pfSense

#!/usr/local/bin/php-cgi -f

 * pfSsh

 *

 * part of pfSense (https://www.pfsense.org)

 * Copyright (c) 2004-2016 Electric Sheep Fencing, LLC

 * All rights reserved.

 *

 * Redistribution and use in source and binary forms, with or without

 * modification, are permitted provided that the following conditions are met:

 *

 * 1. Redistributions of source code must retain the above copyright notice,

 *    this list of conditions and the following disclaimer.

 *

 * 2. Redistributions in binary form must reproduce the above copyright

 *    notice, this list of conditions and the following disclaimer in

 *    the documentation and/or other materials provided with the

 *    distribution.

 *

 * 3. All advertising materials mentioning features or use of this software

 *    must display the following acknowledgment:

 *    "This product includes software developed by the pfSense Project

 *    for use in the pfSense® software distribution. (http://www.pfsense.org/).

 *

 * 4. The names "pfSense" and "pfSense Project" must not be used to

 *    endorse or promote products derived from this software without

 *    prior written permission. For written permission, please contact

 *    coreteam@pfsense.org.

 *

 * 5. Products derived from this software may not be called "pfSense"

 *    nor may "pfSense" appear in their names without prior written

 *    permission of the Electric Sheep Fencing, LLC.

 *

 * 6. Redistributions of any form whatsoever must retain the following

 *    acknowledgment:

 *

 * "This product includes software developed by the pfSense Project

 * for use in the pfSense software distribution (http://www.pfsense.org/).

 *

 * THIS SOFTWARE IS PROVIDED BY THE pfSense PROJECT ``AS IS'' AND ANY

 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE pfSense PROJECT OR

 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT

 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;

 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,

 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED

 * OF THE POSSIBILITY OF SUCH DAMAGE.

 */

	 "breaksw", "builtins", "case", "cd", "chdir", "command", "complete", "continue", "default",

	 "dirs", "do", "done", "echo", "echotc", "elif", "else", "end", "endif", "endsw", "esac", "eval",

	 "exec", "exit", "export", "false", "fc", "fg", "filetest", "fi", "for", "foreach", "getopts",

	 "glob", "goto", "hash", "hashstat", "history", "hup", "if", "jobid", "jobs", "kill", "limit",

	 "local", "log", "login", "logout", "ls-F", "nice", "nohup", "notify", "onintr", "popd",

	 "printenv", "pushd", "pwd", "read", "readonly", "rehash", "repeat", "return", "sched", "set",

	 "setenv", "settc", "setty", "setvar", "shift", "source", "stop", "suspend", "switch",

	 "telltc", "test", "then", "time", "trap", "true", "type", "ulimit", "umask", "unalias",

	 "uncomplete", "unhash", "unlimit", "unset", "unsetenv", "until", "wait", "where", "which",

	 "while");

	$descriptorspec = array(

		1 => array("pipe", "w"),  // stdout

		2 => array("pipe", "w")); // stderr ?? instead of a file

	if (is_resource($fd)) {

		fclose($pipes[0]);

		while ($s= fgets($pipes[1], 1024)) {

			// read from the pipe

			$buffer .= $s;

		}

		fclose($pipes[1]);

		fclose($pipes[2]);

	return $buffer;

}

		$fp = fopen('php://stdin', 'r');

		$textinput = chop(fgets($fp));

		fclose($fp);

}

	$lines = explode("\n", $text);

	foreach ($lines as $line) {

		if ($counter > $count) {

			echo "Press RETURN to continue ...";

			$fp = fopen('php://stdin', 'r');

			$pressreturn = chop(fgets($fp));

			if ($pressreturn == "q" || $pressreturn == "quit") {

				return;

			}

			fclose($fp);

			$counter = 0;

		}

		echo "{$line}\n";

		$counter++;

	}

$show_help_text = <<<EOF

	Enter a series of commands and then execute the set with "exec".

