update lab_vpn.py

Author: greyshell

utility_scripts/creds_manager/README.md

@@ -1,7 +1,6 @@
 ## Description
 `creds_manager.py` - a wrapper to the linux `keyring` that manages the credential in a secure way.
 
-
 ### Usage
 ```
 usage: creds_manager.py [-h] {set,get,del} ...

utility_scripts/creds_manager/creds_manager.py

@@ -44,20 +44,20 @@ def __init__(self):
 
 def set_keyring(keyring_name, username, password):
     keyring.set_password(keyring_name, "username", username)
-    keyring.set_password(keyring_name, username, password)
+    keyring.set_password(keyring_name, "password", password)
 
 
 def get_keyring(keyring_name):
     username = keyring.get_password(keyring_name, "username")
-    password = keyring.get_password(keyring_name, str(username))
+    password = keyring.get_password(keyring_name, "password")
     return username, password
 
 
 def del_keyring(keyring_name):
     username, password = get_keyring(keyring_name)
     try:
-        keyring.delete_password(keyring_name, "username")
-        keyring.delete_password(keyring_name, username)
+        keyring.delete_password(keyring_name, str(username))
+        keyring.delete_password(keyring_name, str(password))
     except keyring.errors.PasswordDeleteError as e:
         print(e)
         exit(0)

utility_scripts/lab_vpn/README.md

@@ -14,20 +14,6 @@ optional arguments:
   -h, --help      show this help message and exit
   -c , --config   provide a .json file
 
-example:
-python lab_vpn.py -c asinha.json
-
-# set email creds into the keyring
-keyring set email username
-- provide the email_id
-keyring set email email_id
-- provide the password
-
-# set offsec vpn creds into the keyring
-keyring set offsec username
-- provide the userid
-keyring set offsec user_id
-- provide the password
 ```
 
 

utility_scripts/lab_vpn/lab_vpn.py

@@ -9,8 +9,10 @@
 import subprocess
 import sys
 import time
+
 import keyring
 import pexpect
+import requests
 from colorama import Fore
 
 # global constant variable
@@ -31,19 +33,19 @@ def __init__(self):
 class LoginVpn:
     def __init__(self):
         self._email_to = ""
-
         self._email_from = ""
         self._email_password = ""
-        self._login_message = ""
-        self._logout_message = ""
+        self._lab_name = ""
+        self._lab_user = ""
 
         self._vpn_user = ""
         self._vpn_password = ""
-        self._dns = ""
-
         self._vpn_config = ""
         self._vpn_command = ""
 
+        self._dns = ""
+        self._slack_webhook_url = ""
+
     def get_parameters(self, config_dict):
         """
         retrieve the value from the input
@@ -53,25 +55,23 @@ def get_parameters(self, config_dict):
         email_keyring_name = config_dict["email_keyring_name"]
         self._email_to = config_dict["email_to"]
         self._email_from = keyring.get_password(email_keyring_name, 'username')
-
-        self._email_password = keyring.get_password(email_keyring_name, self._email_from)
-        self._login_message = config_dict["login_message_path"]
-        self._logout_message = config_dict["logout_message_path"]
+        self._email_password = keyring.get_password(email_keyring_name, 'password')
+        self._lab_name = config_dict["lab_name"]
+        self._lab_user = config_dict["lab_user"]
 
         vpn_keyring_name = config_dict["vpn_keyring_name"]
         self._vpn_user = keyring.get_password(vpn_keyring_name, 'username')
-        self._vpn_password = keyring.get_password(vpn_keyring_name, self._vpn_user)
-
-        self._dns = config_dict["dns"]
-
+        self._vpn_password = keyring.get_password(vpn_keyring_name, 'password')
         self._vpn_config = config_dict["ovpn_file_path"]
 
         self._vpn_command = "openvpn" + " " + self._vpn_config
 
-        # validate the input
-        if not self._vpn_user and self._vpn_password and self._vpn_config and self._email_to and self._email_from and \
-                self._email_password and self._login_message and self._logout_message:
-            print(f"[x] please fill the input in the json config file !!")
+        self._dns = config_dict["dns"]
+        self._slack_webhook_url = config_dict["slack_webhook_url"]
+
+        # validate the required input
+        if not self._vpn_user and self._vpn_password and self._vpn_config:
+            print(f"[x] ovpn_file_path / vpn user credential must be valid")
             sys.exit(0)
 
     def lab_connection(self):
@@ -85,15 +85,29 @@ def lab_connection(self):
                 set_dns_command = "sed -i \'1s/^/nameserver " + self._dns + "\\n/\' /etc/resolv.conf"
                 subprocess.check_output(set_dns_command, shell=True)
 
