Compare commits
2 Commits
ea48471215
...
8552980582
| Author | SHA1 | Date |
|---|---|---|
 Cyberes
|
8552980582 | |
|
Cyberes
|
e1c4886c50 |
|
|
@ -1,240 +0,0 @@
|
|||
#!/usr/bin/env bash
|
||||
# startup checks
|
||||
|
||||
if [ -z "$BASH" ]; then
|
||||
echo "Please use BASH."
|
||||
exit 3
|
||||
fi
|
||||
if [ ! -e "/usr/bin/which" ]; then
|
||||
echo "/usr/bin/which is missing."
|
||||
exit 3
|
||||
fi
|
||||
curl=$(which curl)
|
||||
if [ $? -ne 0 ]; then
|
||||
echo "Please install curl."
|
||||
exit 3
|
||||
fi
|
||||
|
||||
|
||||
# Default Values
|
||||
proxy=""
|
||||
method="GET"
|
||||
body=""
|
||||
contains=""
|
||||
lacks=""
|
||||
insecure=0
|
||||
debug=0
|
||||
warning=700
|
||||
encodeurl=0
|
||||
critical=2000
|
||||
url=""
|
||||
follow=0
|
||||
header=""
|
||||
name="default"
|
||||
cookies=0
|
||||
|
||||
# Usage Info
|
||||
usage() {
|
||||
echo '''Usage: check_curl [OPTIONS]
|
||||
[OPTIONS]:
|
||||
-U URL Target URL
|
||||
-M METHOD HTTP Method (default: GET)
|
||||
-N NAME Display Name of scanned object (default: default)
|
||||
-B BODY Request Body to be sent (default: not sent)
|
||||
-E ENCODEURL Send body defined with url encoding (curl --data-urlencode) (default: off)
|
||||
-I INSECURE Sets the curl flag --insecure
|
||||
-C CONTAINS If not contained in response body, CRITICAL will be returned
|
||||
-L LACKS If contained in response body, CRITICAL will be returned (-C has priority when both are set)
|
||||
-w WARNING Warning threshold in milliseconds (default: 700)
|
||||
-c CRITICAL Critical threshold in milliseconds (default: 2000)
|
||||
-H HEADER Send Header (i.E. "AUTHORIZATION: Bearer 8*.UdUYwrl!nK")
|
||||
-F FOLLOW Follow redirects (default: OFF)
|
||||
-D DEBUG Only prints the curl command (default: OFF)
|
||||
-P PROXY Set Proxy Address (default: No Proxy)
|
||||
-K COOKIES Enables/Disabled cookie handling in a temporary cookie jar'''
|
||||
}
|
||||
|
||||
|
||||
# Check which threshold was reached
|
||||
checkTime() {
|
||||
if [ $1 -gt $critical ]; then
|
||||
echo -n "CRITICAL: Slow "
|
||||
elif [ $1 -gt $warning ]; then
|
||||
echo -n "WARNING: Slow "
|
||||
else
|
||||
echo -n "OK"
|
||||
fi
|
||||
}
|
||||
|
||||
# Return code value
|
||||
getStatus() {
|
||||
if [ $1 -gt $critical ]; then
|
||||
return 2
|
||||
elif [ $1 -gt $warning ]; then
|
||||
return 1
|
||||
else
|
||||
return 0
|
||||
fi
|
||||
}
|
||||
|
||||
#main
|
||||
#get options
|
||||
while getopts "P:M:B:C:w:c:U:H:IFN:O:EL:D:K" opt; do
|
||||
case $opt in
|
||||
K)
|
||||
cookies=1
|
||||
;;
|
||||
P)
|
||||
proxy=$OPTARG
|
||||
;;
|
||||
M)
|
||||
method=$OPTARG
|
||||
;;
|
||||
B)
|
||||
body=$OPTARG
|
||||
;;
|
||||
C)
|
||||
contains=$OPTARG
|
||||
;;
|
||||
w)
|
||||
warning=$OPTARG
|
||||
;;
|
