2-0

apq-pc-info/.gitignore

+*.toDelete
+output/**
+*.class
+*~
+*.iml
+*/.idea/**
+.idea/**
+.idea
+*.log
+*.log.[0-9][0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9]
+*/.classpath
+.classpath
+*/.project
+.project
+.cache/**
+target/
+build/
+tmp_deb_control/
+tmp_rpm_control/
+tmp_sh/
+.gwt/
+.settings/
+/bin
+bin/
+**/dependency-reduced-pom.xml
+pom.xml.versionsBackup
+.DS_Store
+**/.gradle
+**/local.properties
+**/build
+**/target
+**/Californium.properties
+**/.env
+.instance_id
+rebuild-docker.sh

apq-pc-info/src/main/java/com/priusis/ApqInfoApplication.java

+package com.priusis;
+
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.boot.autoconfigure.jdbc.DataSourceAutoConfiguration;
+import org.springframework.boot.autoconfigure.security.servlet.SecurityAutoConfiguration;
+import org.springframework.scheduling.annotation.EnableScheduling;
+
+@EnableScheduling
+@SpringBootApplication(exclude = {DataSourceAutoConfiguration.class, SecurityAutoConfiguration.class})
+public class ApqInfoApplication {
+
+    public static void main(String[] args) {
+        SpringApplication.run(ApqInfoApplication.class, args);
+    }
+
+}

apq-pc-info/src/main/java/com/priusis/config/RestTemplateConfig.java

+package com.priusis.config;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.http.client.ClientHttpRequestFactory;
+import org.springframework.http.client.SimpleClientHttpRequestFactory;
+import org.springframework.http.converter.StringHttpMessageConverter;
+import org.springframework.web.client.RestTemplate;
+
+import java.nio.charset.Charset;
+
+@Configuration
+public class RestTemplateConfig {
+
+    @Bean
+    public RestTemplate restTemplate(ClientHttpRequestFactory factory) {
+        RestTemplate restTemplate = new RestTemplate(factory);
+        // 支持中文编码
+        restTemplate.getMessageConverters().set(1, new StringHttpMessageConverter(Charset.forName("UTF-8")));
+        return restTemplate;
+    }
+
+    @Bean
+    public ClientHttpRequestFactory simpleClientHttpRequestFactory() {
+        SimpleClientHttpRequestFactory factory = new SimpleClientHttpRequestFactory();
+        factory.setReadTimeout(5000);//单位为ms
+        factory.setConnectTimeout(5000);//单位为ms
+        return factory;
+    }
+}

apq-pc-info/src/main/java/com/priusis/vo/MqttRpcDataMessage.java

+package com.priusis.vo;
+
+import lombok.Data;
+
+import java.io.Serializable;
+
+@Data
+public class MqttRpcDataMessage implements Serializable {
+
+    private static final long serialVersionUID = -3133461476074777891L;
+
+    private int requestId;
+    private String method;
+    private String params;
+
+    @Override
+    public String toString() {
+        return "{requestId=" + requestId +
+                ", method=" + method +
+                ", params=" + params +
+                '}';
+    }
+}

apq-pc-info/src/main/resources/application.yml

+server:
+  # Server bind address
+  address: "0.0.0.0"
+  port: ${random.int[10000,19999]}

