diff options
Diffstat (limited to 'community_modules')
21 files changed, 616 insertions, 0 deletions
diff --git a/community_modules/ldap/ldap_ad.sh b/community_modules/ldap/ldap_ad.sh new file mode 100644 index 0000000..361b7fb --- /dev/null +++ b/community_modules/ldap/ldap_ad.sh @@ -0,0 +1,71 @@ +#!/bin/bash +# Module: ldap_ad +# Description: Realiza búsquedas filtradas en servidores Active Directory usando ldapsearch +# License: GPLv3 +# Author: Luis GuLo +# Version: 1.1.0 +# Dependencies: ldapsearch + +ldap_ad_task() { + local host="$1" + shift + + check_dependencies_ldap_ad || return 1 + + local state="" server="" port="389" base_dn="" filter="" attributes="" bind_dn="" password="" + for arg in "$@"; do + case "$arg" in + state=*) state="${arg#state=}" ;; + server=*) server="${arg#server=}" ;; + port=*) port="${arg#port=}" ;; + base_dn=*) base_dn="${arg#base_dn=}" ;; + filter=*) filter="${arg#filter=}" ;; + attributes=*) attributes="${arg#attributes=}" ;; + bind_dn=*) bind_dn="${arg#bind_dn=}" ;; + password=*) password="${arg#password=}" ;; + esac + done + + # 🌐 Cargar traducciones + local lang="${shflow_vars[language]:-es}" + local trfile="$(dirname "${BASH_SOURCE[0]}")/ldap_ad.tr.${lang}" + declare -A tr + if [[ -f "$trfile" ]]; then while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"; fi + + if [[ "$state" != "search" ]]; then + echo "$(render_msg "${tr[unsupported_state]}" "state=$state")" + return 1 + fi + + if [[ -z "$server" || -z "$base_dn" || -z "$filter" ]]; then + echo "${tr[missing_args]:-❌ [ldap_ad] Faltan argumentos obligatorios: server, base_dn, filter}" + return 1 + fi + + echo "$(render_msg "${tr[connecting]}" "server=$server" "port=$port")" + local cmd=(ldapsearch -LLL -H "$server" -p "$port" -b "$base_dn" "$filter") + [[ -n "$bind_dn" && -n "$password" ]] && cmd=(-D "$bind_dn" -w "$password" "${cmd[@]}") + [[ -n "$attributes" ]] && IFS=',' read -ra attr_list <<< "$attributes" && cmd+=("${attr_list[@]}") + + if "${cmd[@]}" 2>/tmp/ldap_ad_error.log | grep -E '^(dn:|cn:|mail:|sAMAccountName:)' ; then + echo "${tr[success]:-✅ [ldap_ad] Búsqueda completada con éxito}" + else + echo "${tr[no_results]:-⚠️ [ldap_ad] No se encontraron resultados o hubo un error}" + cat /tmp/ldap_ad_error.log + return 1 + fi +} + +check_dependencies_ldap_ad() { + local lang="${shflow_vars[language]:-es}" + local trfile="$(dirname "${BASH_SOURCE[0]}")/ldap_ad.tr.${lang}" + declare -A tr + if [[ -f "$trfile" ]]; then while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"; fi + + if ! command -v ldapsearch &>/dev/null; then + echo "${tr[missing_dep]:-❌ [ldap_ad] El comando 'ldapsearch' no está disponible}" + return 1 + fi + echo "${tr[deps_ok]:-✅ [ldap_ad] Dependencias OK}" + return 0 +} diff --git a/community_modules/ldap/ldap_ad.tr.en b/community_modules/ldap/ldap_ad.tr.en new file mode 100644 index 0000000..55214ae --- /dev/null +++ b/community_modules/ldap/ldap_ad.tr.en @@ -0,0 +1,7 @@ +unsupported_state=❌ [ldap_ad] Unsupported state: '{state}'. Only 'search' is allowed +missing_args=❌ [ldap_ad] Missing required arguments: server, base_dn, filter +connecting=🔍 [ldap_ad] Connecting to {server}:{port}... +success=✅ [ldap_ad] Search completed successfully +no_results=⚠️ [ldap_ad] No results found or an error occurred +missing_dep=❌ [ldap_ad] 'ldapsearch' command is not available +deps_ok=✅ [ldap_ad] Dependencies OK diff --git a/community_modules/ldap/ldap_ad.tr.es b/community_modules/ldap/ldap_ad.tr.es new file mode 100644 index 0000000..93dca53 --- /dev/null +++ b/community_modules/ldap/ldap_ad.tr.es @@ -0,0 +1,7 @@ +unsupported_state=❌ [ldap_ad] Estado no soportado: '{state}'. Solo se permite 'search' +missing_args=❌ [ldap_ad] Faltan argumentos obligatorios: server, base_dn, filter +connecting=🔍 [ldap_ad] Conectando a {server}:{port}... +success=✅ [ldap_ad] Búsqueda completada con éxito +no_results=⚠️ [ldap_ad] No se encontraron resultados o hubo un error +missing_dep=❌ [ldap_ad] El comando 'ldapsearch' no está disponible +deps_ok=✅ [ldap_ad] Dependencias OK diff --git a/community_modules/ldap/ldap_openldap.sh b/community_modules/ldap/ldap_openldap.sh new file mode 100644 index 0000000..bfe8a85 --- /dev/null +++ b/community_modules/ldap/ldap_openldap.sh @@ -0,0 +1,72 @@ +#!