main.cpython-310.pyc•34.3 kB
o
���g,� �
@ s� d dl mZ d dlmZmZmZmZmZmZm Z m
Z
m Z d dl m
Z
d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlmZmZ d dlmZ d dlm Z ej ej dd � e� d
�Z G d d � d e�Z!G d
d� de�Z"G dd� de�Z#G dd� de�Z$G dd� de�Z%G dd� de�Z&G dd� de�Z'G dd� de�Z(G dd � d e�Z)G d d � d e*e
�Z+G d d � d �Z,G d!d"� d"�Z-ed#�Z.d$d%� Z/e.�0� e/dqd(d)���Z1e.�0� e/d*d+g d,�d-d.fdrd:d;���Z2e.�0� * + -dsdtd<d=��Z3e.�0� dud?d@��Z4e.�0� * + A B -dvdwdEdF��Z5e.�0� d*d+g d-fdxdHdI��Z6e.�0� * + -dsdtdJdK��Z7e.�0� * + L M N -dydzdRdS��Z8e.�0� d*d+g dT�dUdVfd{dYdZ��Z9e.�0� * + [ Vd|d}d]d^��Z:e.�0� * + _ ` -d~ddbdc��Z;e.�0� * + -dsdtddde��Z<e.�0� * + -dsdtdfdg��Z=dhdi� Z>e?djk�r�zZz
e �@dk� e.jAdldm� W n+ eB�y� e �@dn� Y n( eC�y� ZD ze �Edoe*eD�� �� W Y dZD[DndZD[Dww W e>� e �@dp� dS W e>� e �@dp� dS W e>� e �@dp� dS e>� e �@dp� w dS )�� )� annotations) �Optional�Literal� TypedDict�List�Dict�Any�Union�Callable�cast)�EnumN)� BaseModel�Field)�FastMCP)�StringIOz4%(asctime)s - %(name)s - %(levelname)s - %(message)s)�level�formatZserver_monitorc @ sf e Zd ZU dZedd�Zded< eed�Zded< eed�Z ded < ed
d�Z
d ed < d
Z ded< d
S )�InspectionResultu 统一巡检结果模型�unknown)�defaultz&Literal['success', 'error', 'unknown']�status)�default_factory�dict�data� raw_outputs� �str�errorN�
Optional[str]�summary) �__name__�
__module__� __qualname__�__doc__r r �__annotations__r r r r r � r% r% �:/Users/he.ht/Documents/Cline/MCP/mytestmcp/mcptest/main.pyr s
r c @ s2 e Zd ZU dZded< ded< ded< ded< dS )� ServerMetricu! 服务器资源指标基础模型�float�total�used�free�usageN�r r! r" r# r$ r% r% r% r& r' �
r' c @ s" e Zd ZU dZded< ded< dS )�CPUStatsu CPU指标数据结构zOptional[float]r, r �loadavgNr- r% r% r% r& r/ & s
r/ c @ s2 e Zd ZU dZded< ded< ded< ded< dS ) �DiskInfou 磁盘信息数据结构r � mount_pointr) r* r( r, Nr- r% r% r% r& r1 + r. r1 c @ s* e Zd ZU dZded< ded< ded< dS )� LoginRecordu 登录记录数据结构r �time�user�ipNr- r% r% r% r& r3 2 �
r3 c @ sJ e Zd ZU dZded< ded< ded< ded< ded < ded
< ded < d S )
� ProcessInfou 进程信息数据结构�int�pidr �namer5 r( � cpu_percent�memory_percentr �createdNr- r% r% r% r& r8 8 s
r8 c @ s2 e Zd ZU dZded< ded< ded< ded< dS ) �
ServiceStatusu 服务状态数据结构r r; r �bool�active�enabledNr- r% r% r% r& r? B r. r? c @ sB e Zd ZU dZded< ded< ded< ded< ded< ded < d
S ) �NetworkInterfaceu 网络接口数据结构r r; �
ip_address� mac_addressr r9 �rx_bytes�tx_bytesNr- r% r% r% r& rC I s
rC c @ s* e Zd ZU dZded< ded< ded< dS )�ToolInfou 工具信息数据结构r r; � descriptionzList[Dict[str, Any]]�
parametersNr- r% r% r% r& rH R r7 rH c @ sD e Zd ZdZdZdZdZdZdZdZ dZ
d Z d
Z d Z
d Zd
ZdZdS )� ServerToolsu 服务器工具枚举�get_memory_info�remote_server_inspection�check_ssh_risk_logins�check_firewall_config�get_os_details�get_system_load�list_available_tools�monitor_processes�check_service_status�inspect_network� analyze_logs�backup_critical_files�security_vulnerability_scanN)r r! r" r# Z MEMORY_INFOZREMOTE_INSPECTIONZSSH_RISK_CHECKZFIREWALL_CHECKZ
