⚡ Connection Runtime Service (CRS)

Connection Runtime Service (CRS) is an in-house network & transport engine based on Go (Golang) designed to replace dependency on external/third-party networking libraries (like requests, http_requests, socket, etc.)

By abstracting network communications into a CRS, The system gains full control over transport behavior, memory footprint, security boundaries, and performance optimization through Go's built-in concurrency model.

⚙️ Architectural Motivation

Dependency Decoupling & Supply Chain Security: Reduces the risk of vulnerabilities and breaking changes from third-party libraries by isolating all I/O operations into one centralized engine.
Performance & Low Latency: Leverages Go's execution speed and I/O model to minimize overhead when handling high-density communications.
Connection Stability: Provides custom connection pooling management, retry mechanisms, and predictable timeout handling.
Concurrency Management: Leverage native Go Routines to handle concurrent I/O tasks efficiently with controlled resource consumption.

📝 Technical Specifications

Tech Stack & Runtime

Language: Go (Golang)
Primary Paradigm: Asynchronous / Non-blocking I/O (via Goroutines & Channels)
Interface Boundary: Accessible via Wrapper & IPC Layer

Supported Protocols & Status
Currently CRS implements a subset of network protocols focused on the system's core requirements. Although the protocol coverage is still being developed, the existing implementation has been optimized (tuned) and passed validation testing on various production modules.

Some of the available;

http_requests: REST API & Web Resource Delivery
requests: DNS Query Resolution or DNS Resolution
socket: Low-level Stream Communication

Note on Concurrency: Although Goroutines are widely used across engines, Some specific protocol handlers still use precise synchronous/sequential execution to avoid race conditions or out-of-order execution in stateful protocols.

🛠️ Ways of working CRS

Modules: Just need to call the required API and send the data to CRS. The module does not need to know or implement any connection or communication mechanisms with the CRS.

Wrapper: Tasked with compiling data received from module before forwarding it to IPC. The wrapper also handles the response data received from IPC, then transforms it into a form that is easier for the module to use.

IPC: Responsible for managing communications between Storm and CRS. Upon receiving the first request, IPC will start the CRS process as a daemon if it is not already running. Next data is sent to CRS via stdin, while the response is received by listening to stdout.

CRS: Runs in a separate process from Storm and continues to listen to stdin as long as the process is active. When the Storm process is terminated, stdin will be closed so that CRS will detect this condition and terminate itself automatically.

💡 Protocol Parameters

All protocols definitely have different parameters, here you can learn what parameters the current protocols have.

🔌 Socket Parameters

1. Open Connection

python

def execute(options, net):
    s = net.Socket(host, port, timeout)

Parameter

host: This can be IP/HTTP/Domain, for example http://ip:port.
port: This is a typical port.
timeout: To limit the open connection time.

Inheritance
Just inherit the child classes of Socket like recv, send, uptls.

2. Send data

python

s.send(data, timeout)

Parameter

data: Can be bytes / http request / payload etc.
timeout: To limit the open connection time.

Response

status: SUCCESS/WARNING/ERROR/TIMEOUT.
message: Messages adjust to status.
isreused: Returns a Boolean. True=Using the same connection. False=Create a new connection.
rtt_ms: Returns the Round Trip Time in milliseconds.
checked_type: Returns the connection status to see if the tls/tcp connection is working. | Debug.
status_tls: Returns a Boolean. If True=TLS is enabled. False=TLS is disabled.

3. Viewing the buffer

python

raw = s.recv(readsize, timeout)

Parameter

readsize: To determine how many bytes of buffer to take.
timeout: To limit the open connection time. | Default 300ms.

Response

status: SUCCESS/WARNING/ERROR/TIMEOUT.
message: Messages adjust to status.
raw_bytes: Returning Raw Bytes.
str_bytes: Returns Raw Bytes as UTF-8.
hex_bytes: Returns Hex Bytes.
read_butes: Returns the number of Bytes.
protocol: Restore TCP/TLS.
remote_ip: Returns the target IP:PORT.
local_ip: Returns local IP:PORT.
isreused: Returns a Boolean. True=Using the same connection. False=Create a new connection.
rtt_ms: Returns the Round Trip Time in milliseconds.
checked_type: Returns the connection status to see if the tls/tcp connection is working. | Debug.
status_tls: Returns a Boolean. If True=TLS is active. False=TLS is disabled.

4. TLS Upgrade

python

r = s.uptls(cert, key, ca, verify)

Parameter

cert: Path to the certificate file.
key: Path to the Key certificate file.
ca: Path to the CA certificate file.
verify: Boolean. True=Verifying client certificate. False=Skip verification. | Default True.