/bin/bash +# Module: ldap_openldap +# Description: Realiza búsquedas filtradas en servidores OpenLDAP usando ldapsearch +# License: GPLv3 +# Author: Luis GuLo +# Version: 1.1.0 +# Dependencies: ldapsearch + +ldap_openldap_task() { + local host="$1" + shift + + check_dependencies_ldap_openldap || return 1 + + local state="" server="" port="389" base_dn="" filter="" attributes="" bind_dn="" password="" + for arg in "$@"; do + case "$arg" in + state=*) state="${arg#state=}" ;; + server=*) server="${arg#server=}" ;; + port=*) port="${arg#port=}" ;; + base_dn=*) base_dn="${arg#base_dn=}" ;; + filter=*) filter="${arg#filter=}" ;; + attributes=*) attributes="${arg#attributes=}" ;; + bind_dn=*) bind_dn="${arg#bind_dn=}" ;; + password=*) password="${arg#password=}" ;; + esac + done + + # 🌐 Cargar traducciones + local lang="${shflow_vars[language]:-es}" + local trfile="$(dirname "${BASH_SOURCE[0]}")/ldap_openldap.tr.${lang}" + declare -A tr + if [[ -f "$trfile" ]]; then while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"; fi + + if [[ "$state" != "search" ]]; then + echo "$(render_msg "${tr[unsupported_state]}" "state=$state")" + return 1 + fi + + if [[ -z "$server" || -z "$base_dn" || -z "$filter" ]]; then + echo "${tr[missing_args]:-❌ [ldap_openldap] Faltan argumentos obligatorios: server, base_dn, filter}" + return 1 + fi + + echo "$(render_msg "${tr[connecting]}" "server=$server" "port=$port")" + local cmd=(ldapsearch -x -H "$server:$port") + [[ -n "$bind_dn" && -n "$password" ]] && cmd+=(-D "$bind_dn" -w "$password") + cmd+=(-b "$base_dn" "$filter") + [[ -n "$attributes" ]] && IFS=',' read -ra attr_list <<< "$attributes" && cmd+=("${attr_list[@]}") + + if "${cmd[@]}" 2>/tmp/ldap_error.log | grep -E '^(dn:|cn:|mail:|uid:)' ; then + echo "${tr[success]:-✅ [ldap_openldap] Búsqueda completada con éxito}" + else + echo "${tr[no_results]:-⚠️ [ldap_openldap] No se encontraron resultados o hubo un error}" + cat /tmp/ldap_error.log + return 1 + fi +} + +check_dependencies_ldap_openldap() { + local lang="${shflow_vars[language]:-es}" + local trfile="$(dirname "${BASH_SOURCE[0]}")/ldap_openldap.tr.${lang}" + declare -A tr + if [[ -f "$trfile" ]]; then while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"; fi + + if ! command -v ldapsearch &>/dev/null; then + echo "${tr[missing_dep]:-❌ [ldap_openldap] El comando 'ldapsearch' no está disponible}" + return 1 + fi + echo "${tr[deps_ok]:-✅ [ldap_openldap] Dependencias OK}" + return 0 +} diff --git a/community_modules/ldap/ldap_openldap.tr.en b/community_modules/ldap/ldap_openldap.tr.en new file mode 100644 index 0000000..9868fb5 --- /dev/null +++ b/community_modules/ldap/ldap_openldap.tr.en @@ -0,0 +1,7 @@ +unsupported_state=❌ [ldap_openldap] Unsupported state: '{state}'. Only 'search' is allowed +missing_args=❌ [ldap_openldap] Missing required arguments: server, base_dn, filter +connecting=🔍 [ldap_openldap] Connecting to {server}:{port}... +success=✅ [ldap_openldap] Search completed successfully +no_results=⚠️ [ldap_openldap] No results found or an error occurred +missing_dep=❌ [ldap_openldap] 'ldapsearch' command is not available +deps_ok=✅ [ldap_openldap] Dependencies OK