deploy.sh

#!/bin/bash


usage()
{
    echo "usage: wget --no-cache -q -O- https://raw.githubusercontent.com/sec4us-training/web-api-linux/main/deploy.sh | sudo bash"
}

info()
{
    whoami
    uname -a
    cat /etc/lsb-release
    lsb_release -a
    ip addr show
}


W='\033[0m'  # white (normal)
R='\033[31m' # red
G='\033[32m' # green
O='\033[33m' # orange
B='\033[34m' # blue
P='\033[35m' # purple
C='\033[36m' # cyan
GR='\033[37m' # gray
D='\033[2m'   # dims current color. {W} resets.

OK=$(echo -e "${W}${D}[${W}${G}+${W}${D}]${W}")
ERROR=$(echo -e "${O}[${R}!${O}]${W}")
WARN=$(echo -e "${W}[${C}?${W}]")
DEBUG=$(echo -e "${D}[${W}${B}*${W}${D}]${W}")

unset ansible_user
unset key
unset ip
unset status_file
unset PYTHON3

echo "IF9fX19fICAgICAgICAgICAgIF9fXyBfICAgXyBfX19fXwovICBfX198ICAgICAgICAgICAvICAgfCB8IHwgLyAgX19ffApcIGAtLS4gIF9fXyAgX19fIC8gL3wgfCB8IHwgXCBgLS0uCiBgLS0uIFwvIF8gXC8gX18vIC9ffCB8IHwgfCB8YC0tLiBcCi9cX18vIC8gIF9fLyAoX19cX19fICB8IHxffCAvXF9fLyAvClxfX19fLyBcX19ffFxfX198ICAgfF8vXF9fXy9cX19fXy8K" | base64 -d
echo " "
echo "Treinamento: Web API Exploitation"
echo "Linux Deploy"
echo " "
echo "Copyright © Sec4US® - Todos os direitos reservados. Nenhuma parte dos materiais disponibilizadas, incluindo este script, servidor, suas aplicações e seu código fonte, podem ser copiadas, publicadas, compartilhadas, redistribuídas, sublicenciadas, transmitidas, alteradas, comercializadas ou utilizadas para trabalhos sem a autorização por escrito da Sec4US"

if [ "$(id -u)" -ne 0 ]; then 
  usage
  echo -e "\n${ERROR} ${O}Execute este script como root${W}\n"
  info
  exit 1; 
fi

ansible_user=$(whoami)
status_file=$(pwd)/executed.txt

echo -e "\n${OK} Atualizando servidor"

#Remove CDROM line from apt source list
#  deb [check-date=no] file:///cdrom jammy main restricted
cp /etc/apt/sources.list /tmp/
grep -vE '^deb.*/cdrom.*' /tmp/sources.list > /etc/apt/sources.list

DEBIAN_FRONTEND=noninteractive apt update
DEBIAN_FRONTEND=noninteractive apt -y upgrade
DEBIAN_FRONTEND=noninteractive apt install -y ansible openssh-client openssh-server git wget vim zip unzip python3 python3-pip

echo -e "\n${OK} Configurando SSH"
systemctl enable ssh
systemctl start ssh

echo -e "\n${OK} Gerando chaves SSH"
key="/tmp/sshkey"
if [ ! -f "$key" ]; then
  hostname WebAPIExploitation
  hostnamectl set-hostname WebAPIExploitation
  ssh-keygen -b 2048 -t rsa -f $key -q -N ""
fi


PYTHON3="/usr/bin/python3"

echo -e "\n${OK} Install/update PIP3"
$PYTHON3 -m pip install -U pip
if [ "$?" != "0" ]; then
    echo -e "${ERROR} ${O} Erro atualizando PIP${W}\n"
    info
    exit 1
fi

echo -e "\n${OK} Instalando/atualizando versão do ansible core"
$PYTHON3 -m pip install -U ansible 'ansible-core>=2.13.9' 'jinja2>=3.1.2'
if [ "$?" != "0" ]; then
    echo -e "${ERROR} ${O} Erro atualizando PIP${W}\n"
    info
    exit 1
fi

echo -e "\n${OK} Iniciando deploy"

ip="127.0.0.1"

SSH_FILE=$key
# Verifica se o arquivo da chave SSH existe
if [ ! -f "$SSH_FILE" ]; then
    echo -e "${ERROR} ${O}Arquivo de chave privada do SSH inexistente: ${C}${SSH_FILE}${W}\n"
    info
    exit 1
fi

SSH_FILE_PUB="$key.pub"
# Verifica se o arquivo da chave SSH existe
if [ ! -f "$SSH_FILE_PUB" ]; then
    echo -e "${ERROR} ${O}Arquivo de chave pública do SSH inexistente: ${C}${SSH_FILE_PUB}${W}\n"
    info
    exit 1
fi

echo -e "\n${OK} Realizando o download dos scripts"
git clone https://github.com/sec4us-training/web-api-linux.git /tmp/web-api-linux
pushd /tmp/web-api-linux

cp -f $SSH_FILE ssh_key.pem
cp -f $SSH_FILE_PUB ssh_key.pub
cp -f $SSH_FILE /tmp/web_api_ssh_key.pem
cp -f $SSH_FILE_PUB /tmp/web_api_ssh_key.pub
chmod 444 /tmp/web_api_ssh*
mkdir /root/.ssh/
cat ssh_key.pub >> /root/.ssh/authorized_keys

