bettercap/modules/zerogod/zerogod.go

package zerogod

import (
	"fmt"
	"math/rand"
	"os"
	"path/filepath"

	"github.com/bettercap/bettercap/v2/session"
	"github.com/bettercap/bettercap/v2/tls"
	"github.com/evilsocket/islazy/str"
	"github.com/google/gopacket"
	"github.com/google/gopacket/pcap"
)

type ZeroGod struct {
	session.SessionModule
	sniffer    *pcap.Handle
	snifferCh  chan gopacket.Packet
	browser    *Browser
	advertiser *Advertiser
}

func NewZeroGod(s *session.Session) *ZeroGod {
	mod := &ZeroGod{
		SessionModule: session.NewSessionModule("zerogod", s),
	}

	mod.SessionModule.Requires("net.recon")

	mod.AddHandler(session.NewModuleHandler("zerogod.discovery on", "",
		"Start DNS-SD / mDNS discovery.",
		func(args []string) error {
			return mod.Start()
		}))

	mod.AddHandler(session.NewModuleHandler("zerogod.discovery off", "",
		"Stop DNS-SD / mDNS discovery.",
		func(args []string) error {
			return mod.Stop()
		}))

	showFull := session.NewModuleHandler("zerogod.show-full ADDRESS", `zerogod\.show-full(.*)`,
		"Show discovered services and DNS records given an ip address.",
		func(args []string) error {
			what := ""
			if len(args) > 0 {
				what = str.Trim(args[0])
			}
			return mod.show(what, true)
		})
	showFull.Complete("zerogod.show-full", s.LANCompleterForIPs)
	mod.AddHandler(showFull)

	show := session.NewModuleHandler("zerogod.show ADDRESS", `zerogod\.show(.*)`,
		"Show discovered services given an ip ADDRESS.",
		func(args []string) error {
			what := ""
			if len(args) > 0 {
				what = str.Trim(args[0])
			}
			return mod.show(what, false)
		})
	show.Complete("zerogod.show", s.LANCompleterForIPs)
	mod.AddHandler(show)

	mod.AddHandler(session.NewModuleHandler("zerogod.save ADDRESS FILENAME", "zerogod.save (.+) (.+)",
		"Save the mDNS information of a given ADDRESS in the FILENAME yaml file.",
		func(args []string) error {
			return mod.save(args[0], args[1])
		}))

	mod.AddHandler(session.NewModuleHandler("zerogod.advertise FILENAME", "zerogod.advertise (.+)",
		"Start advertising the mDNS services from the FILENAME yaml file. Use 'off' to stop advertising.",
		func(args []string) error {
			if args[0] == "off" {
				return mod.stopAdvertiser()
			}
			return mod.startAdvertiser(args[0])
		}))

	impersonate := session.NewModuleHandler("zerogod.impersonate ADDRESS", "zerogod.impersonate (.+)",
		"Impersonate ADDRESS by advertising the same discovery information. Use 'off' to stop impersonation.",
		func(args []string) error {
			if address := args[0]; address == "off" {
				return mod.stopAdvertiser()
			} else {
				tmpDir := os.TempDir()
				tmpFileName := filepath.Join(tmpDir, fmt.Sprintf("impersonate_%d.yml", rand.Int()))

				if err := mod.save(address, tmpFileName); err != nil {
					return err
				}

				return mod.startAdvertiser(tmpFileName)
			}
		})
	impersonate.Complete("zerogod.impersonate", s.LANCompleterForIPs)
	mod.AddHandler(impersonate)

	mod.AddParam(session.NewStringParameter("zerogod.advertise.certificate",
		"~/.bettercap-zerogod.cert.pem",
		"",
		"TLS certificate file (will be auto generated if filled but not existing) to use for advertised TCP services."))

	mod.AddParam(session.NewStringParameter("zerogod.advertise.key",
		"~/.bettercap-zerogod.key.pem",
		"",
		"TLS key file (will be auto generated if filled but not existing) to use for advertised TCP services."))

	tls.CertConfigToModule("zerogod.advertise", &mod.SessionModule, tls.DefaultLegitConfig)

	mod.AddParam(session.NewStringParameter("zerogod.ipp.save_path",
		"~/.bettercap/zerogod/documents/",
		"",
		"If an IPP acceptor is started, this setting defines where to save documents received for printing."))

	mod.AddParam(session.NewBoolParameter("zerogod.verbose",
		"false",
		"Log every mDNS query."))

	return mod
}

func (mod *ZeroGod) Name() string {
	return "zerogod"
}

func (mod *ZeroGod) Description() string {
	return "A DNS-SD / mDNS / Bonjour / Zeroconf module for discovery and spoofing."
}

func (mod *ZeroGod) Author() string {
	return "Simone Margaritelli <evilsocket@gmail.com>"
}

func (mod *ZeroGod) Configure() (err error) {
	if mod.Running() {
		return session.ErrAlreadyStarted(mod.Name())
	}

	return
}

func (mod *ZeroGod) Start() (err error) {
	if err = mod.Configure(); err != nil {
		return err
	}

	// start the root discovery
	if err = mod.startDiscovery(DNSSD_DISCOVERY_SERVICE); err != nil {
		return err
	}

	return mod.SetRunning(true, func() {
		mod.Info("service discovery started")
		mod.browser.Wait()
		mod.Info("service discovery stopped")
	})
}

func (mod *ZeroGod) Stop() error {
	return mod.SetRunning(false, func() {
		mod.stopAdvertiser()
		mod.stopDiscovery()
	})
}