chore: Reorganize file tree for easier onboarding. Rust project now at the root for simple git clone && cargo run
This commit is contained in:
101
data/watchguard/ansible/network-boot.yml
Normal file
101
data/watchguard/ansible/network-boot.yml
Normal file
@@ -0,0 +1,101 @@
|
||||
---
|
||||
- name: Log in to OPNsense and obtain PHPSESSID and CSRF token
|
||||
hosts: localhost
|
||||
gather_facts: no
|
||||
vars:
|
||||
api_username: "your_username"
|
||||
api_password: "your_password"
|
||||
|
||||
tasks:
|
||||
- name: Perform GET request to initiate session and retrieve PHPSESSID
|
||||
uri:
|
||||
url: "https://192.168.1.1/"
|
||||
method: GET
|
||||
user: "{{ WEBUI_USERNAME }}"
|
||||
password: "{{ WEBUI_PASSWORD }}"
|
||||
headers:
|
||||
Accept: 'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7'
|
||||
validate_certs: no
|
||||
return_content: yes
|
||||
register: login_page
|
||||
|
||||
- name: Extract PHPSESSID from response cookies
|
||||
set_fact:
|
||||
phpsessid: "{{ login_page.cookies.PHPSESSID }}"
|
||||
|
||||
- name: Extract CSRF token name and value from the page content
|
||||
set_fact:
|
||||
csrf_tokens: "{{ login_page.content | regex_findall('<input[^>]*type=\"hidden\"[^>]*name=\"([^\"]+)\"[^>]*value=\"([^\"]+)\"') }}"
|
||||
|
||||
- name: Set CSRF token name and value
|
||||
set_fact:
|
||||
csrf_token_name: "{{ csrf_tokens[0][0] if csrf_tokens | length > 0 else 'Not found' }}"
|
||||
csrf_token_value: "{{ csrf_tokens[0][1] if csrf_tokens | length > 0 else 'Not found' }}"
|
||||
|
||||
- name: Display the PHPSESSID and CSRF token details
|
||||
debug:
|
||||
msg: "PHPSESSID is {{ phpsessid }}, CSRF token name is {{ csrf_token_name }}, CSRF token value is {{ csrf_token_value }}"
|
||||
|
||||
- name: Construct body
|
||||
set_fact:
|
||||
request_body: |
|
||||
{{ csrf_token_name}}={{ csrf_token_value }}&range_from=192.168.1.10&range_to=192.168.1.245&wins1=&wins2=&dns1=&dns2=&gateway=&domain=&domainsearchlist=&defaultleasetime=&maxleasetime=&minsecs=&interface_mtu=&failover_peerip=&failover_split=&ddnsdomain=&ddnsdomainprimary=&ddnsdomainkeyname=&ddnsdomainkey=&ddnsdomainalgorithm=hmac-md5&mac_allow=&mac_deny=&ntp1=&ntp2=&tftp=&bootfilename=&ldap=&nextserver=192.168.1.1&filename=&filename32=&filename64=bootx64.efi&filename32arm=&filename64arm=&filenameipxe=&rootpath=&omapiport=&omapialgorithm=&omapikey=&numberoptions_number%5B%5D=&numberoptions_type%5B%5D=text&numberoptions_value%5B%5D=&if=lan&submit=Save'
|
||||
|
||||
- name: Post data to services_dhcp.php
|
||||
uri:
|
||||
url: "https://192.168.1.1/services_dhcp.php?if=lan"
|
||||
method: POST
|
||||
headers:
|
||||
Accept: "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"
|
||||
Accept-Language: "en,fr;q=0.9,en-GB;q=0.8,en-US;q=0.7"
|
||||
Cache-Control: "no-cache"
|
||||
Content-Type: "application/x-www-form-urlencoded"
|
||||
Cookie: "PHPSESSID={{ phpsessid }}"
|
