2014-05-20 15:44:00 -04:00
|
|
|
#!/usr/bin/env python
|
|
|
|
|
|
2014-05-20 19:02:33 -04:00
|
|
|
import os, sys, subprocess, time, hashlib, inspect
|
2014-05-20 15:44:00 -04:00
|
|
|
from random import randint
|
|
|
|
|
from functools import wraps
|
2014-05-20 19:02:33 -04:00
|
|
|
|
|
|
|
|
lib_path = os.path.dirname(os.path.abspath(inspect.getfile(inspect.currentframe())))+'/lib'
|
|
|
|
|
sys.path.append(lib_path)
|
|
|
|
|
|
2014-05-21 14:23:37 -04:00
|
|
|
from stem.control import Controller
|
|
|
|
|
from stem import SocketError
|
|
|
|
|
|
2014-05-20 16:57:39 -04:00
|
|
|
from flask import Flask, Markup, Response, request, make_response, send_from_directory
|
2014-05-20 15:44:00 -04:00
|
|
|
app = Flask(__name__)
|
|
|
|
|
|
2014-05-20 16:57:39 -04:00
|
|
|
auth_username = auth_password = filename = filehash = filesize = ''
|
2014-05-20 15:44:00 -04:00
|
|
|
|
2014-05-21 18:30:26 -04:00
|
|
|
def is_equal(a, b):
|
|
|
|
|
"""Constant-time string comparison"""
|
|
|
|
|
if len(a) != len(b):
|
2014-05-21 18:27:12 -04:00
|
|
|
return False
|
|
|
|
|
|
2014-05-21 18:30:26 -04:00
|
|
|
result = 0
|
|
|
|
|
for x, y in zip(a, b):
|
|
|
|
|
result |= ord(x) ^ ord(y)
|
|
|
|
|
return result == 0
|
|
|
|
|
|
|
|
|
|
def check_auth(username, password):
|
|
|
|
|
global auth_username, auth_password
|
|
|
|
|
usernames_equal = is_equal(username, auth_username)
|
|
|
|
|
passwords_equal = is_equal(password, auth_password)
|
|
|
|
|
return usernames_equal & passwords_equal
|
2014-05-20 15:44:00 -04:00
|
|
|
|
|
|
|
|
def authenticate():
|
|
|
|
|
return Response(
|
|
|
|
|
'Could not verify your access level for that URL.\n'
|
|
|
|
|
'You have to login with proper credentials', 401,
|
|
|
|
|
{'WWW-Authenticate': 'Basic realm="Login Required"'})
|
|
|
|
|
|
|
|
|
|
def requires_auth(f):
|
|
|
|
|
@wraps(f)
|
|
|
|
|
def decorated(*args, **kwargs):
|
|
|
|
|
auth = request.authorization
|
|
|
|
|
if not auth or not check_auth(auth.username, auth.password):
|
|
|
|
|
return authenticate()
|
|
|
|
|
return f(*args, **kwargs)
|
|
|
|
|
return decorated
|
|
|
|
|
|
|
|
|
|
@app.route("/")
|
|
|
|
|
@requires_auth
|
2014-05-20 16:57:39 -04:00
|
|
|
def index():
|
|
|
|
|
global filename, filesize, filehash
|
2014-05-20 17:34:02 -04:00
|
|
|
return "<html><head><title>OnionShare</title><style>body {{ background-color: #222222; color: #ffffff; text-align: center; font-family: arial; padding: 5em; }} a {{ color: #ffee00; text-decoration: none; }} a:hover{{ text-decoration: underline; }}</style></head><body><h1><a href='/download'>{0}</a></h1><p>SHA1 checksum: <strong>{1}</strong><br/>File size: <strong>{2} bytes</strong></p></body></html>".format(os.path.basename(filename), filehash, filesize)
|
2014-05-20 16:57:39 -04:00
|
|
|
|
|
|
|
|
@app.route("/download")
|
|
|
|
|
@requires_auth
|
|
|
|
|
def download():
|
|
|
|
|
global filename
|
|
|
|
|
dirname = os.path.dirname(filename)
|
|
|
|
|
basename = os.path.basename(filename)
|
|
|
|
|
return send_from_directory(dirname, basename, as_attachment=True)
|
2014-05-20 15:44:00 -04:00
|
|
|
|
2014-05-21 14:56:09 -04:00
|
|
|
def get_platform():
|
|
|
|
|
if 'ONIONSHARE_PLATFORM' in os.environ:
|
|
|
|
|
return os.environ['ONIONSHARE_PLATFORM']
|
|
|
|
|
else:
|
|
|
|
|
return 'unknown'
|
|
|
|
|
|
2014-05-21 14:51:04 -04:00
|
|
|
