Meet Remmanaut, the autoit remote administration tool

[faldo]

"The why"
I've been working over 15 years in the IT industry and have realised that the best way of streamlining operations and support is by combining the concept of selling services (instead of hours) along with a tool built for managing those services.
For the past 10 years i've been working with some of the leading providers of MSP-tools. The prize set on these comercial tools is quite high and there are usually few licence models to choose from. A smaller it-company will find the cost hard to motivate and in turn have dificulties converting its busines model in order to make more money, classic catch 22

"The how"
During the years, i've gathered the pros and cons of these tools, dissected their core and realised there is no magic or rocket science going on. There is however a whole lot of scripting used and that's why i feel AutoIT would be a great foundation for a new project.
So, i've decided to compile my years of experiance and create a tool for remote management and monitoring of machines over WAN. Instead of monetizing it and try to compete with the big companies i felt it more efficiant to make it open source and hope for community interest and development.

"The what"
The following features are under development, some arn't started, some are finished. Check the changelog for more info.

Base components
- Agent running as service
- Central server with MySQL (hub engine)
- Management client (AutoitGUI/WebGUI)

Main features
- Remote execution of shell commands as system or specific user
- File transfer from/to agent
- Live monitoring of system resources

Consequential features (based on main features)
- Hardware/software inventory
- Software deployment/updating
- Patch management
- Antivirus management
- OS deployment
- Disaster recovery
- Hardware/software/network monitoring
- Wake on LAN
- Reporting
- Remote registry, event viewer, task manager
- Scripting (obviously)

Additional features (stand-alone modules)
- Remote control
- Servicedesk (based on ITIL)
- AD-integration

Security
- Secure communication with SSL and rotating key for every session.
- SHA256 encryption.

Remmanaut network overview

 

 

My knowledge of AutoIT is average but i'm novice when it comes to programing structure for collaboration, so if you're willing to help me out in making the project easy to share, i'd be very thankfull. Unfortunatly i'm no php-guru so i'll be concentrating on the AutoitGUI until the agent and hub engine reaches an adequate version.

If you feel that this tool could benefit you in any way or just want to join the project for the fun of development, don't hesitate to post constructive feedback or hit me a PM.

Code optimisation to do:

Spoiler

- Better queue system (prioritized requests/multitasking)
- File transfer of multiple files from/to multiple agents at the same time
- [Community ideas goes here]

 

Download:

 

 

Edited April 27, 2016 by faldo
Added new version for download

[TheSpannish]

I wold like to contribute, what should I do?

[faldo]

Great man!
At this point i'm going to need someone who tests the first builds and gives me feedback so that i can improve usability for the public. The POC isn't usefull for testing so let me put together a new verison that hopefully makes a bit more sense and then i'll be very thankfull for your help.

Cheers!

Edited April 11, 2016 by faldo

[Fade91]

It looks good so far but my only complaint is the process of setting it up is a bit much.

[faldo]

heh, i'm glad you think it "looks good so far"... i don't
Like i said this the zip i uploaded was just a proof of concept in order not to have a post talking about something that noone could see. I'm currently working on a setup-script so bare with me.

[dmob]

Waiting patiently.....

[argumentum]

On 4/5/2016 at 10:02 AM, faldo said:

don't hesitate to reply with your thoughts

instead of Global $ServerIP = @IPAddress1 , do Global $ServerIP = "0.0.0.0" , that way it binds to all IPs

Also, use Opt("MustDeclareVars", 1)  while coding, you'll be glad you did.

The main loop is better in a function, ...call it main() . -or whatever-

The TCPRecv loop would be better as:

;Wait for agent to open a session
    $sTmp = ""
    Do
        $sTmp = TCPRecv($Client, '1024', $TCP_DATA_BINARY)  ; For backwards compatibility reasons this function will try to return strings by default.
                                                            ; If null (0x00) characters are received then the return value will be a binary type.
                                                            ; It'd be safer if everything was regarded as binary type

        $Recv = Binary($Recv) & Binary($sTmp)               ; there may be more incomming chunks, this is safer.
        Sleep('100')
    Until $sTmp = '' And $Recv <> ''

too much to point out, but this I did show, I feel, is basic.

Thanks for sharing 

Edited April 13, 2016 by argumentum

[faldo]

6 hours ago, argumentum said:

but this I did show, I feel, is basic.

 

Since I don't have a programmers background I've usually written the slightly more complex portions of a code by trial and error, not making the result very efficiant at times. I'm greatfull for these kind of hints, thanx a lot argumentum!

[faldo]

Sorry i havn't uploaded a new version yet, i decided to redesign the core engine of the system to better handle diferent type of requests. The redesign is done and i'm half way though making the installations script. I only have a few hour a week to work on the project right now but if nothing unexpected hapends i'll release v0.2 by the end of this weekend.
Cheers!

[faldo]

Alright, the new version is uploaded. Have a look and see what you guys think:

 

[guinness]

Where is the PHP?

[faldo]

I presume you mean the porttester?

<?php
$host = $_SERVER['REMOTE_ADDR'];
$port = $_GET["port"];


$connection = @fsockopen($host, $port,$errno, $errstr, 1);
    
    if (is_resource($connection))
    {
        echo  $host . "|OK";
        fclose($connection);
    }
    else
    {
        echo  $host . "|FAILED";
    }
?>

I'll include it as file in the next version...

Edited April 23, 2016 by faldo

[guinness]

Uhhh, the use of @ is a really terrible idea.

[faldo]

2 minutes ago, guinness said:

Uhhh, the use of @ is a really terrible idea.

Mind explaining why? ...and perhaps contribute to a better idea?

Edited April 23, 2016 by faldo

[guinness]

Well you're a PHP developer, so tell me why you think it isn't a bad thing and then I can re-direct you from there.

[faldo]

Just now, guinness said:

Well you're a PHP developer, so tell me why you think it isn't a bad thing and then I can re-direct you from there.

heh, you're a funny guy... "php developer"... yeah right

[guinness]

Just now, faldo said:

heh, you're a funny guy... "php developer"... yeah right

Okay. Good luck then.

[faldo]

1 hour ago, guinness said:

Okay. Good luck then.

I have no idea what i did to deserve that trolling but if anyone understands which @ is a " really terrible idea" and why, don't hesitate to save the day 

 

Edited April 23, 2016 by faldo

[guinness]

Insinuating that I was trolling, isn't really doing you any favours. I just didn't see any real need to explain, because I know from past experience those who aren't developers simply glide over information that isn't important to them or just difficult to understand.

I would suggest however you seek professional advice from those who do know PHP and how you should structure safe/secure web applications, because you can't afford to be a "copy and paste" developer when you're exposed to the web.

As for why @ is eveil, I have provided a link below for those who are PHP developers or at least have an interest in actually learning about the awesome (yet misunderstood) language. 

http://php.net/manual/en/language.operators.errorcontrol.php

[faldo]

I'm not looking for favors, i'm looking for ppl who want to contribute to their own situation and others by cooperating in a project, i'm a bit sad you can't see that, being a developer and all.
Like i said in earlier posts, i don't have a programmers background and that's why i felt you comin in here telling me my work is flawed, without explaining why, was trolling. Then you tell me you don't need to explain yourself since i'm a php-developer, now that was funny and we both know it.

When it comes to the php-code that i altered from a snippet, i still can't see why disableing errors in an expression that has nothing to do with the project itself, is a "really terrible idea"... but if you can't explain why, i'm sure someone a bit more humble will decide its fate.

Edited April 23, 2016 by faldo