#!/bin/bash

# AnonSurf is inspired to the original backbox-anonymous script
# distributed as part of backbox-default-settings package.
# It was modified and forked from the homonimous module of PenMode, developed by the "Pirates' Crew" in order to make it fully compatible with
# Parrot  OS and other debian-based systems, and it is part of
# parrot-anon package.
#
#
# Devs:
# Lorenzo 'EclipseSpark' Faletra <eclipse@frozenbox.org>
# Lisetta 'Sheireen' Ferrero <sheireen@frozenbox.org>
# Francesco 'mibofra'/'Eli Aran'/'SimpleSmibs' Bonanno mibofra@ircforce.tk mibofra@frozenbox.org
#
#
# anonsurf is free software: you can redistribute it and/or
# modify it under the terms of the GNU General Public License as
# published by the Free Software Foundation, either version 3 of the
# License, or (at your option) any later version.
# You can get a copy of the license at www.gnu.org/licenses
#
# anonsurf is distributed in the hope that it will be
# useful, but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
# General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with Parrot Security OS. If not, see <http://www.gnu.org/licenses/>.


export BLUE='\033[1;94m'
export GREEN='\033[1;92m'
export RED='\033[1;91m'
export RESETCOLOR='\033[1;00m'

# Destinations you don't want routed through Tor
TOR_EXCLUDE="192.168.0.0/16 172.16.0.0/12 10.0.0.0/8"

# The UID Tor runs as
# change it if, starting tor, the command 'ps -e | grep tor' returns a different UID
TOR_UID="debian-tor"

# Tor's TransPort
TOR_PORT="9040"


function start {
    # Make sure only root can run this script
    if [ $(id -u) -ne 0 ]; then
        echo -e -e "\n$GREEN[$RED!$GREEN] $RED R U DRUNK?? This script must be run as root$RESETCOLOR\n" >&2
        exit 1
    fi

    # Check defaults for Tor
    grep -q -x 'RUN_DAEMON="yes"' /etc/default/tor
    if [ $? -ne 0 ]; then
        echo -e "\n$GREEN[$RED!$GREEN]$RED Please add the following to your /etc/default/tor and restart service:$RESETCOLOR\n" >&2
        echo -e "$BLUE#----------------------------------------------------------------------#$RESETCOLOR"
        echo -e 'RUN_DAEMON="yes"'
        echo -e "$BLUE#----------------------------------------------------------------------#$RESETCOLOR\n"
        exit 1
    fi

    # Check torrc config file
    grep -q -x 'VirtualAddrNetwork 10.192.0.0/10' /etc/tor/torrc
    if [ $? -ne 0 ]; then
        echo -e "\n$RED[!] Please add the following to your /etc/tor/torrc and restart service:$RESETCOLOR\n" >&2
        echo -e "$BLUE#----------------------------------------------------------------------#$RESETCOLOR"
        echo -e 'VirtualAddrNetwork 10.192.0.0/10'
        echo -e 'AutomapHostsOnResolve 1'
        echo -e 'TransPort 9040'
        echo -e 'DNSPort 53'
        echo -e "$BLUE#----------------------------------------------------------------------#$RESETCOLOR\n"
    exit 1
    fi
    grep -q -x 'AutomapHostsOnResolve 1' /etc/tor/torrc
    if [ $? -ne 0 ]; then
        echo -e "\n$RED[!] Please add the following to your /etc/tor/torrc and restart service:$RESETCOLOR\n" >&2
        echo -e "$BLUE#----------------------------------------------------------------------#$RESETCOLOR"
        echo -e 'VirtualAddrNetwork 10.192.0.0/10'
        echo -e 'AutomapHostsOnResolve 1'
        echo -e 'TransPort 9040'
        echo -e 'DNSPort 53'
        echo -e "$BLUE#----------------------------------------------------------------------#$RESETCOLOR\n"
        exit 1
    fi
    grep -q -x 'TransPort 9040' /etc/tor/torrc
    if [ $? -ne 0 ]; then
        echo -e "\n$RED[!] Please add the following to your /etc/tor/torrc and restart service:$RESETCOLOR\n" >&2
        echo -e "$BLUE#----------------------------------------------------------------------#$RESETCOLOR"
        echo -e 'VirtualAddrNetwork 10.192.0.0/10'
        echo -e 'AutomapHostsOnResolve 1'
        echo -e 'TransPort 9040'
        echo -e 'DNSPort 53'
        echo -e "$BLUE#----------------------------------------------------------------------#$RESETCOLOR\n"
    exit 1
    fi
    grep -q -x 'DNSPort 53' /etc/tor/torrc
    if [ $? -ne 0 ]; then
        echo -e "\n$RED[!] Please add the following to your /etc/tor/torrc and restart service:$RESETCOLOR\n" >&2
        echo -e "$BLUE#----------------------------------------------------------------------#$RESETCOLOR"
        echo -e 'VirtualAddrNetwork 10.192.0.0/10'
        echo -e 'AutomapHostsOnResolve 1'
        echo -e 'TransPort 9040'
        echo -e 'DNSPort 53'
        echo -e "$BLUE#----------------------------------------------------------------------#$RESETCOLOR\n"
        exit 1
    fi

