid-inspirations�BoldGridz/wp-config.php� Wordpressz/sites/default/settings.phpZDrupalz/includes/configure.phpZZenCartz/config/config.inc.phpZ Prestashopz/config/settings.inc.phpz/app/etc/env.phpz/app/etc/local.xmlz/vendor/laravelZLaravelz /index.phpr r& Z CodeIgniterz/main.tsZAngularz/main.jsZ bootstrapZ BootstrapZ Javascriptz /config.phpz/admin/config.phpZOpenCart�Moodlez /cron.phpZphpBBZ Undeterminedz /index.htmlZHTML) r �itemsr r r r. r/ �re�search� IGNORECASEr r ) r3 �cmsZcms_dictionaryr Zcontent�indexr7 r ZconfigZcronr r r � determine_cms� s| � : 8 D6 rF c C s* | r&t j�| �r&t j�| � d��r&dS dS )Nr< r= r> r �Z directoryr r r �double_check_wordpress� s rH c C sR |dkr&d| � d|� d�d }| }�n|dk�r,| � d�}d|v rFd S |�d �d kr�d }|�d �d d kr�|�d �}t|�d }d }||kr�||| 7 }||kr�|d7 }|d 7 }q�|}nBt|�d }d }||kr�||| 7 }||kr�|d7 }|d 7 }q�|}|� d| � �}tj�|��r(d|� d�d }nd }|�r<t|�} ntd|� �� d S | S )N�apachezgrep 'ServerName z' z -A3 | grep DocumentRoot | zawk '{print $2}' | uniq�nginxz.conf�*�_r � r( r% r, r$ z grep root r+ z#awk '{print $2}' | uniq | tr -d ';'z Cannot determine docroot for: ) � removesuffix�countr- r1 r r r r r ) r4 �web_server_config� web_serverZ docroot_cmd� domain_nameZ new_domain�limit�startZ nginx_configr3 r r r �manual_find_docroot� sH rU Fc % , C s� d}d}d}d}d}i } g } g } g d�} t d�} t d�}t|�dkrhd}d}t� }|r�d |� d �d }n*t| �dkr�d}d }t� }|r�d |� d�}|r�t |�}|�rn|�� D �]�}t|||d�}|r�tj�|�r�g }| � |� | � |� |� i� z|t ||d�7 }W n Y n0 |� d�|� d�|� d�|� d�|� d�|� d�|� d�|� d�|� d�|� d�|� d�|� d �|� d �|� d �|� d �|� d �|� d!�|� d"�|� d#�|� d$�|� d%�|� d&�|� d'�|� d(�|� d)�|� d*�|� d+�|� d,�|� d-�|� d.�|� d/�|� d0�|� d1�|� d2�|� d3�|� d4�|� d5�|� d6�|� d7�|� d8�|� d9�|� d:�g*}t |�}z�|� � D ]�}tj�|��rx|�� �rxt|�|v�rxz|t t|�|d�7 }W n Y �qxY n0 ttj�|��}t|�}| � |� | � |� |� d;|� �i� |� |� �qxW q� t�y2 Y q�Y q� t�yj } z t|� W Y d}~q�W Y d}~q�d}~0 0 q�i }t|�dk�r�|} tj�d<��rht|�dk�rht d<�}z:td=d>d?��}|�� }W d � n1 �s�0 Y W n t�d@� Y n0 |� � D ]d} | �� �rt| j�d } |D ]@} | j| | �dA�d k�r"| j| | v�r"| � | j| � �q"�qt| �dk�r�t| �dk�r�| D �]}d} d} | D ].}!|!| v �r��q�|!|�d;�v �r�|!} �qʐq�t|dB�} | �r�t� }"| �rH| �rH| | v�rH| �|� d�}#| �r0t|� dC|"� dC| � dC|#� dC| � � � nt| � dC|#� dC| � �� |D ]B}$| �rxt|� dC|"� dC| � dC|$� dD�� nt| � dC|$� dD�� �qL�q�dS )EzG Function to get counts of CMS from all servers without cPanel r N)<�root�bin�daemon�adm�sync�shutdown�halt�mail�games�ftp�nobody�systemd-network�dbus�polkitd�rpc�tss�ntp�sshd�chrony�nscd�named�mailman�cpanel�cpanelcabcache� cpanellogin�cpaneleximfilter�cpaneleximscanner�cpanelroundcube�cpanelconnecttrack�cpanelanalytics�cpses�mysql�dovecot�dovenull�mailnull�cpanelphppgadmin�cpanelphpmyadmin�rpcuser� nfsnobody�_imunify� wp-toolkit�redisrJ �telegraf�sssd�scops�clamav�tier1adv�inmotion�hubhost�tier2s�lldpd�patchman�moveuser�postgres� cpanelsolr�saslauth�nagios�wazuh�systemd-bus-proxy�*systemctl status nginx &>/dev/null;echo $?