203 lines
6.2 KiB
Bash
Executable File
203 lines
6.2 KiB
Bash
Executable File
#!/bin/bash
|
|
source config/master.sh
|
|
source src/mime.sh
|
|
source src/misc.sh
|
|
source src/account.sh
|
|
source src/mail.sh
|
|
[[ -f "${cfg[namespace]}/config.sh" ]] && source "${cfg[namespace]}/config.sh"
|
|
|
|
|
|
declare -A r # current request / response
|
|
declare -A meta # metadata for templates
|
|
declare -A cookies # cookies!
|
|
|
|
r[status]=210 # Mommy always said that I was special
|
|
post_length=0
|
|
|
|
while read param; do
|
|
param_l="${param,,}" # lowercase
|
|
name=''
|
|
value=''
|
|
data=''
|
|
unset IFS
|
|
|
|
if [[ "$param_l" == $'\015' ]]; then
|
|
break
|
|
|
|
elif [[ "$param_l" == *"content-length:"* ]]; then
|
|
r[content_length]="$(sed 's/Content-Length: //i;s/\r//' <<< "$param")"
|
|
|
|
elif [[ "$param_l" == *"content-type:"* ]]; then
|
|
r[content_type]="$(sed 's/Content-Type: //i;s/\r//' <<< "$param")"
|
|
if [[ "${r[content_type]}" == *"multipart/form-data"* ]]; then
|
|
tmpdir=$(mktemp -d)
|
|
fi
|
|
if [[ "${r[content_type]}" == *"boundary="* ]]; then
|
|
r[content_boundary]="$(sed -E 's/(.*)boundary=//i;s/\r//;s/ //' <<< "${r[content_type]}")"
|
|
fi
|
|
|
|
elif [[ "$param_l" == *"host:"* ]]; then
|
|
r[host]="$(sed 's/Host: //i;s/\r//;s/\\//g' <<< "$param")"
|
|
r[host_portless]="$(sed -E 's/:(.*)$//' <<< "${r[host]}")"
|
|
if [[ -f "config/${r[host]}" ]]; then
|
|
source "config/${r[host]}"
|
|
elif [[ -f "config/${r[host_portless]}" ]]; then
|
|
source "config/${r[host_portless]}"
|
|
fi
|
|
|
|
elif [[ "$param_l" == *"user-agent:"* ]]; then
|
|
r[user_agent]="$(sed 's/User-Agent: //i;s/\r//;s/\\//g' <<< "$param")"
|
|
|
|
elif [[ "$param_l" == *"upgrade:"* && $(sed 's/Upgrade: //i;s/\r//' <<< "$param") == "websocket" ]]; then
|
|
r[status]=101
|
|
|
|
elif [[ "$param_l" == *"sec-websocket-key:"* ]]; then
|
|
r[websocket_key]="$(sed 's/Sec-WebSocket-Key: //i;s/\r//' <<< "$param")"
|
|
|
|
elif [[ "$param_l" == *"authorization: Basic"* ]]; then
|
|
login_simple "$param"
|
|
|
|
elif [[ "$param_l" == *"authorization: Bearer"* ]]; then
|
|
r[authorization]="$(sed 's/Authorization: Bearer //i;s/\r//' <<< "$param")"
|
|
|
|
elif [[ "$param_l" == *"cookie: "* ]]; then
|
|
IFS=';'
|
|
for i in $(IFS=' '; echo "$param" | sed -E 's/Cookie: //i;;s/%/\\x/g'); do
|
|
name="$((grep -Poh "[^ ].*?(?==)" | head -1) <<< $i)"
|
|
value="$(sed "s/$name=//;s/^ //;s/ $//" <<< $i)"
|
|
cookies[$name]="$(echo -e $value)"
|
|
done
|
|
|
|
elif [[ "$param" == *"GET "* ]]; then
|
|
r[url]="$(echo -ne "$(sed -E 's/GET //;s/HTTP\/[0-9]+\.[0-9]+//;s/ //g;s/\%/\\x/g;s/\/*\r//g;s/\/\/*/\//g' <<< "$param")")"
|
|
data="$(echo ${r[url]} | sed -E 's/^(.*)\?//;s/\&/ /g')"
|
|
if [[ "$data" != "${r[url]}" ]]; then
|
|
data="$(echo ${r[url]} | sed -E 's/^(.*)\?//')"
|
|
declare -A get_data
|
|
IFS='&'
|
|
for i in $data; do
|
|
name="$(echo $i | sed -E 's/\=(.*)$//')"
|
|
value="$(echo $i | sed "s/$name\=//")"
|
|
get_data[$name]="$value"
|
|
done
|
|
fi
|
|
|
|
elif [[ "$param" == *"POST "* ]]; then
|
|
r[url]="$(echo -ne "$(sed -E 's/POST //;s/HTTP\/[0-9]+\.[0-9]+//;s/ //g;s/\%/\\x/g;s/\/*\r//g;s/\/\/*/\//g' <<< "$param")")"
|
|
r[post]=true
|
|
# below shamelessly copied from GET, should be moved to a function
|
|
data="$(sed -E 's/^(.*)\?//;s/\&/ /g' <<< "${r[url]}")"
|
|
if [[ "$data" != "${r[url]}" ]]; then
|
|
data="$(sed -E 's/^(.*)\?//' <<< "${r[url]}")"
|
|
declare -A get_data
