import re
from ztag.annotation import Annotation
from ztag.annotation import OperatingSystem
from ztag import protocols
import ztag.test


class OpenSSHUbuntu(Annotation):

    protocol = protocols.SSH
    subprotocol = protocols.SSH.V2
    port = None

    # Pulled from https://github.com/mozilla/ssh_scan/blob/master/lib/ssh_scan/os/ubuntu.rb
    # Sounds like these were scraped from the Ubuntu ChangeLog on Launchpad
    FINGERPRINTS_FROM_MOZILLA_SSH_SCAN = {
     "4.10":[
       "3.8.1p1-11ubuntu3.3",
       "3.8.1p1-11ubuntu3.2",
       "3.8.1p1-11ubuntu3"
     ],
     "5.04":[
       "3.9p1-1ubuntu2.3",
       "3.9p1-1ubuntu2.2",
       "3.9p1-1ubuntu2.1",
       "3.9p1-1ubuntu2"
     ],
     "5.10":[
       "4.1p1-7ubuntu4.2",
       "4.1p1-7ubuntu4.1",
       "4.1p1-7ubuntu4"
     ],
     "6.04":[
       "4.2p1-7ubuntu3.5",
       "4.2p1-7ubuntu3.4",
       "4.2p1-7ubuntu3.3",
       "4.2p1-7ubuntu3.2",
       "4.2p1-7ubuntu3.1",
       "4.2p1-7ubuntu3",
       "4.2p1-7ubuntu2",
       "4.2p1-7ubuntu1",
       "4.2p1-5ubuntu2",
       "4.2p1-5ubuntu1"
     ],
     "6.10":[
       "4.3p2-5ubuntu1.2",
       "4.3p2-5ubuntu1.1",
       "4.3p2-5ubuntu1",
       "4.3p2-4ubuntu1",
       "4.3p2-2ubuntu5",
       "4.3p2-2ubuntu4",
       "4.3p2-2ubuntu3",
       "4.3p2-2ubuntu2",
       "4.3p2-2ubuntu1"
     ],
     "7.04":[],
     "7.10":[
       "4.6p1-5ubuntu0.6",
       "4.6p1-5ubuntu0.5",
       "4.6p1-5ubuntu0.4",
       "4.6p1-5ubuntu0.3",
       "4.6p1-5ubuntu0.2",
       "4.6p1-5ubuntu0.1",
       "4.6p1-5build1",
       "4.3p2-10ubuntu1"
     ],
     "8.04":[
       "4.7p1-8ubuntu3",
       "4.7p1-8ubuntu2",
       "4.7p1-8ubuntu1.2",
       "4.7p1-8ubuntu1.1",
       "4.7p1-8ubuntu1",
       "4.7p1-7ubuntu1",
       "4.7p1-6ubuntu1",
       "4.7p1-5ubuntu1",
       "4.7p1-4ubuntu1"
     ],
     "8.10":[
       "5.1p1-3ubuntu1",
       "5.1p1-1ubuntu2",
       "5.1p1-1ubuntu1",
       "4.7p1-12ubuntu4",
       "4.7p1-12ubuntu3",
       "4.7p1-12ubuntu2",
       "4.7p1-12ubuntu1",
       "4.7p1-10ubuntu1",
       "4.7p1-9ubuntu1"
     ],
     "9.04":[
       "5.1p1-5ubuntu1",
       "5.1p1-4ubuntu1"
     ],
     "9.10":[
       "5.1p1-6ubuntu2",
       "5.1p1-6ubuntu1",
       "5.1p1-5ubuntu2"
     ],
     "10.04":[
       "5.3p1-3ubuntu7.1",
       "5.3p1-3ubuntu7",
       "5.3p1-3ubuntu6",
       "5.3p1-3ubuntu5",