�*systemctl status httpd &>/dev/null;echo $?�0r( rI zgrep ServerName 'z' | z!awk '{print $2}' | sort -g | uniqrJ zfind 'zS' -type f -name '*.conf' -print | grep -Ev '\.ssl\.conf' | xargs -d ' ' -l basename�r4 rP rQ �r3 r4 z /wp-adminz /wp-includesz /wp-contentz/wp-jsonz/adminz/cachez/tempz/tmpz /__wildcard__z/cgi-binz /.well-knownz/configz /languagez/pluginsz/mediaz /librariesz/imagesz /includesz/includez/modulesz /componentsz /templatesz/cliz/layoutsz/storagez/logsz/binz/uploadsz/docsz/stylez/filesz/soundsz/cartz/shopz/assetsz/systemz/documentationz /applicationz/scriptz/scriptsz/backupsz/backupr$ z/homez /etc/passwdr r& z&Unable to read /etc/passwd! Exiting...r* )r3 � z NodeJS) r r r! r" r- rU r r r r0 �updater: r �iterdir�is_dir�basename�NotADirectoryErrorr r r1 r. r/ r r �partsrF r �get)%�verbose�new�server� user_listrJ rI rP Z domains_cmdZ domains_listZdomainsZ docroot_listZusers� sys_users� nginx_status� apache_statusrQ rR r3 � node_installsZbad_dirsZ docroot_dir�d�dirnamer � cms_count� users_dir�passwdZ passwd_file�urS r7 Zget_cmsZ docroot_userr6 Zptr4 �installr r r �cms_counter_no_cpanel s > �, & $ , * &" r� c ( = C s� dd� t �� �d�d D �}d}t|�dkrB|D ]}|�|� q0nd}d}ddd d d d d ddddddddddddd�}i }i } i } g } g } dd d d d d d!d"d#d$d%d&d'd(d)d*d+d,d-d.d/d0d1d2d3d4d5d6d7d8d9d:d;d<d=d>d?d@dAdBdCdDdEdFdGdHdIdJ|� dKdLdMdNdOdPdQdRdSdTdUdVg=} tj�dW��r�|�r2dX}t|��dY�} n`t dW�}|� � D ]N}t|j �dZ }|� � �sB|j | d[k�rBd\|j | v�rB| � |j | � �qBn t�d]� t| �dk�r�t�d^� tj�d_��s�t�d`� ntj�da��r�dZ}|dZk�r�| D �] }|| v �r�q�db}db}g }dc|� dd�}t|dedf�}zt�|�}W n* t�y` } zdb}W Y db}~n db}~0 0 dg|�� v �r�| � |� �q�n|�r�dhd� |D �}|D ]�}z�|| di }|| dj }|�s�z|| dk } || }W n" t|� dl�� Y W �q�Y n0 |�rB|�rB|dmk�r&|| dn } t| do�}| �||i� | �||i� W n< t�y� } z"t|� W Y db}~�q�W Y db}~n db}~0 0 �q�n| � |� �q�tdpdedf�} tdqdedf�} dr|� ds�} t| dedf��dY�}!|!D ]�}"t|"�dt��dZk�r�t|"�dt�dZ ��� t|��� k�r�|"�dt�d }#t| �duk�r4t� }$dv}%n*t| �duk�rNt� }$dE}%ntdw� dbS t|#|$|%dx�} |$�r�| �r�z"|t | |"�dt�d �� dy�7 }W n Y �q�Y n0 �q�t|�dk�r�|D ]6}| �|�dt�dZ dzi� | �|�dt�dZ |i� �qĐq�| �rF| � � D ]4\}}&| � |db�}'t|� d{|'� d||� d||&� �� �qn8| � � D ].\}}&| � |db�}'t|'� d||� d||&� �� �qNnBzt | ||d}� W n. t�y� } zt|� W Y db}~n db}~0 0 t| �dZk�r�t | | ||d~� dbS )a( Function to determine CMS counter on servers with cPanel Attempting to use Softaculous first Checking manually if that returns no results Including users list as passed variable so we can run against specific users only as well, future-proofing/anticipating possible request c S s g | ]}|� � r|�qS r )r2 )�.0�nr r r � <listcomp>� � z&cms_counter_cpanel.