1. #!/bin/bash
2.  
3. # SSH over Websocket - by Decarte
4. # wget -O websocket-install.sh "https://pastebin.pl/view/raw/421d113e" && chmod +x websocket-install.sh && ./websocket-install.sh
5.  
6. apt update -y
7. apt install nginx python3 -y
8.  
9. rm /etc/nginx/sites-available/default
10. rm /etc/nginx/sites-enabled/default
11.  
12. mkdir -p /etc/nginx/ssl
13.  
14. cat > /etc/nginx/ssl/public.pem <<-END
15. -----BEGIN CERTIFICATE-----
16. MIIEpDCCA4ygAwIBAgIURtZzOOREPW5m1LQC1VLJ7K0r47MwDQYJKoZIhvcNAQEL
17. BQAwgYsxCzAJBgNVBAYTAlVTMRkwFwYDVQQKExBDbG91ZEZsYXJlLCBJbmMuMTQw
18. MgYDVQQLEytDbG91ZEZsYXJlIE9yaWdpbiBTU0wgQ2VydGlmaWNhdGUgQXV0aG9y
19. aXR5MRYwFAYDVQQHEw1TYW4gRnJhbmNpc2NvMRMwEQYDVQQIEwpDYWxpZm9ybmlh
20. MB4XDTI0MDMwODExMDYwMFoXDTM5MDMwNTExMDYwMFowYjEZMBcGA1UEChMQQ2xv
21. dWRGbGFyZSwgSW5jLjEdMBsGA1UECxMUQ2xvdWRGbGFyZSBPcmlnaW4gQ0ExJjAk
22. BgNVBAMTHUNsb3VkRmxhcmUgT3JpZ2luIENlcnRpZmljYXRlMIIBIjANBgkqhkiG
23. 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z20BFQunF2eyNqRwoycmZ9iq0lnN7cwjR0v
24. 2crxKzJUzpsfQLY0hrfso5OK7vS4HHbJXYuKl8EhGkoC2Qa5QfvI8ZXLQome9/Yi
25. rF0egeHvRUjyelpMM2QwgGZtOtyLGI9dpUs6MjsImyHAzq705rUh9rI6aXjGuT/H
26. BlFebAkOtLf9xUDzyPDvdJKS/hnDMUfPdpVcOcWu/FI1Ah4O5MJRfYCmEKNHbHQT
27. QiGUBIpTdRf7uSchxbtshf4te+AZC5rCiiPLPC6md+i1OtEAYoXCkpCjBN+UYk86
28. kUZBCI2WsGd9fHMJqAjfoWJB8TnfOjb51++k2aSq53CzS1xzwQIDAQABo4IBJjCC
29. ASIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcD
30. ATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQCKo/R7WkmRkYo8ZvkZ3A/LDfAHDAf
31. BgNVHSMEGDAWgBQk6FNXXXw0QIep65TbuuEWePwppDBABggrBgEFBQcBAQQ0MDIw
32. MAYIKwYBBQUHMAGGJGh0dHA6Ly9vY3NwLmNsb3VkZmxhcmUuY29tL29yaWdpbl9j
33. YTAnBgNVHREEIDAegg4qLm11a2F2cG4uc2l0ZYIMbXVrYXZwbi5zaXRlMDgGA1Ud
34. HwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwuY2xvdWRmbGFyZS5jb20vb3JpZ2luX2Nh
35. LmNybDANBgkqhkiG9w0BAQsFAAOCAQEAmpwgdA20nqqN07i2/eJo24lb05s+XfAQ
36. hAzdso686cbognSt3f2QcXyyeLTNU7mFe2wNYoSolSO3tY50kivCaf5nozg+LkCL
37. VdUMFoobYpwgvTukZquDncXsyRaJurhJyAlbsGvYs7sRSeIqqtqqYJjRY3kjZIXr
38. zgfj73VSwdrvj7d6L+exWZP/e2beV/S2SiqdJyZkimHwSEuSqElI4yDiCiY7LGIW
39. 9haHRw+JTMLcK7YfZqUB3HQkCa+dw7qKSBWHiE6eIX1nwIfFs1WKemmbsl7YUicF
40. h9FQTxWP+VbybsW0o2zP1lCcH/kxf7p6n2yAAS8FbHai38IpIj+/iw==
41. -----END CERTIFICATE-----
42.  
43. END
44.  