       "5.3p1-3ubuntu4",
       "5.3p1-3ubuntu3",
       "5.3p1-3ubuntu2",
       "5.3p1-3ubuntu1",
       "5.3p1-1ubuntu2",
       "5.3p1-1ubuntu1",
       "5.2p1-2ubuntu1",
       "5.2p1-1ubuntu1",
       "5.1p1-8ubuntu2",
       "5.1p1-8ubuntu1"
     ],
     "10.10":[
       "5.5p1-4ubuntu6",
       "5.5p1-4ubuntu5",
       "5.5p1-4ubuntu4",
       "5.5p1-4ubuntu3",
       "5.5p1-4ubuntu2",
       "5.5p1-4ubuntu1",
       "5.5p1-3ubuntu1"
     ],
     "11.04":[
       "5.8p1-1ubuntu3",
       "5.8p1-1ubuntu2",
       "5.8p1-1ubuntu1",
       "5.7p1-2ubuntu1",
       "5.7p1-1ubuntu1",
       "5.6p1-2ubuntu4",
       "5.6p1-2ubuntu3",
       "5.6p1-2ubuntu2",
       "5.6p1-2ubuntu1",
       "5.6p1-1ubuntu1"
     ],
     "11.10":[
       "5.8p1-7ubuntu1",
       "5.8p1-4ubuntu2",
       "5.8p1-4ubuntu1"
     ],
     "12.04":[
       "5.9p1-5ubuntu1.10",
       "5.9p1-5ubuntu1.9",
       "5.9p1-5ubuntu1.8",
       "5.9p1-5ubuntu1.7",
       "5.9p1-5ubuntu1.6",
       "5.9p1-5ubuntu1.4",
       "5.9p1-5ubuntu1.3",
       "5.9p1-5ubuntu1.2",
       "5.9p1-5ubuntu1.1",
       "5.9p1-5ubuntu1",
       "5.9p1-4ubuntu1",
       "5.9p1-3ubuntu1",
       "5.9p1-2ubuntu2",
       "5.9p1-2ubuntu1",
       "5.9p1-1ubuntu1"
     ],
     "12.10":[
       "6.0p1-3ubuntu1.2",
       "6.0p1-3ubuntu1.1",
       "6.0p1-3ubuntu1",
       "6.0p1-2ubuntu1",
       "6.0p1-1ubuntu1"
     ],
     "13.04":[
       "6.1p1-1ubuntu1"
     ],
     "13.10":[
       "6.2p2-6ubuntu0.5",
       "6.2p2-6ubuntu0.4",
       "6.2p2-6ubuntu0.3",
       "6.2p2-6ubuntu0.2",
       "6.2p2-6ubuntu0.1"
     ],
     "14.04":[
       "6.6p1-2ubuntu2.8",
       "6.6p1-2ubuntu2.7",
       "6.6p1-2ubuntu2.6",
       "6.6p1-2ubuntu2.5",
       "6.6p1-2ubuntu2.4",
       "6.6p1-2ubuntu2.3",
       "6.6p1-2ubuntu2.2",
       "6.6p1-2ubuntu2",
       "6.6p1-2ubuntu1",
       "6.2p2-6ubuntu1",
       "6.6.1p1 Ubuntu-8",
       "6.6.1p1-8"
     ],
     "14.10":[
       "6.6p1-5build1"
     ],
     "15.04":[
       "6.7p1-5ubuntu1.4",
       "6.7p1-5ubuntu1.3",
       "6.7p1-5ubuntu1.2",
       "6.7p1-5ubuntu1"
     ],
     "15.10":[
       "6.9p1-2ubuntu0.2",
       "6.9p1-2ubuntu0.1",
       "6.7p1-6ubuntu2",
       "6.7p1-6ubuntu1"
     ],
     "16.04":[
       "7.2p2-4ubuntu2.2",
       "7.2p2-4ubuntu2.1",
       "7.2p2-4ubuntu2",
       "7.2p2-4ubuntu1"
     ],
     "16.10":[
     ]
    }