	echo "foo"; // php command

	echo "foo2"; // php command

	! echo "heh" # shell command

	exec

	stoprecording

	more(\$temp);

	print_r(\$config);

	print_r(\$config['dhcpd']);

	print_r(get_wireless_modes(\"ath0\"));

	\$config['system']['enablesshd'] = true;

	\$config['interfaces']['optx']['wireless']['mode'] = "hostap";

	\$config['interfaces']['optx']['wireless']['channel'] = "6";

	\$config['dhcpd']['optx']['enable'] = true;

	\$config['dhcpd']['optx']['range']['to'] = "192.168.31.150";

	\$config['system']['disablefilter'] = true;

	\$config['interfaces']['wan']['enable'] = true;

	\$config['interfaces']['wan']['subnet'] = "24";

	write_config();

	more($show_help_text);

echo ".\n\n";

function completion($string, $index) {

	global $tccommands;

	return $tccommands;

}

readline_completion_function("completion");

	$playback_files = array();

	$files = scandir("/etc/phpshellsessions/");

	foreach ($files as $file) {

		}

	}

	return $playback_files;

}

	echo "\nAvailable playback commands:\n     ";

	foreach ($playback_files as $pbf) {

		echo "{$pbf} ";

		if (function_exists("readline_add_history")) {

			$tccommands[] = "$pbf";

	echo "\n\n";

$playbackbuffer = "";

		echo "Error: Invalid playback file specified.\n\n";

}

$tccommands[] = "exit";

$tccommands[] = "quit";

$tccommands[] = "?";

$tccommands[] = "exec";

$tccommands[] = "stoprecording";

$tccommands[] = "showrecordings";

$tccommands[] = "record";

$tccommands[] = "reset";

$tccommands[] = "RELENG_1_2";

	$first_command = $command_split[0];

	if ($first_command == "playback" || $first_command == "run") {

			echo "Could not locate playback file.\n";

		} else {

			$command = "";

			echo "\nPlayback of file {$command_split[1]} started.\n\n";

			playback_file("{$playback_file}");

			continue;

		}

	}

	if ($first_command == "help" or $first_command == "?") {

		$playbackbuffer = "";

		continue;

	}

		$playbackbuffer = "";

		continue;

	}

		if ($recording) {

			fclose($recording_fd);

			$command = "";

			conf_mount_ro();

			echo "Recording stopped.\n";

			echo "No recording session in progress.\n";

			$command = "";

		}

	}

		echo "\nBuffer reset.\n\n";

		continue;

	}

		if (!$command_split[1]) {

		} else {

			/* time to record */

			conf_mount_rw();

			safe_mkdir("/etc/phpshellsessions");

			$recording_fd = fopen("/etc/phpshellsessions/{$recording_fn}","w");

			}

	$playbackbuffer .= $command . "\n";

	echo "==> Sessions available for playback are:\n";

	foreach (get_playback_files() as $pbf) {

		echo "{$pbf} ";

	}

	echo "\n\n";

	$commandlen = strlen($command);

	$endofstring = substr($command, ($commandlen-1));

function returnfirstchar($command) {

	$commandlen = strlen($command);

	$endofstring = substr($command, 0, 1);

function str_replace_all($search,$replace,$subject) {

	$playback_text .= "require_once('globals.inc');\n";

	$playback_text .= "require_once('config.inc');\n";

	foreach ($playback_file_split as $pfs) {

		$currentline = $pfs;

			$pfsa = str_replace($toquote, $toquotereplace, $currentline);

			$playback_text .= str_replace("!", "system(\"", $pfsa) . "\");\n";

		} else if ($firstchar == "=") {

			/* XXX: encode " in $pfs */

			$pfsa = str_replace($toquote, $toquotereplace, $currentline);

			$currentline   .= str_replace("!", "system(\"", $pfsa) . "\");\n";

		} else {

			$playback_text .= $pfs . "\n";

		}

	}

}

function playback_file($playback_file) {

	$playback_file_contents = file_get_contents("/etc/phpshellsessions/{$playback_file}");

	playback_text($playback_file_contents);

}