OS_DETAILSZ SYSTEM_LOADZ
LIST_TOOLSZPROCESS_MONITORZSERVICE_STATUSZNETWORK_INSPECTIONZ LOG_ANALYZERZ FILE_BACKUPZ
SECURITY_SCANr% r% r% r& rK [ s rK c @ sF e Zd ZdZi Z dddd�Zd dd�Zdd� Zedd� �Z dS ) �
SSHManageru* SSH连接管理器（上下文管理器）r � � T�hostnamer �username�password�portr9 �timeout� use_cacher@ c C sR t �� | _| j�t �� � |||||d�| _|� d|� d|� �| _|| _d| _d S )N)r\ r] r^ r_ r` �@�:F) �paramikoZ SSHClient�clientZset_missing_host_key_policyZ
AutoAddPolicy�connect_params�connection_keyra �is_new_connection)�selfr\ r] r^ r_ r` ra r% r% r& �__init__r s
�
zSSHManager.__init__�return�paramiko.SSHClientc
C sr zg| j rD| j| jv rD| j| j }z|jddd� t�d| j� �� || _| jW W S tyC t�d| j� d�� | j�| jd � Y nw t�d| j� �� | jj d
i | j
�� d| _ | j rd| j| j| j< | jW S t j
y� } zt�d | j� d
t|�� �� � d }~w t jy� } zt�d | j� d
t|�� �� � d }~w ty� } zt�d | j� d
t|�� �� � d }~ww )Nzecho 1� �r` z Using cached SSH connection for z Cached connection invalid for z, creating new onez Creating new SSH connection to Tz SSH authentication failed for �: zSSH connection error for z Unexpected error connecting to r% )ra rg �_connection_cache� exec_command�logger�debugre � Exception�pop�connectrf rh rd �AuthenticationExceptionr r � SSHException)ri Z
cached_client�er% r% r& � __enter__� s>
� � � ��zSSHManager.__enter__c C s4 | j s| jrt�d| j� �� | j�� d S d S d S )NzClosing SSH connection to )ra rh rr rs rg re �close)ri �exc_type�exc_val�exc_tbr% r% r& �__exit__� s �zSSHManager.__exit__c C s> | j �� D ]
}z|�� W q Y q| j �� t�d� dS )u 清除连接缓存z SSH connection cache clearedN)rp �valuesr{ �clearrr �info)�clsre r% r% r& � clear_cache� s
zSSHManager.clear_cacheN)r rZ r[ T) r\ r r] r r^ r r_ r9 r` r9 ra r@ )rk rl )
r r! r" r# rp rj rz r � classmethodr� r% r% r% r& rY n s �
$rY c @ s� e Zd ZdZi Zed$d%d
d ��Zed&dd��Zed'dd��Ze d(dd��Z
e d)dd��Z e d*dd ��Z e d+d d ��Z
e d,d!d"��Zd#S )-�ServerInspectoru 服务器指标解析器�< � parser_funcr
� cache_keyr �
raw_output�max_ager9 c C sP t j �� }|| jv r| j| \}}|| �� |k r|S ||�}||f| j|< |S )u 带缓存的解析函数)�datetime�now� _parse_cache�
total_seconds) r� r� r� r� r� � current_timeZ
cached_result� timestamp�resultr% r% r& �
_cached_parse� s
z ServerInspector._cached_parserk r/ c C �$ dd� }dt |�� �}| �|||�S )u 解析CPU使用率和负载c
S s� z)t �d| �}t �d| �}|rdt|�d�� nd |r%d�|�� �d�W S d d�W S tyJ } zt�dt |�� �� d d d�W Y d }~S d }~ww )Nz(\d+\.\d+)%? idz-load average: ([\d\.]+), ([\d\.]+), ([\d\.]+)�d � �, )r, r0 zError parsing CPU stats: )
�re�searchr( �group�join�groupsrt rr r r )�outputZ cpu_usage�load_avgry r% r% r& �_parser� s ����z*ServerInspector.parse_cpu.<locals>._parserZcpu_��hashr� �r� r� r� r� r% r% r& � parse_cpu� s zServerInspector.parse_cpur' c C r� )u 解析内存使用情况c
