atomicshop 3.3.28__py3-none-any.whl → 3.10.0__py3-none-any.whl

atomicshop/wrappers/socketw/get_process.py

@@ -1,123 +0,0 @@
-# Needed to redirect output from console to logger on LOCALHOST process command line harvesting.
-import io
-from contextlib import redirect_stdout
-import logging
-
-from . import base
-from ...ssh_remote import SSHRemote
-from ...print_api import print_api
-
-import psutil
-
-
-class GetCommandLine:
-    def __init__(
-            self,
-            client_socket=None,
-            ssh_script_processor=None,
-            ssh_user: str = None,
-            ssh_pass: str = None,
-            logger: logging.Logger = None
-    ):
-        self.client_socket = client_socket
-        self.ssh_script_processor = ssh_script_processor
-        self.ssh_user: str = ssh_user
-        self.ssh_pass: str = ssh_pass
-        self.logger: logging.Logger = logger
-
-    def get_process_name(self, print_kwargs: dict = None):
-        # Get client ip and the source port.
-        client_ip, source_port = base.get_source_address_from_socket(self.client_socket)
-
-        # Put source port variable inside the string script.
-        updated_script_string = self.ssh_script_processor.put_variable_into_script_string(
-            source_port, print_kwargs=print_kwargs)
-
-        process_name = self.get_process_commandline(
-            client_ip=client_ip,
-            script_string=updated_script_string,
-            print_kwargs=print_kwargs)
-
-        return process_name
-
-    def get_process_commandline(
-            self,
-            client_ip: str,
-            script_string: str,
-            print_kwargs: dict = None
-    ):
-        execution_output = None
-        execution_error = None
-
-        # Checking if we're on localhost. If not, we'll execute SSH connection to get calling process name.
-        if client_ip not in base.THIS_DEVICE_IP_LIST:
-            # Tried using paramiko SSH concurrently within threads, but with bigger loads it just breaks.
-            # So, better using it separately for each thread.
-
-            print_api(f"Initializing SSH connection to [{client_ip}]", **print_kwargs)
-            # Initializing SSHRemote class.
-            current_ssh_client = SSHRemote(
-                ip_address=client_ip, username=self.ssh_user, password=self.ssh_pass, logger=self.logger)
-
-            execution_output, execution_error = current_ssh_client.connect_get_client_commandline(script_string)
-        # Else, if we're on localhost, then execute the script directly without SSH.
-        else:
-            print_api(f"Executing LOCALHOST command to get the calling process.", **print_kwargs)
-            # Getting the redirection from console print, since that what the 'script_string' does.
-            with io.StringIO() as buffer, redirect_stdout(buffer):
-                # Executing the script with print to console.
-                try:
-                    exec(script_string)
-                except ModuleNotFoundError as function_exception_object:
-                    execution_error = f"Module not installed: {function_exception_object}"
-                    print_api(
-                        execution_error, error_type=True, logger_method="error", traceback_string=True,
-                        **print_kwargs)
-                except psutil.AccessDenied:
-                    execution_error = f"Access Denied for 'psutil' to read system process command line. " \
-                                      f"Run script with Admin Rights."
-                    print_api(
-                        execution_error, error_type=True, logger_method="error", traceback_string=True,
-                        **print_kwargs)
-
-                if not execution_error:
-                    # Reading the buffer.
-                    execution_output = buffer.getvalue()
-
-        # This section is generic for both remote SSH and localhost executions of the script.
-        process_name = self.get_commandline_and_error(execution_output, execution_error, print_kwargs=print_kwargs)
-
-        return process_name
-
-    @staticmethod
-    def get_commandline_and_error(
-            execution_output,
-            execution_error,
-            print_kwargs: dict = None
-    ):
-        # If there was known error on localhost / known error on remote or any kind of error on remote, it was
-        # already logged, so we'll just put the error into 'process_name'.
-        if execution_error:
-            process_name = execution_error
-            print_api(
-                f"Error During Command Execution: {process_name}", error_type=True,
-                logger_method='error', **(print_kwargs or {}))
-        # If there wasn't any error of above types, then we can put the output from either local or remote script
-        # execution into 'process_name' and log it / output to console.
-        else:
-            # If the output that was returned is not empty.
-            if execution_output:
-                # Replacing '\r\n' escape lines with string, so that the line will not be escaped in logs.
-                if '\r\n' in execution_output:
-                    execution_output = execution_output.replace('\r\n', '')
-                elif '\n' in execution_output:
-                    execution_output = execution_output.replace('\n', '')
-
-                process_name = execution_output
-                print_api(f"Client Process Command Line: {process_name}", **(print_kwargs or {}))
-            # Else if the script output came back empty.
-            else:
-                process_name = "Client Process Command Line came back empty after script execution."
-                print_api(process_name, error_type=True, logger_method='error', **(print_kwargs or {}))
-
-        return process_name