apq-pc-info/src/test/java/com/priusis/RestTest.java

+package com.priusis;
+
+import cn.hutool.core.io.unit.DataSizeUtil;
+import cn.hutool.core.map.MapUtil;
+import cn.hutool.system.oshi.OshiUtil;
+import com.priusis.vo.MqttRpcDataMessage;
+import org.junit.Test;
+import org.junit.runner.RunWith;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.http.ResponseEntity;
+import org.springframework.test.context.junit4.SpringRunner;
+import org.springframework.web.client.RestTemplate;
+import oshi.hardware.NetworkIF;
+
+import java.net.InetAddress;
+import java.net.NetworkInterface;
+import java.util.Map;
+
+@RunWith(SpringRunner.class)
+@SpringBootTest
+public class RestTest {
+
+    @Autowired
+    private RestTemplate restTemplate;
+
+    @Test
+    public void test1() throws Exception {
+        // 获取采集配置，数据上报频率 params == data
+        ResponseEntity<MqttRpcDataMessage> forEntity = restTemplate.getForEntity("http://localhost:8765/rpc_cmd/info", MqttRpcDataMessage.class);
+        System.out.println(forEntity.getBody().getMethod());
+        System.out.println(forEntity.getBody().getParams());
+
+        // 上报PC实时信息
+        InetAddress inetAddress = InetAddress.getLocalHost();
+        NetworkIF networkIF = new NetworkIF();
+        networkIF.setNetworkInterface(NetworkInterface.getByInetAddress(inetAddress));
+        Map<String, Object> data = MapUtil.<String, Object>builder()
+                .put("operatingSystem", OshiUtil.getOs().toString())
+                .put("mac", networkIF.getMacaddr())
+                .put("baseboard", OshiUtil.getSystem().getBaseboard().getManufacturer() + " " + OshiUtil.getSystem().getBaseboard().getVersion())
+                .put("ip", inetAddress.getHostAddress())
+                .put("cpuModel", OshiUtil.getCpuInfo(0).getCpuModel())
+                .put("cpuTemp", OshiUtil.getSensors().getCpuTemperature())
+                .put("memoryCap", DataSizeUtil.format(OshiUtil.getMemory().getTotal()))
+                .put("diskModel", OshiUtil.getHardware().getDiskStores()[0].getModel())
+                .put("diskCap", DataSizeUtil.format(OshiUtil.getHardware().getDiskStores()[0].getSize()))
+                .build();
+        Map map = restTemplate.postForObject("http://localhost:8765/uplink/oc-client", data, Map.class);
+        System.out.println(map);
+    }
+}

apq-pc-register/.gitignore

+*.toDelete
+output/**
+*.class
+*~
+*.iml
+*/.idea/**
+.idea/**
+.idea
+*.log
+*.log.[0-9][0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9]
+*/.classpath
+.classpath
+*/.project
+.project
+.cache/**
+target/
+build/
+tmp_deb_control/
+tmp_rpm_control/
+tmp_sh/
+.gwt/
+.settings/
+/bin
+bin/
+**/dependency-reduced-pom.xml
+pom.xml.versionsBackup
+.DS_Store
+**/.gradle
+**/local.properties
+**/build
+**/target
+**/Californium.properties
+**/.env
+.instance_id
+rebuild-docker.sh