def tails_open_port(port):
|
2014-05-21 14:56:09 -04:00
|
|
|
if get_platform() == 'Tails':
|
2014-05-21 14:51:04 -04:00
|
|
|
print 'Punching a hole in the firewall'
|
|
|
|
|
subprocess.call(['/sbin/iptables', '-I', 'OUTPUT', '-o', 'lo', '-p', 'tcp', '--dport', str(port), '-j', 'ACCEPT'])
|
2014-05-20 15:44:00 -04:00
|
|
|
|
2014-05-21 14:51:04 -04:00
|
|
|
def tails_close_port(port):
|
2014-05-21 14:56:09 -04:00
|
|
|
if get_platform() == 'Tails':
|
2014-05-21 14:51:04 -04:00
|
|
|
print 'Closing hole in firewall'
|
|
|
|
|
subprocess.call(['/sbin/iptables', '-I', 'OUTPUT', '-o', 'lo', '-p', 'tcp', '--dport', str(port), '-j', 'REJECT'])
|
2014-05-20 15:44:00 -04:00
|
|
|
|
2014-05-21 14:51:04 -04:00
|
|
|
if __name__ == '__main__':
|
2014-05-20 16:57:39 -04:00
|
|
|
# validate filename
|
2014-05-20 15:44:00 -04:00
|
|
|
if len(sys.argv) != 2:
|
|
|
|
|
sys.exit('Usage: {0} [filename]'.format(sys.argv[0]));
|
|
|
|
|
filename = sys.argv[1]
|
|
|
|
|
if not os.path.isfile(filename):
|
|
|
|
|
sys.exit('{0} is not a file'.format(filename))
|
|
|
|
|
|
2014-05-20 16:57:39 -04:00
|
|
|
# calculate filehash, file size
|
|
|
|
|
sha1 = hashlib.sha1()
|
|
|
|
|
f = open(filename, 'rb')
|
|
|
|
|
try:
|
|
|
|
|
sha1.update(f.read())
|
|
|
|
|
finally:
|
|
|
|
|
f.close()
|
|
|
|
|
filehash = sha1.hexdigest()
|
|
|
|
|
filesize = os.path.getsize(filename)
|
|
|
|
|
|
2014-05-21 14:23:37 -04:00
|
|
|
# choose a port, username, and password
|
2014-05-20 15:44:00 -04:00
|
|
|
port = randint(1025, 65535)
|
|
|
|
|
auth_username = os.urandom(8).encode('hex')
|
|
|
|
|
auth_password = os.urandom(8).encode('hex')
|
|
|
|
|
|
2014-05-21 14:23:37 -04:00
|
|
|
# connect to the tor controlport
|
|
|
|
|
print 'Connecting to Tor ControlPort to set up hidden service on port {0}'.format(port)
|
|
|
|
|
controlports = [9051, 9151]
|
|
|
|
|
controller = False
|
|
|
|
|
for controlport in controlports:
|
|
|
|
|
try:
|
|
|
|
|
controller = Controller.from_port(port=controlport)
|
|
|
|
|
except SocketError:
|
|
|
|
|
pass
|
|
|
|
|
if not controller:
|
|
|
|
|
sys.exit('Cannot connect to Tor ControlPorts on ports {0}. Is Tor running?'.format(controlports))
|
|
|
|
|
controller.authenticate()
|
|
|
|
|
|
2014-05-20 15:44:00 -04:00
|
|
|
# set up hidden service
|
2014-05-21 14:23:37 -04:00
|
|
|
controller.set_options([
|
|
|
|
|
('HiddenServiceDir', '/tmp/onionshare_hidden_service_{0}/'.format(port)),
|
|
|
|
|
('HiddenServicePort', '80 127.0.0.1:{0}'.format(port))
|
|
|
|
|
])
|
|
|
|
|
onion_host = open('/tmp/onionshare_hidden_service_{0}/hostname'.format(port), 'r').read().strip()
|
2014-05-20 15:44:00 -04:00
|
|
|
|
|
|
|
|
# punch a hole in the firewall
|
2014-05-21 14:51:04 -04:00
|
|
|
tails_open_port(port)
|
2014-05-20 15:44:00 -04:00
|
|
|
|
|
|
|
|
# instructions
|
2014-05-20 16:57:39 -04:00
|
|
|
print '\nGive this information to the person you\'re sending the file to:'
|
2014-05-20 15:44:00 -04:00
|
|
|
print 'URL: http://{0}/'.format(onion_host)
|
|
|
|
|
print 'Username: {0}'.format(auth_username)
|
|
|
|
|
print 'Password: {0}'.format(auth_password)
|
|
|
|
|
print ''
|
|
|
|
|
print 'Press Ctrl-C to stop server\n'
|
|
|
|
|
|
|
|
|
|
# start the web server
|
|
|
|
|
app.run(port=port)
|
|
|
|
|
print '\n'
|
|
|
|
|
|
|
|
|
|
# shutdown
|
2014-05-21 14:51:04 -04:00
|
|
|
tails_close_port(port)
|
