magellan/internal/scan.go

package magellan

import (
	"fmt"
	"math"
	"net"
	"net/http"
	"sync"
	"time"

	"github.com/OpenCHAMI/magellan/internal/util"
)

type ScannedResult struct {
	Host     string `json:"host"`
	Port     int    `json:"port"`
	Protocol string `json:"protocol"`
	State    bool   `json:"state"`
}

func rawConnect(host string, ports []int, timeout int, keepOpenOnly bool) []ScannedResult {
	results := []ScannedResult{}
	for _, p := range ports {
		result := ScannedResult{
			Host:     host,
			Port:     p,
			Protocol: "tcp",
			State:    false,
		}
		t := time.Second * time.Duration(timeout)
		port := fmt.Sprint(p)
		conn, err := net.DialTimeout("tcp", net.JoinHostPort(host, port), t)
		if err != nil {
			result.State = false
			// fmt.Println("Connecting error:", err)
		}
		if conn != nil {
			result.State = true
			defer conn.Close()
			// fmt.Println("Opened", net.JoinHostPort(host, port))
		}
		if keepOpenOnly {
			if result.State {
				results = append(results, result)
			}
		} else {
			results = append(results, result)
		}
	}

	return results
}

func GenerateHosts(subnet string, subnetMask *net.IP) []string {
	if subnet == "" || subnetMask == nil {
		return nil
	}

	// convert subnets from string to net.IP
	subnetIp := net.ParseIP(subnet)
	if subnetIp == nil {
		// try parse CIDR instead
		ip, network, err := net.ParseCIDR(subnet)
		if err != nil {
			return nil
		}
		subnetIp = ip
		if network != nil {
			t := net.IP(network.Mask)
			subnetMask = &t
		}
	}

	mask := net.IPMask(subnetMask.To4())

	// if no subnet mask, use a default 24-bit mask (for now)
	return generateHosts(&subnetIp, &mask)
}

func generateHosts(ip *net.IP, mask *net.IPMask) []string {
	// get all IP addresses in network
	ones, _ := mask.Size()
	hosts := []string{}
	end := int(math.Pow(2, float64((32-ones)))) - 1
	for i := 0; i < end; i++ {
		// ip[3] = byte(i)
		ip = util.GetNextIP(ip, 1)
		if ip == nil {
			continue
		}
		// host := fmt.Sprintf("%v.%v.%v.%v", (*ip)[0], (*ip)[1], (*ip)[2], (*ip)[3])
		// fmt.Printf("host: %v\n", ip.String())
		hosts = append(hosts, ip.String())
	}
	return hosts
}

func ScanForAssets(hosts []string, ports []int, threads int, timeout int, disableProbing bool, verbose bool) []ScannedResult {
	var (
		results  = make([]ScannedResult, 0, len(hosts))
		done     = make(chan struct{}, threads+1)
		chanHost = make(chan string, threads+1)
	)

	var wg sync.WaitGroup
	wg.Add(threads)
	for i := 0; i < threads; i++ {
		go func() {
			for {
				host, ok := <-chanHost
				if !ok {
					wg.Done()
					return
				}
				scannedResults := rawConnect(host, ports, timeout, true)
				if !disableProbing {
					probeResults := []ScannedResult{}
					for _, result := range scannedResults {
						url := fmt.Sprintf("https://%s:%d/redfish/v1/", result.Host, result.Port)
						res, _, err := util.MakeRequest(nil, url, "GET", nil, nil)
						if err != nil || res == nil {
							if verbose {
								fmt.Printf("failed to make request: %v\n", err)
							}
							continue
						} else if res.StatusCode != http.StatusOK {
							if verbose {
								fmt.Printf("request returned code: %v\n", res.StatusCode)
							}
							continue
						} else {
							probeResults = append(probeResults, result)
						}
					}
					results = append(results, probeResults...)
				} else {
					results = append(results, scannedResults...)
				}

			}
		}()
	}

	for _, host := range hosts {
		chanHost <- host
	}
	go func() {
		select {
		case <-done:
			wg.Done()
			break
		default:
			time.Sleep(1000)
		}
	}()
	close(chanHost)
	wg.Wait()
	close(done)
	return results
}

func GetDefaultPorts() []int {
	return []int{HTTPS_PORT}
}