casvisor / casvisor

An open-source security log auditing & RDP, VNC, SSH bastion platform, online demo: https://door.casvisor.com

📦⚡️ Casvisor

An open-source logging and auditing system developed by Go and React.

Online demo

• Read-only site: https://door.casvisor.com (any modification operation will fail)
• Writable site: https://demo.casvisor.com (original data will be restored for every 5 minutes)

Documentation

https://casvisor.org

Architecture

Casvisor contains 2 parts:

Name	Description	Language	Source code
Frontend	Web frontend UI for Casvisor	Javascript + React	https://github.com/casvisor/casvisor/tree/master/web
Backend	RESTful API backend for Casvisor	Golang + Beego + MySQL	https://github.com/casvisor/casvisor

Installation

Casvisor uses Casdoor to manage members. So you need to create an organization and an application for Casvisor in a Casdoor instance.

Necessary configuration

Get the code

go get github.com/casdoor/casdoor
go get github.com/casvisor/casvisor

or

git clone https://github.com/casdoor/casdoor
git clone https://github.com/casvisor/casvisor

Setup database

Casvisor will store its users, nodes and topics informations in a MySQL database named: casvisor, will create it if not existed. The DB connection string can be specified at: https://github.com/casvisor/casvisor/blob/master/conf/app.conf

dataSourceName = root:123@tcp(localhost:3306)/

Casvisor uses XORM to connect to DB, so all DBs supported by XORM can also be used.

Configure Casdoor

After creating an organization and an application for Casvisor in a Casdoor, you need to update clientID, clientSecret, casdoorOrganization and casdoorApplication in app.conf.

Run Casvisor

• Configure and run Casvisor by yourself. If you want to learn more about casvisor.
• Open browser: http://localhost:16001/

Optional configuration

Setup your Casvisor to enable some third-party login platform

Casvisor uses Casdoor to manage members. If you want to log in with oauth, you should see casdoor oauth configuration.

OSS, Mail, and SMS services

Casvisor uses Casdoor to upload files to cloud storage, send Emails and send SMSs. See Casdoor for more details.

RDP service

Run guacd for rdp connection.

docker run --name some-guacd -d -p 4822:4822 guacamole/guacd

Contribute

For Casvisor, if you have any questions, you can give Issues, or you can also directly start Pull Requests(but we recommend giving issues first to communicate with the community).

License

Apache-2.0

casvisor's Issues

feature: use HashiCorp Vault to store asset password

If we use a password vault to store the username and password of the servers, the security of the service will increase

Add remote desktop tabs page

Now the assets page (https://door.casvisor.com/assets) allows to open a new browser tab to establish connection to the machine.

The web UI can be further improved by adding a tabs page like below picture, left panel is the list of machines. For right side, tabs of active connected machines will show on the top, the active remote desktop shows on the bottom.

It's also very similar to the experiences of VMware Workstation.

Size of window session not correct and small

when open rdp/vnc session, size of window not correct (width page) and when full screen and back from full screen is correct

feature: support dragging file into RDP and dragging file out from RDP

Session Size (RDP, SSH) in Android

Bug: The size of RDP, SSH Sessions is not displayed correctly on mobile (Android) and does not cover the entire screen

Monitor Asset status and show in asset record

Monitor Asset status and show in asset record before of connect. Check asset up/down

feature: add file manager to Casvisor

Support File Access on assets for Access Control and Auditing.
with features ex: control add/edit/delete/rename/ ... files in assets

Ex: SMB Protocol

Change casdoor config in front end after the deploy

Frontend code written for a React project with default casdoor settings when compiled. If we want to change the addresses related to casdoor after being placed on the operational server, how should we do it?

Allow to connect to machines with private IP only

Some machines are only inside Intranet and don't have public IP. We want to connect to them from Internet. After supporting this, Casvisor will reach the same functionality as professional remote desktop software like TeamViewer, RustDesk, etc.

About how to implement it, I think an agent can be installed into the machine to get this issue done. It may work in a similar way like frp: https://github.com/fatedier/frp

Disconnect session and upload/download in RDP Session

for work better with RDP Session need two feature for session management:
1- Disconnect Session
2- Upload / Download

Collect machine metrics like CPU, memory, disk usage and show this info in assets page of Casvisor

I think an agent needs to be installed into the machine to get this issue done.

