fatt 0.1.1

Find All The Things - A high-performance, distributed security scanning tool
Documentation
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
use anyhow::{Context, Result};
use bincode::{config, Decode, Encode};
use lazy_static::lazy_static;
use serde::{Deserialize, Serialize};
use std::collections::HashMap;
use std::sync::Arc;
use tokio::io::{AsyncReadExt, AsyncWriteExt};
use tokio::net::tcp::OwnedWriteHalf;
use tokio::net::{TcpListener, TcpStream};
use tokio::sync::Mutex;
use tracing::{debug, error, info};

/// Configuration for a worker node
#[derive(Debug, Clone)]
pub struct WorkerConfig {
    /// Worker ID
    pub worker_id: String,

    /// Master node address
    pub master: String,

    /// Maximum concurrency
    pub concurrency: usize,
}

/// Message types for worker-master communication
#[derive(Debug, Clone, Serialize, Deserialize, Encode, Decode)]
pub enum WorkerMessage {
    /// Worker registration
    Register {
        worker_id: String,
        capabilities: WorkerCapabilities,
    },

    /// Worker heartbeat
    Heartbeat {
        worker_id: String,
        status: WorkerStatus,
    },

    /// Domain scan request
    ScanRequest {
        domains: Vec<String>,
        batch_id: String,
    },

    /// Domain scan result
    ScanResult {
        worker_id: String,
        batch_id: String,
        findings: Vec<ScanFinding>,
    },

    /// Shutdown request
    Shutdown { worker_id: String },
}

/// Worker capabilities
#[derive(Debug, Clone, Serialize, Deserialize, Encode, Decode)]
pub struct WorkerCapabilities {
    /// Maximum concurrent scans
    pub max_concurrency: usize,

    /// Worker version
    pub version: String,
}

/// Worker status
#[derive(Debug, Clone, Serialize, Deserialize, Default, Encode, Decode)]
pub struct WorkerStatus {
    /// Number of active scans
    pub active_scans: usize,

    /// Number of completed scans
    pub completed_scans: usize,

    /// Number of findings
    pub findings: usize,

    /// Uptime in seconds
    pub uptime_seconds: u64,
}

/// Scan finding
#[derive(Debug, Clone, Serialize, Deserialize, Encode, Decode)]
pub struct ScanFinding {
    /// Domain
    pub domain: String,

    /// Rule name
    pub rule_name: String,

    /// Matched path
    pub matched_path: String,

    /// Whether the target was detected
    pub detected: bool,
}

/// Connected worker information
pub struct ConnectedWorker {
    /// Worker ID
    #[allow(dead_code)]
    pub id: String,

    /// Worker capabilities
    pub capabilities: WorkerCapabilities,

    /// Write half of the TCP stream
    pub writer: Arc<Mutex<OwnedWriteHalf>>,

    /// Worker status
    pub status: WorkerStatus,
}

lazy_static! {
    static ref WORKERS: Mutex<HashMap<String, Arc<ConnectedWorker>>> = Mutex::new(HashMap::new());
}

/// Stop a worker by ID
pub async fn stop_worker(worker_id: &str) -> Result<()> {
    let workers = WORKERS.lock().await;

    if let Some(worker) = workers.get(worker_id) {
        let shutdown_msg = WorkerMessage::Shutdown {
            worker_id: worker_id.to_string(),
        };

        send_message(&worker.writer, &shutdown_msg)
            .await
            .context(format!(
                "Failed to send shutdown message to worker {}",
                worker_id
            ))?;

        info!("⏹️ Sent shutdown request to worker: {}", worker_id);
        Ok(())
    } else {
        anyhow::bail!("Worker not found: {}", worker_id)
    }
}

/// Get status of all workers
pub async fn worker_status() -> Result<()> {
    let workers = WORKERS.lock().await;

    if workers.is_empty() {
        info!("🔍 No workers connected");
        return Ok(());
    }

    info!("🔍 Connected Workers: {}", workers.len());

    for (id, worker) in workers.iter() {
        info!(
            "👷 Worker {}: Active={}, Completed={}, Findings={}, MaxConcurrency={}",
            id,
            worker.status.active_scans,
            worker.status.completed_scans,
            worker.status.findings,
            worker.capabilities.max_concurrency
        );
    }

    Ok(())
}

/// Start a worker node
pub async fn start_worker(config: &WorkerConfig) -> Result<()> {
    info!("🚀 Starting worker node with ID: {}", config.worker_id);

    // Connect to master
    let stream = TcpStream::connect(&config.master)
        .await
        .context(format!("Failed to connect to master at {}", config.master))?;

    // Split the stream
    let (mut reader, write_half) = stream.into_split();
    let writer = Arc::new(Mutex::new(write_half));

    // Register with master
    let capabilities = WorkerCapabilities {
        max_concurrency: config.concurrency,
        version: env!("CARGO_PKG_VERSION").to_string(),
    };

    let register_msg = WorkerMessage::Register {
        worker_id: config.worker_id.clone(),
        capabilities: capabilities.clone(),
    };

    send_message(&writer, &register_msg)
        .await
        .context("Failed to register with master")?;

    info!("✅ Registered with master at {}", config.master);

    // Handle messages
    loop {
        // Read message length (4 bytes)
        let mut len_bytes = [0u8; 4];
        reader
            .read_exact(&mut len_bytes)
            .await
            .context("Failed to read message length")?;
        let len = u32::from_be_bytes(len_bytes) as usize;

        // Read message
        let mut buffer = vec![0u8; len];
        reader
            .read_exact(&mut buffer)
            .await
            .context("Failed to read message")?;