diff --git a/community_modules/ldap/ldap_openldap.tr.es b/community_modules/ldap/ldap_openldap.tr.es new file mode 100644 index 0000000..62a649b --- /dev/null +++ b/community_modules/ldap/ldap_openldap.tr.es @@ -0,0 +1,7 @@ +unsupported_state=❌ [ldap_openldap] Estado no soportado: '{state}'. Solo se permite 'search' +missing_args=❌ [ldap_openldap] Faltan argumentos obligatorios: server, base_dn, filter +connecting=🔍 [ldap_openldap] Conectando a {server}:{port}... +success=✅ [ldap_openldap] Búsqueda completada con éxito +no_results=⚠️ [ldap_openldap] No se encontraron resultados o hubo un error +missing_dep=❌ [ldap_openldap] El comando 'ldapsearch' no está disponible +deps_ok=✅ [ldap_openldap] Dependencias OK diff --git a/community_modules/security/euvd_check.sh b/community_modules/security/euvd_check.sh new file mode 100644 index 0000000..2205a42 --- /dev/null +++ b/community_modules/security/euvd_check.sh @@ -0,0 +1,101 @@ +#!/bin/bash +# Module: euvd_check +# Description: Verifica si un host remoto está afectado por una vulnerabilidad EUVD consultando la base europea ENISA +# License: GPLv3 +# Author: Luis GuLo +# Version: 0.6.0 +# Dependencies: curl, jq, ssh, dpkg o rpm + +euvd_check_task() { + local host="$1"; shift + declare -A args + for arg in "$@"; do key="${arg%%=*}"; value="${arg#*=}"; args["$key"]="$value"; done + + local enisa_id="${args[enisa_id]}" + local package="${args[package]}" + local become="${args[become]}" + local prefix="" + [ "$become" = "true" ] && prefix="sudo" + + # 🌐 Cargar traducciones + local lang="${shflow_vars[language]:-es}" + local trfile="$(dirname "${BASH_SOURCE[0]}")/euvd_check.tr.${lang}" + declare -A tr + if [[ -f "$trfile" ]]; then while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"; fi + + if [[ -z "$enisa_id" || -z "$package" ]]; then + echo "${tr[missing_args]:-❌ [euvd_check] Faltan argumentos: enisa_id y package son obligatorios.}" + return 1 + fi + + echolog 1 "$(render_msg "${tr[start]}" "id=$enisa_id" "package=$package" "host=$host")" + + local pkg_cmd="" + if ssh "$host" "command -v dpkg" &>/dev/null; then + pkg_cmd="dpkg -s" + echolog 1 "${tr[detected_dpkg]:-🔧 Gestor de paquetes detectado: dpkg}" + elif ssh "$host" "command -v rpm" &>/dev/null; then + pkg_cmd="rpm -q" + echolog 1 "${tr[detected_rpm]:-🔧 Gestor de paquetes detectado: rpm}" + else + echo "${tr[no_pkg]:-❌ [euvd_check] No se detectó gestor de paquetes compatible en el host}" + return 1 + fi + + local version_cmd="$pkg_cmd $package" + [[ "$become" = "true" ]] && version_cmd="sudo $version_cmd" + + local version + version=$(ssh "$host" "$version_cmd" 2>/dev/null | grep -E 'Version|version|^'"$package" | head -n1 | awk '{print $2}') + + if [[ -z "$version" ]]; then + echolog 1 "$(render_msg "${tr[version_fail]}" "package=$package" "host=$host")" + return 1 + fi + + echolog 1 "$(render_msg "${tr[version_ok]}" "version=$version")" + + local enisa_url="https://euvdservices.enisa.europa.eu/api/enisaid?id=$enisa_id" + echolog 1 "$(render_msg "${tr[query_enisa]}" "id=$enisa_id")" + local response + response=$(curl -s -X GET "$enisa_url") + + if ! echo "$response" | jq -e .description &>/dev/null; then + echolog 1 "$(render_msg "${tr[invalid_response]}" "id=$enisa_id")" + echolog 1 "$(render_msg "${tr[response_trunc]}" "snippet=$(echo "$response" | head -c 120 | tr '\n' ' ')")" + return 1 + fi + + local score desc aliases + score=$(echo "$response" | jq -r '.baseScore // empty') + desc=$(echo "$response" | jq -r '.description // empty') + aliases=$(echo "$response" | jq -r '.aliases[]?') + + [[ -n "$score" ]] && echolog 1 "$(render_msg "${tr[score]}" "score=$score")" + echolog 2 "$(render_msg "${tr[desc]}" "desc=$desc")" + [[ -n "$aliases" ]] && echolog 1 "$(render_msg "${tr[aliases]}" "aliases=$aliases")" + + if echo "$desc" | grep -iq "$package" && echo "$desc" | grep -q "$version"; then + echo "$(render_msg "${tr[vulnerable]}" "host=$host" "id=$enisa_id")" + return 1 + else + echo "$(render_msg "${tr[safe]}" "host=$host" "id=$enisa_id")" + return 0 + fi +} + +check_dependencies_euvd_check() { + local lang="${shflow_vars[language]:-es}" + local trfile="$(dirname "${BASH_SOURCE[0]}")/euvd_check.tr.