0x00 前言
無聊之餘看到XT部落格說，使用python建立TCP代理，也來搞了一下，代碼無優化，借鑒cnblogs大佬shaoshao的代碼，進一步改良。隻提供一個輪子，輪子之旅開始。
0x01 XT寫的代碼
import sys
import threading
import socket
def server_loop(local_host,local_port,remote_host,remote_port,receive_first):
server=socket.socket(socket.AF_INET,socket.SOCK_STREAM)
try:
server.blind((local_host,local_port))
except:
print “[!!] Failed to listen on %s:%d” % (local_host,local_port)
print “[!!] Check for other listing sockets or correct permissions.”
sys.exit(0)
print “[*] Listening on %s:%d” % (local_host,local_port)
server.listen(5)
while True:
client_socket,addr=server.accept()
print “[==>] Received incoming connection from %s:%d %(addr[0],addr[1])”
proxy_thread=threading.Thread(target=proxy_handler,args=(client_socket,remote_host,remote_port,receive_first))
proxy_thread.start()
def proxy_handler(client_socket,remote_host,remote_port,receive_first):
remote_socket=socket.socket(socket.AF_INET,socket.SOCK_STREAM)
remote_socket.connect((remote_host,remote_port))
if receive_first:
remote_buffer=receive_from(remote_socket)
hexdump(remote_buffer)
remote_buffer=response_handler(remote_buffer)
if len(remote_buffer):
print “[<==] Sening %d bytes to localhost.” % len(remote_buffer)
client_socket.send(remote_buffer)
while True:
local_buffer=receive_from(cilent_socket)
if len(local_buffer):
print “[==>] Received %d bytes from localhost.” % len(local_buffer)
hexdump(local_buffer)
local_buffer=request_handler(local_buffer)
remote_socket.send(local_buffer)
print “[==>] Send to remote.”
remote_buffer=receive_from(remote_socket)
if len(remote_buffer):
print “[<==] Received %d bytes from remote.” % len(remote_buffer)
hexdump(remote_buffer)
remote_buffer=response_handler(remote_buffer)
cilent_socket.send(remote_buffer)
print “[<==] Sent to localhost.”
if not len(local_buffer) or not len(remote_buffer):
client_socket.close()
remote_socket.close()
print “[*] No more data.Closing connection.”
break
def hexdump(src,length=16):
result=[]
digits=4 if isinstance(src,unicode) else 2
for i in xrange(0,len(src),length):
s=src[i:i+length]
hexa=b’ ‘.join([“%0*X” % (digits, ord(x)) for x in s])
text=b”.join([x if 0x20 <=ord(x) < 0x7F else b’.’ for x in s])
result.append( b”%04X %S” (i, length*(digits + 1),hexa,text))
print b’\n’,join(result)
def receive_from(connection):
buffer=””
connection.settimeout(2)
try:
while True:
data=connection.recv(4096)
if not data:
break
buffer += data
except:
pass
return buffer
def request_handler(buffer):
return buffer
def response_handler(buffer):
return buffer
def main():
if len(sys.argv[1:]) !=5:
print “Usage: ./proxy.py [localhost] [localport] [remotehost] [remoteport] [receive_first]”
print “Example: ./proxy.py 127.0.0.1 9000 10.12.132.1 9000 Ture”
sys.exit(0)
local_host=sys.argv[1]
local_port=int(sys.argv[2])
remote_host=sys.argv[3]
remote_port=int(sys.argv[4])
receive_first=sys.argv[5]
if “True” in receive_first:
receive_first=True
else:
receive_first=False
server_loop(local_host,local_port,remote_host,remote_port,receive_first)
main()
0x02 代理伺服器
# coding:utf8
# 建立一個 TCP 代理
import sys
import socket
import threading
def server_loop(local_host, local_port, remote_host, remote_port, receive_first):
server = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
try:
# 伺服器監聽的 host和端口
server.bind((local_host, local_port))
except Exception, e:
print "[!!] Failed to listen on %s:%d" % (local_host, local_port)
print "[!!] Check for other listening sockets or correct permissions"
sys.exit(0)
print "[*] Listening on %s:%d" % (local_host, local_port)
#開始監聽TCP傳入連接配接
server.listen(5)
while True:
# 擷取用戶端請求過來的資料
client_socket, addr = server.accept()
# 列印出本地用戶端連接配接的資訊
print "[==>] Received incoming connection from %s:%d" % (addr[0], addr[1])
# 開啟一個線程 與 遠端主機通信
proxy_thread = threading.Thread(target=proxy_handler, args=(client_socket, remote_host, remote_port, receive_first))
proxy_thread.start()
# 十六進制轉儲的函數
def hexdump(src, length=16):
result = []
digits = 4 if isinstance(src, unicode) else 2
for i in xrange(0, len(src), length):
s = src[i:i+length]
hexa = b' ' . join(["%0*X" % (digits, ord(x)) for x in s])
text = b''.join([x if 0x20 <= ord(x) < 0x7F else b'.' for x in s])
result.append(b"%04X %-*s %s" % (i, length*(digits + 1), hexa, text))
print b'\n'.join(result)
# 從遠端伺服器裡面接受資料
def receive_from(connection):
print "receive_from function start ........... "
buffer = ""
# 我們設定了兩秒的逾時， 這取決于目标的情況， 可能需要調整
connection.settimeout(2)
try:
# 持續從緩存中讀取資料直到沒有資料或者逾時
while True:
data = connection.recv(4096)
print "receive_from data is %s " % data
if not data:
print "receive_from data is break ......."
