Making magic with the network stack
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 

138 lines
2.9 KiB

#!/usr/bin/env python3
from scapy.all import *
import ipaddress
from threading import Thread, Event
from time import sleep
import os
recv_count = 0
server_port = 50508
class Sniffer(Thread):
def __init__(self, iface="ens18"):
super().__init__()
self.daemon = True
self.recv_count = 0
self.socket = None
self.iface = iface
self.stop_sniffer = Event()
self.debug_src = ""
self.debug_sport = 0
def run(self):
self.socket = conf.L2listen(
type=ETH_P_ALL,
iface=self.iface,
filter="ip"
)
sniff(
opened_socket=self.socket,
prn=self.handle_packet,
)
def join(self, timeout=None):
self.stop_sniffer.set()
super().join(timeout)
def handle_debug_packet(self, payload):
some_packet = IP(bytes(payload))
print("genie debug packet..")
some_packet.show()
def handle_packet(self, packet):
#ip_layer = packet.getlayer(IP)
#print("[!] New Packet: {src} -> {dst}".format(src=ip_layer.src, dst=ip_layer.dst))
if TCP in packet:
tcp_sport = packet[TCP].sport
tcp_dport = packet[TCP].dport
if tcp_dport == server_port:
print("sniffed a debug packet..")
#packet.show()
if self.recv_count > 3:
some_payload = packet[TCP].payload
self.handle_debug_packet(some_payload)
self.debug_src = packet[IP].src
self.debug_sport = tcp_sport
self.recv_count += 1
def send_debug_packet(sniffer):
debug_port = sniffer.debug_sport
debug_ip = sniffer.debug_src
if debug_port == 0 or debug_ip == '':
print("There was no debug source connection to send to")
return
print("sending debug packet to " + str(debug_ip) + ":" + str(debug_port))
packet = IP(dst=debug_ip) / TCP(dport=debug_port, sport=server_port, flags='R')
send(packet, iface="ens18")
print("sent debug packet: ")
packet.show()
def main():
sniffer = Sniffer(iface='ens18')
print('starting sniffer..')
sniffer.start()
time.sleep(3)
done = False
while not(done):
print("Enter action to take..")
print("1. Keep sniffing")
print("2. Send packet back")
print("3. Quit")
answer = input("Enter answer: ")
if answer == "1":
print("sleeping for sniffer..")
time.sleep(5)
elif answer == "2":
send_debug_packet(sniffer)
elif answer == "3":
print("ending the sniffer")
done = True
print("user answer was: " + str(answer))
print("\n")
time.sleep(1)
print("\n\nFinished sniffing for debug packets")
if __name__ == '__main__':
main()