Setting up Swagger

Setting up Swagger for easier management of API commands between frontend and backend

Ability to connect multiple users to a session at the same time

Join session

Support other remote control protocols like SSH, Telnet

The ability to see a user's session in view-only mode by another user

How to upload/download and copy clipboard in rdp session

How to upload/download and copy clipboard in rdp session?

Web Not Building Locally

Steps to Reproduce

1. git clone [email protected]:casbin/casvisor.git
2. cd web
3. yarn start

yarn run v1.22.19
$ set PORT=18001 && craco start
/bin/sh: craco: command not found
error Command failed with exit code 127.
info Visit https://yarnpkg.com/en/docs/cli/run for documentation about this command.

4. npm install

npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR!
npm ERR! While resolving: [email protected]
npm ERR! Found: [email protected]
npm ERR! node_modules/react-scripts
npm ERR!   react-scripts@"5.0.1" from the root project
npm ERR!
npm ERR! Could not resolve dependency:
npm ERR! peer react-scripts@"^4.0.0" from @craco/[email protected]
npm ERR! node_modules/@craco/craco
npm ERR!   @craco/craco@"6.4.5" from the root project
npm ERR!
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR!
npm ERR! See /Users/satinder/.npm/eresolve-report.txt for a full report.

Environment

• macOS m2
• Node.js v16.18.0

Extra Notes
Both of the following sites in the README, after clicking login, show a blank webpage. I'm trying for the USA

Read-only site: https://door.casvisor.com/ (any modification operation will fail)
Writable site: https://demo.casvisor.com/ (original data will be restored for every 5 minutes)

Question: Open session in Tabs format in main window

Sessions can be opened on the main page in the form of a Tabs (Multiple Tabs Page)so that we can manage systems more easily on one window without switch between window

feature: connecting to machines should be recorded into logs

Each "Connect" should be logged in: https://door.casvisor.com/records

feature: support one-click OS upgrade

Add a "Upgrade" button here: https://demo.casvisor.com/assets

It is not compatible with Amazon Linux 2023.

It does not work with Amazon Linux 2023.
I tried manually adding libraries but was unsuccessful.
I'm not sure whether anyone else is experiencing the same problem.

https://aws.amazon.com/linux/amazon-linux-2023/

bug: show error message when "Connect" button failed

When "Connect" button failed, only the browser console crashes, no error is shown to the user. Need to fix.

https://door.casvisor.com/assets

Bug: Connected user not logout when token expired

User after the connect not disconnect when token expired automatically

Database migration

Database migration for data

Session recording

In this project, is there a plan to record the meetings and paly them online/offline for the managers of that organization (defined organization)?

Support Web protocol for auditing and control

Some of the systems that network administrators use to discuss monitoring and management are web-based systems. It can be interesting to tweak and support access to web protocols (HTTP(S)) along side existing features

logout user not disconnect session

If the user is disconnected by himself or for other reasons, his established sessions will not be interrupted/Disconnect and will continue to work

feature: support executing commands at the same time on multiple machines via SSH

Bug in last release: Incorrect screen size

When full screen page, size of screen not corrected
please view below film

Rec.0036.mp4

feature: support accessing database like MySQL in Casvisor web UI

As a bastion platform, Casvisor not only can access machines, but can also access SQL databases.

It can simply regarded as web-based DB client like Navicat or Datagrip

Update

We can integrate CloudBeaver: https://github.com/dbeaver/cloudbeaver

Their demo looks good: https://demo.cloudbeaver.io/

feature: update CI to release image to DockerHub

Need to release to: https://hub.docker.com/r/casbin/casvisor in semantic-release like how Casdoor did it

Add "(Optional) Try with Docker" section to docs

Add a new section after: https://casvisor.org/docs/installation

Like Casdoor: https://casdoor.org/docs/basic/try-with-docker/

feature: add "upload and downlod RDP file" feature

Added some shortcut to session for:
1-Disconnect session /Logout
2-Upload for RDP
3-Download for RDP
4-Ctrl + C
5-Ctrl + V
6-Alt +Tab

feature: scale to window for RDP

There should be a way to scale the RDP view to the browser window to remove the scrollbars.

[bug] Sessions not terminated

in below state session not terminated and work:
1- when logout
2- when copy url and run in new tab (casvisor is logout in this state)
3- when close the session in tab (with delay termination in asset)

Not save username/password

Is it possible to get the username and password at the moment of login and not save it in the asset-record?

feature: add demo mode

Need a demo mode like Casdoor, or the demo site can be easily changed by anyone: https://door.casvisor.com/assets