S s zidd� | � d�D �}t|�dk st|d �dk r*t�d| � �� tddddd �W S t|d d �d
}t|d d �t|d d � d
}tt|d�t|d�t|| d�|dkret|| d d�d �W S dd �W S ty� } zt�d
t |�� �� tddddd �W Y d }~S d }~ww )Nc S s g | ]}|r|� � �qS r% )�split)�.0�liner% r% r& �
<listcomp>� � zAServerInspector.parse_memory.<locals>._parser.<locals>.<listcomp>�
� r� � z!Unexpected memory output format: r )r) r* r+ r, i rm r� z Error parsing memory stats: )
r� �lenrr �warningr' r9 �roundrt r r )r� Z mem_linesr) r* ry r% r% r& r� � s( $ �� ��z-ServerInspector.parse_memory.<locals>._parserZmemory_r� r� r% r% r& � parse_memory� s z ServerInspector.parse_memory�list[DiskInfo]c C sj g }| � d�dd� D ]'}|sq |� � }t|�dkr2|�|d |d |d t|d �dd��d �� q |S )
u 解析磁盘使用情况r� r� Nrm r� � �%r )r2 r) r* r, )r� r� �appendr( �replace)r� �disksr� �partsr% r% r& �
parse_disk s ��zServerInspector.parse_disk�raw_log�(tuple[dict[str, int], list[LoginRecord]]c C s� i }g }| � d�D ]S}d|v r)d|vr|� � d n|� � d }|�|d�d ||< d|v r\|� � }|�|d � d |d � d |d
� �d|vrJ|d n|d d
|vrU|d n|d d�� q ||dd� fS )u 解析SSH认证日志r� zFailed passwordz invalid user�����i����r r� zAccepted password� r� � �
r_ )r4 r5 r6 i����N)r� �getr� )r� �
failed_logins�success_loginsr� r6 r� r% r% r& �parse_auth_log s ��z ServerInspector.parse_auth_log�list[ProcessInfo]c C s� g }| � � �d�}|dd� D ]M}|sq|�� }t|�dkr\z2|�t|d �|d t|d �t|d �|d |d t|�dkrHd
�|dd� �n|d d �� W q ttfy[ Y qw q|S ) u 解析进程信息r� r� N� r r� � � r� r� )r: r5 r< r= r r> r; ) �stripr� r� r� r9 r( r� �
ValueError�
IndexError)r� � processes�linesr� r� r% r% r& �parse_processes) s,
$ � ��z ServerInspector.parse_processes�list[ServiceStatus]c C s� g }| � � �d�D ]5}|rd|v sd|v rq |�� }t|�dkr>|�|d t|�dkr/|d ndd|�� v d|�� v d �� q |S )
u 解析服务状态r� ZUNITZLOAD� r u 未知rA rB �r; r rA rB )r� r� r� r� �lower)r� �servicesr� r� r% r% r& �parse_servicesE s
��z ServerInspector.parse_services�list[NetworkInterface]c
C s� g }d}| � � �d�D ]�}|sq |�d�s;d|v r;|�d�d }|ddd|v r)dnd|v r/dnd ddd
�}|�|� q d |v rO|rO|�� d �d
�d |d< q d|v r^|r^|�� d |d< q d|v r�|r�tdd� | � � �d�D �d�}|r�zt|�d�d �� d �|d< W q ttfy� Y q w q d|v r�|r�tdd� | � � �d�D �d�}|r�zt|�d�d �� d �|d< W q ttfy� Y q w q |S )u 解析网络接口信息Nr� r� rc r r ZDOWNZUP�UNKNOWN)r; rD rE r rF rG zinet r� �/rD zether rE z
RX packetsc s � � | ] }d |v r|V qdS )zRX bytesNr% �r� �lr% r% r& � <genexpr>x � � z;ServerInspector.parse_network_interfaces.<locals>.<genexpr>�bytesrF z
TX packetsc s r� )zTX bytesNr% r� r% r% r& r� � r� rG )r� r� �
startswithr� �nextr9 r� r� )r� �
interfacesZcurrent_interfacer� r; Zrx_lineZtx_liner% r% r& �parse_network_interfacesW sL � "�� "��z(ServerInspector.parse_network_interfacesN)r� )r� r