    echo -e "\n$GREEN[$BLUE i$GREEN ]$BLUE Starting anonymous mode:$RESETCOLOR\n"

    if [ ! -e /var/run/tor/tor.pid ]; then
        echo -e " $RED*$BLUE Tor is not running! $GREEN starting $BLUE for you\n" >&2
        echo -e -n " $GREEN*$BLUE Service "
        service resolvconf stop 2>/dev/null || echo -e "resolvconf already stopped"
        service dnsmasq stop
        service nscd stop
        service tor start
        sleep 6
    fi
    if ! [ -f /etc/network/iptables.rules ]; then
        iptables-save > /etc/network/iptables.rules
        echo -e " $GREEN*$BLUE Saved iptables rules"
    fi

    iptables -F
    iptables -t nat -F

    echo -e 'nameserver 127.0.0.1\nnameserver 199.175.54.136' > /etc/resolv.conf
    echo -e " $GREEN*$BLUE Modified resolv.conf to use Tor"

    # set iptables nat
    iptables -t nat -A OUTPUT -m owner --uid-owner $TOR_UID -j RETURN
    iptables -t nat -A OUTPUT -p udp --dport 53 -j REDIRECT --to-ports 53
    iptables -t nat -A OUTPUT -p tcp --dport 53 -j REDIRECT --to-ports 53
    iptables -t nat -A OUTPUT -p udp -m owner --uid-owner $TOR_UID -m udp --dport 53 -j REDIRECT --to-ports 53

    #resolve .onion domains mapping 10.192.0.0/10 address space
    iptables -t nat -A OUTPUT -p tcp -d 10.192.0.0/10 -j REDIRECT --to-ports 9040

    #exclude local addresses
    for NET in $TOR_EXCLUDE 127.0.0.0/9 127.128.0.0/10; do
        iptables -t nat -A OUTPUT -d $NET -j RETURN
    done

    #redirect all other output through TOR
    iptables -t nat -A OUTPUT -p tcp --syn -j REDIRECT --to-ports $TOR_PORT

    #set iptables filter
    iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

    #exclude local addresses
    for NET in $TOR_EXCLUDE 127.0.0.0/8; do
        iptables -A OUTPUT -d $NET -j ACCEPT
    done

    #allow only tor output
    iptables -A OUTPUT -m owner --uid-owner $TOR_UID -j ACCEPT
    iptables -A OUTPUT -j REJECT

    echo -e "$GREEN *$BLUE Redirected all traffic throught Tor\n"
    echo -e "$GREEN[$BLUE i$GREEN ]$BLUE You are under AnonSurf-TOR tunnel$RESETCOLOR\n"
    sleep 4
}





function stop {
    # Make sure only root can run our script
    if [ $(id -u) -ne 0 ]; then
        echo -e "\n$GREEN[$RED!$GREEN] $RED R U DRUNK?? This script must be run as root$RESETCOLOR\n" >&2
        exit 1
    fi
    echo -e "\n$GREEN[$BLUE i$GREEN ]$BLUE Stopping anonymous mode:$RESETCOLOR\n"

    iptables -F
    iptables -t nat -F
    echo -e " $GREEN*$BLUE Deleted all iptables rules"

    if [ -f /etc/network/iptables.rules ]; then
        iptables-restore < /etc/network/iptables.rules
        rm /etc/network/iptables.rules
        echo -e " $GREEN*$BLUE Restored iptables rules"
    fi
    echo -e -n " $GREEN*$BLUE Service "
    service tor stop
    service resolvconf start 2>/dev/null || echo -e "resolvconf already started"
    service nscd start
    service network-manager restart
    service dnsmasq start
    sleep 1

    echo -e " $GREEN*$BLUE Stopped anonymous mode\n"
    sleep 4
}

function change {
    service tor reload
    sleep 4
    echo -e " $GREEN*$BLUE Restarted tor daemon and forced to change nodes\n"
    sleep 1
}

function status {
    service tor status
}

case "$1" in
    start)
start
;;
    stop)
stop
;;
    restart)
$0 stop
sleep 1
$0 start

;;
    change)
change
;;
    status)
status
;;
    *)
echo -e "
Parrot AnonSurf Module (v 0.9)
    Usage:
    $RED&#9484;&#9472;[$GREEN$USER$YELLOW@$BLUE`hostname`$RED]&#9472;[$GREEN$PWD$RED]
    $RED&#9492;&#9472;&#9472;&#9596; \$$GREEN"" anonsurf $RED{$GREEN""start$RED|$GREEN""stop$RED|$GREEN""restart$RED|$GREEN""change$RED""}

    $RED start$BLUE -$GREEN start system-wide anonymous
          tunneling under TOR proxy through iptables

    $RED stop$BLUE -$GREEN reset original iptables settings
          and return to clear navigation

    $RED restart$BLUE -$GREEN combines \"stop\" and \"start\" options


    $RED change$BLUE -$GREEN changes identity restarting TOR
$RESETCOLOR" >&2
exit 1
;;
esac

echo -e $RESETCOLOR
exit 0