-            print(Fore.GREEN, f"[+] sending email notification to {self._email_to}")
-            send_email_command = "sendEmail -f " + self._email_from + " -t " + self._email_to + \
-                                 " -u \'logged-In\' -o message-file=" + self._login_message + \
-                                 " -s smtp.gmail.com:587 -o tls=yes -xu " + self._email_from + \
-                                 " -xp " + self._email_password
-
-            subprocess.check_output(send_email_command, shell=True)
-
-            print(Fore.LIGHTBLUE_EX, f"[*] connected to the lab, press ctrl+c to disconnect from the lab")
+            if self._lab_name and self._lab_user and self._email_to and self._email_from and self._email_password:
+                send_email_command = "sendEmail -f " + self._email_from + " -t " + self._email_to + \
+                                     " -u " + self._lab_name + "-bot: " + self._lab_user + " has logged-in" + \
+                                     " -m \'try harder\'" + \
+                                     " -s smtp.gmail.com:587 -o tls=yes -xu " + self._email_from + \
+                                     " -xp " + self._email_password
+                print(Fore.LIGHTMAGENTA_EX, f"[+] sent email notification to {self._email_to}")
+                subprocess.check_output(send_email_command, shell=True)
+
+            if self._slack_webhook_url and self._lab_name and self._lab_user:
+                bot = self._lab_name + "-bot"
+                data = {
+                    'text': f':ballot_box_with_check: `{self._lab_user}` has *logged-in* '
+                            f':man-lifting-weights:',
+                    'username': bot,
+                }
+
+                response = requests.post(self._slack_webhook_url, data=json.dumps(data),
+                                         headers={'Content-Type': 'application/json'})
+                if str(response.text) == 'ok' and str(response.status_code) == '200':
+                    print(Fore.LIGHTYELLOW_EX, f"[*] sending slack notification !!")
+
+            print(Fore.WHITE, f"[*] connected to the lab, press ctrl+c to disconnect from the lab")
 
             # connect to the lab
             i = pexpect.spawn(self._vpn_command)
@@ -107,12 +121,29 @@ def lab_connection(self):
 
         except KeyboardInterrupt:
             print(Fore.RED, f"[*] received ctrl+c, disconnecting from lab ")
-            send_email_command = "sendEmail -f " + self._email_from + " -t " + self._email_to + \
-                                 " -u \'logged-Out\' -o message-file=" + self._logout_message + \
-                                 " -s smtp.gmail.com:587 -o tls=yes -xu " + self._email_from + \
-                                 " -xp " + self._email_password
-            subprocess.check_output(send_email_command, shell=True)
-            print(Fore.GREEN, f"[*] sent email notification  ")
+
+            if self._lab_name and self._lab_user and self._email_to and self._email_from and self._email_password:
+                send_email_command = "sendEmail -f " + self._email_from + " -t " + self._email_to + \
+                                     " -u " + self._lab_name + "-bot: " + self._lab_user + " has logged-out" + \
+                                     " -m \'sleep tight\'" + \
+                                     " -s smtp.gmail.com:587 -o tls=yes -xu " + self._email_from + \
+                                     " -xp " + self._email_password
+
+                subprocess.check_output(send_email_command, shell=True)
+                print(Fore.GREEN, f"[+] sent email notification to {self._email_to}")
+
+            if self._slack_webhook_url and self._lab_name and self._lab_user:
+                bot = self._lab_name + "-bot"
+                data = {
+                    'text': f':negative_squared_cross_mark: `{self._lab_user}` has *logged-out* '
+                            f':tired_face:',
+                    'username': bot,
+                }
+
+                response = requests.post(self._slack_webhook_url, data=json.dumps(data),
+                                         headers={'Content-Type': 'application/json'})
+                if str(response.text) == 'ok' and str(response.status_code) == '200':
+                    print(Fore.BLUE, f"[*] sending slack notification !!")
 
             if self._dns:
                 print(Fore.GREEN, f"[+] unset the dns entry ")

utility_scripts/lab_vpn/sample_config.json

@@ -1,10 +1,11 @@
 {
+  "lab_name": "",
+  "lab_user": "",
   "email_keyring_name": "",
   "email_to": "",
-  "login_message_path": "",
-  "logout_message_path": "",
   "ovpn_file_path": "",
   "dns": "",
-  "vpn_keyring_name": ""
+  "vpn_keyring_name": "",
+  "slack_webhook_url": ""
 }