r� r r� r r� r9 )r� r rk r/ )r� r rk r' )r� r rk r� )r� r rk r� )r� r rk r� )r� r rk r� )r� r rk r� )r r! r" r# r� r� r� r� r� � staticmethodr� r� r� r� r� r% r% r% r& r� � s& r� Z
ServerMonitorc s t �� �� fdd��}|S )u0 装饰器：统一处理工具函数中的异常c
s z� | i |��W S t jy3 } z t�d� j� dt|�� �� ddt|�� �d�W Y d }~S d }~w t jy] } z t�d� j� dt|�� �� ddt|�� �d�W Y d }~S d }~w ty� } z tjd� j� dt|�� �d d
� dd t|�� �d�W Y d }~S d }~ww ) Nz SSH authentication failed in ro r u SSH认证失败: )r r zSSH connection error in u SSH连接错误: z Error in T)�exc_infou 执行失败: )rd rw rr r r r rx rt )�args�kwargsry ��funcr% r& �wrapper� s � � ��z"handle_exceptions.<locals>.wrapper)� functools�wraps)r� r� r% r� r& �handle_exceptions� s r� rk r c C s8 t �� } d| j| j| j| j| jt| dd�t| dd�d�S )�! 获取本地服务器内存信息�success�cachedr �buffers)r r) r* r+ r, � availabler� r� )�psutilZvirtual_memoryr) r* r+ �percentr� �getattr)�memr% r% r& rL � s
�rL r rZ ��cpu�memory�diskr[ Tr\ r r] r^ r_ r9 �inspection_modules� list[str]r` �use_connection_cacher@ c s� t � }t�d| � d|� �� dddddd�� � fd d
�|D �}t|�t|�kr7t|�t|� } t�d | � �� |sFd |_d
|_d|_|� � S t
| |||||d���}
i } |D ]�} zx|
j � | |d�\}
}}|� � �
� �� }|� � �
� �� }|r�t�d| � d|� �� ||j| < |s�t�d| � d�� W qU| dkr� t�|�|j| < n( dkr� t�|�� � |j| < n dkr� t�|�|j| < n
dkr� ndkr� d| | < W qU ty� } z t�d| � dt|�� �� dt|�� �| | < W Y d }~qUd }~ww d d
� | �� D �}d d
� | �� D �}|�r#|�r d t|�� d t|�� d!�|_nd"|_nd#|_|�s+d nd|_W d � n 1 �s9w Y t�d$| � d%|j� �� |� � S )&� 执行远程服务器巡检u
开始对 u! 执行服务器巡检，模块: z"top -bn1 | grep 'Cpu(s)' && uptimezfree -mzdf -hziostat -x 1 2 | tail -n +4z
netstat -i)r� r� r� �io�networkc s g | ]}|� v r|�qS r% r% )r� �m��commandsr% r& r� � r� z,remote_server_inspection.<locals>.<listcomp>u 忽略无效的巡检模块: r u 没有有效的巡检模块u* 巡检失败：没有有效的巡检模块)ra rn u 模块 u 执行时有错误输出: u
没有输出r� r� r� r� r� r� u 执行失败: zfailed: Nc S s g | ]
\}}|d kr|�qS �r� r% �r� r� r r% r% r& r� � c S s g | ]
\}}|d kr|�qS r� r% r r% r% r& r� r u 部分模块巡检成功 (r� �)u 所有模块巡检失败u 服务器巡检成功u
完成对 u 的服务器巡检，状态: )r rr r� r� �setr� r r r r rY rq �read�decoder� r r� r� r r� r� rt r �items)r\ r] r^ r_ r� r` r� r� Z
valid_modulesZinvalid_modules�sshZmodule_results�module�stdin�stdout�stderrr� Z error_outputry Zsuccess_modulesZfailed_modulesr% r� r& rM � st �
�� �6rM c
C s� z=t | ||||��*}|�d�\}}}|�� �� �� } t�d| �}
d|
r(|
�d�ndiW d � W S 1 s6w Y W dS tyU } z dt | �iW Y d} ~ S d} ~ ww )� 获取系统负载信息�uptimezload average: (.*)Z load_averager� r Nr )
rY rq r r r� r� r� r� rt r ) r\ r] r^ r_ r` r r r
r Z load_outputr� ry r% r% r& rQ s (���rQ �list[ToolInfo]c C sL g } t tj�D ]{}|�d�rqttj|d�}t|�r�t|d�r�|jr�g }t|d�rv|j� � D ]G\}}|dkrud}t|d�rj|j
rjt |j� � ��
|�t|j� � � t|j
� }d| krct|j
�k rjn n|j
| }|�|t|�|d�� q.| �||j�� |d �� qd
d g d �d d