|
|
IFS='&'
|
|
for i in $data; do
|
|
name="$(echo $i | sed -E 's/\=(.*)$//')"
|
|
value="$(echo $i | sed "s/$name\=//")"
|
|
get_data[$name]="$value"
|
|
done
|
|
fi
|
|
fi
|
|
done
|
|
|
|
r[uri]="$(realpath "${cfg[namespace]}/${cfg[root]}$(sed -E 's/\?(.*)$//' <<< "${r[url]}")")"
|
|
[[ -d "${r[uri]}/" ]] && pwd="${r[uri]}" || pwd=$(dirname "${r[uri]}")
|
|
|
|
if [[ $NCAT_LOCAL_PORT == '' ]]; then
|
|
r[proto]='http'
|
|
r[ip]="NCAT_IS_BORK"
|
|
else
|
|
r[proto]='https'
|
|
r[ip]="$NCAT_REMOTE_ADDR:$NCAT_REMOTE_PORT"
|
|
fi
|
|
|
|
echo "$(date) - IP: ${r[ip]}, PROTO: ${r[proto]}, URL: ${r[url]}, GET_data: ${get_data[@]}, POST_data: ${post_data[@]}, POST_multipart: ${post_multipart[@]}" >> "${cfg[namespace]}/${cfg[log]}"
|
|
|
|
if [[ ${r[status]} != 101 ]]; then
|
|
if [[ -a ${r[uri]} && ! -r ${r[uri]} ]]; then
|
|
r[status]=403
|
|
elif [[ "$(echo -n ${r[uri]})" != "$(realpath "${cfg[namespace]}/${cfg[root]}")"* ]]; then
|
|
r[status]=403
|
|
elif [[ -f ${r[uri]} ]]; then
|
|
r[status]=200
|
|
elif [[ -d ${r[uri]} ]]; then
|
|
for name in ${cfg[index]}; do
|
|
if [[ -f "${r[uri]}/$name" ]]; then
|
|
r[uri]="${r[uri]}/$name"
|
|
r[status]=200
|
|
fi
|
|
done
|
|
else
|
|
r[status]=404
|
|
fi
|
|
fi
|
|
|
|
if [[ ${cfg[auth_required]} == true && ${r[authorized]} != true ]]; then
|
|
echo "Auth failed." >> ${cfg[log_misc]}
|
|
r[status]=401
|
|
fi
|
|
|
|
if [[ ${cfg[proxy]} == true ]]; then
|
|
r[status]=211
|
|
fi
|
|
|
|
if [[ ${r[post]} == true && ${r[status]} == 200 ]]; then
|
|
|
|
# This whole ordeal is here to prevent passing binary data as a variable.
|
|
# I could have done it as an array, but this solution works, and it's
|
|
# speedy enough so I don't care.
|
|
|
|
if [[ $tmpdir ]]; then
|
|
declare post_multipart
|
|
tmpfile=$(mktemp -p $tmpdir)
|
|
dd iflag=fullblock of=$tmpfile ibs=${r[content_length]} count=1 obs=1M
|
|
|
|
delimeter_len=$(echo -n "${r[content_boundary]}"$'\015' | wc -c)
|
|
boundaries_list=$(echo -ne $(grep $tmpfile -ao -e ${r[content_boundary]} --byte-offset | sed -E 's/:(.*)//g') | sed -E 's/ [0-9]+$//')
|
|
|
|
for i in $boundaries_list; do
|
|
tmpout=$(mktemp -p $tmpdir)
|
|
dd iflag=fullblock if=$tmpfile ibs=$(($i+$delimeter_len)) obs=1M skip=1 | while true; do
|
|
read line
|
|
if [[ $line == $'\015' ]]; then
|
|
cat - > $tmpout
|
|
break
|
|
fi
|
|
done
|
|
length=$(grep $tmpout --byte-offset -ae ${r[content_boundary]} | sed -E 's/:(.*)//' | head -n 1)
|
|
outfile=$(mktemp -p $tmpdir)
|
|
post_multipart+=($outfile)
|
|
dd iflag=fullblock if=$tmpout ibs=$length count=1 obs=1M of=$outfile
|
|
rm $tmpout
|
|
done
|
|
rm $tmpfile
|
|
else
|
|
read -N "${r[content_length]}" data
|
|
declare -A post_data
|
|
|
|
IFS='&'
|
|
for i in $(tr -d '\n' <<< "$data"); do
|
|
name="$(sed -E 's/\=(.*)$//' <<< "$i")"
|
|
param="$(sed "s/$name\=//" <<< "$i")"
|
|
post_data[$name]="$param"
|
|
done
|
|
unset IFS
|
|
fi
|
|
fi
|
|
|
|
if [[ ${r[status]} == 210 && ${cfg[autoindex]} == true ]]; then
|
|
source "src/response/listing.sh"
|
|
elif [[ ${r[status]} == 211 ]]; then
|
|
source "src/response/proxy.sh"
|
|
elif [[ ${r[status]} == 200 ]]; then
|
|
source "src/response/200.sh"
|
|
elif [[ ${r[status]} == 401 ]]; then
|
|
source "src/response/401.sh"
|
|
elif [[ ${r[status]} == 404 ]]; then
|
|
source "src/response/404.sh"
|
|
elif [[ ${r[status]} == 101 ]]; then
|
|
source "src/response/101.sh"
|
|
else
|
|
source "src/response/403.sh"
|
|
fi
|