45. cat > /etc/nginx/ssl/private.pem <<-END
46. -----BEGIN PRIVATE KEY-----
47. MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDdnbQEVC6cXZ7I
48. 2pHCjJyZn2KrSWc3tzCNHS/ZyvErMlTOmx9AtjSGt+yjk4ru9Lgcdsldi4qXwSEa
49. SgLZBrlB+8jxlctCiZ739iKsXR6B4e9FSPJ6WkwzZDCAZm063IsYj12lSzoyOwib
50. IcDOrvTmtSH2sjppeMa5P8cGUV5sCQ60t/3FQPPI8O90kpL+GcMxR892lVw5xa78
51. UjUCHg7kwlF9gKYQo0dsdBNCIZQEilN1F/u5JyHFu2yF/i174BkLmsKKI8s8LqZ3
52. 6LU60QBihcKSkKME35RiTzqRRkEIjZawZ318cwmoCN+hYkHxOd86NvnX76TZpKrn
53. cLNLXHPBAgMBAAECggEAC8PKGVM7PLmTGvxQcdyrWRPvJeLyD/EBirI+lrApfKax
54. vhyZzIKHuBGmRjpITT5wUjGDp9vHLh52con0i/8pgU1bqeiO92+tIOKADXitjI1Z
55. GYthdPmbczx5vy1A1fe8ih+dQ+/CDYXZA3xHmylKTr+Vp54nT+9VlGLEfus9qRw6
56. L+AGql1dvvvQSUTqwpaofPbJViXnO0mzgjisL12PG+n7mNW5TyDuncvWQAz9S6Oy
57. aB0taW7l09VFxpqafoFHmfX0sx9ANw7zurWX0RWTSQHAbMeyYQklAzQg/CgC4zy7
58. lUgK7zaGlNMLM5Xpmcary/52SnS1943wpXqs5WdweQKBgQDzz+FYjWhfYovz4NXt
59. kO51HqnHO9TmTD8d/6vKxwz7XYlAp3TndmY5VN37eQICWP+kckxKbu3fzww5t6MD
60. Mj5+V4twBLHsD5HREF9LB5ET4UPBHdJWchYXwHFd222zsgOJObifgf2rqm8aDhiW
61. 7QlPErWvrBynJSg14oHGDB7KqQKBgQDoscaE0D2ZZ8dn8EA+tLllE5AYCTayapUt
62. l8ilhDK7i3vgjWWo9kDKKM7P0mCBy2c2vw65POHxZvjPF/Jb9N0F3dv4CaD53vGr
63. qZubIyu8OrC0iIAS9c7TwUjrOx7+gcAe63nAuFIU2ivK9KfUaR1X/XiH6+Zir4Rc
64. jy3LCO5nWQKBgEfUeuOH5bQUaH8VQnGXPWmr+wEDk5m15PKFnKtFMYHs8L7nlv2K
65. WFuTsUKhSAJBDi/4rJlRTSue6E8o1xHd/6NhT2dVOsX9YExjsm98bzWYLEn86zck
66. rXWZ8MxiFVPXoksPgmEb/wxQTiMy+/ObKh7tuDFlV5u2yr31WZ5re7bhAoGBAIZj
67. tf2arxjcIQRccx5EDhbcN4pKN/bPK50LXmyJbyt1oXPM9fuhTUX0T40jOW185f1u
68. VriQ+wUKrYQdlnGZd9Udjx8voHLvWbAE4sO0ilvJoaiCdUV+BZeyt8RzfrEKisTQ
69. xp6RVYaJgmVS62L32mSpFWWazpIMQGucnZv3aojxAoGAL6bIukfvloHdVz9cutz3
70. 5pevWXXMs0fBkrTgj14SR8EaOzdPSXNzLvkLOWw+50IfWxshyVn5U+ihwgEx+s8u
71. 1VmK/ScDFx0dsVpAio/S9UADkhXJqNRt1UfX0V1c+Fxv2B/yZJGVJ9LbCEF1h24U
72. XJahJAifn+QNT2LSVT1RS70=
73. -----END PRIVATE KEY-----
74. END
75.  
76. cat /etc/nginx/sites-available/websocket <<-END
77. server {
78.     listen 80;
79.     listen 8080;
80.     listen 443 ssl;
81.     server_name br01.mukavpn.site;
82.  
83.     ssl_certificate /etc/nginx/ssl/public.pem;
84.     ssl_certificate_key /etc/nginx/ssl/private.pem;
85.  
86.     location / {
87.         proxy_pass http://localhost:3000;
88.         # proxy_http_version 1.1;
89.         # proxy_set_header Upgrade \$http_upgrade;
90.         # proxy_set_header Connection "Upgrade";
91.     }
92. }
93. END
94.  
95. ln -s /etc/nginx/sites-available/websocket /etc/nginx/sites-enabled/
96. nginx -t
97. systemctl reload nginx
98.  
99. echo "\n[!] Certificado NGINX configurado, instalando o Websocket-TLS\n"
100.  
101. wget -O websocket-tls.py "https://pastebin.com/raw/rhYT7Ayu"
102.  
103. cat > /etc/systemd/system/websocket.service <<-END
104. [Unit]
105.  Descripti TLS
106. After=network.target
107.  
108. [Service]
109. ExecStart=/usr/bin/python3 /root/websocket-tls.py
110. WorkingDirectory=/root/
111. StandardOutput=inherit
112. StandardError=inherit
113. Restart=always
114.  
115. [Install]
116. WantedBy=multi-user.target
117. END
118.  
119. systemctl daemon-reload
120. systemctl start websocket
121. systemctl enable websocket
122.  
123. echo "\n[!] Websocket-TLS configurado, instalando o BadVPN\n"
124.  
125. wget -O /usr/bin/badvpn-udpgw "https://raw.githubusercontent.com/daybreakersx/premscript/master/badvpn-udpgw64"
126. touch /etc/rc.local
127. echo -e "\nscreen -AmdS badvpn-udpgw --listen-addr 127.0.0.1:7300" >> /etc/rc.local
128. echo -e "screen -AmdS badvpn-udpgw --listen-addr 127.0.0.1:7200 --max-clients 5000" >> /etc/rc.local
129. echo -e "screen -AmdS badvpn-udpgw --listen-addr 127.0.0.1:7100 --max-clients 5000" >> /etc/rc.local
130. chmod +x /usr/bin/badvpn-udpgw
131.  
132. echo "\n[!] BadVPN configurado, criando o user default\n"
133.  
134. sudo useradd -m -s /bin/false mukaus3r1 && echo "mukapa55" | sudo passwd --stdin mukaus3r1
135.  
136. echo "\n[!] Perfeito :)\n"
137.  
138. sleep 5
139. reboot