dddd�dddd�dddd�dddd�ddg d�d�dddd�gd �dd dddd�dddd�dddd�dddd�dddd�gd �d d g d �d d dddd�dddd�dddd�dddd�d dd!d�d"dd#d�dddd�gd �d$d%dddd�dddd�dddd�dddd�d&dg d�dddd�gd �d'd(dddd�dddd�dddd�dddd�dddd�gd �d)d*dddd�dddd�dddd�dddd�d+dd,d�d-dd.d�d/dd0d�dddd�gd �d1d2dddd�dddd�dddd�dddd�d3dg d4�d�d5dd6d�ddd7d�gd �d8d9dddd�dddd�dddd�dddd�d:dd;d�ddd7d�gd �d<d=dddd�dddd�dddd�dddd�d+dd>d�d?dd@d�dddd�gd �dAdBdddd�dddd�dddd�dddd�dddd�gd �dCdDdddd�dddd�dddd�dddd�dddd�gd �g
}t| �t|�k �r$|S | S )Eu' 列出所有可用的工具及其描述�__Nr# r$ rk � __defaults__r )r; �typer )r; rI rJ rL r� rM r� r\ r r] r^ r r_ r9 rZ r� r� r� r` r[ rQ r rR rS �? 监控远程服务器进程，返回占用资源最多的进程�top_nr� �sort_byr� rT �! 检查指定服务的运行状态r� rU �! 检查网络接口和连接状态rV �0 分析服务器日志文件中的错误和警告�log_file�/var/log/syslog�pattern�error|fail|criticalr� r� rW � 备份重要系统配置文件�files�z /etc/passwdz /etc/shadowz
/etc/fstabz
/etc/hosts�
backup_dir� /tmp/backupr� rX � 执行基础安全漏洞扫描� scan_type�basicrN �5 检查SSH登录风险，包括失败尝试和可疑IP�/var/log/auth.log� thresholdrm rO �$ 检查防火墙配置和开放端口rP � 获取操作系统详细信息)�dir�mcp�toolr� r� �callable�hasattrr# r$ r r �list�keys�indexr� r� r r� ) �toolsZ tool_nameZ tool_func�params�
param_name�
param_type�
default_valueZ param_indexZtool_descriptionsr% r% r& rR ) s�
,
����
�
�
�
�
�
�
�
�
�
�
��_rR r� r� r r c
C s� dg dd�}dddd�}|� |d�} zDt| ||||��1}
d| � d |d
� �} |
j| |d �\} }
}|
�� �� �� }t�|�|d < d
|d< W d � W |S 1 sOw Y W |S tys } zd|d< t |�|d< W Y d}~|S d}~ww )r r r )r r� r z-pcpuz-pmemz-time)r� r� r4 zps aux --sort=z | head -n r� rn r� r� r Nr )
r� rY rq r r r� r� r� rt r )r\ r] r^ r_ r r r` r� Z sort_optionsZ
sort_paramr �commandr r
r r� ry r% r% r& rS � s. �
�����rS r� c
C s� dg dd�}z�t | ||||���}|r�g }|D ]d} d| � �}
|j|
|d�\} } }
| �� �� �� }| dddd�}d|v rCd |d
< d |d < nd
|v rLd|d
< n d|v sTd|v rXd|d
< d| � �}|j||d�\} } }
| �� �� �� }|dk|d< |�|� q||d< nd}
|j|
|d�\} } }
| �� �� �� }t�|�|d< d|d
< W d � W |S 1 s�w Y W |S ty� } zd|d
< t |�|d< W Y d}~|S d}~ww )r r r )r r� r zsystemctl status rn Fr� zActive: active�runningr TrA zActive: inactive�stoppedz not-foundzcould not be foundz not foundzsystemctl is-enabled rB r� z3systemctl list-units --type=service --state=runningr� Nr )
rY rq r r r� r� r� r� rt r )r\ r] r^ r_ r� r` r� r Zservice_statusesZservicer6 r r
r r� Zservice_statusZenabled_commandZenabled_outputr� ry r% r% r& rT � sT
�
�1�1���rT c
C s� dg i dd�}z�t | ||||���}d}|j||d�\}} }
| �� �� �� } t�| �|d< d} |j| |d�\}} }
| �� �� �� }
g }|
�d�d d
� D ]$}d |v ro|�� }t|�d kro|d
}d|v ro|�d�d }|� |� qK||d d< |jd|d�}|d �� �� �� }d|v |d d< d|d< W d
� W |S 1 s�w Y W |S t
y� } zd|d< t |�|d< W Y d
}~|S d
}~ww )r r r )r r� � connectionsr zip arn r� zss -tulnr� r� N�LISTENrm r� rc �����r9 �listening_portszping -c 1 -W 2 8.8.8.8z
1 receivedZinternet_connectivityr� r r ) rY rq r r r� r� r� r� r� r� rt r )r\ r] r^ r_ r` r� r Zinterfaces_commandr r
