yuanyuanxianganddeepseek-flash
ca671d6453
Add a process-local security audit trail to the Windows server's web console, mirroring the Go server's event names and reply shape. The ring keeps the most recent 1000 events since process start and is never persisted. - New query_audit WebSocket command, admin-only, with time/event/actor/ IP/device/keyword/warn-only filters and pagination; the reply is the audit_result payload the existing Audit Log page already understands. The challenge advertises caps.auditLog so browsers enable the button. - Record logins (success, failure, throttling, salt probes), WebSocket connect/close, screen and terminal session start/stop/denials, clipboard transfers (byte counts only), RDP resets, and admin user mutations. - Repeated failed logins and username probes are de-duplicated per connection so scanners cannot flood the ring. - Audit writes never hold m_ClientsMutex: disconnect paths snapshot the client identity before the map entry is erased, and offline-device stops are audited after the clients lock is released. Co-Authored-By: deepseek-flash
416 lines
18 KiB
C++
416 lines
18 KiB
C++
#pragma once
|
||
|
||
#include <Windows.h>
|
||
#include <string>
|
||
#include <vector>
|
||
#include <map>
|
||
#include <set>
|
||
#include <initializer_list>
|
||
#include <utility>
|
||
#include <atomic>
|
||
#include <chrono>
|
||
#include <mutex>
|
||
#include <thread>
|
||
#include <memory>
|
||
#include <random>
|
||
#include <ctime>
|
||
|
||
#include "common/commands.h" // MSG64 / COMMAND_SCREEN_CONTROL：共享键盘注入 helper（BuildKeyMsg64）
|
||
|
||
// Forward declarations
|
||
class context;
|
||
class CMy2015RemoteDlg;
|
||
class CONTEXT_OBJECT;
|
||
|
||
// 构造单个键盘注入 MSG64（复用 WebService::HandleKey 的 lParam 逻辑，抽取为共享 helper，
|
||
// 供 Web 与 MCP 远程控制两处使用，避免漂移，见 docs/Mcp_RemoteControl_Design.md §6.2）。
|
||
// keyCode：虚拟键码；isDown：按下/抬起；isSysKey：true 用 WM_SYSKEYDOWN/UP 并置 Alt 上下文位。
|
||
inline MSG64 BuildKeyMsg64(int keyCode, bool isDown, bool isSysKey) {
|
||
MSG64 msg64;
|
||
memset(&msg64, 0, sizeof(MSG64));
|
||
|
||
if (isSysKey) msg64.message = isDown ? WM_SYSKEYDOWN : WM_SYSKEYUP;
|
||
else msg64.message = isDown ? WM_KEYDOWN : WM_KEYUP;
|
||
msg64.wParam = (uint64_t)keyCode;
|
||
msg64.time = GetTickCount();
|
||
|
||
UINT scanCode = MapVirtualKey(keyCode, MAPVK_VK_TO_VSC);
|
||
bool isExtended = (keyCode >= VK_PRIOR && keyCode <= VK_DOWN) ||
|
||
keyCode == VK_INSERT || keyCode == VK_DELETE ||
|
||
keyCode == VK_NUMLOCK || keyCode == VK_RCONTROL || keyCode == VK_RMENU ||
|
||
keyCode == VK_APPS;
|
||
|
||
LPARAM lParam = 1; // repeat count = 1
|
||
lParam |= (scanCode & 0xFF) << 16;
|
||
if (isExtended) lParam |= (1 << 24);
|
||
if (isSysKey) lParam |= (1 << 29); // context code for Alt
|
||
if (!isDown) lParam |= (3UL << 30); // bit 30/31 for key up
|
||
|
||
msg64.lParam = (uint64_t)lParam;
|
||
return msg64;
|
||
}
|
||
|
||
// 构造单个鼠标注入 MSG64（复用 WebService::HandleMouse 的基座字段逻辑，抽取为共享 helper，
|
||
// 供 Web 与 MCP 远程控制两处使用，见 docs/Mcp_RemoteControl_Design.md §6.2）。
|
||
// x/y 为物理像素坐标（已由调用方从归一化坐标映射）；message/wParam 由调用方按动作设定。
|
||
inline MSG64 BuildMouseMsg64(int x, int y, UINT message, uint64_t wParam) {
|
||
MSG64 msg64;
|
||
memset(&msg64, 0, sizeof(MSG64));
|
||
msg64.pt.x = x;
|
||
msg64.pt.y = y;
|
||
msg64.lParam = MAKELPARAM(x, y);
|
||
msg64.time = GetTickCount();
|
||
msg64.message = message;
|
||
msg64.wParam = wParam;
|
||
return msg64;
|
||
}
|
||
|
||
// Web client state
|
||
struct WebClient {
|
||
std::string token;
|
||
std::string username;
|
||
std::string role; // "admin" | "viewer"
|
||
// 当前这个 ws 订阅的设备集合。屏幕墙允许多路复用；旧前端仍按单设备语义使用
|
||
// （connect 替换整个集合）。
|
||
std::set<uint64_t> watch_device_ids;
|
||
// 每台设备的 keyframe 请求节流时间戳（秒），防止前端重试打爆服务端/客户端。
|
||
std::map<uint64_t, uint64_t> keyframe_req_at;
|
||
uint64_t connected_at;
|
||
uint64_t last_activity; // Last message/pong received (for heartbeat timeout)
|
||
std::string client_ip;
|
||
// Per-connection audit de-duplication: probes an attacker can repeat in a
|
||
// tight loop are recorded once per connection instead of flooding the ring.
|
||
bool salt_probe_logged = false;
|
||
bool login_throttle_logged = false;
|
||
|
||
WebClient() : connected_at(0), last_activity(0) {}
|
||
};
|
||
|
||
// Login attempt tracking for rate limiting
|
||
struct LoginAttempt {
|
||
int failed_count;
|
||
time_t locked_until;
|
||
|
||
LoginAttempt() : failed_count(0), locked_until(0) {}
|
||
};
|
||
|
||
// Web user account
|
||
struct WebUser {
|
||
std::string username;
|
||
std::string password_hash; // SHA256(password + salt)
|
||
std::string salt;
|
||
std::string role; // "admin" | "viewer"
|
||
std::vector<std::string> allowed_groups; // Groups this user can view (empty = no access, admin = all)
|
||
};
|
||
|
||
// Device info for web clients
|
||
struct WebDeviceInfo {
|
||
uint64_t id;
|
||
std::string name;
|
||
std::string ip;
|
||
std::string os;
|
||
int screen_width;
|
||
int screen_height;
|
||
bool online;
|
||
bool top_down = false; // true = Android/top-down H.264, no flip needed in browser
|
||
std::string client_type; // RES_CLIENT_TYPE: "APK"=Android, "EXE"=Windows, "LNX"=Linux, "MAC"=macOS
|
||
// 当前会话的音频开关。-1=未知（客户端 BITMAPINFO 还没回来），0=关，1=开
|
||
int audio_enabled = -1;
|
||
|
||
// Keyframe cache for new web clients
|
||
std::vector<uint8_t> keyframe_cache;
|
||
std::mutex cache_mutex;
|
||
|
||
WebDeviceInfo() : id(0), screen_width(0), screen_height(0), online(false) {}
|
||
};
|
||
|
||
// Main Web Service class
|
||
class CWebService {
|
||
public:
|
||
static CWebService& Instance();
|
||
|
||
// Lifecycle
|
||
bool Start(int port = 8080);
|
||
void Stop();
|
||
bool IsRunning() const;
|
||
|
||
// Set parent dialog for device list access
|
||
void SetParentDlg(CMy2015RemoteDlg* pDlg) { m_pParentDlg = pDlg; }
|
||
|
||
// Set admin password (use master password)
|
||
void SetAdminPassword(const std::string& password);
|
||
|
||
// User management
|
||
bool CreateUser(const std::string& username, const std::string& password, const std::string& role,
|
||
const std::vector<std::string>& allowed_groups = {});
|
||
bool DeleteUser(const std::string& username);
|
||
std::vector<std::pair<std::string, std::string>> ListUsers(); // Returns [(username, role), ...]
|
||
|
||
// Device management (called from main app)
|
||
void MarkDeviceOnline(uint64_t device_id);
|
||
void MarkDeviceOffline(uint64_t device_id);
|
||
void FlushDeviceChanges(); // Called by timer to batch-notify web clients
|
||
|
||
// H264 frame broadcasting (called from ScreenSpyDlg)
|
||
void BroadcastFrame(uint64_t device_id, const uint8_t* data, size_t len, bool is_keyframe);
|
||
void BroadcastH264Frame(uint64_t device_id, const uint8_t* data, size_t len);
|
||
void CacheKeyframe(uint64_t device_id, const uint8_t* data, size_t len);
|
||
|
||
// Resolution change notification
|
||
void NotifyResolutionChange(uint64_t device_id, int width, int height, bool top_down = false, const std::string& client_type = "");
|
||
|
||
// 读回 NotifyResolutionChange 缓存的物理捕获分辨率（来自 TOKEN_BITMAPINFO）。
|
||
// 尚未收到分辨率时返回 false 并置 w/h 为 0。MCP 远程控制（remote_open）用它映射归一化坐标。
|
||
bool GetScreenSize(uint64_t device_id, int& width, int& height);
|
||
|
||
// Audio enable/disable notification — pushes current state to all web
|
||
// clients watching this device and caches it for newcomers.
|
||
void NotifyAudioState(uint64_t device_id, bool enabled);
|
||
|
||
// Cursor change notification (called from ScreenSpyDlg)
|
||
void BroadcastCursor(uint64_t device_id, uint8_t cursor_index);
|
||
|
||
// 远程剪贴板文本回传通知（called from ScreenSpyDlg，payload 为 UTF-8）
|
||
void NotifyClipboardText(uint64_t device_id, const std::string& text);
|
||
|
||
// Get count of web clients watching a device
|
||
int GetWebClientCount(uint64_t device_id);
|
||
|
||
// Start remote desktop session for web viewing
|
||
bool StartRemoteDesktop(uint64_t device_id);
|
||
|
||
// Stop remote desktop session
|
||
void StopRemoteDesktop(uint64_t device_id);
|
||
|
||
private:
|
||
CWebService();
|
||
~CWebService();
|
||
CWebService(const CWebService&) = delete;
|
||
CWebService& operator=(const CWebService&) = delete;
|
||
|
||
// Server thread
|
||
void ServerThread(int port);
|
||
|
||
// Signaling handlers
|
||
void HandleLogin(void* ws_ptr, const std::string& msg, const std::string& client_ip);
|
||
void HandleGetSalt(void* ws_ptr, const std::string& msg);
|
||
void HandleGetDevices(void* ws_ptr, const std::string& token);
|
||
void HandleConnect(void* ws_ptr, const std::string& token, uint64_t device_id,
|
||
const std::string& req = "", bool multi_watch = false);
|
||
void HandleDisconnect(void* ws_ptr, const std::string& token, uint64_t requested_device_id = 0,
|
||
const std::string& req = "", bool multi_watch = false);
|
||
void HandleKeyframe(void* ws_ptr, const std::string& token, uint64_t device_id,
|
||
const std::string& req);
|
||
void HandlePing(void* ws_ptr, const std::string& token);
|
||
void HandleMouse(void* ws_ptr, const std::string& msg);
|
||
void HandleKey(void* ws_ptr, const std::string& msg);
|
||
void HandleClipboardSet(void* ws_ptr, const std::string& msg);
|
||
void HandleClipboardGet(void* ws_ptr, const std::string& token, uint64_t device_id = 0);
|
||
void HandleRdpReset(void* ws_ptr, const std::string& token, uint64_t device_id = 0);
|
||
void HandleAudioToggle(void* ws_ptr, const std::string& token, uint64_t device_id = 0);
|
||
|
||
// 输入类命令的设备解析：优先用显式 id（必须在 watch 集合内）；否则当集合恰好
|
||
// 只有一台设备时回退到它（兼容不带 id 的旧前端）。多设备且无 id 时返回 0（丢弃），
|
||
// 绝不能回退到任意集合成员，否则会变成跨设备输入注入。
|
||
uint64_t ResolveWatchDevice(void* ws_ptr, uint64_t requested_device_id);
|
||
|
||
// Token management
|
||
std::string GenerateToken(const std::string& username, const std::string& role);
|
||
bool ValidateToken(const std::string& token, std::string& username, std::string& role);
|
||
|
||
// Client management
|
||
void RegisterClient(void* ws_ptr, const std::string& client_ip);
|
||
void UnregisterClient(void* ws_ptr);
|
||
WebClient* FindClient(void* ws_ptr);
|
||
|
||
// Rate limiting
|
||
bool CheckRateLimit(const std::string& ip);
|
||
void RecordFailedLogin(const std::string& ip);
|
||
void RecordSuccessLogin(const std::string& ip);
|
||
|
||
// JSON helpers
|
||
std::string BuildJsonResponse(const std::string& cmd, bool ok, const std::string& msg = "");
|
||
std::string BuildDeviceListJson(const std::string& username = "");
|
||
|
||
// Password verification
|
||
bool VerifyPassword(const std::string& input, const WebUser& user);
|
||
std::string ComputeHash(const std::string& input);
|
||
|
||
// User management helpers
|
||
std::string GetUsersFilePath();
|
||
void LoadUsers();
|
||
void SaveUsers();
|
||
void HandleCreateUser(void* ws_ptr, const std::string& msg);
|
||
void HandleDeleteUser(void* ws_ptr, const std::string& msg);
|
||
void HandleListUsers(void* ws_ptr, const std::string& token);
|
||
void HandleGetGroups(void* ws_ptr, const std::string& token);
|
||
|
||
// Security audit trail: in-memory ring of the last 1000 events since
|
||
// startup (see WebService.cpp). query_audit is admin-only.
|
||
void HandleQueryAudit(void* ws_ptr, const std::string& msg);
|
||
std::string ClientIP(void* ws_ptr);
|
||
void AuditWeb(const std::string& event, bool warn,
|
||
const std::string& actor, const std::string& role,
|
||
const std::string& ip, void* ws_ptr, uint64_t device_id,
|
||
std::initializer_list<std::pair<const char*, std::string>> extra = {});
|
||
|
||
// Send to WebSocket
|
||
void SendText(void* ws_ptr, const std::string& text);
|
||
void SendBinary(void* ws_ptr, const uint8_t* data, size_t len);
|
||
|
||
// Build binary frame packet
|
||
std::vector<uint8_t> BuildFramePacket(uint64_t device_id, bool is_keyframe,
|
||
const uint8_t* data, size_t len);
|
||
|
||
private:
|
||
// Server state
|
||
std::thread m_ServerThread;
|
||
std::thread m_HeartbeatThread; // Heartbeat checker thread
|
||
std::atomic<bool> m_bRunning;
|
||
std::atomic<bool> m_bStopping;
|
||
void* m_pServer; // ws::Server*
|
||
|
||
// Heartbeat settings
|
||
static const int HEARTBEAT_INTERVAL_SEC = 30; // Send ping every 30 seconds
|
||
static const int HEARTBEAT_TIMEOUT_SEC = 90; // Disconnect if no activity for 90 seconds
|
||
|
||
// 每个 ws 最多订阅的设备数（屏幕墙最多 25 个 tile，留余量）。防止异常客户端
|
||
// 订阅数百台设备拖慢每一帧的广播循环。
|
||
static constexpr size_t kMaxWatchPerClient = 32;
|
||
|
||
// Heartbeat thread function
|
||
void HeartbeatThread();
|
||
|
||
// Parent dialog for device access
|
||
CMy2015RemoteDlg* m_pParentDlg;
|
||
|
||
// Web clients: ws_ptr -> WebClient
|
||
std::map<void*, WebClient> m_Clients;
|
||
std::mutex m_ClientsMutex;
|
||
|
||
// Device keyframe cache: device_id -> cache
|
||
std::map<uint64_t, std::shared_ptr<WebDeviceInfo>> m_DeviceCache;
|
||
std::mutex m_DeviceCacheMutex;
|
||
|
||
// Login rate limiting: ip -> LoginAttempt
|
||
std::map<std::string, LoginAttempt> m_LoginAttempts;
|
||
std::mutex m_LoginMutex;
|
||
|
||
// User accounts (loaded from config)
|
||
std::vector<WebUser> m_Users;
|
||
std::mutex m_UsersMutex;
|
||
|
||
// Token secret key (generated on startup)
|
||
std::string m_SecretKey;
|
||
|
||
// Config
|
||
int m_nMaxClientsPerDevice;
|
||
int m_nTokenExpireSeconds;
|
||
bool m_bHideWebSessions; // Whether to hide web-triggered dialogs (default: true)
|
||
std::string m_PayloadsDir; // Directory for file downloads (Payloads/)
|
||
std::string m_ConfigDir; // Directory for config files (users.json, etc.)
|
||
|
||
// Web-triggered sessions (should be hidden)
|
||
std::set<uint64_t> m_WebTriggeredDevices;
|
||
std::mutex m_WebTriggeredMutex;
|
||
|
||
// Dirty device tracking for batch notifications
|
||
std::set<uint64_t> m_OnlineDevices; // Devices that came online since last flush
|
||
std::set<uint64_t> m_OfflineDevices; // Devices that went offline since last flush
|
||
std::mutex m_DirtyDevicesMutex;
|
||
|
||
// Grace-period timers: delay CloseWebRemoteDesktopByClientID by 30 s after
|
||
// the last web viewer disconnects to allow quick mobile reconnects (e.g.
|
||
// switching to a TOTP app briefly). Cancelled by StartRemoteDesktop when a
|
||
// viewer reconnects within the window.
|
||
std::map<uint64_t, std::shared_ptr<std::atomic<bool>>> m_PendingCloseTimers;
|
||
std::mutex m_PendingCloseMutex;
|
||
|
||
public:
|
||
// Check if a device session was triggered by web (should be hidden)
|
||
bool IsWebTriggered(uint64_t device_id);
|
||
void ClearWebTriggered(uint64_t device_id);
|
||
|
||
// MFC trigger management - MFC dialogs should always be visible
|
||
void SetMfcTriggered(uint64_t device_id);
|
||
bool IsMfcTriggered(uint64_t device_id);
|
||
void ClearMfcTriggered(uint64_t device_id);
|
||
|
||
// MCP trigger management - an MCP remote control session owns the screen
|
||
// sub-connection and blocks human Web viewing (bidirectional mutex, §8.2).
|
||
void SetMcpTriggered(uint64_t device_id);
|
||
bool IsMcpTriggered(uint64_t device_id);
|
||
void ClearMcpTriggered(uint64_t device_id);
|
||
|
||
// Check if a remote desktop session already exists for device
|
||
bool HasActiveSession(uint64_t device_id);
|
||
|
||
// Config accessors
|
||
void SetHideWebSessions(bool hide) { m_bHideWebSessions = hide; }
|
||
bool GetHideWebSessions() const { return m_bHideWebSessions; }
|
||
|
||
// Real-time device updates
|
||
void NotifyDeviceUpdate(uint64_t device_id, const std::string& rtt, const std::string& activeWindow);
|
||
|
||
// Screen context registry (for mouse/keyboard control)
|
||
void RegisterScreenContext(uint64_t device_id, CONTEXT_OBJECT* ctx);
|
||
void UnregisterScreenContext(uint64_t device_id);
|
||
CONTEXT_OBJECT* GetScreenContext(uint64_t device_id);
|
||
|
||
// ========== Web Terminal (Phase 1: 1 user per device) ==========
|
||
// Web 终端会话桥：把浏览器端 xterm.js ↔ 客户端 shell 子上下文连起来。
|
||
// 设计：每台主机最多一个 Web 终端会话；如果别的浏览器请求同一台主机的终端，
|
||
// 拒绝（UX 上后续可改成共享只读）。
|
||
// 生命周期：term_open → COMMAND_SHELL → 客户端建子上下文 → MessageHandle
|
||
// 看到 TOKEN_TERMINAL_START / TOKEN_SHELL_START + IsTermPending(d) →
|
||
// 调 RegisterTerminalContext 接管，跳过 MFC dialog 打开。
|
||
|
||
// 浏览器侧入口
|
||
void HandleTermOpen(void* ws_ptr, const std::string& msg);
|
||
void HandleTermInput(void* ws_ptr, const std::string& msg);
|
||
void HandleTermResize(void* ws_ptr, const std::string& msg);
|
||
void HandleTermClose(void* ws_ptr, const std::string& msg);
|
||
|
||
// MessageHandle 向 WebService 询问 / 移交的钩子
|
||
bool IsTermPending(uint64_t device_id); // 决定是否要拦截 dialog 打开
|
||
void RegisterTerminalContext(uint64_t device_id, CONTEXT_OBJECT* ctx, bool isPty);
|
||
bool IsTerminalContext(CONTEXT_OBJECT* ctx); // 是否是 Web 终端持有的上下文
|
||
void OnTerminalData(CONTEXT_OBJECT* ctx, const BYTE* data, ULONG len);// 把 shell 输出泵到对应 web client
|
||
void OnTerminalClosed(CONTEXT_OBJECT* ctx); // shell 子上下文断开时清理
|
||
|
||
private:
|
||
// Screen context registry: device_id -> ScreenManager's CONTEXT_OBJECT
|
||
std::map<uint64_t, CONTEXT_OBJECT*> m_ScreenContexts;
|
||
std::mutex m_ScreenContextsMutex;
|
||
|
||
// MFC triggered devices: dialogs created by MFC should always be visible
|
||
std::set<uint64_t> m_MfcTriggeredDevices;
|
||
std::mutex m_MfcTriggeredMutex;
|
||
|
||
// MCP triggered devices: screen sub-connection owned by an MCP remote control session
|
||
std::set<uint64_t> m_McpTriggeredDevices;
|
||
std::mutex m_McpTriggeredMutex;
|
||
|
||
// Web 终端会话状态
|
||
struct WebTermSession {
|
||
void* ws_ptr; // browser WebSocket
|
||
uint64_t device_id;
|
||
CONTEXT_OBJECT* shell_ctx; // shell 子上下文（首条消息抵达后才填）
|
||
bool is_pty; // true=TOKEN_TERMINAL（现代 PTY）, false=TOKEN_SHELL（老 cmd 管道）
|
||
};
|
||
std::map<uint64_t, WebTermSession> m_TermSessions; // by device_id
|
||
std::map<CONTEXT_OBJECT*, uint64_t> m_TermContextToDevice; // 反查 ctx → device_id
|
||
std::set<uint64_t> m_TermPending; // 已发 COMMAND_SHELL 待响应
|
||
std::mutex m_TermMutex;
|
||
|
||
// 内部清理（已持锁版本）。reason/actor/role/ip 仅用于审计日志；actor 为空时
|
||
// 尝试从 m_Clients 反查（ws 已注销时需由调用方传入）。
|
||
void CloseTermSessionLocked(uint64_t device_id, const char* reason = "ws_close",
|
||
const std::string& actor = std::string(),
|
||
const std::string& role = std::string(),
|
||
const std::string& ip = std::string());
|
||
};
|
||
|
||
// Global accessor
|
||
inline CWebService& WebService() { return CWebService::Instance(); }
|