model.cpp

//#include <bits/stdc++.h>
//#include <tins/tins.h>
#include "json.hpp"

#define d 256

using namespace Tins;
using namespace std;
using json = nlohmann::json;


// compile using : c++ model.cpp -ltins

json model;
string method, path, code, req, resp, server, tag;
set<string> tags;
vector<string> methods{"GET", "POST", "PUT", "DELETE"}; 
//vector<string> methods{"GET", "POST", "PUT", "DELETE", "HEAD", "CONNECT", "OPTIONS", "TRACE", "PATCH"}; 
map<string, string> desc = {{"200", "OK"}, {"201", "Created"}, {"204", "No Content"}, {"304", "Not Modified"}, {"400", "Bad Request"}, {"401", "Unauthorized"}, {"404", "Not Found"}, {"405", "Method Not Allowed"}, {"409", "Conflict"}, {"429", "Too Many Requests"},{"500", "Internal Server Error"}};
vector<string> headers{"Cache-Control: no-store", "Content-Security-Policy: frame-ancestors 'none'", "Content-Type", "Strict-Transport-Security", "X-Content-Type-Options: nosniff", "X-Frame-Options: DENY"};

int timer = 0; 

 
bool search(string pat, string txt, int q){
    int M = pat.length();
    int N = txt.length();
    int i, j;
    int p = 0; 
    int t = 0; 
    int h = 1;
 
    for (i = 0; i < M - 1; i++)
        h = (h * d) % q;

    for (i = 0; i < M; i++){
        p = (d * p + pat[i]) % q;
        t = (d * t + txt[i]) % q;
    }
 
    for (i = 0; i <= N - M; i++){
        if ( p == t ){
            for (j = 0; j < M; j++){
                if (txt[i+j] != pat[j])
                    break;
            }
            if (j == M){
                //cout<<"Pattern found at index "<< i<<endl;
                return true; 
            }  
        }
        if ( i < N-M ){
            t = (d*(t - txt[i]*h) + txt[i+M])%q;
 
            if (t < 0)
            t = (t + q);
        }
    }
    return false;
}


bool handler(const PDU& pkt) {
	freopen ("mfile.txt","w",stdout);

	const TCP &tcp = pkt.rfind_pdu<TCP>();
	const RawPDU& raw = tcp.rfind_pdu<RawPDU>();
	const RawPDU::payload_type& payload = raw.payload(); 

	if(tcp.dport() == 8080){
		req = "";
		for(const auto &query : payload){
			req += query;
		} 
		for(auto x : methods){
			if(search(x, req, 101)){
				method = req.substr(0, req.find(' '));
				std::transform(method.begin(), method.end(), method.begin(),[](unsigned char c){ return std::tolower(c); });
				vector<string> r = split(req, ' ');
				path = r[1];
				vector<string> v = split (path, '/');
				tag = v[2];
				tags.insert(tag);
				// for put or post only 
				//model["paths"][path][method]["requestBody"]["description"] = "Auto generated using model inference tool";
				//model["paths"][path][method]["requestBody"]["content"] =

				// test if it can become an array
				if(search("accept: application/json", req, 101)){
					model["paths"][path][method]["x-accepts"] = "application/json";
				}else if(search("accept: */*", req, 101)){
					model["paths"][path][method]["x-accepts"] = "*/*";
				}else if(search("accept: application/xml", req, 101)){
					model["paths"][path][method]["x-accepts"] = "application/xml";
				}
				
			}
		}

		if(search("Host:", req, 101)){
			server = req.substr(req.find("Host:")+ 6, 15);
			model["servers"]["url"] = server;
		}

		//if(search("x-accepts", req, 101)){

		//}
		

	}else if(tcp.sport() == 8080){

		resp = "";

  		for(const auto &query : payload){
			resp += query;
		} 

		if(resp[0] != '0' ){
			if(search("{", resp, 101)){
				string body = resp.substr(resp.find('{'), resp.length());
				json j = json::parse(body);
				//cout << j.dump(4) << endl;
				//cout << body << endl;	
			}
			
    		code = resp.substr(resp.find(' ')+1, 3);
    		model["paths"][path][method]["responses"][code]["description"] = desc[code];  
    		model["paths"][path][method]["tags"] = tag;
    		vector<string> hdr = {};
    		for(auto x : headers){
    			if(search(x, resp, 101)){
    				hdr.push_back(x);
    			}
    		}
    		model["paths"][path][method]["responses"][code]["x-headers"] = hdr;
    		model["paths"][path][method]["parameters"] = "";
    		//model["components"][securitySchemes"][method]["x-accepts"] = ;
		}
		
  		
	}
	//model["tags"] = {"name" = tag};
	model["tags"] = tags; 
	//for(auto x : tags){
		
		//model["tags"][["description"]] = "insert description here";	
	//}
	

    cout << model.dump(4);

    timer++; 
    if (timer > 15){
    	return false;
    }
    return true;
}


int main() {
	model["openapi"] = "3.0.0"; 	
	model["externalDocs"]["description"] = "Find out more about Hissane's security tool";
	model["externalDocs"]["url"] = "https://github.com/diverse-project/http-traffic4web-security";
	model["info"]["title"] = "defaultTitle";
	model["info"]["description"] = "defaultDescription";
	model["info"]["version"] = "0.1";
	Sniffer("docker0").sniff_loop(handler);
}