-
✘✘✘ WIBUHAX0R1337 ✘✘✘
-
✘
PATCH :
/
usr
/
lib
/
fm-agent
/
library
/
__pycache__
/
Upload File:
files >> //usr/lib/fm-agent/library/__pycache__/inspector.cpython-36.pyc
3 q��i!B � $ @ s8 d dl m Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZy d dlZW n d dlj ZY nX y d dl Z W n dZ Y nX y d dl Z W n dZ Y nX y d dl Z W n: e k r� y d dlZ W n e k r� dZ Y nX Y nX dd� Zdd� Zdd� Zd d � Zd d � Zd d� Zdd� ZG dd� de�ZdS )� )�datetimeNc c s@ t jd dkrt}nt}x"|d�D ]}| d@ V | dL } q"W d S )Nr � � � � )�sys� version_infoZxrange�range)�n�rng�i� r �&/usr/lib/fm-agent/library/inspector.py�mac_address_octets& s r c C s dd� t | �D �}djt|��S )zw Expresses a decimal integer in standard MAC address format ex: 7267271067680 -> '06:9c:0b:1c:48:20' c S s g | ] }d | �qS )z%02xr )�.0�ar r r � <listcomp>8 s z&int_to_mac_address.<locals>.<listcomp>�:)r �join�reversed)r �valuesr r r �int_to_mac_address2 s r c C s, t j� } dtjkr(| j� jd�r(t j� } | S )N�darwinz.arpa)�socket�getfqdnr �platform�lower�endswith� gethostname)�hostnamer r r �get_fqdn< s r c C sH dt jkrd S y*tjddd�} tjdj| ��\}}|j� S d S d S )Nr ZscutilT)�excz{} --get ComputerName)r r � agent_util�which�execute_command�format�strip)Zsc_util�_�outputr r r �get_server_nameI s r) c C s� t jd�} tjj� }dtjj� i}d|kr�y\tjd�}tjdj|��\}}d|krt|j � j d�d j � j d �|d < n| j d j|�� W n6 t k r� } z| j d jt|��� W Y d d }~X nX |S ) N� Inspectorr r Zioregz6{} -d2 -c IOPlatformExpertDevice | grep IOPlatformUUIDr �=� �"�uuidzioreg error: {}zGather UUID failure: {})�logging� getLoggerr r r r" r# r$ r% r& �split�error� Exception�info�str)�logZ my_platform�rvZ ioreg_bin�rcr( �er r r �get_platform_uuidsY s "r: c c sR t rNxHt j� j� D ]8\} }x.|D ]&}|jt jkr2q |jdkr>q |jV q W qW d S )Nz00:00:00:00:00:00)�psutilZ net_if_addrs�items�familyZAF_LINK�address)Ziface�addrs�addrr r r �mac_address_iterr s rA c C s� dg i} y dd l }t|j� �| d< W n6 tk rZ } ztj|� tjd� W Y d d }~X nX y*x$tt� �D ]\}}| d j |� qjW W nR t k r� tjd� Y n6 tk r� } ztj|� tjd� W Y d d }~X nX | S )NZ macaddressr Z uuid_getnodezCUnable to import uuid module. Skipping MAC address fact collection.z=Unable to import psutil, skipping MAC address fact collectionz+Unknown error during MAC address collection) r. r Zgetnoder3 r/ �warningr4 � enumeraterA �append� ImportError)�factsr. �errr Zmac_addrr r r �get_mac_addresses} s" rH c @ s� e Zd ZddgZdZdd� Zd!dd�Zd d � Zd d � Zd d� Z dd� Z dd� Z dd� Z dd� Z dd� Zdd� Zd"dd �Zd d � Zd d � ZdS )#r* z/etc/apt/sources.listz /etc/yum.repos.d/panopta.repoz http://packages.panopta.com/c C s || _ d S )N)�agent)�selfrI r r r �__init__� s zInspector.