From d66f9c112fc170be91624c9af41de71b781c98f5 Mon Sep 17 00:00:00 2001
From: Scott Sutherland <nullbind@users.noreply.github.com>
Date: Mon, 7 Oct 2024 07:57:11 -0500
Subject: [PATCH] Create parser-fetchmailrc.ps1

---
 Scripts/ConfigParsers/parser-fetchmailrc.ps1 | 149 +++++++++++++++++++
 1 file changed, 149 insertions(+)
 create mode 100644 Scripts/ConfigParsers/parser-fetchmailrc.ps1

diff --git a/Scripts/ConfigParsers/parser-fetchmailrc.ps1 b/Scripts/ConfigParsers/parser-fetchmailrc.ps1
new file mode 100644
index 0000000..ba79b7f
--- /dev/null
+++ b/Scripts/ConfigParsers/parser-fetchmailrc.ps1
@@ -0,0 +1,149 @@
+# Author: Scott Sutherland, NetSPI (@_nullbind / nullbind)
+# Intended input: .fetchmailrc files
+
+function Get-PwFetchmailrc {
+    param (
+        [string]$FilePath,
+        [string]$ComputerName = "NA",
+        [string]$ShareName = "NA",
+        [string]$UncFilePath = "NA",
+        [string]$FileName = "NA",
+        [string]$TargetURL = "NA"
+    )
+
+    if (-not (Test-Path -Path $FilePath)) {
+        Write-Host "File not found: $FilePath"
+        return
+    }
+
+    # Read and clean the lines into a modifiable list
+    $lines = [System.Collections.Generic.List[string]](Get-Content -Path $FilePath | ForEach-Object {
+        $_.Trim()
+    } | Where-Object { $_ -notmatch '^#' }) # Remove comments
+
+    # Consolidate multi-line configurations
+    for ($i = $lines.Count - 1; $i -gt 0; $i--) {
+        if ($lines[$i] -notmatch '^(defaults|poll|skip)\s+') {
+            $lines[$i - 1] += " " + $lines[$i]
+            $lines.RemoveAt($i)
+        }
+    }
+
+    # Initialize variables
+    $defaults = @{}
+    $credentials = @()
+
+    # Function to parse individual configuration lines
+    function Parse-FetchmailRCLine {
+        param ($line)
+        $cred = @{
+            "Username"   = @()
+            "Password"   = @()
+            "TargetServer" = ""
+            "Section"    = ""
+            "TargetPort" = ""
+        }
+
+        # Extract users, passwords, server, protocol, and port
+        $cred["Username"]   = [regex]::Matches($line, '\s+user(?:name)?\s+(\S+)') | ForEach-Object { $_.Groups[1].Value }
+        $cred["Password"]   = [regex]::Matches($line, '\s+pass(?:word)?\s+(\S+)') | ForEach-Object { $_.Groups[1].Value }
+        $cred["TargetServer"] = if ($line -match '^(?:poll|skip)\s+(\S+)') { $matches[1] } else { $cred["TargetServer"] }
+        $cred["Section"]    = if ($line -match '\s+proto(?:col)?\s+(\S+)') { $matches[1] } else { $cred["Section"] }
+        $cred["TargetPort"] = if ($line -match '\s+(?:port|service)\s+(\S+)') { $matches[1] } else { $cred["TargetPort"] }
+
+        # Return credentials if found
+        return $cred
+    }
+
+    # Parse each line for credentials
+    foreach ($line in $lines) {
+        # If 'defaults' line, save defaults
+        if ($line -match '^defaults') {
+            $defaults = Parse-FetchmailRCLine -line $line
+            continue
+        }
+
+        # Parse line, merge with defaults if any
+        $parsedCred = Parse-FetchmailRCLine -line $line
+        foreach ($key in $defaults.Keys) {
+            if (-not $parsedCred[$key] -or ($parsedCred[$key] -is [array] -and $parsedCred[$key].Count -eq 0)) {
+                $parsedCred[$key] = $defaults[$key]
+            }
+        }
+
+        # Add parsed credentials if valid
+        if ($parsedCred["TargetServer"] -and $parsedCred["Section"] -and $parsedCred["Username"].Count -eq $parsedCred["Password"].Count) {
+            for ($i = 0; $i -lt $parsedCred["Username"].Count; $i++) {
+                $credentials += [pscustomobject]@{
+                    ComputerName = $ComputerName
+                    ShareName    = $ShareName
+                    UncFilePath  = $UncFilePath
+                    FileName     = $FileName
+                    Section      = $parsedCred["Section"]
+                    ObjectName   = "NA"
+                    TargetURL    = $TargetURL
+                    TargetServer = $parsedCred["TargetServer"]
+                    TargetPort   = $parsedCred["TargetPort"]
+                    Database     = "NA"
+                    Domain       = "NA"
+                    Username     = $parsedCred["Username"][$i]
+                    Password     = $parsedCred["Password"][$i]
+                    PasswordEnc  = "NA"
+                    KeyFilePath  = "NA"
+                }
+            }
+        }
+    }
+
+    # Output credentials
+    if ($credentials.Count -eq 0) {
+        Write-Host "No credentials found in $FilePath"
+    } else {
+        $credentials | Format-Table -AutoSize
+    }
+
+    return $credentials
+}
+
+# Sample Command
+# Get-PwFetchmailrc -FilePath "C:\temp\.fetchmailrc" -ComputerName "MyComputer" -ShareName "MyShare" -UncFilePath "\\path\to\.fetchmailrc" -FileName ".fetchmailrc" 
+
+<# Sample .fetchmailrc file
+
+# Global options
+set daemon 300
+
+# Default options for all servers
+defaults
+protocol IMAP
+port 993
+keep
+
+# Fetch mail from the first server
+poll mail.example.com
+    proto IMAP
+    user "user1@example.com" pass "password1"
+    ssl
+
+# Fetch mail from another server with custom settings
+poll mail.anotherexample.com
+    proto POP3
+    user "user2@anotherexample.com" pass "password2"
+    port 995
+    ssl
+
+# Another example with a forwarding SMTP setup
+poll mail.forwardexample.com via smtp.example.com
+    proto IMAP
+    user "forwarduser@forwardexample.com" pass "forwardpassword"
+    smtphost smtp.example.com
+    esmtpname "smtpuser@example.com" esmtppassword "smtppassword"
+
+# Additional account with a different protocol and no SSL
+poll plainexample.com
+    proto POP3
+    user "plainuser@plainexample.com" pass "plainpassword"
+    port 110
+
+
+#>