BishopFox-sliver/client/command/extensions/remove.go

package extensions

/*
	Sliver Implant Framework
	Copyright (C) 2021  Bishop Fox

	This program is free software: you can redistribute it and/or modify
	it under the terms of the GNU General Public License as published by
	the Free Software Foundation, either version 3 of the License, or
	(at your option) any later version.

	This program is distributed in the hope that it will be useful,
	but WITHOUT ANY WARRANTY; without even the implied warranty of
	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
	GNU General Public License for more details.

	You should have received a copy of the GNU General Public License
	along with this program.  If not, see <https://www.gnu.org/licenses/>.
*/

import (
	"errors"
	"fmt"
	"os"
	"path/filepath"
	"strings"

	"github.com/bishopfox/sliver/client/assets"
	"github.com/bishopfox/sliver/client/console"
	"github.com/bishopfox/sliver/client/forms"
	"github.com/bishopfox/sliver/util"
	"github.com/spf13/cobra"
)

// ExtensionsRemoveCmd - Remove an extension.
func ExtensionsRemoveCmd(cmd *cobra.Command, con *console.SliverClient, args []string) {
	name := args[0]
	if name == "" {
		con.PrintErrorf("Extension name is required\n")
		return
	}
	confirm := false
	_ = forms.Confirm(fmt.Sprintf("Remove '%s' extension?", name), &confirm)
	if !confirm {
		return
	}
	found, err := RemoveExtensionByManifestName(name, con)
	if err != nil {
		con.PrintErrorf("Error removing extensions: %s\n", err)
		return
	}
	if !found {
		err = RemoveExtensionByCommandName(name, con)
		if err != nil {
			con.PrintErrorf("Error removing extension: %s\n", err)
			return
		} else {
			con.PrintInfof("Extension '%s' removed\n", name)
		}
	} else {
		//found, and no error, manifest must have removed good
		con.PrintInfof("Extensions from %s removed\n", name)
	}
}

// RemoveExtensionByCommandName - Remove an extension by command name.
func RemoveExtensionByCommandName(commandName string, con *console.SliverClient) error {
	if commandName == "" {
		return errors.New("command name is required")
	}
	if _, ok := loadedExtensions[commandName]; !ok {
		return errors.New("extension not loaded")
	}
	delete(loadedExtensions, commandName)
	extPath := filepath.Join(assets.GetExtensionsDir(), filepath.Base(commandName))
	if _, err := os.Stat(extPath); os.IsNotExist(err) {
		return nil
	}
	forceRemoveAll(extPath)
	return nil
}

// RemoveExtensionByManifestName - remove by the named manifest, returns true if manifest was removed, false if no manifest with that name was found
func RemoveExtensionByManifestName(manifestName string, con *console.SliverClient) (bool, error) {
	if manifestName == "" {
		return false, errors.New("command name is required")
	}
	if man, ok := loadedManifests[manifestName]; ok {
		// Found the manifest
		var extPath string
		if man.RootPath != "" {
			// Use RootPath for temporarily loaded extensions
			extPath = man.RootPath
		} else {
			// Fall back to extensions dir for installed extensions
			extPath = filepath.Join(assets.GetExtensionsDir(), filepath.Base(manifestName))
		}

		if _, err := os.Stat(extPath); os.IsNotExist(err) {
			return true, nil
		}

		// If path is outside extensions directory, prompt for confirmation
		if !strings.HasPrefix(extPath, assets.GetExtensionsDir()) {
			confirm := false
			_ = forms.Confirm(fmt.Sprintf("Remove '%s' extension directory from filesystem?", manifestName), &confirm)
			if !confirm {
				// Skip the forceRemoveAll but continue with the rest
				delete(loadedManifests, manifestName)
				for _, cmd := range man.ExtCommand {
					delete(loadedExtensions, cmd.CommandName)
				}
				return true, nil
			}
		}

		forceRemoveAll(extPath)
		delete(loadedManifests, manifestName)
		for _, cmd := range man.ExtCommand {
			delete(loadedExtensions, cmd.CommandName)
		}
		return true, nil
	}
	return false, nil
}

func forceRemoveAll(rootPath string) {
	util.ChmodR(rootPath, 0o600, 0o700)
	os.RemoveAll(rootPath)
}