<locals>.<listcomp>r, r ZsecurZIGNOREMEz Moodle 3.5r? z Moodle 2.6z Moodle 2.0z Moodle 3.7z Moodle 3.6z Moodle 3.9z Moodle 3.8z Moodle 3.11z Moodle 3.10z Moodle 4.0z Moodle 4.1z Magento 1.9z Magento 2.3z Magento 1.7z Magento 2.2r; z Magento 2.4.2z Magnto 2.4.1)Z503Z542Z98Z343Z517Z485Z670Z668Z699Z681Z706Z713Z67Z545Z465Z486Z665Z688Z709rV rW rX rY rZ r[ r\ r] r^ r_ r` ra rb rc rd re rf rg rh ri rj rk rl rm rn ro rp rq rr rs rt ru rv rw rx ry rz r{ r| r} r~ r rJ r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� z/var/cpanel/usersz(tail -250 /etc/passwd | cut -d ':' -f 1r# r( �systemz.bakz-Unable To Determine cPanel Users! Quitting...z No Users Detected. Quitting...r z cPanel not detected. Quitting...z/var/softaculousNzp/usr/local/cpanel/3rdparty/bin/php /usr/local/cpanel/whostmgr/docroot/cgi/softaculous/cli.php --list_ins --user=z --resp=jsonF)r �errorc S s g | ]}|d kr|�qS )r� r )r� r� r r r r� � r� Z script_nameZsofturl�sidz: Error determining CMSZ WordPressZsoftpathrG r� r� z grep -E 'z$' /etc/userdomainsr* r� rI z$Unable to identify web server configr� r� ZNodeJSz cPanel r� )r� r� r� )r� r� r� r� ) �platformZnoder- r1 �joinr r r r r r� r� r� r0 r r �json�loadsr �keysr rH r� r r r! r" rU r: r@ r� r� )(r� r� r� Z secur_numsZ secur_userr� Z softaculousZsoftaculous_idsr� Zcms_infoZ site_ownersr� Zno_install_usersr� Z user_list_cmdr� r� rS r6 Z user_installsZuser_installs_jsonr� �cmdr r5 r� Zuser_cms�urlr� r3 r� r� Zget_domains_cmdZ domain_listZ domain_stringr4 rP rQ rD Z site_ownerr r r �cms_counter_cpanel� sz ��? * * 8 " $ r� c C s� t jdd�} | jddddddd d � | jd d d dddd d � | jdddddd� t| �� �}g d�}d}|D ]8}|d |�� ks�|d |ks�|d |�� krl|} q�ql|s�t�d� |d }|d }t j � d�r�t |||d� nt |||d� dS )z� Main function, initializes global variables as globals, gets hostname and call relevant checks after determining enviroment zCMS Counter 2.1)� descriptionz-vz --verboser� z,Include Panel Type and Server Type in output� store_constTF)�dest�help�action�const�defaultz-nz--newr� z2Check the 250 most recently provisioned users onlyz-sz --server-typer� z(Server Type - passed by Fabric generallyZstore)r� r� r� )ZSharedZResellerZHubZVPSZ DedicatedNz"Server Type not given! Quitting...r )r� r� r� )�argparse�ArgumentParser� add_argument�vars� parse_args�lower�upperr r r r r r� r� )�parser�argsZ server_typesZ server_type�stZverbZonly_newr r r �main� s& , r� �__main__)NTT)NN)N)N)NNN)FFN)�__doc__r r �globr� r �pathlibr r� r� rA r r r! r" r: rF rH rU r� r� r� �__name__r r r r �<module> s0 % # I * X _