Refactoring modules

modules/net_sniff/net_sniff_ftp.go

@@ -0,0 +1,42 @@
+package net_sniff
+
+import (
+	"regexp"
+
+	"github.com/google/gopacket"
+	"github.com/google/gopacket/layers"
+
+	"github.com/evilsocket/islazy/str"
+	"github.com/evilsocket/islazy/tui"
+)
+
+var (
+	ftpRe = regexp.MustCompile(`^(USER|PASS) (.+)[\n\r]+$`)
+)
+
+func ftpParser(ip *layers.IPv4, pkt gopacket.Packet, tcp *layers.TCP) bool {
+	data := string(tcp.Payload)
+
+	if matches := ftpRe.FindAllStringSubmatch(data, -1); matches != nil {
+		what := str.Trim(matches[0][1])
+		cred := str.Trim(matches[0][2])
+		NewSnifferEvent(
+			pkt.Metadata().Timestamp,
+			"ftp",
+			ip.SrcIP.String(),
+			ip.DstIP.String(),
+			nil,
+			"%s %s > %s:%s - %s %s",
+			tui.Wrap(tui.BACKYELLOW+tui.FOREWHITE, "ftp"),
+			vIP(ip.SrcIP),
+			vIP(ip.DstIP),
+			vPort(tcp.DstPort),
+			tui.Bold(what),
+			tui.Yellow(cred),
+		).Push()
+
+		return true
+	}
+
+	return false
+}