echo "============================================"
echo "Initial setup..."
echo "============================================"
set -e
set -o pipefail
export DEBIAN_FRONTEND=noninteractive

echo "============================================"
echo "Adding user 'baldur'..."
echo "============================================"
adduser --gecos "" 'baldur' <<END
mjolnir
mjolnir
END

# FTP
echo "============================================"
echo "Setting up FTP..."
echo "============================================"
apt install vsftpd ftp -y
mkdir /home/baldur/Uploads
touch /home/baldur/Uploads/todo.txt
echo "list of things i need to do for the new blog:" > /home/baldur/Uploads/todo.txt
echo "- laura told me there was a vulnerability and i might get hacked? haha as if anyone is going to hack a blog about nordic mythology" >> /home/baldur/Uploads/todo.txt
echo "- get snorri sturluson biography from library, write review" >> /home/baldur/Uploads/todo.txt
echo "- find some cool nordic mythology fan theories to write about" >> /home/baldur/Uploads/todo.txt
echo "- the nordic name for the world tree might not have been the most creative name for the blog. might try and think of a new one" >> /home/baldur/Uploads/todo.txt
sed -i "s/anonymous_enable=NO/anonymous_enable=YES/g" /etc/vsftpd.conf
sed -i "s/local_enable=YES/local_enable=NO/g" /etc/vsftpd.conf
sed -i "/^local_root=/d" /etc/vsftpd.conf
echo "chroot_local_user=YES" >> /etc/vsftpd.conf
echo "anon_root=/home/baldur/Uploads" >> /etc/vsftpd.conf
systemctl restart vsftpd
echo "FTP successfully set up!"

# WORDPRESS
# TODO: passwrter updaten
echo "============================================"
echo "Setting up Wordpress..."
echo "============================================"
apt install wordpress curl default-mysql-server apache2 -y
curl https://raw.githubusercontent.com/wp-cli/builds/gh-pages/phar/wp-cli.phar -o /tmp/wp-cli.phar
chmod +x /tmp/wp-cli.phar
mv /tmp/wp-cli.phar /usr/local/bin/wp
wp cli update
mkdir /var/www/yggdrasil
chmod 777 /var/www/yggdrasil
su baldur -c 'wp core download --path=/var/www/yggdrasil'
mysql -u root - proot-e "CREATE USER wordpress@localhost;"
mysql -u root - proot -e "SET PASSWORD FOR wordpress@localhost= PASSWORD('L$yk*uV$=a#CH^3*');"
mysql -u root - proot -e "CREATE DATABASE wordpress character set utf8 collate utf8_bin;"
mysql -u root - proot -e "GRANT ALL PRIVILEGES ON wordpress.* TO wordpress@localhost IDENTIFIED BY 'wordpress';"
mysql -u root - proot -e "FLUSH PRIVILEGES;"
sed -i 's/DocumentRoot \/var\/www\/html/DocumentRoot \/var\/www/g' /etc/apache2/sites-enabled/000-default.conf
sed -i "s/Options Indexes FollowSymLinks/Options FollowSymLinks/g" /etc/apache2/apache2.conf
sudo -u baldur -i -- wp config create --dbname= wordpress --dbuser= wordpress --dbpass= wordpress --path=/var/www/yggdrasil
sudo -u baldur -i -- wp core install --title=Yggdrasil --admin_user=wordpress --admin_password=wordpress --admin_email=wordpress@freya.com --url='http://10.250.4.125/yggdrasil' --path=/var/www/yggdrasil
sudo -u baldur -i -- wp option update home 'http://10.250.4.125/yggdrasil'
sudo -u baldur -i -- wp theme activate twentyseventeen

# irgendwie 'norse ipsum' mit einbinden(oder nicht, nicht so wichtig)
# wp post create --post_type=post --post_title="Norse Ipsum" --post_status=publish

# VULNERABLE PLUGIN
wp plugin install social-warfare --version=3.5.1 --activate --allow-root

# diesen teil am ende des wp setups lassen
chown -R www-data:www-data /var/www/yggdrasil
chmod 774 /var/www/yggdrasil
mysql_secure_installation <<-EOF
n
y
yls -
y
y
EOF
/etc/init.d/apache2 restart

# WWW-DATA TO BALDUR
echo "============================================"
echo "Set up PrivEsc from www-data to baldur..."
echo "============================================"
chmod 644 /etc/shadow
echo "root:6n4nC-j_@Txb6k*A" | /usr/sbin/chpasswd
echo "admin:CYv$!8tVU-6Y=%qH" | /usr/sbin/chpasswd
echo "user:Y%AMQgL2-#E4fxQW" | /usr/sbin/chpasswd

# POST EXPLOIT
echo "============================================"
echo "Set up cronjob for Post-Exploit..."
echo "============================================"
mkdir /opt/freya
touch /opt/freya/log.py
touch /opt/freya/script.sh
echo "echo \"Do something...\"" > /opt/freya/script.sh
printf '#!/usr/bin/python\n\n' > /opt/freya/log.py
printf 'import os\nimport socket\n\n' >> /opt/freya/log.py
printf '# TODO actually add in socket functionality\n' >> /opt/freya/log.py
printf 's = socket.socket(socket.AF_INET, socket.SOCK_STREAM)\n\n' >> /opt/freya/log.py
printf 'os.system("./script.sh")\n' >> /opt/freya/log.py
chmod +x /opt/freya/log.py
chmod +x /opt/freya/script.sh
chmod 666 /usr/lib/python2.7/socket.py
TEMPFILE=$(mktemp)
echo "*/1 * * * * /opt/freya/log.py" >> ${TEMPFILE}
crontab ${TEMPFILE}
rm ${TEMPFILE}