${lang}" + declare -A tr + if [[ -f "$trfile" ]]; then while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"; fi + + for cmd in ssh curl jq; do + if ! command -v "$cmd" &> /dev/null; then + echo "$(render_msg "${tr[missing_dep]}" "cmd=$cmd")" + return 1 + fi + done + echo "${tr[deps_ok]:-✅ [euvd_check] ssh, curl y jq disponibles.}" + return 0 +} diff --git a/community_modules/security/euvd_check.tr.en b/community_modules/security/euvd_check.tr.en new file mode 100644 index 0000000..ae95dd0 --- /dev/null +++ b/community_modules/security/euvd_check.tr.en @@ -0,0 +1,17 @@ +missing_args=❌ [euvd_check] Missing arguments: enisa_id and package are required. +start=🧬 [euvd_check] Checking {id} in package '{package}' on {host}... +detected_dpkg=🔧 Package manager detected: dpkg +detected_rpm=🔧 Package manager detected: rpm +no_pkg=❌ [euvd_check] No compatible package manager detected on host +version_fail=⚠️ [euvd_check] Could not detect installed version of '{package}' on {host}. +version_ok=🔍 Installed version: {version} +query_enisa=🌐 Querying ENISA for {id}... +invalid_response=⚠️ [euvd_check] ENISA response does not contain valid data for {id}. +response_trunc=🔍 Response (truncated): {snippet} +score=📊 CVSS Score: {score} +desc=📝 Description: {desc} +aliases=🔗 Aliases: {aliases} +vulnerable=❌ [euvd_check] Host {host} is vulnerable to {id} +safe=✅ [euvd_check] Host {host} does not appear affected by {id} +missing_dep=❌ [euvd_check] Command '{cmd}' is not available +deps_ok=✅ [euvd_check] ssh, curl and jq are available. diff --git a/community_modules/security/euvd_check.tr.es b/community_modules/security/euvd_check.tr.es new file mode 100644 index 0000000..85e0315 --- /dev/null +++ b/community_modules/security/euvd_check.tr.es @@ -0,0 +1,17 @@ +missing_args=❌ [euvd_check] Faltan argumentos: enisa_id y package son obligatorios. +start=🧬 [euvd_check] Verificando {id} en paquete '{package}' en {host}... +detected_dpkg=🔧 Gestor de paquetes detectado: dpkg +detected_rpm=🔧 Gestor de paquetes detectado: rpm +no_pkg=❌ [euvd_check] No se detectó gestor de paquetes compatible en el host +version_fail=⚠️ [euvd_check] No se pudo detectar la versión instalada de '{package}' en {host}. +version_ok=🔍 Versión instalada: {version} +query_enisa=🌐 Consultando ENISA para {id}... +invalid_response=⚠️ [euvd_check] La respuesta de ENISA no contiene datos válidos para {id}. +response_trunc=🔍 Respuesta (truncada): {snippet} +score=📊 Puntuación CVSS: {score} +desc=📝 Descripción: {desc} +aliases=🔗 Alias: {aliases} +vulnerable=❌ [euvd_check] Host {host} está vulnerable a {id} +safe=✅ [euvd_check] Host {host} no parece afectado por {id} +missing_dep=❌ [euvd_check] El comando '{cmd}' no está disponible +deps_ok=✅ [euvd_check] ssh, curl y jq disponibles. diff --git a/community_modules/winremote/winremote_check.sh b/community_modules/winremote/winremote_check.sh new file mode 100644 index 0000000..4f0d608 --- /dev/null +++ b/community_modules/winremote/winremote_check.sh @@ -0,0 +1,55 @@ +#!