mochaisvibecoded
64 lines
1.9 KiB
C#
64 lines
1.9 KiB
C#
using Microsoft.AspNetCore.Mvc;
|
|
using Mocha2023.Classes;
|
|
using Mocha2023.Classes.DBs;
|
|
|
|
namespace Mocha2023.Controllers;
|
|
|
|
public class ScannerHoneypotController : ControllerBase
|
|
{
|
|
|
|
private static readonly string[] SuspiciousMarkers =
|
|
{
|
|
".env", ".git", "aws", "credentials", ".aws", "id_rsa", ".ssh",
|
|
"config.js", "config.json", "appsettings", "web.config", ".htaccess",
|
|
"wp-admin", "wp-login", "wp-content", "wp-json", ".php", "phpinfo",
|
|
"docker-compose", "dockerfile", ".yml", ".yaml", "backup", ".sql",
|
|
".bak", ".zip.php", "shell", "eval-stdin", "cgi-bin", "vendor/",
|
|
"node_modules", ".npmrc", ".dockerenv", "actuator", "swagger",
|
|
".well-known/traefik", "debug", "adminer", "phpmyadmin"
|
|
};
|
|
|
|
private static readonly HashSet<string> IgnoredPaths = new(StringComparer.OrdinalIgnoreCase)
|
|
{
|
|
"/favicon.ico",
|
|
"/robots.txt"
|
|
};
|
|
|
|
[Route("{*path}")]
|
|
[HttpGet]
|
|
[HttpPost]
|
|
[HttpPut]
|
|
[HttpDelete]
|
|
[HttpHead]
|
|
[HttpOptions]
|
|
[HttpPatch]
|
|
public IActionResult CatchAll(string? path)
|
|
{
|
|
string fullPath = "/" + (path ?? string.Empty);
|
|
|
|
if (IgnoredPaths.Contains(fullPath))
|
|
return NotFound();
|
|
|
|
string? matchedMarker = SuspiciousMarkers.FirstOrDefault(marker =>
|
|
fullPath.Contains(marker, StringComparison.OrdinalIgnoreCase));
|
|
|
|
string ipAddress = ClientNetwork.GetClientIp(Request)?.ToString() ?? "unknown";
|
|
string? userAgent = Request.Headers.TryGetValue("User-Agent", out var uaValues) && uaValues.Count > 0
|
|
? uaValues.ToString()
|
|
: null;
|
|
string? queryString = Request.QueryString.HasValue
|
|
? Request.QueryString.Value
|
|
: null;
|
|
|
|
ScannerLogDB.Log(
|
|
ipAddress,
|
|
Request.Method,
|
|
fullPath,
|
|
queryString,
|
|
userAgent,
|
|
matchedMarker);
|
|
|
|
return NotFound();
|
|
}
|
|
}
|