GitHubMirror/sshyp-labs
1
0
Fork 0
mirror of https://github.com/rwinkhart/sshyp-labs.git synced 2026-09-06 09:07:17 -04:00
Code Issues Packages Projects Releases Wiki Activity

Support for new sshyp configuration file

Browse Source
This commit is contained in:
RandyTheSilly
2023-05-16 11:06:29 -04:00
parent c8e54cef43
commit ed40b01e85
1 changed files with 18 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
sshyp-mfa/lib/sshyp-mfa.py
+18 -16
View File
@@ -1,13 +1,14 @@
#!/usr/bin/env python3 #!/usr/bin/env python3
from base64 import b32decode from base64 import b32decode
from configparser import ConfigParser
from os import environ, listdir, path, uname from os import environ, listdir, path, uname
from pathlib import Path from os.path import expanduser, isdir, isfile
from sshync import get_profile from sshync import get_profile
from sshyp import decrypt, shm_gen, whitelist_verify from sshyp import decrypt, shm_gen, whitelist_verify
from subprocess import PIPE, Popen, run from subprocess import PIPE, Popen, run
from sys import argv, exit as s_exit from sys import argv, exit as s_exit
from time import sleep, strftime, time from time import sleep, strftime, time
home = expanduser("~")
def totp(_secret, _algo, _digits, _period): # uses provided information to generate a standard totp key def totp(_secret, _algo, _digits, _period): # uses provided information to generate a standard totp key
@@ -23,26 +24,26 @@ def totp(_secret, _algo, _digits, _period): # uses provided information to gene
def mfa_read_shortcut(): # extracts MFA info from the user-specified sshyp entry def mfa_read_shortcut(): # extracts MFA info from the user-specified sshyp entry
from shutil import rmtree from shutil import rmtree
if not Path(f"{directory}{arguments[0]}.gpg").exists(): if not isfile(f"{directory}{arguments[0]}.gpg"):
print(f"\n\u001b[38;5;9merror: entry ({arguments[0]}) does not exist\u001b[0m\n") print(f"\n\u001b[38;5;9merror: entry ({arguments[0]}) does not exist\u001b[0m\n")
s_exit(1) s_exit(1)
_shm_folder, _shm_entry = shm_gen() _shm_folder, _shm_entry = shm_gen()
if quick_unlock_enabled == 'y': if quick_unlock_enabled == 'true':
decrypt(directory + arguments[0], _shm_folder, _shm_entry, whitelist_verify(port, username_ssh, ip, device_id)) decrypt(directory + arguments[0], _shm_folder, _shm_entry, whitelist_verify(port, username_ssh, ip, device_id))
else: else:
decrypt(directory + arguments[0], _shm_folder, _shm_entry, False) decrypt(directory + arguments[0], _shm_folder, _shm_entry, False)
try: try:
_mfa_data = open(f"{path.expanduser('~/.config/sshyp/tmp/')}{_shm_folder}/{_shm_entry}", 'r').readlines() _mfa_data = open(f"{home}/.config/sshyp/tmp/{_shm_folder}/{_shm_entry}", 'r').readlines()
_type = _mfa_data[4].split('otpauth://')[1].split('/')[0] _type = _mfa_data[4].split('otpauth://')[1].split('/')[0]
_secret = _mfa_data[4].split('?secret=')[1].split('&issuer=')[0] _secret = _mfa_data[4].split('?secret=')[1].split('&issuer=')[0]
_algo = _mfa_data[4].split('&algorithm=')[1].split('&digits=')[0] _algo = _mfa_data[4].split('&algorithm=')[1].split('&digits=')[0]
_digits = int(_mfa_data[4].split('&digits=')[1].split('&period=')[0]) _digits = int(_mfa_data[4].split('&digits=')[1].split('&period=')[0])
_period = int(_mfa_data[4].split('&period=')[1]) _period = int(_mfa_data[4].split('&period=')[1])
rmtree(f"{path.expanduser('~/.config/sshyp/tmp/')}{_shm_folder}") rmtree(f"{home}/.config/sshyp/tmp/{_shm_folder}")
return _type, _secret, _algo, _digits, _period return _type, _secret, _algo, _digits, _period
except IndexError: except IndexError:
print(f"\n\u001b[38;5;9merror: entry ({arguments[0]}) does not contain valid mfa data\u001b[0m\n") print(f"\n\u001b[38;5;9merror: entry ({arguments[0]}) does not contain valid mfa data\u001b[0m\n")
rmtree(f"{path.expanduser('~/.config/sshyp/tmp/')}{_shm_folder}") rmtree(f"{home}/.config/sshyp/tmp/{_shm_folder}")
s_exit(1) s_exit(1)
@@ -54,13 +55,14 @@ if __name__ == '__main__':
s_exit(1) s_exit(1)
# user data fetcher # user data fetcher
device_id = listdir(path.expanduser('~/.config/sshyp/devices'))[0] sshyp_data = ConfigParser()
quick_unlock_enabled = open(path.expanduser('~/.config/sshyp/sshyp-data')).readlines()[3].rstrip() sshyp_data.read(f"{home}/.config/sshyp/sshyp.ini")
ssh_info = get_profile(path.expanduser('~/.config/sshyp/sshyp.sshync')) quick_unlock_enabled = sshyp_data.get('CLIENT-ONLINE', 'quick_unlock_enabled')
username_ssh = str(ssh_info[0].rstrip()) username_ssh = sshyp_data.get('SSHYNC', 'user')
ip = str(ssh_info[1].rstrip()) ip = sshyp_data.get('SSHYNC', 'ip')
port = str(ssh_info[2].rstrip()) port = sshyp_data.get('SSHYNC', 'port')
directory = str(ssh_info[3].rstrip()) directory = sshyp_data.get('SSHYNC', 'local_dir')
device_id = listdir(f"{home}/.config/sshyp/devices")[0]
# main process: runs functions to generate MFA key, then continuously copies up-to-date MFA key to clipboard # main process: runs functions to generate MFA key, then continuously copies up-to-date MFA key to clipboard
try: try:
@@ -83,8 +85,8 @@ if __name__ == '__main__':
elif uname()[0] == 'Haiku': # Haiku clipboard detection elif uname()[0] == 'Haiku': # Haiku clipboard detection
run(('clipboard', '-c', _mfa_key)) run(('clipboard', '-c', _mfa_key))
elif uname()[0] == 'Darwin': # MacOS clipboard detection elif uname()[0] == 'Darwin': # MacOS clipboard detection
run(('pbcopy'), stdin=Popen(('printf', _mfa_key)), stdout=PIPE).stdout) run(('pbcopy'), stdin=Popen(('printf', _mfa_key)), stdout=PIPE).stdout
elif Path("/data/data/com.termux").exists(): # Termux (Android) clipboard detection elif isdir("/data/data/com.termux"): # Termux (Android) clipboard detection
run(('termux-clipboard-set', _mfa_key)) run(('termux-clipboard-set', _mfa_key))
else: # X11 clipboard detection else: # X11 clipboard detection
run(('xclip', '-sel', 'c'), stdin=Popen(('printf', _mfa_key), stdout=PIPE).stdout) run(('xclip', '-sel', 'c'), stdin=Popen(('printf', _mfa_key), stdout=PIPE).stdout)