/bin/bash +# Module: winremote_check +# Description: Verifica conectividad y ejecución remota básica en equipos Windows mediante SSH y PowerShell +# License: GPLv3 +# Author: Luis GuLo +# Version: 1.2.0 +# Dependencies: ssh, powershell (en el host remoto) + +winremote_check_task() { + local host="$1"; shift + declare -A args + for arg in "$@"; do key="${arg%%=*}"; value="${arg#*=}"; args["$key"]="$value"; done + + local winuser="${args[winuser]}" + local winpassword="${args[winpassword]}" + local port="${args[port]:-22}" + local command="Write-Output 'Conexión establecida desde ShFlow'" + + # 🌐 Cargar traducciones + local lang="${shflow_vars[language]:-es}" + local trfile="$(dirname "${BASH_SOURCE[0]}")/winremote_check.tr.${lang}" + declare -A tr + if [[ -f "$trfile" ]]; then while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"; fi + + if [[ -z "$host" || -z "$winuser" || -z "$winpassword" ]]; then + echo "${tr[missing_args]:-❌ [winremote_check] Parámetros incompletos. Se requiere host, winuser y winpassword.}" + return 1 + fi + + [[ "$host" == *@* ]] && host=$(echo "$host" | awk -F '@' '{print $2}') + + echo "$(render_msg "${tr[start]}" "host=$host")" + + if sshpass -p "$winpassword" ssh -o PreferredAuthentications=password -o StrictHostKeyChecking=no -p "$port" "$winuser@$host" powershell -Command "\"$command\"" &>/dev/null; then + echo "$(render_msg "${tr[success]}" "host=$host")" + return 0 + else + echo "$(render_msg "${tr[fail]}" "host=$host")" + return 1 + fi +} + +check_dependencies_winremote_check() { + local lang="${shflow_vars[language]:-es}" + local trfile="$(dirname "${BASH_SOURCE[0]}")/winremote_check.tr.${lang}" + declare -A tr + if [[ -f "$trfile" ]]; then while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"; fi + + if ! command -v ssh &> /dev/null; then + echo "${tr[missing_ssh]:-❌ [winremote_check] ssh no está disponible.}" + return 1 + fi + echo "${tr[ssh_ok]:-✅ [winremote_check] ssh disponible.}" + return 0 +} diff --git a/community_modules/winremote/winremote_check.tr.en b/community_modules/winremote/winremote_check.tr.en new file mode 100644 index 0000000..3af94a8 --- /dev/null +++ b/community_modules/winremote/winremote_check.tr.en @@ -0,0 +1,6 @@ +missing_args=❌ [winremote_check] Missing parameters. host, winuser and winpassword are required. +start=🖥️ [winremote_check] Checking remote access to {host}... +success=✅ [winremote_check] Remote connection and execution OK on {host} +fail=❌ [winremote_check] Connection or execution failed on {host} +missing_ssh=❌ [winremote_check] ssh is not available. +ssh_ok=✅ [winremote_check] ssh is available. diff --git a/community_modules/winremote/winremote_check.tr.es b/community_modules/winremote/winremote_check.tr.es new file mode 100644 index 0000000..b80f33b --- /dev/null +++ b/community_modules/winremote/winremote_check.tr.es @@ -0,0 +1,6 @@ +missing_args=❌ [winremote_check] Parámetros incompletos. Se requiere host, winuser y winpassword. +start=🖥️ [winremote_check] Verificando acceso remoto a {host}... +success=✅ [winremote_check] Conexión y ejecución remota OK en {host} +fail=❌ [winremote_check] Fallo de conexión o ejecución en {host} +missing_ssh=❌ [winremote_check] ssh no está disponible. +ssh_ok=✅ [winremote_check] ssh disponible. diff --git a/community_modules/winremote/winremote_detect.sh b/community_modules/winremote/winremote_detect.sh new file mode 100644 index 0000000..4477acd --- /dev/null +++ b/community_modules/winremote/winremote_detect.sh @@ -0,0 +1,65 @@ +#!/bin/bash +# Module: winremote_detect +# Description: Detecta si un host Windows tiene habilitado SSH, WinRM, ambos o ninguno +# License: GPLv3 +# Author: Luis GuLo +# Version: 1.2.0 +# Dependencies: nc, curl, pwsh (opcional) + +winremote_detect_task() { + local host="$1"; shift + declare -A args + for arg in "$@"; do key="${arg%%=*}"; value="${arg#*=}"; args["$key"]="$value"; done + + local ssh_port="${args[ssh_port]:-22}" + local winrm_port="${args[winrm_port]:-5985}" + + # 🌐 Cargar traducciones + local lang="${shflow_vars[language]:-es}" + local trfile="$(dirname "${BASH_SOURCE[0]}")/winremote_detect.tr.