RubotSoftware: agentWORM.py

import commands
import os
import re
import signal
import sys
import shutil
import socket
import subprocess
import time

from backend.addon import services
from backend.agent import Agent
from backend.variables import *
from util.platform import spawn, run
from testbed import testbed

class wormAgent(Agent):
        """
                The wormAgent controls the propagation of a simple IRC controlled worm. 
        """

        DEPENDS = []
        SOFTWARE = []

        AGENTGROUP = 'Attack'
        AGENTTYPE = 'WORM'
        NICENAME = 'Worm'
        COMMANDS = [
                'STARTIRC','STOPIRC',
                'STARTBOT','STOPBOT']
        VARIABLES = [
                NodeVar('IRCHost', None, 'IRC Host', 'Select the node to run the IRC server'),   
                NodeVar('WormStart', None, 'Worm Start', 'Select the node from which to start the worm'),       
                NodeListVar('targets', [], 'Vulnerable Servers', 'Select the nodes to become vulnerable severs'),
                IntfListVar('targetIP', IPList([]), 'Target IPs', 'Select the IPs for the nodes you want to be attacked')
       
        ]

        def __init__(self): 
                Agent.__init__(self)
                        
        def handleSTARTIRC(self):
                """ 
                        This method is called to start the irc server.  It starts ./ircd/ircd.rb which starts the
                        irc server on the selected IRCHost and port 6667 by default
                """

                if self.IRCHost.myNodeMemberOf():
                        self.pids.append(spawn("ruby /usr/rubot/ircd/ircd.rb"))
      
        def handleSTOPIRC(self):
                """
                        This method is called to stop the irc server.  It will kill the process ircd.rb
                """
                if self.IRCHost.myNodeMemberOf():
                        self.pids.append(spawn("killall ircd"))
        
        def handleSTARTBOT(self):
                """
                        This will start the worm.  It runs rubot/experiments/worm.py
                """
                
                if self.targets.myNodeMemberOf():
                        self.pids.append(spawn('python /usr/rubot/experiments/vulnserv.py 2008 '+str(self.IRCHost)+' '+str(self.targetIP)))
                                
                if self.WormStart.myNodeMemberOf():
                        self.pids.append(spawn('python /usr/rubot/experiments/worm.py '+str(self.targetIP)))
                
        def handleSTOPBOT(self):
                """
                        This will stop the worm by calling a script to kill all of the vulnserv.rb running on the different nodes
                """
                self.pids.append(spawn('killall vul'))
                self.pids.append(spawn('killall ssh'))