DVWS/ws-socket.php at master · interference-security/DVWS · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
<?php

$heartbeat_interval = 30;
$arg_options = getopt("", ["heartbeat-interval:","help"]);
$arg_opt_heartbeat = isset($arg_options["heartbeat-interval"]);
$arg_opt_help = isset($arg_options["help"]);

if($arg_opt_heartbeat)
{
        $heartbeat_interval= intval($arg_options["heartbeat-interval"]);
        if($heartbeat_interval <= 0)
        {
                $heartbeat_interval = 30;
        }
        print "WebSocket Heatbeat Interval: " . $heartbeat_interval . " seconds\n";
}
else
{
        print "Syntax: php ws-socket.php --heartbeat-interval <seconds>\n";
        print "Example: php ws-socket.php --heartbeat-interval 10\n";
        die();
}

require 'vendor/autoload.php';

use Ratchet\Server\IoServer;
use Ratchet\Http\HttpServer;
use Ratchet\WebSocket\WsServer;
use Symfony\Component\Routing\RouteCollection;
use Symfony\Component\Routing\Route;
use Symfony\Component\Routing\Matcher\UrlMatcher;
use Symfony\Component\Routing\RequestContext;

require 'class/CommandExecution.php';
require 'class/ReflectedXSS.php';
require 'class/ShowComments.php';
require 'class/PostComments.php';
require 'class/AuthenticateUser.php';
require 'class/AuthenticateUserPrepared.php';
require 'class/AuthenticateUserBlind.php';
require 'class/FileInclusion.php';
require 'class/AuthenticateUserPreparedSession.php';
require 'class/ChangePassword.php';
require 'class/SSTI.php';
require 'class/PHPCodeInjection.php';

$collection = new RouteCollection;

$wsServer_CommandExecution = new Ratchet\WebSocket\WsServer(new CommandExecution());
$wsServer_ReflectedXSS = new Ratchet\WebSocket\WsServer(new ReflectedXSS());
$wsServer_ShowComments = new Ratchet\WebSocket\WsServer(new ShowComments());
$wsServer_PostComments = new Ratchet\WebSocket\WsServer(new PostComments());
$wsServer_AuthenticateUser = new Ratchet\WebSocket\WsServer(new AuthenticateUser());
$wsServer_AuthenticateUserPrepared = new Ratchet\WebSocket\WsServer(new AuthenticateUserPrepared());
$wsServer_AuthenticateUserBlind = new Ratchet\WebSocket\WsServer(new AuthenticateUserBlind());
$wsServer_FileInclusion = new Ratchet\WebSocket\WsServer(new FileInclusion());
$wsServer_AuthenticateUserPreparedSession = new Ratchet\WebSocket\WsServer(new AuthenticateUserPreparedSession());
$wsServer_ChangePassword = new Ratchet\WebSocket\WsServer(new ChangePassword());
$wsServer_SSTI = new Ratchet\WebSocket\WsServer(new SSTI());
$wsServer_PHPCodeInjection = new Ratchet\WebSocket\WsServer(new PHPCodeInjection());

$collection->add('command-execution', new Route('/command-execution', array(
        '_controller' => $wsServer_CommandExecution,'allowedOrigins' => '*'
    )));

$collection->add('reflected-xss', new Route('/reflected-xss', array(
        '_controller' => $wsServer_ReflectedXSS, 'allowedOrigins' => '*'
    )));
$collection->add('show-comments', new Route('/show-comments', array(
        '_controller' => $wsServer_ShowComments, 'allowedOrigins' => '*'
    )));
$collection->add('post-comments', new Route('/post-comments', array(
        '_controller' => $wsServer_PostComments, 'allowedOrigins' => '*'
    )));
$collection->add('authenticate-user', new Route('/authenticate-user', array(
        '_controller' => $wsServer_AuthenticateUser, 'allowedOrigins' => '*'
    )));
$collection->add('authenticate-user-prepared', new Route('/authenticate-user-prepared', array(
        '_controller' => $wsServer_AuthenticateUserPrepared, 'allowedOrigins' => '*'
    )));
$collection->add('authenticate-user-blind', new Route('/authenticate-user-blind', array(
        '_controller' => $wsServer_AuthenticateUserBlind, 'allowedOrigins' => '*'
    )));
$collection->add('file-inclusion', new Route('/file-inclusion', array(
        '_controller' => $wsServer_FileInclusion, 'allowedOrigins' => '*'
    )));
$collection->add('authenticate-user-prepared-session', new Route('/authenticate-user-prepared-session', array(
        '_controller' => $wsServer_AuthenticateUserPreparedSession, 'allowedOrigins' => '*'
    )));
$collection->add('change-password', new Route('/change-password', array(
        '_controller' => $wsServer_ChangePassword, 'allowedOrigins' => '*'
    )));
$collection->add('ssti', new Route('/ssti', array(
        '_controller' => $wsServer_SSTI, 'allowedOrigins' => '*'
    )));
$collection->add('php-code-injection', new Route('/php-code-injection', array(
        '_controller' => $wsServer_PHPCodeInjection, 'allowedOrigins' => '*'
    )));

$router = new Ratchet\Http\Router(
                    new UrlMatcher($collection,
                                   new RequestContext()
                    )
              );
$server = IoServer::factory(
    new HttpServer(
        $router
    ),
    8080
);


$wsServer_CommandExecution->enableKeepAlive($server->loop, $heartbeat_interval);
$wsServer_ReflectedXSS->enableKeepAlive($server->loop, $heartbeat_interval);
$wsServer_ShowComments->enableKeepAlive($server->loop, $heartbeat_interval);
$wsServer_PostComments->enableKeepAlive($server->loop, $heartbeat_interval);
$wsServer_AuthenticateUser->enableKeepAlive($server->loop, $heartbeat_interval);
$wsServer_AuthenticateUserPrepared->enableKeepAlive($server->loop, $heartbeat_interval);
$wsServer_AuthenticateUserBlind->enableKeepAlive($server->loop, $heartbeat_interval);
$wsServer_FileInclusion->enableKeepAlive($server->loop, $heartbeat_interval);
$wsServer_AuthenticateUserPreparedSession->enableKeepAlive($server->loop, $heartbeat_interval);
$wsServer_ChangePassword->enableKeepAlive($server->loop, $heartbeat_interval);
$wsServer_SSTI->enableKeepAlive($server->loop, $heartbeat_interval);
$wsServer_PHPCodeInjection->enableKeepAlive($server->loop, $heartbeat_interval);

$server->run();