Inheritance
Automatically inherits TLS connections to send/recv and send/recv usage remains the same.

Response

status: SUCCESS/WARNING/ERROR/TIMEOUT.
message: Messages adjust to status.
raw_bytes: Returning Raw Bytes.
str_bytes: Returns Raw Bytes as UTF-8.
hex_bytes: Returns Hex Bytes.
read_butes: Returns the number of Bytes.
protocol: Restore TCP/TLS.
remote_ip: Returns the target IP:PORT.
local_ip: Returns local IP:PORT.
isreused: Returns a Boolean. True=Using the same connection. False=Create a new connection.
rtt_ms: Returns the Round Trip Time in milliseconds.
checked_type: Returns the connection status to see if the tls/tcp connection is working. | Debug.
status_tls: Returns a Boolean. True=TLS is enabled. False=TLS is disabled.
tls: Responses that inherit TLS information.

TLS Information

version: Returns TLS Version 1.0/1.1/1.2/1.3.
cipher: Returning Cipher Suite.
protocol: Returns TLS protocols like h1/h2/h3.
hostname: Returns Host like (example.com).
handshake: Returns a Boolean. True=Handshake succeeded. False=Handshake failed.
session_resume: Returns a Boolean. True=If the TLS session was resumed. False=If the handshake was complete.
subject: Returns the (CN) of the server certificate.
issuer: Returns the (CN) of the (CA) that issued the certificate. Examples: R13, ISRG Root X1, etc.
dns_name: Returns a list of hostnames in the Subject Alternative Name (SAN) extension.
expires: Returns the certificate Expiration Time in RFC3339 format.
cert_chain_count: Returns the number of certificate chains that were successfully verified.

☎️ DNS

Query DNS

python

def execute(options, net):
    r = net.dns(domain, type, protocol, timeout, ratelimit, con)

Description: Requests are stateless, and you get a response immediately after each run.

Parameter

domain: example.com | str.
type: DNS query type. Example: A, AAAA, TXT, etc. | Default A | str.
protocol: Can TCP/UDP | Default TCP.
timeout: To limit the open connection time. | Default 5s
ratelimit: Blocking requests if the token runs out. | Default 150/1s | int.
con: Number of Goroutines for Concurrency, allows to run parallel connections. | int.

Response

status: ERROR/SUCCESS/TIMEOUT/WARNING.
message: Messages adjust to status.
rcode: DNS Response Code (example: 0 = NOERROR, 3 = NXDOMAIN).
rcode_str: String representation of RCODE.
records: List of resolution results / answers from DNS server.
truncated: Indicator if the UDP payload is too large and is truncated (will trigger a retry via TCP).
authoritative: Indicator whether the response comes from the Authoritative Name Server directly.
valid_domain: DNS level validation: IPC operation was successful AND RCODE is NOERROR (0).

🖇️ Http Requests

Implementation

python

def execute(options, net):
    r = net.http_requests(method, url, header, body, redirect, rawhttp, infotls, verify, retry, ratelimit, timeout, con)

Description: HTTP Requests are stateless, you can send them and get a response straight away.

Parameter

method: GET/POST/DELETE/PUT/dll. | Default GET.
url: https://example.com | str.
header: Example: {"User-Agent": "Storm-Framework/3.0 (X11; Linux x86_64)"} | Dict.
body: Can be empty, can also be filled. | Default empty | str.
redirect: To do a page redirect. | Default True. | Boolean.
rawhttp: Can supply FULL raw HTTP string in the (body). Example: HTTP/1.1\r\nHost: target\r\nX-Injected: space Strange\r\n\r\n | Default False. | Boolean.
infotls: To display TLS information in the Response. | Default False | Boolean.
verify: True=Verifying client certificate. False=Skip verification. | Default True. | Boolean.
retry: Performs Retryable http / Retry connection if failed. | Default 2. | int.
ratelimit: Blocking requests if the token runs out. | Default 150/1s. | int.
timeout: To limit the open connection time. | Default 5s.
con: Number of Goroutines for Concurrency, allows to run parallel connections. | int.

Response

status: ERROR/SUCCESS/TIMEOUT/WARNING.
message: Messages adjust to status.
status_code: HTTP Status Code (Example: 200, 404, 500).
ok: HTTP validation shorthand: Transport success and Status Code 2xx / 3xx.
text: Returns the response body in UTF-8 string form.
content: Returns the response body in raw bytes.
header: The original header dictionary from the response.
get_header: Case-insensitive lookup for HTTP Headers. Example: res.get_header('content-type') will find 'Content-Type'.
protocol: HTTP Protocol (Example: HTTP/1.1, HTTP/2.0).
engine: The connection provider engine from CRS (Example: retryablehttp).
tls: Responses that inherit TLS information.
json: [Lazy Evaluation] Parses the string body into a JSON dict/list. Returns None if the body is not a valid JSON format.