||||
c)
|
||||
critical=$OPTARG
|
||||
;;
|
||||
U)
|
||||
url=$OPTARG
|
||||
;;
|
||||
L)
|
||||
lacks=$OPTARG
|
||||
;;
|
||||
I)
|
||||
insecure=1
|
||||
;;
|
||||
N)
|
||||
name=$( echo $OPTARG | sed -e 's/[^A-Za-z0-9._-]/_/g' )
|
||||
;;
|
||||
E)
|
||||
encodeurl=1
|
||||
;;
|
||||
H)
|
||||
header=$OPTARG
|
||||
;;
|
||||
F)
|
||||
follow=1
|
||||
;;
|
||||
D)
|
||||
debug=1
|
||||
;;
|
||||
*)
|
||||
usage
|
||||
exit 3
|
||||
;;
|
||||
esac
|
||||
done
|
||||
|
||||
#hostname is required
|
||||
if [ -z "$url" ] || [ $# -eq 0 ]; then
|
||||
echo "Error: URL is required"
|
||||
usage
|
||||
exit 3
|
||||
fi
|
||||
|
||||
proxyarg=""
|
||||
if [ -n $proxy ] ; then
|
||||
proxyarg=" -x "$proxy" "
|
||||
fi
|
||||
headerarg=""
|
||||
if [ -n "$header" ] ; then
|
||||
headerarg=' -H "'$header'" '
|
||||
fi
|
||||
followarg=""
|
||||
if [ $follow -eq 1 ] ; then
|
||||
followarg=" -L "
|
||||
fi
|
||||
insecurearg=""
|
||||
if [ $insecure -eq 1 ] ; then
|
||||
insecurearg=" --insecure "
|
||||
fi
|
||||
cookiesarg=""
|
||||
if [ $cookies -eq 1 ] ; then
|
||||
COOKIE_JAR_TEMP_PATH=$(mktemp /tmp/check_curl_cookiejar.XXXXXX)
|
||||
cookiesarg=" -c ${COOKIE_JAR_TEMP_PATH} -b ${COOKIE_JAR_TEMP_PATH}"
|
||||
fi
|
||||
bodyarg=""
|
||||
if [ -n $body ]; then
|
||||
body=$(echo $body| sed "s/\"/\\\\\"/g")
|
||||
bodyarg=" --data \""$body"\""
|
||||
if [ $encodeurl -eq 1 ]; then
|
||||
bodyarg=" --data-urlencode \""$body"\""
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ $debug -eq 1 ]; then
|
||||
echo $curl --no-keepalive -s $insecurearg $proxyarg $followarg $bodyarg $headerarg -X $method $cookiesarg "$url"
|
||||
exit 0
|
||||
else
|
||||
start=$(echo $(($(date +%s%N)/1000000)))
|
||||
body=$(eval $curl --no-keepalive -s $insecurearg $proxyarg $followarg $bodyarg $headerarg -X $method $cookiesarg "$url")
|
||||
status=$?
|
||||
fi
|
||||
|
||||
if [ $cookies -eq 1 ] ; then
|
||||
rm -f ${COOKIE_JAR_TEMP_PATH}
|
||||
fi
|
||||
|
||||
end=$(echo $(($(date +%s%N)/1000000)))
|
||||
#decide output by return code
|
||||
if [ $status -eq 0 ] ; then
|
||||
if [ -n "$contains" ]; then
|
||||
if [[ ! $body =~ $contains ]]; then
|
||||
echo "CRITICAL: body does not contain '${contains}'. Body: '$(echo $body | sed 's/\(.\{50\}\).*/\1.../')' |time=$((end - start))ms;${warning};${critical};0;"$critical"ms"
|
||||
exit 2
|
||||
fi
|
||||
fi
|
||||
if [ -n "$lacks" ]; then
|
||||
if [[ $body == *$lacks* ]]; then
|
||||
echo "CRITICAL: body contains '${lacks}'|time=$((end - start))ms;${warning};${critical};0;"$critical"ms"
|
||||
exit 2
|
||||
fi
|
||||
fi
|
||||
echo "$(checkTime $((end - start))) $((end - start))ms - ${url}|time=$((end - start))ms;${warning};${critical};0;"$critical"ms"
|
||||
getStatus $((end - start))
|
||||
exit $?