PK=$(cat ssh_key.pem)
PUBK=$(cat ssh_key.pub)

ansible_path=`command -v ansible-playbook 2> /dev/null`
if [ "$?" -ne "0" ] || [ "W$ansible_path" = "W" ]; then
  ansible_path=`which ansible-playbook 2> /dev/null`
  if [ "$?" -ne "0" ]; then
    ansible_path=""
  fi
fi

if [ "W$ansible_path" = "W" ]; then
  echo -e "${ERROR} ${O}A aplicação ansible-playbook parece não estar instalada.${W}\n\n"
  echo "Em ambientes debian/ubuntu, realize a instalação com os comandos abaixo:"
  echo "sudo apt install ansible"
  echo "ansible-galaxy collection install community.general"
  echo "ansible-galaxy collection install ansible.posix"
  echo "ansible-galaxy collection install ansible.windows"
  echo "ansible-galaxy collection install community.windows"
  echo " "
  info
  exit 1
fi

echo -e "\n${OK} Instalando dependencias do ansible"
grep "ansible_deps" "$status_file" >/dev/null 2>&1
if [ "$?" == "0" ]; then
    echo -e "${DEBUG} ${C}Pulando instalação...${W}"
else
    
    ansible-galaxy collection install community.general
    ansible-galaxy collection install ansible.posix
    ansible-galaxy collection install ansible.windows
    ansible-galaxy collection install community.windows
    echo "ansible_deps" >> "$status_file"
    echo -e "${OK} ${G}OK${W}"
fi

# remove a linha ansible_user do vars.yml
cp vars.yml vars_old.yml
grep -i -v "ansible_user" vars_old.yml > vars.yml

echo -e "\n${OK} Verificando senha padrão no arquivo vars.yml"
password=$(cat vars.yml | grep default_password | cut -d '"' -f2)
if [ "$?" -ne "0" ] || [ "W$password" = "W" ]; then
  echo -e "\n${ERROR} ${O}Senha do usuário ${C}webapi ${O}não definida no parâmetro ${C}'default_password' ${O}do arquivo vars.yml${W}\n"
  info
  exit 1
else
    echo -e "${OK} ${G}OK${W}"
fi

export OBJC_DISABLE_INITIALIZE_FORK_SAFETY=YES


# Check conectivity and if user has root privileges
echo -e "\n${OK} Verificando usuário"
ansible-playbook -vvv -i $ip,  --private-key $SSH_FILE  --extra-vars ansible_user=$ansible_user  --ssh-extra-args '-o StrictHostKeyChecking=no  -o UserKnownHostsFile=/dev/null' check_user.yml
if [ "$?" != "0" ]; then
    echo -e "${ERROR} ${O} Erro verificando usuário${W}\n"
    info
    exit 1
fi

# Step 1 - base
echo -e "\n${OK} Executando passo 1 - setup_base.yml"
grep "step1_base" "$status_file" >/dev/null 2>&1
if [ "$?" == "0" ]; then
    echo -e "${DEBUG} ${C}Pulando passo 1...${W}"
else
    if [ `uname -s` == "Darwin" ]; then
        sed -i "" "s/PasswordAuthentication no/PasswordAuthentication yes/g" "setup_base.yml"
    else
        sed -i "s/PasswordAuthentication no/PasswordAuthentication yes/g" "setup_base.yml"
    fi

    ansible-playbook -i $ip,  --private-key $SSH_FILE  --extra-vars ansible_user=$ansible_user  --ssh-extra-args '-o StrictHostKeyChecking=no  -o UserKnownHostsFile=/dev/null' setup_base.yml
    if [ "$?" != "0" ]; then
        echo -e "${ERROR} ${O} Erro executando ansible setup base${W}\n"
        info
        exit 1
    fi
    echo "step1_base" >> "$status_file"
    echo -e "${OK} ${G}OK${W}"
fi

# Step 2 - Tools
echo -e "\n${OK} Executando passo 2 - setup_tools.yml"
grep "step2_tools" "$status_file" >/dev/null 2>&1
if [ "$?" == "0" ]; then
    echo -e "${DEBUG} ${C}Pulando passo 2...${W}"
else
    ansible-playbook -i $ip,  --private-key $SSH_FILE  --extra-vars ansible_user=$ansible_user  --ssh-extra-args '-o StrictHostKeyChecking=no  -o UserKnownHostsFile=/dev/null' setup_tools.yml
    if [ "$?" != "0" ]; then
        echo -e "${ERROR} ${O} Erro executando ansible tools${W}\n"
        info
        exit 1
    fi
    echo "step2_tools" >> "$status_file"
    echo -e "${OK} ${G}OK${W}"
fi