break
buffer += data
except Exception, e:
print str(e)
print str(Exception)
print 'error for receive_from'
return buffer
# 對目标是遠端主機的請求進行修改
def request_handler(buffer):
#執行包修改
return buffer
# 對目标是本地主機的響應進行修改
def response_handler(buffer):
#執行包修改
return buffer
def proxy_handler(client_socket, remote_host, remote_port, receive_first):
# 連接配接遠端主機
remote_socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
print "remote_socket start ...... %s %d" % (remote_host, remote_port)
remote_socket.connect((remote_host, remote_port))
# 如果必要從遠端主機接收資料
if receive_first:
remote_buffer = receive_from(remote_socket)
hexdump(remote_buffer)
# 發送給我們的響應處理
remote_buffer = response_handler(remote_buffer)
# 如果我們有資料傳遞給本地用戶端，發送它
if len(remote_buffer):
print "[<==] Sending %d bytes to localhost." % len(remote_buffer)
client_socket.send(remote_buffer)
# 現在我們從本地循環讀取資料， 發送給遠處主機和本地主機
while True:
# 從本地讀取資料
local_buffer = receive_from(client_socket)
print "local_buffer is %s " % local_buffer
if len(local_buffer):
print "[==>] Received %d bytes from localhost." % len(local_buffer)
hexdump(local_buffer)
# 這裡可以改變我們請求的資料 過濾等功能
local_buffer = request_handler(local_buffer)
# 向遠處主機發送資料
remote_socket.send(local_buffer)
print "[==>] Sent to remote."
# 接收響應的資料
remote_buffer = receive_from(remote_socket)
if len(remote_buffer):
print "[<==] Received %d bytes from remote." % len(remote_buffer)
hexdump(remote_buffer)
# 發送到響應處理函數
remote_buffer = response_handler(remote_buffer)
# 将響應發送給本地socket
client_socket.send(remote_buffer)
# 如果兩邊都沒有資料， 關閉連接配接
if not len(local_buffer) or not len(remote_buffer):
client_socket.close()
remote_socket.close()
print "[*] No more data. Closing connections."
sys.exit(0)
break
def main():
if len(sys.argv[1:]) != 5:
print "Usage: ./proxy.py [localhost] [localport] [remotehost] [remoteport] [receive_first]"
print "Example: ./proxy.py 127.0.0.1 9000 10.12.132.1 9000 True"
sys.exit(0)
# 設定本地監聽參數
local_host = sys.argv[1]
local_port = int(sys.argv[2])
# 設定遠端目标
remote_host = sys.argv[3]
remote_port = int(sys.argv[4])
# 告訴代理在發送給遠端主機之前連接配接和接受資料
receive_first = sys.argv[5]
if "True" in receive_first:
receive_first = True
else:
receive_first = False
# 設定好我們的監聽 socket
server_loop(local_host, local_port, remote_host, remote_port, receive_first)
main()
##
##python index5.py 0.0.0.0 9999 120.25.249.52 80 True
##cd D:\python_code\httPython
0x03 TCP用戶端
# coding:utf8
import socket
target_host = '127.0.0.1'
target_port = 9999
# 建立一個socket 對象
# socket.AF_INET表示IPv4位址，或者主機名
# socket.SCOK_STREAM 這将是一個TCP用戶端
client = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
# 連接配接用戶端
client.connect((target_host, target_port))
# 發送一些資料
client.send("GET / HTTP/1.1\r\nHost: chengzhier.com\r\n\r\n") # 這裡不要直接打字元串，需要用http的形式請求
# 接收一些資料
response = client.recv(4096)
print response
0x04 總結
全篇水文，隻為以後造輪子，安排！
喜歡 (7)or分享 (0)