apq-pc-register/src/main/java/com/priusis/ApqRegisterApplication.java

+package com.priusis;
+
+import cn.hutool.core.util.StrUtil;
+import cn.hutool.json.JSONUtil;
+import com.priusis.dto.RegisterParamDto;
+import com.priusis.vo.MqttRpcDataMessage;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.SpringBootApplication;
+import org.springframework.boot.autoconfigure.jdbc.DataSourceAutoConfiguration;
+import org.springframework.boot.autoconfigure.security.servlet.SecurityAutoConfiguration;
+import org.springframework.http.ResponseEntity;
+import org.springframework.scheduling.annotation.EnableScheduling;
+import org.springframework.scheduling.annotation.Scheduled;
+import org.springframework.web.client.RestTemplate;
+
+import java.io.BufferedReader;
+import java.io.IOException;
+import java.io.InputStreamReader;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+
+@Slf4j
+@EnableScheduling
+@SpringBootApplication(exclude = {DataSourceAutoConfiguration.class, SecurityAutoConfiguration.class})
+public class ApqRegisterApplication {
+
+    public static void main(String[] args) {
+        SpringApplication.run(ApqRegisterApplication.class, args);
+    }
+
+    // "params":
+    // {
+    //    "type":1
+    //    "programs": [
+    //      {
+    //          "name":"qq"
+    //      }
+    //    ]
+    // }
+
+    // 一分钟一次上报
+    private final Long FIXED_DELAY = 60000L;
+
+    @Autowired
+    private RestTemplate restTemplate;
+
+    @Scheduled(fixedDelay = FIXED_DELAY)
+    protected void registerProgramTask() {
+        // 获取软件检测监控配置 params == data
+        ResponseEntity<MqttRpcDataMessage> forEntity = restTemplate.getForEntity("http://localhost:8765/rpc_cmd/register", MqttRpcDataMessage.class);
+        if (null != forEntity) {
+            MqttRpcDataMessage body = forEntity.getBody();
+            String params = body.getParams();
+
+            if (StrUtil.isNotBlank(params)) {
+                Long sendTime = body.getSendTime();
+                long current = System.currentTimeMillis();
+                RegisterParamDto registerParamDto = JSONUtil.toBean(params, RegisterParamDto.class);
+
+                // 收到软件检测下发请求
+                log.info("收到软件检测下发请求, sendTime:{}, params:{}", sendTime, params);
+
+                int type = registerParamDto.getType();
+                if (type == 1) {
+                    List<String> loadProgramList = null;
+                    try {
+                        loadProgramList = loadProgramList();
+                    } catch (IOException e) {
+                        log.error("获取软件清单异常", e);
+                    }
+
+                    if (null == loadProgramList) {
+                        return;
+                    }
+
+                    List<RegisterParamDto.RegisterDetailParamDto> programs = registerParamDto.getPrograms();
+                    // 上报软件检测监控数据
+                    Map mapRequest = new HashMap();
+                    for (RegisterParamDto.RegisterDetailParamDto program : programs) {
+                        String name = program.getName();
+
+                        if (loadProgramList.contains(name)) {
+                            // 杀进程？
+
+                            // 上报黑名单异常
+                            mapRequest.put(name, "1");
+                        }
+                    }
+                    // 上报黑名单异常
+                    if (mapRequest.size() > 0) {
+                        Map eventMapRequest = new HashMap();
+                        eventMapRequest.put("methodName", "register_warning");
+                        eventMapRequest.put("params", mapRequest);
+                        Map map = restTemplate.postForObject("http://localhost:8765/uplink_event/oc-client", eventMapRequest, Map.class);
+                        log.info("存在软件检测接口扫码告警，上报告警事件: mapData:{}, ret:{}", mapRequest, map);
+                    }
+
+                    // 上报黑名单属性 todo
+                }
+            } else {
+                log.info("未获取到获取软件检测监控配置");
+            }
+        } else {
+            log.info("未获取到获取软件检测监控配置");
+        }
+
+
+    }
+
+    /**
+     * 获取软件清单
+     *
+     * @return
+     * @throws IOException
+     */
+    protected List<String> loadProgramList() throws IOException {
+        List<String> programs = new ArrayList<>();
+        Process process = Runtime.getRuntime()
+                .exec("cmd /c reg query HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\");
+        try (BufferedReader reader = new BufferedReader(new InputStreamReader(process.getInputStream(), "GBK"))) {
+            String key;
+            while ((key = reader.readLine()) != null) {
+                List<String> info = queryProgramInfo(key);
+                programs.addAll(info);
+            }
+            process.destroy();
+        }
+        return programs;
+    }
+
+    private List<String> queryProgramInfo(String key) throws IOException {
+        List<String> info = new ArrayList<>();
+        Process process = Runtime.getRuntime().exec("cmd /c reg query " + key);
+        try (BufferedReader reader = new BufferedReader(new InputStreamReader(process.getInputStream(), "GBK"))) {
+            reader.readLine();
+            reader.readLine();
+            String line;
+            while ((line = reader.readLine()) != null) {
+                line = line.trim();
+                if (line.startsWith("DisplayName")) {
+                    info.add(line.replace("DisplayName", "").replace("REG_SZ", "").trim());
+                }
+            }
+            process.destroy();
+        }
+        return info;
+    }
+}