# Step 3 - API1
echo -e "\n${OK} Executando passo 3 - setup_api1.yml"
grep "step3_api1" "$status_file" >/dev/null 2>&1
if [ "$?" == "0" ]; then
    echo -e "${DEBUG} ${C}Pulando passo 3...${W}"
else
    ansible-playbook -i $ip,  --private-key $SSH_FILE  --extra-vars ansible_user=$ansible_user  --ssh-extra-args '-o StrictHostKeyChecking=no  -o UserKnownHostsFile=/dev/null' setup_api1.yml
    if [ "$?" != "0" ]; then
        echo -e "${ERROR} ${O} Erro executando ansible API1 setup${W}\n"
        info
        exit 1
    fi
    echo "step3_api1" >> "$status_file"
    echo -e "${OK} ${G}OK${W}"
fi


# Step 4 - API2
echo -e "\n${OK} Executando passo 4 - setup_api2.yml"
grep "step4_api2" "$status_file" >/dev/null 2>&1
if [ "$?" == "0" ]; then
    echo -e "${DEBUG} ${C}Pulando passo 4...${W}"
else
    ansible-playbook -i $ip,  --private-key $SSH_FILE  --extra-vars ansible_user=$ansible_user  --ssh-extra-args '-o StrictHostKeyChecking=no  -o UserKnownHostsFile=/dev/null' setup_api2.yml
    if [ "$?" != "0" ]; then
        echo -e "${ERROR} ${O} Erro executando ansible API2 setup${W}\n"
        info
        exit 1
    fi
    echo "step4_api2" >> "$status_file"
    echo -e "${OK} ${G}OK${W}"
fi

# Step 5 - API Auth
echo -e "\n${OK} Executando passo 5 - setup_apiauth.yml"
grep "step5_apiauth" "$status_file" >/dev/null 2>&1
if [ "$?" == "0" ]; then
    echo -e "${DEBUG} ${C}Pulando passo 5...${W}"
else
    ansible-playbook -i $ip,  --private-key $SSH_FILE  --extra-vars ansible_user=$ansible_user  --ssh-extra-args '-o StrictHostKeyChecking=no  -o UserKnownHostsFile=/dev/null' setup_apiauth.yml
    if [ "$?" != "0" ]; then
        echo -e "${ERROR} ${O} Erro executando ansible API Auth setup${W}\n"
        info
        exit 1
    fi
    echo "step5_apiauth" >> "$status_file"
    echo -e "${OK} ${G}OK${W}"
fi

# Step 6 - OAuth Bank
echo -e "\n${OK} Executando passo 6 - setup_bank.yml"
grep "step6_bank" "$status_file" >/dev/null 2>&1
if [ "$?" == "0" ]; then
    echo -e "${DEBUG} ${C}Pulando passo 6...${W}"
else
    ansible-playbook -i $ip,  --private-key $SSH_FILE  --extra-vars ansible_user=$ansible_user  --ssh-extra-args '-o StrictHostKeyChecking=no  -o UserKnownHostsFile=/dev/null' setup_bank.yml
    if [ "$?" != "0" ]; then
        echo -e "${ERROR} ${O} Erro executando ansible Bank setup${W}\n"
        info
        exit 1
    fi
    echo "step6_bank" >> "$status_file"
    echo -e "${OK} ${G}OK${W}"
fi


# Step 7 - RDP
echo -e "\n${OK} Executando passo 7 - setup_rdp.yml"
grep "step7_rdp" "$status_file" >/dev/null 2>&1
if [ "$?" == "0" ]; then
    echo -e "${DEBUG} ${C}Pulando passo 7...${W}"
else
    ansible-playbook -i $ip,  --private-key $SSH_FILE  --extra-vars ansible_user=$ansible_user  --ssh-extra-args '-o StrictHostKeyChecking=no  -o UserKnownHostsFile=/dev/null' setup_rdp.yml
    if [ "$?" != "0" ]; then
        echo -e "${ERROR} ${O} Erro executando ansible RDP setup${W}\n"
        info
        exit 1
    fi
    echo "step7_rdp" >> "$status_file"
    echo -e "${OK} ${G}OK${W}"
fi


popd

echo -e "\n\n${O}===================================================${W}"
echo -e "${O} Deploy finalizado! ${W}"
echo -e "${O}===================================================${W}"

echo -e "${OK} Credenciais"
echo -e "     ${C}Usuário.:${O} webapi${W}"
echo -e "     ${C}Senha...:${O} ${password}${W}"
echo ""
echo -e "${OK} Acessos"
echo -e "     ${C}IP......:${O} ${ip}${W}"
echo -e "     ${C}SSH.....:${O} Porta 22${W}"
echo -e "     ${C}RDP.....:${O} Porta 48389${W}"
echo -e "     ${C}Proxy...:${O} Porta 48284${W}"
echo " "

echo -e "${OK} Chaves"
echo -e "     ${C}Chave privada SSH.:${O}\n${PK}\n${W}"
echo -e "     ${C}Chave pública SSH.:${O}\n${PUBK}v${W}"
echo ""