    tests = {
        "ubuntu_OpenSSH_6.6p1_ubuntu_ubuntu": {
            "global_metadata": {
                "os": OperatingSystem.UBUNTU,
                "os_version":"14.04"
            },
            "local_metadata": {
                "product": "OpenSSH",
                "version": "6.6p1"
            }
        },
        "ubuntu_OpenSSH_6.6p1_ubuntu": {
            "global_metadata": {
                "os": OperatingSystem.UBUNTU,
                "os_version":"14.04"
            },
            "local_metadata": {
                "product": "OpenSSH",
                "version": "6.6.1p1"
            }
        },
        "ubuntu_OpenSSH_5.9p1_debian_ubuntu": {
            "global_metadata": {
                "os": OperatingSystem.UBUNTU,
                "os_version":"12.04"
            },
            "local_metadata": {
                "product": "OpenSSH",
                "version": "5.9p1"
            }
        }
    }

    def __init__(self, *args, **kwargs):
        super(OpenSSHUbuntu, self).__init__(*args, **kwargs)
        self.os_lookup = dict()
        for os, banners in self.FINGERPRINTS_FROM_MOZILLA_SSH_SCAN.iteritems():
            for banner in banners:
                self.os_lookup[banner] = os

    # Ubuntu comment strings can be formatted in a bunch of ways:
    #
    #   SSH-2.0-OpenSSH_3.8.1p1-11ubuntu3.3
    #   SSH-2.0-OpenSSH_7.2p2-4ubuntu2.1
    #   SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-8
    #   SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8
    #   SSH-2.0-OpenSSH_5.9p1 Debian-5ubuntu1.9
    #
    # Try to pull the pertinant information out: OpenSSH_5.9p1 and 2ubuntu2.8
    # then look that up our mozilla table

    def process(self, obj, meta):
        raw = obj["banner"]["raw"]
        # check if long enough to contain SSH-2.0-OpenSSH_
        # len(SSH-2.0-OpenSSH_) = 16
        if len(raw) < 17:
            return meta
        if raw[:15] != "SSH-2.0-OpenSSH":
            return meta
        meta.local_metadata.product = "OpenSSH"
        if "ubuntu" not in raw.lower():
            return meta
        raw = raw[16:]
        if " " in raw:
            # 7.2p2 Ubuntu-4ubuntu2.1
            version, comment = raw.split(" ")
        else:
            # 3.9p1-1ubuntu2.3
            version, comment = raw.split("-", 1)
        # sometimes the "1ubuntu2.3" is prefixed with Ubuntu- or Debian-
        if comment[:len("Ubuntu-")] == "Ubuntu-":
            comment = comment[len("Ubuntu-"):]
        if comment[:len("Debian-")] == "Debian-":
            comment = comment[len("Debian-"):]
        meta.local_metadata.version = version
        # Lookup Ubuntu version
        key = "%s-%s" % (version, comment)
        if key in self.os_lookup:
            meta.global_metadata.os = OperatingSystem.UBUNTU
            meta.global_metadata.os_version = self.os_lookup[key]
        return meta

import re
from ztag.annotation import Annotation
from ztag.annotation import OperatingSystem
from ztag import protocols
import ztag.test


class OpenSSHUbuntu(Annotation):