apq-pc-register/src/main/java/com/priusis/config/RestTemplateConfig.java

+package com.priusis.config;
+
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.http.client.ClientHttpRequestFactory;
+import org.springframework.http.client.SimpleClientHttpRequestFactory;
+import org.springframework.http.converter.StringHttpMessageConverter;
+import org.springframework.web.client.RestTemplate;
+
+import java.nio.charset.Charset;
+
+@Configuration
+public class RestTemplateConfig {
+
+    @Bean
+    public RestTemplate restTemplate(ClientHttpRequestFactory factory) {
+        RestTemplate restTemplate = new RestTemplate(factory);
+        // 支持中文编码
+        restTemplate.getMessageConverters().set(1, new StringHttpMessageConverter(Charset.forName("UTF-8")));
+        return restTemplate;
+    }
+
+    @Bean
+    public ClientHttpRequestFactory simpleClientHttpRequestFactory() {
+        SimpleClientHttpRequestFactory factory = new SimpleClientHttpRequestFactory();
+        factory.setReadTimeout(5000);//单位为ms
+        factory.setConnectTimeout(5000);//单位为ms
+        return factory;
+    }
+}

apq-pc-register/src/main/java/com/priusis/dto/RegisterParamDto.java

+package com.priusis.dto;
+
+import lombok.Data;
+
+import java.util.List;
+
+// "type":1
+// "programs": [
+//    {
+//      "name":"qq"
+//    }
+//  ]
+@Data
+public class RegisterParamDto {
+    // type = 1 黑名单
+    // type = 2 白名单
+    private int type;
+
+    private List<RegisterDetailParamDto> programs;
+
+    @Data
+    public class RegisterDetailParamDto {
+        private String name;
+    }
+}

apq-pc-register/src/main/java/com/priusis/vo/MqttRpcDataMessage.java

+package com.priusis.vo;
+
+import lombok.Data;
+
+import java.io.Serializable;
+
+@Data
+public class MqttRpcDataMessage implements Serializable {
+
+    private static final long serialVersionUID = -3133461476074777891L;
+
+    private int requestId;
+    private String method;
+    private Long sendTime;
+    private String params;
+
+    @Override
+    public String toString() {
+        return "{requestId=" + requestId +
+                ", sendTime=" + sendTime +
+                ", method=" + method +
+                ", params=" + params +
+                '}';
+    }
+}

apq-pc-register/src/main/resources/application.yml

+server:
+  # Server bind address
+  address: "0.0.0.0"
+  port: ${random.int[30000,39999]}

apq-pc-register/src/test/java/com/priusis/RestTest.java

+package com.priusis;
+
+import com.priusis.vo.MqttRpcDataMessage;
+import org.junit.Test;
+import org.junit.runner.RunWith;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.http.ResponseEntity;
+import org.springframework.test.context.junit4.SpringRunner;
+import org.springframework.web.client.RestTemplate;
+
+import java.util.HashMap;
+import java.util.Map;
+
+@RunWith(SpringRunner.class)
+@SpringBootTest
+public class RestTest {
+
+    @Autowired
+    private RestTemplate restTemplate;
+
+    @Test
+    public void test1() throws Exception {
+        // 获取软件检测黑名单 params == data
+        ResponseEntity<MqttRpcDataMessage> forEntity = restTemplate.getForEntity("http://localhost:8765/rpc_cmd/register", MqttRpcDataMessage.class);
+        System.out.println(forEntity.getBody().getMethod());
+        System.out.println(forEntity.getBody().getParams());
+
+        // 上报软件检测数据
+        Map mapRequest = new HashMap();
+        Map map = restTemplate.postForObject("http://localhost:8765/uplink/oc-client", mapRequest, Map.class);
+        System.out.println(map);
+    }
+}