r Zinterfaces_outputZconnections_commandZconnections_outputr< r� r� Z address_portZinternet_checkZinternet_outputry r% r% r& rU sF
�
�&�&���rU r r r� r r r� c
C sD dg i dd�}z�t | ||||���} d|� d|� �}
| j|
|d�\} } }
| �� �� �� }|sBd|� �|d< d|d < |W d
� W S d |� d |� d
�}| j||d�\} } }
| �� �� �� }g }dddddd�}|�d�D ]r}|sqqld}zd�|�� d
d� �}|}W n Y d}|�� }d|v r�d}|d d7 < n9d|v r�d}|d d7 < n*d|v s�d|v r�d}|d d7 < nd|v r�d}|d d7 < n|d d7 < |�|||d�� ql||d< t |�|d�|d< d |d < W d
� W |S 1 s�w Y W |S t
�y! } zd|d < t |�|d< W Y d
}~|S d
}~ww ) r r r )r �entriesr r ztail -n r� rn u 无法读取日志文件 r r Nz grep -E 'z' <<< '�'r )r r� �critical�fail�otherr� r� rA r? r� r� �warnr@ )r� r �messager= )Z
total_entriesZcounts_by_levelr r� ) rY rq r r r� r� r� r� r� r� rt r )r\ r] r^ r_ r r r� r` r� r Z tail_commandr r
r Z
log_outputZ grep_commandZmatched_outputr= Zpattern_countsr� r� Ztimestamp_partr Z
line_lowerry r% r% r& rV M sx �
�
�
�E�E���rV r r r� r r c
C s� dg dd�}z�t | ||||���}d|� �} |j| |d�\}
} } d}
|j|
|d�\}
} } | �� �� �� }g }|D ]s}|�d�d }|� d|� d |� d
�}d |� d �}|j||d�\}
} } | �� �� �� d
k}|r�d|� d|� �}|j||d�\}
} } d |� d�}|j||d�\}
} } | �� �� �� dk}|�|||r�dndd�� q7|�|ddd�� q7||d< d|d< W d � W |S 1 s�w Y W |S ty� } zd|d< t|�|d< W Y d}~|S d}~ww )r r r )r �backupsr z mkdir -p rn zdate +%Y%m%d_%H%M%Sr� r; �.z.bak�[ -f �' ] && echo 'exists' || echo 'not found'�existszcp r� z% ] && echo 'success' || echo 'failed'r� Zfailed)Z
original_fileZ backup_filer zfile not foundrD r Nr ) rY rq r r r� r� r� rt r )r\ r] r^ r_ r r r` r� r Z
mkdir_commandr r
r Z date_commandZ date_stringrD � file_path� file_nameZ backup_pathZ
check_command� file_existsZ copy_commandZ check_backupZ
backup_statusry r% r% r& rW � sV
�
�
�2�2���rW r# r" c
C s� dg ddd�}�z�t | ||||����}g }|dks |dkrwd} |j| |d�\}
} } | �� �� �� }
d}|j||d�\}
} } | �� �� �� }|rR|�d d
d |d d
�� d}|j||d�\}
} } | �� �� �� }|rwd|v rw|�d dd|dd
�� |dks|dkr�d}|j||d�\}
} } | �� �� �� }d|v r�|�d ddddd
�� d|v r�|�d ddddd
�� d |v r�|�d d
d d d d
�� |d ks�|dk�r^|jd |d�\}
} } | �� �� �� d!k}|jd"|d�\}
} } | �� �� �� d!k}|�r&d#}|j||d�\}
} } | �� �� �� }|�r%|�d dd$|d%d&� t|�d&k�r d'nd d(d
�� n8|�r^d)}|j||d�\}
} } | �� �� �� }d*|�� v �r^|�d dd$|d%d&� t|�d&k�rWd'nd d+d
�� ||d,< d-d-d-d-d.�}|D ]}d/|v �r�|d/ |v �r�||d/ d07 < �qkt|� � �}|d-k�r�d1|d2< n.d3|� d4�|d2< |�
� D ]\}} | d-k�r�|d2 | � d5|� d6�7 < �q�|d2 � d7�|d2< d8|d9< W d% � W |S 1 �s�w Y W |S t �y� } zd:|d9< t