    protocol = protocols.SSH
    subprotocol = protocols.SSH.V2
    port = None

    # Pulled from https://github.com/mozilla/ssh_scan/blob/master/lib/ssh_scan/os/ubuntu.rb
    # Sounds like these were scraped from the Ubuntu ChangeLog on Launchpad
    FINGERPRINTS_FROM_MOZILLA_SSH_SCAN = {
     "4.10":[
       "3.8.1p1-11ubuntu3.3",
       "3.8.1p1-11ubuntu3.2",
       "3.8.1p1-11ubuntu3"
     ],
     "5.04":[
       "3.9p1-1ubuntu2.3",
       "3.9p1-1ubuntu2.2",
       "3.9p1-1ubuntu2.1",
       "3.9p1-1ubuntu2"
     ],
     "5.10":[
       "4.1p1-7ubuntu4.2",
       "4.1p1-7ubuntu4.1",
       "4.1p1-7ubuntu4"
     ],
     "6.04":[
       "4.2p1-7ubuntu3.5",
       "4.2p1-7ubuntu3.4",
       "4.2p1-7ubuntu3.3",
       "4.2p1-7ubuntu3.2",
       "4.2p1-7ubuntu3.1",
       "4.2p1-7ubuntu3",
       "4.2p1-7ubuntu2",
       "4.2p1-7ubuntu1",
       "4.2p1-5ubuntu2",
       "4.2p1-5ubuntu1"
     ],
     "6.10":[
       "4.3p2-5ubuntu1.2",
       "4.3p2-5ubuntu1.1",
       "4.3p2-5ubuntu1",
       "4.3p2-4ubuntu1",
       "4.3p2-2ubuntu5",
       "4.3p2-2ubuntu4",
       "4.3p2-2ubuntu3",
       "4.3p2-2ubuntu2",
       "4.3p2-2ubuntu1"
     ],
     "7.04":[],
     "7.10":[
       "4.6p1-5ubuntu0.6",
       "4.6p1-5ubuntu0.5",
       "4.6p1-5ubuntu0.4",
       "4.6p1-5ubuntu0.3",
       "4.6p1-5ubuntu0.2",
       "4.6p1-5ubuntu0.1",
       "4.6p1-5build1",
       "4.3p2-10ubuntu1"
     ],
     "8.04":[
       "4.7p1-8ubuntu3",
       "4.7p1-8ubuntu2",
       "4.7p1-8ubuntu1.2",
       "4.7p1-8ubuntu1.1",
       "4.7p1-8ubuntu1",
       "4.7p1-7ubuntu1",
       "4.7p1-6ubuntu1",
       "4.7p1-5ubuntu1",
       "4.7p1-4ubuntu1"
     ],
     "8.10":[
       "5.1p1-3ubuntu1",
       "5.1p1-1ubuntu2",
       "5.1p1-1ubuntu1",
       "4.7p1-12ubuntu4",
       "4.7p1-12ubuntu3",
       "4.7p1-12ubuntu2",
       "4.7p1-12ubuntu1",
       "4.7p1-10ubuntu1",
       "4.7p1-9ubuntu1"
     ],
     "9.04":[
       "5.1p1-5ubuntu1",
       "5.1p1-4ubuntu1"
     ],
     "9.10":[
       "5.1p1-6ubuntu2",
       "5.1p1-6ubuntu1",
       "5.1p1-5ubuntu2"
     ],
     "10.04":[
       "5.3p1-3ubuntu7.1",
       "5.3p1-3ubuntu7",
       "5.3p1-3ubuntu6",
       "5.3p1-3ubuntu5",
       "5.3p1-3ubuntu4",
       "5.3p1-3ubuntu3",
       "5.3p1-3ubuntu2",
       "5.3p1-3ubuntu1",
       "5.3p1-1ubuntu2",
       "5.3p1-1ubuntu1",
       "5.2p1-2ubuntu1",
       "5.2p1-1ubuntu1",
       "5.1p1-8ubuntu2",
       "5.1p1-8ubuntu1"
     ],
     "10.10":[
       "5.5p1-4ubuntu6",
       "5.5p1-4ubuntu5",
       "5.5p1-4ubuntu4",
       "5.5p1-4ubuntu3",
       "5.5p1-4ubuntu2",
       "5.5p1-4ubuntu1",
       "5.5p1-3ubuntu1"
     ],
     "11.04":[
       "5.8p1-1ubuntu3",
       "5.8p1-1ubuntu2",
       "5.8p1-1ubuntu1",
       "5.7p1-2ubuntu1",
       "5.7p1-1ubuntu1",
       "5.6p1-2ubuntu4",
       "5.6p1-2ubuntu3",
       "5.6p1-2ubuntu2",
       "5.6p1-2ubuntu1",
       "5.6p1-1ubuntu1"
     ],
     "11.10":[
       "5.8p1-7ubuntu1",
       "5.8p1-4ubuntu2",
       "5.8p1-4ubuntu1"
     ],
     "12.04":[
       "5.9p1-5ubuntu1.10",
       "5.9p1-5ubuntu1.9",
       "5.9p1-5ubuntu1.8",
       "5.9p1-5ubuntu1.7",
       "5.9p1-5ubuntu1.6",
       "5.9p1-5ubuntu1.4",
       "5.9p1-5ubuntu1.3",
       "5.9p1-5ubuntu1.2",
       "5.9p1-5ubuntu1.1",
       "5.9p1-5ubuntu1",
       "5.9p1-4ubuntu1",
       "5.9p1-3ubuntu1",
       "5.9p1-2ubuntu2",
       "5.9p1-2ubuntu1",
       "5.9p1-1ubuntu1"
     ],
     "12.10":[
       "6.0p1-3ubuntu1.2",
       "6.0p1-3ubuntu1.1",
       "6.0p1-3ubuntu1",
       "6.0p1-2ubuntu1",
       "6.0p1-1ubuntu1"
     ],
     "13.04":[
       "6.1p1-1ubuntu1"
     ],
     "13.10":[
       "6.2p2-6ubuntu0.5",
       "6.2p2-6ubuntu0.4",
       "6.2p2-6ubuntu0.3",
       "6.2p2-6ubuntu0.2",
       "6.2p2-6ubuntu0.1"
     ],
     "14.04":[
       "6.6p1-2ubuntu2.8",
       "6.6p1-2ubuntu2.7",
       "6.6p1-2ubuntu2.6",
       "6.6p1-2ubuntu2.5",
       "6.6p1-2ubuntu2.4",
       "6.6p1-2ubuntu2.3",
       "6.6p1-2ubuntu2.2",
       "6.6p1-2ubuntu2",
       "6.6p1-2ubuntu1",
       "6.2p2-6ubuntu1",
       "6.6.1p1 Ubuntu-8",
       "6.6.1p1-8"
     ],
     "14.10":[
       "6.6p1-5build1"
     ],
     "15.04":[
       "6.7p1-5ubuntu1.4",
       "6.7p1-5ubuntu1.3",
       "6.7p1-5ubuntu1.2",
       "6.7p1-5ubuntu1"
     ],
     "15.10":[
       "6.9p1-2ubuntu0.2",
       "6.9p1-2ubuntu0.1",
       "6.7p1-6ubuntu2",
       "6.7p1-6ubuntu1"
     ],
     "16.04":[
       "7.2p2-4ubuntu2.2",
       "7.2p2-4ubuntu2.1",
       "7.2p2-4ubuntu2",
       "7.2p2-4ubuntu1"
     ],
     "16.10":[
     ]
    }