        // Deserialize message
        let message: WorkerMessage =
            bincode::decode_from_slice(&buffer, bincode::config::standard())
                .context("Failed to deserialize message")?
                .0;

        debug!("📩 Received message: {:?}", message);

        // Handle message
        match message {
            WorkerMessage::ScanRequest { domains, batch_id } => {
                info!(
                    "🔍 Received scan request for {} domains (batch: {})",
                    domains.len(),
                    batch_id
                );

                // TODO: Implement scan logic
                let _scan_config = config.clone();

                // For now, just send back empty results
                let result_msg = WorkerMessage::ScanResult {
                    worker_id: config.worker_id.clone(),
                    batch_id,
                    findings: vec![],
                };

                send_message(&writer, &result_msg)
                    .await
                    .context("Failed to send scan results")?;
            }
            WorkerMessage::Shutdown { .. } => {
                info!("⏹️ Received shutdown request, stopping worker");
                break;
            }
            _ => {
                error!("❓ Received unexpected message type");
            }
        }
    }

    Ok(())
}

/// Send a message to a worker
async fn send_message(writer: &Arc<Mutex<OwnedWriteHalf>>, message: &WorkerMessage) -> Result<()> {
    let mut writer_guard = writer.lock().await;

    // Serialize the message using bincode
    let config = config::standard();
    let encoded = bincode::encode_to_vec(message, config)?;

    // Write the message length as u32 first
    let msg_len = encoded.len() as u32;
    writer_guard.write_all(&msg_len.to_be_bytes()).await?;

    // Then write the actual message
    writer_guard.write_all(&encoded).await?;
    writer_guard.flush().await?;

    Ok(())
}

#[allow(dead_code)]
/// Read a worker message from a TCP stream
async fn read_message(stream: &mut TcpStream) -> Result<WorkerMessage> {
    // Read message length
    let mut len_bytes = [0u8; 4];
    stream.read_exact(&mut len_bytes).await?;
    let msg_len = u32::from_be_bytes(len_bytes) as usize;

    // Read the actual message
    let mut buffer = vec![0u8; msg_len];
    stream.read_exact(&mut buffer).await?;

    // Deserialize using bincode
    let config = config::standard();
    let (message, _): (WorkerMessage, _) = bincode::decode_from_slice(&buffer, config)?;

    Ok(message)
}

#[allow(dead_code)]
/// Start a master node that distributes scanning work to connected workers
pub async fn start_master(
    listen_addr: &str,
    _scan_config: crate::config::ScanConfig,
) -> Result<()> {
    info!("🌐 Starting master node on {}", listen_addr);

    // Create our TCP listener
    let listener = TcpListener::bind(listen_addr)
        .await
        .context(format!("Failed to bind to {}", listen_addr))?;

    info!("✅ Master node started, waiting for workers to connect");

    // Create a shared list of connected workers
    let workers = Arc::new(Mutex::new(Vec::new()));

    loop {
        // Accept connections
        let (socket, addr) = listener
            .accept()
            .await
            .context("Failed to accept connection")?;

        info!("✅ New connection from: {}", addr);

        // Clone the workers for this connection
        let workers_clone = workers.clone();

        // Handle connection in separate task
        tokio::spawn(async move {
            if let Err(e) = handle_worker_connection(socket, workers_clone).await {
                error!("❌ Error handling worker connection: {}", e);
            }
        });
    }
}

#[allow(dead_code)]
/// Handle a single worker connection
async fn handle_worker_connection(
    mut stream: TcpStream,
    _workers: Arc<Mutex<Vec<ConnectedWorker>>>,
) -> Result<()> {
    info!("🔌 Worker connected from: {}", stream.peer_addr()?);

    // Read initial message
    let message = read_message(&mut stream).await?;

    match message {
        WorkerMessage::Register {
            worker_id,
            capabilities,
        } => {
            info!(
                "👷 Worker registered: {} (concurrency={})",
                worker_id, capabilities.max_concurrency
            );

            // Split the stream and store the write half for sending messages
            let (_read_half, write_half) = stream.into_split();

            // Create the connected worker
            let worker = Arc::new(ConnectedWorker {
                id: worker_id.clone(),
                capabilities,
                writer: Arc::new(Mutex::new(write_half)),
                status: WorkerStatus::default(),
            });

            // Store in global workers map
            {
                let mut workers = WORKERS.lock().await;
                workers.insert(worker_id.clone(), worker.clone());
            }

            // Send a heartbeat request
            let heartbeat = WorkerMessage::Heartbeat {
                worker_id: worker_id.clone(),
                status: WorkerStatus::default(),
            };

            send_message(&worker.writer, &heartbeat).await?;

            Ok(())
        }
        _ => {
            error!("❌ Expected Register message from worker, got something else");
            anyhow::bail!("Invalid initial message from worker")
        }
    }
}

/// Message types for master-worker communication
#[derive(Debug, Clone, Serialize, Deserialize)]
pub enum MasterMessage {
    /// Registration response
    RegisterResponse {
        accepted: bool,
        message: Option<String>,
    },

    /// Work assignment
    WorkAssignment {
        batch_id: String,
        domains: Vec<String>,
        rules: Vec<ScanRule>,
    },

    /// No work available
    NoWorkAvailable,

    /// Shutdown worker command
    Shutdown { reason: Option<String> },
}

/// Simplified rule representation for distribution
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct ScanRule {
    pub name: String,
    pub paths: Vec<String>,
    pub severity: String,
}