__init__Nc C s� i }t jd�}y�|j| j� � |j| j� � |j| j� � |jt� � |j| j� � |j| j� � |j| j � � |j| j � � |j| j � � |j| j |�� |j| j � � tjdkr�|j| j� � W n2 tk r� } z|jdj|�� W Y d d }~X nX |S )Nr* r r r zget_all facts: {})r r r )r/ r0 �update�get_agent_facts�get_python_facts�get_process_factsrH �get_hardware_facts�get_time_facts� get_hostname�get_platform_facts�get_machine_facts�get_wifi_facts�get_dem_network_factsr r �get_cloud_factsr3 r4 r% )rJ � wifi_inforF r6 r9 r r r � get_all_facts� s& "zInspector.get_all_factsc C sL i }dt jkrHy,tjd�\}}|jd�d j� }||d< W n Y nX |S )Nr z sw_vers | grep ProductVersionr r, Z MacOSVersion)r r r" r$ r1 r& )rJ rF r' r( �pvr r r rS � s z Inspector.get_platform_factsc C s i }t � |d< |S )Nr )r )rJ rF r r r rR � s zInspector.get_hostnamec C sd i }y6t jd�\}}dj|j� jd�dd � �}||d< W n$ tj| jj�}|j d� Y nX |S )Nzls -l /etc/localtime�/r �timezonezUnable to get Time Zone���) r" r$ r r& r1 r/ r0 � __class__�__name__� exception)rJ rF �retcoder( r\ r6 r r r rQ � s zInspector.get_time_factsc C sR di i}dt jj� kr�yjtjd�\}}xV|j� jd�D ]D}y0|j� jdd�\}}|dkrh|j� |d |< W q6 w6Y q6X q6W W n$ tj| j j �}|j d � Y nX y$t j d �t j d � }||d d < W n$ tj| j j �}|j d � Y nX �nZy�tjd�\}}xr|j� jd�D ]`}y|j� jdd�\}}W n �wY nX |j� j� jdd�jdd�}|j� }||d |< �qW W n$ tj| j j �}|j d � Y nX y�tjd�\}}xt|j� jd�D ]b}|j� j� } | d j� jd��r�t| d �|d d < | d j� jd��r�t| d �|d d< �q�W W n$ tj| j j �}|j d � Y nX |S )z= Gather CPU and memory specs for the machine �hardwarer z sysctl -a | grep machdep.cpu� r r, �machdep.cpu.brand_string�machdep.cpu.core_countz Unable to get CPU hardware facts� SC_PHYS_PAGES� SC_PAGE_SIZEZ mem_totalz#Unable to get memory hardware factsZlscpuz(s)� � r' zfree -mr ZmemZswapZ swap_total)rd re )r r r r" r$ r& r1 r/ r0 r^ r_ r` �os�sysconf�replace� startswith�int) rJ rF ra r( �line�key�valuer6 Z total_memZfieldsr r r rP � s` z Inspector.get_hardware_factsc C s� i }t jjt jjt��|d< t jj| jj�|d< d|d< xX| jD ]N}t jj|�r@y0t |�}| j |j � k|d< |j � |d r~P W q@ Y q@X q@W d}dt jks�t jjd�r�d}||d < |S ) NZinstalled_timeZ used_manifestFZinstalled_from_repoZpanoptar z /etc/fm-agentZ fortimonitorZ agent_brand)rj �path�getctime�abspath�__file__�existsrI � manifest_file�SOURCE_LIST_PATHS�open� PANOPTA_REPO�read�closer r )rJ rF Zsource_list_pathZ source_list�brandr r r rM s& zInspector.get_agent_factsc C s� di i}t j � |d d< t j� |d d< t j� |d d< t j� |d d< yt j� |d d< W n. tk r� tr�djtj� �|d d< Y nX t j |d d< |S ) N�pythonr � processor�version�uname�distri Z sys_platform) r r �python_versionr� r� �AttributeError�distror �linux_distributionr )rJ rF r r r rN - s zInspector.get_python_factsc C sr i }y�d}t jddd�}dtd�i}|jdd|d � |j� }|jd kr\|j� j� }d |i}nd }|rv|jd d |d � n |jd d � |j� }|jd