    tests = {
        "ubuntu_OpenSSH_6.6p1_ubuntu_ubuntu": {
            "global_metadata": {
                "os": OperatingSystem.UBUNTU,
                "os_version":"14.04"
            },
            "local_metadata": {
                "product": "OpenSSH",
                "version": "6.6p1"
            }
        },
        "ubuntu_OpenSSH_6.6p1_ubuntu": {
            "global_metadata": {
                "os": OperatingSystem.UBUNTU,
                "os_version":"14.04"
            },
            "local_metadata": {
                "product": "OpenSSH",
                "version": "6.6.1p1"
            }
        },
        "ubuntu_OpenSSH_5.9p1_debian_ubuntu": {
            "global_metadata": {
                "os": OperatingSystem.UBUNTU,
                "os_version":"12.04"
            },
            "local_metadata": {
                "product": "OpenSSH",
                "version": "5.9p1"
            }
        }
    }

    def __init__(self, *args, **kwargs):
        super(OpenSSHUbuntu, self).__init__(*args, **kwargs)
        self.os_lookup = dict()
        for os, banners in self.FINGERPRINTS_FROM_MOZILLA_SSH_SCAN.iteritems():
            for banner in banners:
                self.os_lookup[banner] = os

    # Ubuntu comment strings can be formatted in a bunch of ways:
    #
    #   SSH-2.0-OpenSSH_3.8.1p1-11ubuntu3.3
    #   SSH-2.0-OpenSSH_7.2p2-4ubuntu2.1
    #   SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-8
    #   SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8
    #   SSH-2.0-OpenSSH_5.9p1 Debian-5ubuntu1.9
    #
    # Try to pull the pertinant information out: OpenSSH_5.9p1 and 2ubuntu2.8
    # then look that up our mozilla table

    def process(self, obj, meta):
        raw = obj["banner"]["raw"]
        # check if long enough to contain SSH-2.0-OpenSSH_
        # len(SSH-2.0-OpenSSH_) = 16
        if len(raw) < 17:
            return meta
        if raw[:15] != "SSH-2.0-OpenSSH":
            return meta
        meta.local_metadata.product = "OpenSSH"
        if "ubuntu" not in raw.lower():
            return meta
        raw = raw[16:]
        if " " in raw:
            # 7.2p2 Ubuntu-4ubuntu2.1
            version, comment = raw.split(" ")
        else:
            # 3.9p1-1ubuntu2.3
            version, comment = raw.split("-", 1)
        # sometimes the "1ubuntu2.3" is prefixed with Ubuntu- or Debian-
        if comment[:len("Ubuntu-")] == "Ubuntu-":
            comment = comment[len("Ubuntu-"):]
        if comment[:len("Debian-")] == "Debian-":
            comment = comment[len("Debian-"):]
        meta.local_metadata.version = version
        # Lookup Ubuntu version
        key = "%s-%s" % (version, comment)
        if key in self.os_lookup:
            meta.global_metadata.os = OperatingSystem.UBUNTU
            meta.global_metadata.os_version = self.os_lookup[key]
        return meta

# Pulled from https://github.com/mozilla/ssh_scan/blob/master/lib/ssh_scan/os/ubuntu.rb # Sounds like these were scraped from the Ubuntu ChangeLog on Launchpad # Ubuntu comment strings can be formatted in a bunch of ways: # #   SSH-2.0-OpenSSH_3.8.1p1-11ubuntu3.3 #   SSH-2.0-OpenSSH_7.2p2-4ubuntu2.1 #   SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-8 #   SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8 #   SSH-2.0-OpenSSH_5.9p1 Debian-5ubuntu1.9 # # Try to pull the pertinant information out: OpenSSH_5.9p1 and 2ubuntu2.8 # then look that up our mozilla table # check if long enough to contain SSH-2.0-OpenSSH_ # len(SSH-2.0-OpenSSH_) = 16 # 7.2p2 Ubuntu-4ubuntu2.1 # 3.9p1-1ubuntu2.3 # sometimes the "1ubuntu2.3" is prefixed with Ubuntu- or Debian- # Lookup Ubuntu version