${lang}" + declare -A tr + if [[ -f "$trfile" ]]; then while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"; fi + + [[ "$host" == *@* ]] && host=$(echo "$host" | awk -F '@' '{print $2}') + + echo "$(render_msg "${tr[start]}" "host=$host")" + + local ssh_status="${tr[ssh_off]:-❌ SSH no disponible}" + local winrm_status="${tr[winrm_off]:-❌ WinRM no disponible}" + + if nc -z -w2 "$host" "$ssh_port" &>/dev/null; then + ssh_status="$(render_msg "${tr[ssh_on]}" "port=$ssh_port")" + fi + + if curl -s -o /dev/null -w "%{http_code}" --connect-timeout 2 "http://$host:$winrm_port/wsman" | grep -q "405"; then + winrm_status="$(render_msg "${tr[winrm_on]}" "port=$winrm_port")" + fi + + echo " $ssh_status" + echo " $winrm_status" + + if [[ "$ssh_status" == *✅* && "$winrm_status" == *✅* ]]; then + echo "$(render_msg "${tr[both]}" "host=$host")" + return 0 + elif [[ "$ssh_status" == *✅* || "$winrm_status" == *✅* ]]; then + echo "${tr[one]:-🟡 Uno de los protocolos está disponible}" + return 0 + else + echo "$(render_msg "${tr[none]}" "host=$host")" + return 1 + fi +} + +check_dependencies_winremote_detect() { + local lang="${shflow_vars[language]:-es}" + local trfile="$(dirname "${BASH_SOURCE[0]}")/winremote_detect.tr.${lang}" + declare -A tr + if [[ -f "$trfile" ]]; then while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"; fi + + if ! command -v nc &> /dev/null || ! command -v curl &> /dev/null; then + echo "${tr[missing_deps]:-❌ [winremote_detect] nc o curl no están disponibles.}" + return 1 + fi + echo "${tr[deps_ok]:-✅ [winremote_detect] nc y curl disponibles.}" + return 0 +} diff --git a/community_modules/winremote/winremote_detect.tr.en b/community_modules/winremote/winremote_detect.tr.en new file mode 100644 index 0000000..986e44f --- /dev/null +++ b/community_modules/winremote/winremote_detect.tr.en @@ -0,0 +1,10 @@ +start=🔍 [winremote_detect] Checking connectivity with {host}... +ssh_on=✅ SSH enabled (port {port}) +ssh_off=❌ SSH not available +winrm_on=✅ WinRM enabled (port {port}) +winrm_off=❌ WinRM not available +both=🟢 Both protocols available on {host} +one=🟡 One protocol is available +none=🔴 No remote protocol detected on {host} +missing_deps=❌ [winremote_detect] nc or curl are not available. +deps_ok=✅ [winremote_detect] nc and curl are available. diff --git a/community_modules/winremote/winremote_detect.tr.es b/community_modules/winremote/winremote_detect.tr.es new file mode 100644 index 0000000..530a034 --- /dev/null +++ b/community_modules/winremote/winremote_detect.tr.es @@ -0,0 +1,10 @@ +start=🔍 [winremote_detect] Analizando conectividad con {host}... +ssh_on=✅ SSH habilitado (puerto {port}) +ssh_off=❌ SSH no disponible +winrm_on=✅ WinRM habilitado (puerto {port}) +winrm_off=❌ WinRM no disponible +both=🟢 Ambos protocolos disponibles en {host} +one=🟡 Uno de los protocolos está disponible +none=🔴 Ningún protocolo remoto detectado en {host} +missing_deps=❌ [winremote_detect] nc o curl no están disponibles. +deps_ok=✅ [winremote_detect] nc y curl disponibles. diff --git a/community_modules/winremote/winremote_exec.sh b/community_modules/winremote/winremote_exec.sh new file mode 100644 index 0000000..79bf413 --- /dev/null +++ b/community_modules/winremote/winremote_exec.sh @@ -0,0 +1,60 @@ +#!