quicproxy/src/server.rs

use std::{error::Error, net::{IpAddr, SocketAddr}, str, sync::Arc};
use quinn::crypto::rustls::QuicServerConfig;
use rustls::pki_types::PrivatePkcs8KeyDer;
use tokio::{io::{AsyncReadExt, AsyncWriteExt}, net::{TcpStream, UdpSocket}};

pub async fn run_server(host: SocketAddr, password: &str) -> Result<(), Box<dyn Error>> {
    let cert = rcgen::generate_simple_self_signed(vec![
        "localhost".into(),
        host.ip().to_string().into(),
    ]).unwrap();
    let key = PrivatePkcs8KeyDer::from(cert.signing_key.serialize_der()).into();
    let certs = vec![cert.cert.into()];

    let mut server_crypto = rustls::ServerConfig::builder()
        .with_no_client_auth()
        .with_single_cert(certs, key)?;
    server_crypto.alpn_protocols = vec![b"hq-29".into()];
    
    let mut server_config =
        quinn::ServerConfig::with_crypto(Arc::new(QuicServerConfig::try_from(server_crypto)?));
    let transport_config = Arc::get_mut(&mut server_config.transport).unwrap();
    transport_config.max_concurrent_uni_streams(0_u8.into());

    let endpoint = quinn::Endpoint::server(server_config, host)?;

    while let Some(conn) = endpoint.accept().await {
        let fut = handle_connection(conn, password.to_string());

        tokio::spawn(async move {
            if let Err(e) = fut.await {
                eprintln!("connection failed: {reason}", reason = e.to_string())
            }
        });
    }

    Ok(())
}

async fn handle_connection(conn: quinn::Incoming, password: String) -> Result<(), Box<dyn Error>> {
    let connection = conn.await?;

    loop {
        let stream = connection.accept_bi().await;
        let stream = match stream {
            Err(quinn::ConnectionError::ApplicationClosed { .. }) => {
                eprintln!("connection closed");
                return Ok(());
            }
            Err(e) => {
                return Err(e.into());
            }
            Ok(s) => s,
        };
        
        let fut = handle_request(
            connection.stable_id(),
            stream.0,
            stream.1,
            password.clone()
        );
        let connection = connection.clone();
        tokio::spawn(
            async move {
                if let Err(e) = fut.await {
                    eprintln!("failed: {reason}", reason = e.to_string());
                    connection.close(0u32.into(), "bad env!!! critical error!!!!1".as_bytes());
                }
            },
        );
    }
}

fn is_local_address(socket_addr: &SocketAddr) -> bool {
    match socket_addr.ip() {
        IpAddr::V4(ip) => ip.is_loopback() || ip.is_private(),
        IpAddr::V6(ip) => ip.is_loopback() || ip.is_unique_local(),
    }
}

async fn handle_request(
    stable_id: usize,
    mut send: quinn::SendStream,
    mut recv: quinn::RecvStream,
    password: String
) -> Result<(), Box<dyn Error>> {
    let mut head_data = [0; 1024];
    let head_len = recv.read(&mut head_data).await?.unwrap_or_default();
    let head_data = &head_data[..head_len];

    let mut body_data = vec![];

    let mut stack = 0;
    let mut status = true;
    let mut is_key = true;
    let mut key = vec![];
    let mut value = vec![];
    
    let mut remote = String::new();
    let mut udp = false;
    
    for n in head_data {
        stack = match (stack, n) {
            (0, b'\r') => 1,
            (1, b'\n') => {
                if !status {
                    if key == b"Host" {
                        remote = String::from_utf8(value.clone())?;
                    } else if key == b"Authentication" {
                        let passhash = String::from_utf8(value.clone())?;
                        if !bcrypt::verify(password.clone(), &format!("{stable_id}{passhash}"))? {
                            return Err("bad passhash error!!! not nice env!!".into());
                        }
                    } else if key == b"UDP" {
                        udp = value == b"1";
                    } else {
                        return Err("unknown header provided!! malware connection".into());
                    }
                
                    is_key = true;
                    key.clear();
                    value.clear();
                }
                2
            },
            (2, b'\r') => 3,
            (2, _) => {
                status = false;
                0
            },
            (3, b'\n') => 4,
            (4, _) => {
                body_data.push(*n);
                4
            },
            _ => 0
        };

        if stack == 0 && status == false {
            if *n == b':' {
                is_key = false;
            } else if is_key {
                key.push(*n);
            } else if *n != b' ' {
                value.push(*n);
            }
        }
    }
    
    if stack != 4 {
        return Err("bad request very bad".into());
    }

    let remote: SocketAddr = remote.parse()?;

    if is_local_address(&remote) {
        return Err("backdoor attack!!! absolutely not good!!!!!!".into());
    }

    if udp {
        let local_addr: SocketAddr = if remote.is_ipv4() {
            "0.0.0.0:0"
        } else {
            "[::]:0"
        }
        .parse()?;
        
        let stream = UdpSocket::bind(local_addr).await?;
        stream.connect(&remote).await?;
        let stream = Arc::new(stream);

        stream.send(&body_data).await?;

        tokio::spawn({
            let stream = stream.clone();
            async move  {
                loop {
                    let mut buf = [0; 1024];
                    let Ok(len) = stream.recv(&mut buf).await else { break; };
                    if len == 0 { break; };
                    let Ok(_) = send.write_all(&buf[..len]).await else { break; };
                }
            }
        });

        tokio::spawn({
            let stream = stream.clone();
            async move  {
                loop {
                    let mut buf = [0; 1024];
                    let Ok(Some(mut len)) = recv.read(&mut buf).await else { break; };
                    if len == 0 { break; };
                    let mut sent_all = 0;
                    loop {
                        let Ok(sent) = stream.send(&buf[sent_all..len]).await else { return; };
                        if sent < len {
                            len -= sent;
                            sent_all += sent;
                        } else {
                            break;
                        }
                    }
                }
            }
        });
    } else {
        let stream = TcpStream::connect(remote).await?;
        let (mut remote_recv, mut remote_send) = stream.into_split();

        remote_send.write_all(&body_data).await?;

        tokio::spawn(async move  {
            loop {
                let mut buf = [0; 1024];
                let Ok(len) = remote_recv.read(&mut buf).await else { break; };
                if len == 0 { break; };
                let Ok(_) = send.write_all(&buf[..len]).await else { break; };
            }
        });
    
        tokio::spawn(async move {
            loop {
                let mut buf = [0; 1024];
                let Ok(Some(len)) = recv.read(&mut buf).await else { break; };
                if len == 0 { break; };
                let Ok(_) = remote_send.write_all(&buf[..len]).await else { break; };
            }
        });
    }

    Ok(())
}