kr�tj |j� �}d|d< |d |d< ||d< |S W n Y nX �yddi}t jddd�}|jd d|d � |j� }|jd k�r�tj |j� �}d|d< |d |d< d|k�rB|d= x6|j di �j � D ]"\}}|d(k�rT|d j |� �qTW ||d< y*| j j� } | j d d �d!k} | |d d < W n. tk �r� tj| jj�} | jd"� Y nX |S W n Y nX ypd#d!i}t jddd�}|jd d$|d � |j� }|jd k�r^tj |j� �}d%|d< |d& d' |d< ||d< |S W n Y nX i S ))Nrh z169.254.169.254� )�timeoutz$X-aws-ec2-metadata-token-ttl-secondsi`T �PUTz/latest/api/token)�headers�� zX-aws-ec2-metadata-token�GETz*/latest/dynamic/instance-identity/documentZawsZcloud_providerZ instanceIdZcloud_instance_idZcloud_metadatazMetadata-FlavorZGooglezmetadata.google.internalz,/computeMetadata/v1/instance/?recursive=trueZgcp�idZserviceAccounts� attributes� /attribute�/sshkeys� /vmdnssetting�/enable-osloginrI Zenable_gcp_attributes�truezBUnable to parse manifest file to determine gcp attributes actions.ZMetadataz)/metadata/instance?api-version=2017-04-02ZazureZcomputeZvmId)r� r� r� r� )�httplib�HTTPConnectionr5 �request� getresponse�statusr{ �decode�json�loads�getr< �poprI � get_manifestr3 r/ r0 r^ r_ r` ) rJ rF �token�hr� �r�datarp rq �manifestZenabled_gcp_attributesr6 r r r rW ? s� zInspector.get_cloud_factsc C sF i }t d kr|S t� }x t j� D ]}|j|j� � q W t|�|d< |S )N� processes)r; �setZ process_iter�add�name�list)rJ rF r� �procr r r rO � s zInspector.get_process_factsc C sv i }dt jkr|S d|i}yBd}| j|�}|rZ|| d }|jdd�|d< |jdd�|d < W n |j� Y nX |S ) Nr Zmachine_descriptionZSPHardwareDataTyper Z serial_numberrh �serialZ machine_modelZmodel)r r �query_system_profilerr� �clear)rJ �mdrF �tkr� r4 r r r rT � s zInspector.get_machine_factsc C s2 i }|s |S d|i}|j |� tj� j� |d< |S )NZ DEMWifiInfo� timestamp)rL r �utcnowr� )rJ rX r� rF r r r rU � s zInspector.get_wifi_factsc C s� dt jkri S g }d|i}y�d}| j|�}|r�|j|g �}x�|D ]x}|jdi �jdd �}|s^q@|jd�|jd�g |gd�}|j|� |jd d �} | r@x"| jd g �D ]} |d j| � q�W q@W W n tjd � |j� Y nX |S ) Nr Z!DEMNetworkInterfaceConfigurationsZSPNetworkDataTypeZIPv4ZRouter�_namerb )r� � description� dns_serversZgateways�DNSZServerAddressesr� rV )r r r� r� rD r/ r` r� ) rJ r� rF r� r4 Z network_infosZniZrouter�itemZdns_info�sar r r rV � s4 z Inspector.get_dem_network_factsc C sZ y@t jd�}ddlm}m} ||d|g|d�}tj|jj� �}|S t j d� d S d S )NZsystem_profilerr )�Popen�PIPEz-json)�stdoutr� ) r" r# � subprocessr� r� r� r� r� r{ r/ r` )rJ Z info_type�spr� r� �dr� r r r r� � s z Inspector.query_system_profiler)N)N)r_ � __module__� __qualname__rx rz rK rY rS rR rQ rP rM rN rW rO rT rU rV r� r r r r r* � s <!b r* )r r" r rj r r/ r r� � http.client�clientr; r� r� rE � simplejsonr r r r) r: rA rH �objectr* r r r r �<module> sD
2022 - 2023 Copyright By Lutfifakee || Padang Blackhat ♥