/bin/bash +# Module: winremote_exec +# Description: Ejecuta comandos PowerShell en un host Windows remoto vía SSH +# License: GPLv3 +# Author: Luis GuLo +# Version: 1.2.0 +# Dependencies: sshpass, ssh + +winremote_exec_task() { + local host="$1"; shift + declare -A args + for arg in "$@"; do key="${arg%%=*}"; value="${arg#*=}"; args["$key"]="$value"; done + + local winuser="${args[winuser]}" + local winpassword="${args[winpassword]}" + local port="${args[port]:-22}" + local command="${args[command]}" + + # 🌐 Cargar traducciones + local lang="${shflow_vars[language]:-es}" + local trfile="$(dirname "${BASH_SOURCE[0]}")/winremote_exec.tr.${lang}" + declare -A tr + if [[ -f "$trfile" ]]; then while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"; fi + + if [[ -z "$host" || -z "$winuser" || -z "$winpassword" || -z "$command" ]]; then + echo "${tr[missing_args]:-❌ [winremote_exec] Parámetros incompletos. Se requiere host, winuser, winpassword y command.}" + return 1 + fi + + [[ "$host" == *@* ]] && host=$(echo "$host" | awk -F '@' '{print $2}') + local safe_command=$(printf "%q" "$command") + + echo "$(render_msg "${tr[start]}" "host=$host" "port=$port" "user=$winuser")" + + sshpass -p "$winpassword" ssh -o PreferredAuthentications=password -o StrictHostKeyChecking=no -p "$port" "$winuser@$host" \ + "powershell -Command \"$safe_command\"" + + local exit_code=$? + if [[ $exit_code -eq 0 ]]; then + echo "${tr[success]:-✅ [winremote_exec] Comando ejecutado correctamente.}" + return 0 + else + echo "$(render_msg "${tr[fail]}" "code=$exit_code")" + return $exit_code + fi +} + +check_dependencies_winremote_exec() { + local lang="${shflow_vars[language]:-es}" + local trfile="$(dirname "${BASH_SOURCE[0]}")/winremote_exec.tr.${lang}" + declare -A tr + if [[ -f "$trfile" ]]; then while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"; fi + + if ! command -v sshpass &> /dev/null || ! command -v ssh &> /dev/null; then + echo "${tr[missing_deps]:-❌ [winremote_exec] sshpass o ssh no están disponibles.}" + return 1 + fi + echo "${tr[deps_ok]:-✅ [winremote_exec] sshpass y ssh disponibles.}" + return 0 +} diff --git a/community_modules/winremote/winremote_exec.tr.en b/community_modules/winremote/winremote_exec.tr.en new file mode 100644 index 0000000..e1fa189 --- /dev/null +++ b/community_modules/winremote/winremote_exec.tr.en @@ -0,0 +1,6 @@ +missing_args=❌ [winremote_exec] Missing parameters. host, winuser, winpassword and command are required. +start=🔧 [winremote_exec] Executing remote command on {host}:{port} as {user}... +success=✅ [winremote_exec] Command executed successfully. +fail=❌ [winremote_exec] Error executing command (code {code}). +missing_deps=❌ [winremote_exec] sshpass or ssh are not available. +deps_ok=✅ [winremote_exec] sshpass and ssh are available. diff --git a/community_modules/winremote/winremote_exec.tr.es b/community_modules/winremote/winremote_exec.tr.es new file mode 100644 index 0000000..1a52f10 --- /dev/null +++ b/community_modules/winremote/winremote_exec.tr.es @@ -0,0 +1,6 @@ +missing_args=❌ [winremote_exec] Parámetros incompletos. Se requiere host, winuser, winpassword y command. +start=🔧 [winremote_exec] Ejecutando comando remoto en {host}:{port} como {user}... +success=✅ [winremote_exec] Comando ejecutado correctamente. +fail=❌ [winremote_exec] Error al ejecutar el comando (código {code}). +missing_deps=❌ [winremote_exec] sshpass o ssh no están disponibles. +deps_ok=✅ [winremote_exec] sshpass y ssh disponibles. diff --git a/community_modules/winremote/winremote_exec_winrm.sh b/community_modules/winremote/winremote_exec_winrm.sh new file mode 100644 index 0000000..8d4e1bd --- /dev/null +++ b/community_modules/winremote/winremote_exec_winrm.sh @@ -0,0 +1,74 @@ +#!