| �|d:< W Y d%} ~ |S d%} ~ ww );r! r r )r �vulnerabilitiesr r r# �allzFgrep -E '^PASS_MAX_DAYS|^PASS_MIN_DAYS|^PASS_WARN_AGE' /etc/login.defsrn z grep -E '^[^:]+::' /etc/shadowZsecurity_issuer? u 存在空密码账户u 为所有账户设置强密码)r r rI �detailsZrecommendationzNgrep -E '^[^#].*ALL=\(ALL\)' /etc/sudoers /etc/sudoers.d/* 2>/dev/null || trueZNOPASSWD�highu 存在无需密码的sudo权限u) 移除NOPASSWD选项，要求输入密码Zsshdzlgrep -E '^PasswordAuthentication|^PermitRootLogin|^PermitEmptyPasswords|^X11Forwarding' /etc/ssh/sshd_configzPermitRootLogin yesu 允许SSH直接登录root账户uE 设置 PermitRootLogin no 并使用普通用户登录后切换到rootzPasswordAuthentication yes�mediumu SSH密码认证已启用u* 考虑使用密钥认证替代密码认证zPermitEmptyPasswords yesu SSH允许空密码登录u 设置 PermitEmptyPasswords no�packagesz-which apt-get && echo found || echo not found�foundz)which yum && echo found || echo not foundz/apt-get --simulate upgrade | grep -i 'security'u! 有可用的安全更新未安装N�� z...u# 运行 apt-get upgrade 安装更新zyum check-update --securityzneeded for securityu) 运行 yum update --security 安装更新rL r )r? rO rP �lowr r� u 未发现安全漏洞。r u 发现 u 个安全问题: u 个u 级, r� r� r r )rY rq r r r� r� r� r� �sumr� r �rstriprt r ) r\ r] r^ r_ r" r` r� r rL Z passwd_checkr r
r Z
passwd_policyZ empty_passwdZempty_passwd_accountsZ
sudo_checkZsudo_allZ
sshd_checkZ sshd_configZhas_aptZhas_yumZ
updates_checkZsecurity_updatesZseverity_countsZvulnZ total_vulnsr �country r% r% r& rX � s�
� � ��� �� � �
�
� � �� ���rX r% rm r& c
s� dg i g dd�}z�t | ||||���}d|� d�} |j| |d�\}
} } | �� �� �� dk}
|
sWdd g}|D ]"}d|� d�} |j| |d�\}
} } | �� �� �� dkrV|}d
}
nq4|
skd |d < d |d
< |W d � W S d|� d�}|j||d�\}
} } | �� �� �� }t�|�\}}� fdd�|�� D �}|jdd� d
d� ||d< ||d< ||d< d|d
< W d � W |S 1 s�w Y W |S t y� } zd |d
< t
|�|d < W Y d}~|S d}~ww )r$ r r )r �suspicious_ipsr� r� r rF rG rn rH z/var/log/securez/var/log/audit/audit.logTu 找不到SSH日志文件r r Nz grep 'sshd' z | tail -n 1000c s4 g | ]\}}|� kr|||� d krdndd��qS )r� rO rP )r6 �attemptsZ
risk_levelr% )r� r6 rW �r& r% r& r� � s
�z)check_ssh_risk_logins.<locals>.<listcomp>c S s | d S )NrY r% )�xr% r% r& �<lambda>� s z'check_ssh_risk_logins.<locals>.<lambda>)�key�reverserX r� r� r� ) rY rq r r r� r� r� r �sortrt r )r\ r] r^ r_ r r& r` r� r Z
file_checkr r
r rK Zalternative_logsZalt_logZ log_commandZ log_contentr� r� rX ry r% rZ r& rN | sV ��
�
�1�1���rN c
C s� dddd�g g dd�}�z�t | ||||����}d}|j||d�\}} }
| �� �� �� } d} |j| |d�\}} }
| �� �� �� }
d }|j||d�\}} }
| �� �� �� }d
| v r�d |d d
< d|d d< d}|j||d�\}} }
| �� �� �� }|�d�D ]%}d|v s�d|v r�|d �|�� � t�d|�}|r�|d �|� d�� q|n�d|
v �rd|d d
< d|d d< d}|j||d�\}} }
| �� �� �� }d}|�d�D ]B}|�
d �r�|�� d }|�rd |v �r|�d �d �� }|�� D ] }d |v �r|d �|�d �d � |d �|� d |� �� q�q�nTd!|v �rTd"|d d
< d|d d< |�d�D ])}d#|v �rQd$|v �rQt�d%|�}|�rQ|d �|� d�� |d �|�� � �q)nd&|d d
< d|d d< |d �d'� |d �s�d(}|j||d�\}} }
| �� �� �� }|�d�D ]}d)|v �r�t�d*|�}|�r�|d �|� d�� �q�t t |d ��|d< d+|d,< W d � W |S 1 �s�w Y W |S t
�y� } zd-|d,< t|�|d-< W Y d}~|S d}~ww ).r' r F)rA r r )r �firewall�
open_ports�rulesr z;which ufw > /dev/null && ufw status || echo 'ufw not found'rn zTwhich firewall-cmd > /dev/null && firewall-cmd --state || echo 'firewalld not found'zIwhich iptables > /dev/null && iptables -L -n || echo 'iptables not found'zStatus: activeZufwr` r TrA zufw status numberedr� ZALLOWZDENYrb z (\d+)/tcpra r� r7 Z firewalldz firewall-cmd --list-all-zonesNz(active)r zports:r� z zone: z Chain INPUTZiptablesZACCEPTzdpt:z dpt:(\d+)�noneu 未检测到活动的防火墙zss -tuln || netstat -tulnr: z:(\d+)r� r r )rY rq r r r� r� r� r� r� r� �endswithr. r rt r )r\ r] r^ r_ r` r� r Z ufw_commandr r
r Z
ufw_outputZfirewalld_commandZfirewalld_outputZiptables_commandZiptables_outputZufw_rules_commandZ ufw_rulesr� �
port_matchZ
zones_commandZ zones_outputZ current_zoneZportsZ
ports_commandZ ports_outputry r% r% r& rO � s� ��
��
��
�
�]�]���rO c
C s� di dd�}z�t | ||||���}dddddd d
�}i }|�� D ]\} }
|j|
|d �\} } }
| �� �� �� }||| < q d }d }d
|d v rxt�d|d tj�}|rU|� d�}t�d|d tj�}|rg|� d�}nt�d|d tj�}|rx|� d�}||d< ||d< d}|j||d �\} } }
| �� �� �� }d |d< |d kr�dD ]}|�
� |�
� v r�||d< nq�||d< d|d< W d � W |S 1 s�w Y W |S t y� } zd |d< t |�|d < W Y d}~|S d}~ww ) r( r r )r �os_infor r\ zUcat /etc/os-release || cat /etc/redhat-release || cat /etc/debian_version || uname -azuname -rzuname -mz uptime -pzwho -b)r\ �
os_releaseZkernel� architecturer
Z last_bootrn ZUnknownzNAME=rg zNAME="?(.*?)"?r� zVERSION="?(.*?)"?zVERSION_ID="?(.*?)"?�distro�versionz�systemd-detect-virt || dmesg | grep -i virtual || dmidecode | grep -i vmware || dmidecode | grep -i virtualbox || echo 'Unknown'Zvirtualization)ZkvmZvmwareZ
virtualboxZxen�dockerZlxcZopenvzZ parallelsrf r� r Nr )
rY r rq r r r� r� r� � MULTILINEr� r� rt r )r\ r] r^ r_ r` r� r r� rf r] r6 r r
r r� ri rj Z distro_matchZ
version_matchZversion_id_matchZvm_check_commandZ vm_outputZvm_typery r% r% r& rP ( sf �
�
�8�8���rP c
C sT z t �d� t�� W dS ty) } zt �dt| �� �� W Y d} ~ dS d} ~ ww )u 清理资源，关闭连接u 清理资源和连接...u 清理资源时出错: N)rr r� rY r� rt r r )ry r% r% r& �cleanup_resourceso s
"��rm �__main__u! 启动服务器监控MCP服务...�stdio)� transportu- 接收到中断信号，正在关闭服务...u 服务运行时出错: u 服务已关闭)rk r )r\ r r] r r^ r r_ r9 r� r� r` r9 r� r@ rk r )r rZ r[ ) r\ r r] r r^ r r_ r9 r` r9 rk r )rk r )r rZ r� r� r[ )r\ r r] r r^ r r_ r9 r r9 r r r` r9 rk r )r\ r r] r r^ r r_ r9 r� r� r` r9 rk r )r rZ r r r� r[ )r\ r r] r r^ r r_ r9 r r r r r� r9 r` r9 rk r )r\ r r] r r^ r r_ r9 r r� r r r` r9 rk r )r rZ r# r� )r\ r r] r r^ r r_ r9 r" r r` r9 rk r )r rZ r% rm r[ )r\ r r] r r^ r r_ r9 r r r& r9 r` r9 rk r )F�
__future__r �typingr r r r r r r r
r �enumr r� r� rd r� �logging�platform�socketr� �pydanticr
r Zmcp.server.fastmcpr r� r � basicConfig�INFO� getLoggerrr r r' r/ r1 r3 r8 r? rC rH r rK rY r� r* r� r+ rL rM rQ rR rS rT rU rV rW rX rN rO rP rm r r� �run�KeyboardInterruptrt ry r r% r% r% r& �<module> s ,
O Q�^�
�%�?�3�U�A� �@�j�F
������ �