|
|
@@ -0,0 +1,136 @@
|
|
|
+#!/bin/bash -x
|
|
|
+# LGSM command_postdetails.sh function
|
|
|
+# Author: CedarLUG
|
|
|
+# Contributor: CedarLUG
|
|
|
+# Website: https://gameservermanagers.com
|
|
|
+# Description: Strips sensitive information out of Details output
|
|
|
+
|
|
|
+local commandname="POSTDETAILS"
|
|
|
+local commandaction="Postdetails"
|
|
|
+local function_selfname="$(basename $(readlink -f "${BASH_SOURCE[0]}"))"
|
|
|
+
|
|
|
+# POSTDETAILS variable affects the output of command_details.sh. Setting
|
|
|
+# it here silences the output from sourcing command_details.sh.
|
|
|
+POSTDETAILS=yes
|
|
|
+
|
|
|
+# Set POSTTARGET to the appropriately-defined post destination. The present
|
|
|
+# option is only pastebin, but hastebin is on the todo list (and should be
|
|
|
+# a lot easier than pastebin.
|
|
|
+#
|
|
|
+# Another reason for an alternative here is that pastebin limits guest
|
|
|
+# posts to 10 per day, which might be a tight limit for some debugging situations.
|
|
|
+
|
|
|
+POSTTARGET="http://pastebin.com"
|
|
|
+POSTEXPIRE="1W" # use 1 week as the default, other options are '24h' for a day, etc.
|
|
|
+
|
|
|
+# This file sources the command_details.sh file to leverage all
|
|
|
+# of the already-defined functions. To keep the command_details.sh
|
|
|
+# from actually producing output, the main executable statements have
|
|
|
+# been wrapped in the equivalent of an ifdef clause, that looks
|
|
|
+# for the variable "postdetails" to be defined. -CedarLUG
|
|
|
+
|
|
|
+# source all of the functions defined in the details command
|
|
|
+. ${functionsdir}/command_details.sh
|
|
|
+
|
|
|
+fn_bad_tmpfile() {
|
|
|
+ echo "There was a problem creating a temporary file ${tmpfile}."
|
|
|
+ core_exit.sh
|
|
|
+}
|
|
|
+
|
|
|
+fn_gen_rand() {
|
|
|
+ # This is just a simple random generator to generate a random
|
|
|
+ # name for storing the output. Named pipes would (possibly) be
|
|
|
+ # better. -CedarLUG
|
|
|
+ #
|
|
|
+ # len holds the number of digits in our random string
|
|
|
+ local len=$1
|
|
|
+ # If not specified, default to 10.
|
|
|
+ : {len:=10}
|
|
|
+ # Quick generator for a random filename, pulled from /dev/urandom
|
|
|
+ tr -dc A-Za-z0-9_ < /dev/urandom | head -c ${len} | xargs
|
|
|
+}
|
|
|
+
|
|
|
+# Rather than a one-pass sed parser, default to using a temporary directory
|
|
|
+filedir="${lgsmdir}/tmp"
|
|
|
+
|
|
|
+# Not all game servers possess a tmp directory. So create it if
|
|
|
+# it doesn't already exist
|
|
|
+mkdir -p ${filedir} 2>&1 >/dev/null
|
|
|
+
|
|
|
+tmpfile=${filedir}/$(fn_gen_rand 10).tmp
|
|
|
+
|
|
|
+touch ${tmpfile} || fn_bad_tmpfile
|
|
|
+
|
|
|
+# fn_display_details is found in the command_details.sh file (which
|
|
|
+# was sourced above. The output is parsed for passwords and other
|
|
|
+# confidential information. -CedarLUG
|
|
|
+
|
|
|
+# The numerous sed lines could certainly be condensed quite a bit,
|
|
|
+# but they are separated out to provide examples for how to add
|
|
|
+# additional criteria in a straight-forward manner.