|
||||
else
|
||||
case $status in
|
||||
1)
|
||||
echo "CRITICAL: Unsupported protocol"
|
||||
;;
|
||||
3)
|
||||
echo "CRITICAL: Malformed URL"
|
||||
;;
|
||||
5)
|
||||
echo "CRITICAL: Couldn't resolve proxy $proxy"
|
||||
;;
|
||||
6)
|
||||
echo "CRITICAL: Couldn't resolve host"
|
||||
;;
|
||||
7)
|
||||
echo "CRITICAL: Couldn't connect to proxy $proxy"
|
||||
;;
|
||||
22)
|
||||
echo "CRITICAL: Server returned http code >= 400"
|
||||
;;
|
||||
52)
|
||||
echo "CRITICAL: Server returned empty response (52)"
|
||||
;;
|
||||
56)
|
||||
echo "CRITICAL: Failure recieving network data (56)"
|
||||
;;
|
||||
60)
|
||||
echo "CRITICAL: SSL/TLS connection problem (60)"
|
||||
;;
|
||||
*)
|
||||
echo "UNKNOWN: $status - ${url}"
|
||||
exit 3
|
||||
;;
|
||||
esac
|
||||
exit 2
|
||||
fi
|
||||
|
||||
|
|
@ -10,7 +10,7 @@ options:
|
|||
--crit CRIT The number of critical updates needed to trigger CRITICAL.
|
||||
|
||||
If --warn or --crit is not provided, any number of updates will trigger CRITICAL."
|
||||
exit 1
|
||||
exit 3
|
||||
}
|
||||
|
||||
WARN_LEVEL=0
|
||||
|
|
@ -55,4 +55,4 @@ if [[ $CRIT_LEVEL -gt 0 ]] || [[ $WARN_LEVEL -gt 0 ]]; then
|
|||
else
|
||||
echo "CRITICAL - $NUM_CRIT_UPDATES critical updates available. | critical_updates=$NUM_CRIT_UPDATES"
|
||||
exit 2
|
||||
fi
|
||||
fi
|
||||
|
|
|
|||
|
|
@ -23,7 +23,7 @@ done
|
|||
if [[ -z $query_domain && ${query_domain+x} ]]; then
|
||||
echo "Error: query domain not provided."
|
||||
echo "Usage: $0 -s <dns_server> -d <query_domain> -w <warning_time> -c <critical_time>"
|
||||
exit 1
|
||||
exit 3
|
||||
fi
|
||||
|
||||
# Perform DNS resolution check and measure the time
|
||||
|
|
|
|||
|
|
@ -2,7 +2,7 @@
|
|||
|
||||
usage() {
|
||||
echo "Usage: $0 -i <IP checker service> -d <domain to resolve> -r <DNS server to query>"
|
||||
exit 1
|
||||
exit 3
|
||||
}
|
||||
|
||||
IP_CHECKER=""
|
||||
|
|
|
|||
|
|
@ -4,20 +4,18 @@
|
|||
usage() {
|
||||
echo "Usage: $0 -d domain -u email -k key -i ip_checker"
|
||||
echo " -d The domain to check"
|
||||
echo " -u The Cloudflare email"
|
||||
echo " -k The Cloudflare API key"
|
||||
echo " -i The IP checker service URL"
|
||||
echo " -e The expected IP of the domain. Optional, use instead of -i"
|
||||
exit 1
|
||||
exit 3
|
||||
}
|
||||
|
||||
expected_ip=""
|
||||
|
||||
while getopts d:u:k:i:e: flag
|
||||
while getopts d:k:i:e: flag
|
||||
do
|
||||
case "${flag}" in
|
||||
d) domain=${OPTARG};;
|
||||
u) email=${OPTARG};;
|
||||
k) key=${OPTARG};;
|
||||
i) ip_checker=${OPTARG};;
|
||||
e) expected_ip=${OPTARG};;
|
||||
|
|
@ -26,7 +24,7 @@ do
|
|||
done
|
||||
|
||||
# Check that all arguments were provided
|
||||
if [ -z "$domain" ] || [ -z "$email" ] || [ -z "$key" ] || [ -z "$ip_checker" ]; then
|
||||
if [ -z "$domain" ] || [ -z "$key" ] || [ -z "$ip_checker" ]; then
|
||||
usage
|
||||
fi
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue