|
|
@@ -0,0 +1,63 @@
|
|
|
+from flask import Flask, request, render_template
|
|
|
+import paramiko
|
|
|
+import time
|
|
|
+import re
|
|
|
+# MikroTik API credentials
|
|
|
+ROUTER_IP = '10.10.10.10'
|
|
|
+USERNAME = 'admin'
|
|
|
+PASSWORD = 'PASSWORD'
|
|
|
+
|
|
|
+app = Flask(__name__)
|
|
|
+
|
|
|
+# Configure Flask to trust X-Forwarded-For header
|
|
|
+app.config['TRUSTED_PROXIES'] = '127.0.0.1'
|
|
|
+
|
|
|
+def remove_port(ip_address_with_port):
|
|
|
+ return re.split(r'[;,|:]',ip_address_with_port)
|
|
|
+
|
|
|
+# Function to add IP address to the specified list with a timeout
|
|
|
+def add_to_list(ip_address_arg):
|
|
|
+ ip_address = remove_port(ip_address_arg)[0]
|
|
|
+ ssh = paramiko.SSHClient()
|
|
|
+ ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
|
|
|
+ ssh.connect(ROUTER_IP,port=22, username=USERNAME, password=PASSWORD)
|
|
|
+
|
|
|
+ # Send command to add IP address to address list
|
|
|
+ command = f"/ip firewall address-list add list=port_knocking_stage1 address={ip_address} timeout=12h"
|
|
|
+ stdin, stdout, stderr = ssh.exec_command(command)
|
|
|
+
|
|
|
+ # Wait for the command to execute
|
|
|
+ time.sleep(1)
|
|
|
+
|
|
|
+ # Check for any errors
|
|
|
+ if stderr.read().decode():
|
|
|
+ print("Error:", stderr.read().decode())
|
|
|
+ else:
|
|
|
+ print("IP address added successfully. "+ip_address)
|
|
|
+
|
|
|
+ ssh.close()
|
|
|
+# Dummy database for demonstration (replace with your own authentication mechanism)
|
|
|
+users = {
|
|
|
+ 'admin': 'PASS',
|
|
|
+ 'guest': 'PASS'
|
|
|
+}
|
|
|
+
|
|
|
+# Authentication route
|
|
|
+@app.route('/', methods=['GET', 'POST'])
|
|
|
+def login():
|
|
|
+ error = None
|
|
|
+ if request.method == 'POST':
|
|
|
+ username = request.form['username']
|
|
|
+ password = request.form['password']
|
|
|
+ if username in users and users[username] == password:
|
|
|
+ user_ip = request.headers.get('X-Forwarded-For', request.remote_addr)
|
|
|
+ add_to_list(user_ip)
|
|
|
+ add_to_list(user_ip)
|
|
|
+ success_message = 'Authenticated successfully! Your IP address <strong>{}</strong> has been added to the whitelist for 12 hours.<br> <a href="https://filevista.ardugeek.ovh/public/58/home-server-wan.rdp" download>Download RDP File Here</a>'.format(remove_port(user_ip)[0])
|
|
|
+ return '<div style="font-family: Arial, sans-serif; text-align: center; margin-top: 50px;"><h2 style="color: #4CAF50;">Success!</h2><p>{}</p></div>'.format(success_message)
|
|
|
+ else:
|
|
|
+ error = 'Invalid credentials. Please try again.'
|
|
|
+ return render_template('login.html', error=error)
|
|
|
+
|
|
|
+if __name__ == '__main__':
|
|
|
+ app.run(debug=False)
|