||||
Origin: "https://192.168.1.1"
|
||||
Pragma: "no-cache"
|
||||
Priority: "u=0, i"
|
||||
Referer: "https://192.168.1.1/services_dhcp.php?if=lan"
|
||||
Sec-Ch-Ua: '"Google Chrome";v="125", "Chromium";v="125", "Not.A/Brand";v="24"'
|
||||
Sec-Ch-Ua-Mobile: "?0"
|
||||
Sec-Ch-Ua-Platform: '"Linux"'
|
||||
Sec-Fetch-Dest: "document"
|
||||
Sec-Fetch-Mode: "navigate"
|
||||
Sec-Fetch-Site: "same-origin"
|
||||
Sec-Fetch-User: "?1"
|
||||
Upgrade-Insecure-Requests: "1"
|
||||
User-Agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
|
||||
body: |
|
||||
{{ csrf_token_name }}={{ csrf_token_value }}&range_from=192.168.1.10&range_to=192.168.1.245&wins1=&wins2=&dns1=&dns2=&gateway=&domain=&domainsearchlist=&defaultleasetime=&maxleasetime=&minsecs=&interface_mtu=&failover_peerip=&failover_split=&ddnsdomain=&ddnsdomainprimary=&ddnsdomainkeyname=&ddnsdomainkey=&ddnsdomainalgorithm=hmac-md5&mac_allow=&mac_deny=&ntp1=&ntp2=&tftp=&bootfilename=&ldap=&nextserver=192.168.1.1&filename=&filename32=&filename64=bootx64.efi&filename32arm=&filename64arm=&filenameipxe=&rootpath=&omapiport=&omapialgorithm=&omapikey=&numberoptions_number%5B%5D=&numberoptions_type%5B%5D=text&numberoptions_value%5B%5D=&if=lan&submit=Save
|
||||
body_format: raw
|
||||
validate_certs: no
|
||||
register: response
|
||||
|
||||
# - name: Send POST request to update DHCP settings
|
||||
# uri:
|
||||
# url: "https://192.168.1.1/services_dhcp.php?if=lan"
|
||||
# method: POST
|
||||
# headers:
|
||||
# Accept: 'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7'
|
||||
# Content-Type: 'application/x-www-form-urlencoded'
|
||||
# Cookie: "PHPSESSID={{ phpsessid }}"
|
||||
# Origin: "https://192.168.1.1"
|
||||
# Referer: "https://192.168.1.1/services_dhcp.php?if=lan"
|
||||
# X-CSRFToken: "{{ csrf_token_value }}"
|
||||
# body_format: form-urlencoded
|
||||
# body: "{{ request_body }}"
|
||||
# validate_certs: no
|
||||
# return_content: yes
|
||||
# register: response
|
||||
|
||||
- name: Display the response from the DHCP update request
|
||||
debug:
|
||||
#msg: "{{ response.content }}"
|
||||
msg: "{{ response }}"
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
# request_body: |
|
||||
# {{ csrf_token_name }}={{ csrf_token_value }}&range_from=192.168.1.10&range_to=192.168.1.245&wins1=&wins2=&dns1=&dns2=&gateway=&domain=&domainsearchlist=&defaultleasetime=&maxleasetime=&minsecs=&interface_mtu=&failover_peerip=&failover_split=&ddnsdomain=&ddnsdomainprimary=&ddnsdomainkeyname=&ddnsdomainkey=&ddnsdomainalgorithm=hmac-md5&mac_allow=&mac_deny=&ntp1=&ntp2=&tftp=&bootfilename=&ldap=&nextserver=192.168.1.1&filename=&filename32=&filename64=bootx64.efi&filename32arm=&filename64arm=&filenameipxe=&rootpath=&omapiport=&omapialgorithm=&omapikey=&numberoptions_number%5B%5D=&numberoptions_type%5B%5D=text&numberoptions_value%5B%5D=&if=lan&submit=Save
|
||||
|
||||
Reference in New Issue
Block a user