/bin/bash +# Module: winremote_exec_winrm +# Description: Ejecuta comandos en un host Windows remoto vía WSMan (WinRM) desde Linux +# License: GPLv3 +# Author: Luis GuLo +# Version: 1.3.0 +# Dependencies: wsman + +winremote_exec_winrm_task() { + local host="$1"; shift + declare -A args + for arg in "$@"; do key="${arg%%=*}"; value="${arg#*=}"; args["$key"]="$value"; done + + local winuser="${args[winuser]}" + local winpassword="${args[winpassword]}" + local port="${args[port]:-5985}" + local command="${args[command]}" + + # 🌐 Cargar traducciones + local lang="${shflow_vars[language]:-es}" + local trfile="$(dirname "${BASH_SOURCE[0]}")/winremote_exec_winrm.tr.${lang}" + declare -A tr + if [[ -f "$trfile" ]]; then while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"; fi + + if [[ -z "$host" || -z "$winuser" || -z "$winpassword" || -z "$command" ]]; then + echo "${tr[missing_args]:-❌ [winremote_exec_winrm] Parámetros incompletos. Se requiere host, winuser, winpassword y command.}" + return 1 + fi + + [[ "$host" == *@* ]] && host=$(echo "$host" | awk -F '@' '{print $2}') + + local xml_file=$(mktemp --suffix=.xml) + trap '[[ -n "$xml_file" && -f "$xml_file" ]] && rm -f "$xml_file"' EXIT + + cat > "$xml_file" <<EOF +<p:Create_INPUT xmlns:p="http://schemas.microsoft.com/wbem/wsman/1/wmi/root/cimv2/Win32_Process"> + <p:CommandLine>${command}</p:CommandLine> +</p:Create_INPUT> +EOF + + echo "$(render_msg "${tr[start]}" "host=$host" "port=$port" "user=$winuser")" + + wsman invoke http://schemas.microsoft.com/wbem/wsman/1/wmi/root/cimv2/Win32_Process \ + -a Create \ + -h "$host" \ + -P "$port" \ + -u "$winuser" \ + -p "$winpassword" \ + -y basic \ + -J "$xml_file" + + local exit_code=$? + if [[ $exit_code -eq 0 ]]; then + echo "${tr[success]:-✅ [winremote_exec_winrm] Comando ejecutado correctamente vía WSMan.}" + return 0 + else + echo "$(render_msg "${tr[fail]}" "code=$exit_code")" + return $exit_code + fi +} + +check_dependencies_winremote_exec_winrm() { + local lang="${shflow_vars[language]:-es}" + local trfile="$(dirname "${BASH_SOURCE[0]}")/winremote_exec_winrm.tr.${lang}" + declare -A tr + if [[ -f "$trfile" ]]; then while IFS='=' read -r k v; do tr["$k"]="$v"; done < "$trfile"; fi + + if ! command -v wsman &> /dev/null; then + echo "${tr[missing_wsman]:-❌ [winremote_exec_winrm] El cliente 'wsman' no está disponible.}" + return 1 + fi + echo "${tr[wsman_ok]:-✅ [winremote_exec_winrm] Cliente 'wsman' disponible.}" + return 0 +} diff --git a/community_modules/winremote/winremote_exec_winrm.tr.en b/community_modules/winremote/winremote_exec_winrm.tr.en new file mode 100644 index 0000000..ddb3ebe --- /dev/null +++ b/community_modules/winremote/winremote_exec_winrm.tr.en @@ -0,0 +1,6 @@ +missing_args=❌ [winremote_exec_winrm] Missing parameters. host, winuser, winpassword and command are required. +start=🔧 [winremote_exec_winrm] Executing remote command on {host}:{port} as {user}... +success=✅ [winremote_exec_winrm] Command executed successfully via WSMan. +fail=❌ [winremote_exec_winrm] Error executing command (code {code}). +missing_wsman=❌ [winremote_exec_winrm] 'wsman' client is not available. +wsman_ok=✅ [winremote_exec_winrm] 'wsman' client is available. diff --git a/community_modules/winremote/winremote_exec_winrm.tr.es b/community_modules/winremote/winremote_exec_winrm.tr.es new file mode 100644 index 0000000..51fe754 --- /dev/null +++ b/community_modules/winremote/winremote_exec_winrm.tr.es @@ -0,0 +1,6 @@ +missing_args=❌ [winremote_exec_winrm] Parámetros incompletos. Se requiere host, winuser, winpassword y command. +start=🔧 [winremote_exec_winrm] Ejecutando comando remoto en {host}:{port} como {user}... +success=✅ [winremote_exec_winrm] Comando ejecutado correctamente vía WSMan. +fail=❌ [winremote_exec_winrm] Error al ejecutar el comando (código {code}). +missing_wsman=❌ [winremote_exec_winrm] El cliente 'wsman' no está disponible. +wsman_ok=✅ [winremote_exec_winrm] Cliente 'wsman' disponible. |