Informasi TLS

version: Returns TLS Version 1.0/1.1/1.2/1.3.
cipher: Returning Cipher Suite.
protocol: Returns TLS protocols like h1/h2/h3.
hostname: Returns Host like (example.com).
handshake: Returns a Boolean. True=Handshake succeeded. False=Handshake failed.
session_resume: Returns a Boolean. True=If the TLS session was resumed. False=If the handshake was complete.
subject: Returns the (CN) of the server certificate.
issuer: Returns the (CN) of the (CA) that issued the certificate. Examples: R13, ISRG Root X1, etc.
dns_name: Returns a list of hostnames in the Subject Alternative Name (SAN) extension.
expires: Returns the certificate Expiration Time in RFC3339 format.
cert_chain: Certificate chain successfully verified against a trusted root CA.

🔌 Telnet

1. Open koneksi

python

def execute(options, net):
    r = net.Telnet(host, port, timeout)

Description: Telnet is stateful, you will get inherited functions.

Parameter

host: This can be IP / Domain.
port: This is a typical port.
timeout: To limit the open connection time. | Default 10.0s.

Inheritance
You will get the legacy send and read functions.

2. Kirim Data

python

res, var = r.send(command, expected, timeout, raw)

Parameter

command: This can be filled with a wordlist file of username or password or a free command or bytes.
expected: This can contain the desired response expectation variables.
timeout: To limit the open connection time. | Default 0.3s.
raw: This is a boolean if True: The first response is Bytes. If False: The first response is a UTF-8 decoded string. | Default False.

Response

res: This will contain the raw bytes response.
var: Can contain a variable number of expectation parameters. For example, there are two expectation variables, so the response variable is calculated as 0 and 1. If it is below 0 such as -1 or -2 etc. it is considered False or not found.

3. Read Response

python

res, var = r.read(expected, timeout, raw)

Parameter

expected: This can contain the desired response expectation variables.
timeout: To limit the open connection time. | Default 0.3s.
raw: This is a boolean if True: The first response is Bytes. If False: The first response is a UTF-8 decoded string. | Default False.

Response

res: This will contain the raw bytes response.
var: Can contain a variable number of expectation parameters. For example, there are two expectation variables, so the response variable is calculated as 0 and 1. If it is below 0 such as -1 or -2 etc. it is considered False or not found.

📡 Use of Response & Inheritance

1. Socket

Status: Stateful
Inheritance

python

# Open legacy connection
s = net.Socket(host, port, timeout)

# Send Data
s.send(data, timeout)

# Buffer Fetching
s.recv(readsize)

# TLS Upgrade has legacy
s.uptls(cert, key, ca, verify)

# Automatically be on a TLS encrypted connection
s.send()
s.recv()

Response

python

# send data
r = s.send(data, timeout)
smf.printf(r.status, r.message)
smf.printf(r.isreused, r.rtt_ms, etc.)

# read buffer
r = s.recv(readsize)
smf.printf(r.status, r.message)
smf.printf(r.raw_bytes, r.hex_bytes, etc.)

# TLS Upgrade
r = s.uptls(cert, key, ca, verify)
smf.printf(r.status, r.message)
smf.printf(r.tls.version, r.tls.cipher, etc.)

2. Requests

Status: Stateless
Response

python

r = net.requests(...)
smf.printf(r.status, r.message)
smf.printf(r.rcode, r.records, etc.)

3. HTTP Requests

Status: Stateless
Response

python

r = net.http_requests(...)
smf.printf(r.status, r.message)
smf.printf(r.status_code, r.tls.cipher, etc.)

4. Telnet

Status: Stateful
Inheritance

python

# Viewing the response
raw, var = r.read(...)

# Sending data
raw, var = r.send(...)

⚡ Connection Runtime Service (CRS) ​

⚙️ Architectural Motivation ​

📝 Technical Specifications ​

Some of the available; ​

🛠️ Ways of working CRS ​

💡 Protocol Parameters ​

🔌 Socket Parameters ​

☎️ DNS ​

🖇️ Http Requests ​

🔌 Telnet ​

📡 Use of Response & Inheritance ​

⚡ Connection Runtime Service (CRS)

⚙️ Architectural Motivation

📝 Technical Specifications

Some of the available;

🛠️ Ways of working CRS

💡 Protocol Parameters

🔌 Socket Parameters

☎️ DNS

🖇️ Http Requests

🔌 Telnet

📡 Use of Response & Inheritance