|
|
|
+# (This was originally a sed one-liner.) -CedarLUG
|
|
|
+
|
|
|
+fn_display_details | sed -e 's/password="[^"]*/password="--stripped--/' |
|
|
|
+ sed -e 's/password "[^"]*/password "--stripped--/' |
|
|
|
+ sed -e 's/password: .*/password: --stripped--/' |
|
|
|
+ sed -e 's/gslt="[^"]*/gslt="--stripped--/' |
|
|
|
+ sed -e 's/gslt "[^"]*/gslt "--stripped--/' |
|
|
|
+ sed -e 's/pushbullettoken="[^"]*/pushbullettoken="--stripped--/' |
|
|
|
+ sed -e 's/pushbullettoken "[^"]*/pushbullettoken "--stripped--/' |
|
|
|
+ sed -e 's/authkey="[^"]*/authkey="--stripped--/' |
|
|
|
+ sed -e 's/authkey "[^"]*/authkey "--stripped--/' |
|
|
|
+ sed -e 's/authkey [A-Za-z0-9]\+/authkey --stripped--/' |
|
|
|
+ sed -e 's/rcts_strAdminPassword="[^"]*/rcts_strAdminPassword="--stripped--/' |
|
|
|
+ sed -e 's/rcts_strAdminPassword "[^"]*/rcts_strAdminPassword "--stripped--/' |
|
|
|
+ sed -e 's/sv_setsteamaccount [A-Za-z0-9]\+/sv_setsteamaccount --stripped--/' |
|
|
|
+ sed -e 's/sv_password="[^"]*/sv_password="--stripped--/' |
|
|
|
+ sed -e 's/sv_password "[^"]*/sv_password "--stripped--/' |
|
|
|
+ sed -e 's/zmq_stats_password="[^"]*/zmq_stats_password="--stripped--/' |
|
|
|
+ sed -e 's/zmq_stats_password "[^"]*/zmq_stats_password "--stripped--/' |
|
|
|
+ sed -e 's/zmq_rcon_password="[^"]*/zmq_rcon_password="--stripped--/' |
|
|
|
+ sed -e 's/zmq_rcon_password "[^"]*/zmq_rcon_password "--stripped--/' |
|
|
|
+ sed -e 's/pass="[^"]*/pass="--stripped--/' |
|
|
|
+ sed -e 's/pass "[^"]*/pass "--stripped--/' |
|
|
|
+ sed -e 's/rconServerPassword="[^"]*/rconServerPassword="--stripped--/' |
|
|
|
+ sed -e 's/rconServerPassword "[^"]*/rconServerPassword "--stripped--/' > ${tmpfile}
|
|
|
+
|
|
|
+# strip off all console escape codes (colorization)
|
|
|
+sed -i -r "s/[\x1B,\x0B]\[([0-9]{1,2}(;[0-9]{1,2})?)?[mGK]//g" ${tmpfile}
|
|
|
+
|
|
|
+# If the gameserver uses anonymous steam credentials, leave them displayed
|
|
|
+# in the output. Otherwise, strip these out as well.
|
|
|
+if ! grep -q "^steampass[= ]\"\"" ${tmpfile} ; then
|
|
|
+ sed -i -e 's/steampass[= ]"[^"]*/steampass "--stripped--/' ${tmpfile}
|
|
|
+fi
|
|
|
+if ! grep -q "^steamuser[= ]\"anonymous\"" ${tmpfile} ; then
|
|
|
+ sed -i -e 's/steamuser[= ]"[^"]*/steamuser "--stripped--/' ${tmpfile}
|
|
|
+fi
|
|
|
+
|
|
|
+if [ "$POSTTARGET" == "http://pastebin.com" ] ; then
|
|
|
+ # grab the return from 'value' from an initial visit to pastebin.
|
|
|
+ TOKEN=$(curl -s $POSTTARGET |
|
|
|
+ sed -n 's/^.*input type="hidden" name="csrf_token_post" value="\(.*\)".*$/\1/p')
|
|
|
+ #
|
|
|
+ # Use the TOKEN to then post the content.
|
|
|
+ #
|
|
|
+ link=$(curl -s "$POSTTARGET/post.php" -D - -F "submit_hidden=submit_hidden" \
|
|
|
+ -F "post_key=$TOKEN" -F "paste_expire_date=${POSTEXPIRE}" \
|
|
|
+ -F "paste_name=${gamename} Debug Info" \
|
|
|
+ -F "paste_format=8" -F "paste_private=0" \
|
|
|
+ -F "paste_type=bash" -F "paste_code=<${tmpfile}" |
|
|
|
+ awk '/^location: / { print $2 }' | sed "s/\n//g")
|
|
|
+
|
|
|
+ # Output the resulting link.
|
|
|
+ fn_print_warn_nl "You now need to visit (and verify) the content posted at ${POSTTARGET}${link}"
|
|
|
+elif [ "$POSTTARGET" == "http://hastebin.com" ] ; then
|
|
|
+ # hastebin is a bit simpler. If successful, the returned result
|
|
|
+ # should look like: {"something":"key"}, putting the reference that
|
|
|
+ # we need in "key". TODO - error handling. -CedarLUG
|
|
|
+ link=$(curl -s -d "$(<${tmpfile}) | cut -d\" -f4)
|
|
|
+ fn_print_warn_nl "You now need to visit (and verify) the content posted at ${POSTTARGET}${link}"
|
|
|
+fi
|
|
|
+
|
|
|
+# cleanup
|
|
|
+rm ${tmpfile} || /bin/true
|
|
|
+
|
|
|
+core_exit.sh
|
CedarLUG