initial commit of the app code

onionshare.py

@@ -0,0 +1,107 @@
+#!/usr/bin/env python
+
+import os, sys, subprocess, time
+from random import randint
+
+from functools import wraps
+from flask import Flask, request, Response
+app = Flask(__name__)
+
+auth_username = auth_password = ''
+
+def check_auth(username, password):
+    global auth_username, auth_password
+    return username == auth_username and password == auth_password
+
+def authenticate():
+    return Response(
+        'Could not verify your access level for that URL.\n'
+        'You have to login with proper credentials', 401,
+        {'WWW-Authenticate': 'Basic realm="Login Required"'})
+
+def requires_auth(f):
+    @wraps(f)
+    def decorated(*args, **kwargs):
+        auth = request.authorization
+        if not auth or not check_auth(auth.username, auth.password):
+            return authenticate()
+        return f(*args, **kwargs)
+    return decorated
+
+@app.route("/")
+@requires_auth
+def hello():
+    return "Hello World!"
+
+def reload_tor():
+    subprocess.call(['/usr/sbin/service', 'tor', 'reload'])
+
+def modify_firewall(port, open_port=True):
+    if open_port:
+        action = 'ACCEPT'
+    else:
+        action = 'REJECT'
+
+    subprocess.call(['/sbin/iptables', '-I', 'OUTPUT', '-o', 'lo', '-p', 'tcp', '--dport', str(port), '-j', action])
+
+if __name__ == '__main__':
+    # check for root
+    if not os.geteuid()==0:
+        sys.exit('You need to run this as root')
+
+    # arguements
+    if len(sys.argv) != 2:
+        sys.exit('Usage: {0} [filename]'.format(sys.argv[0]));
+    filename = sys.argv[1]
+    if not os.path.isfile(filename):
+        sys.exit('{0} is not a file'.format(filename))
+
+    # load torrc
+    torrc_path = '/etc/tor/torrc'
+    if os.path.isfile(torrc_path):
+        torrc = open(torrc_path).read()
+    else:
+        sys.exit('Error opening {0} for reading'.format(torrc_path));
+    
+    # choose a port to listen on
+    port = randint(1025, 65535)
+
+    # choose a random username and password
+    auth_username = os.urandom(8).encode('hex')
+    auth_password = os.urandom(8).encode('hex')
+
+    # set up hidden service
+    print 'Modifying torrc to configure hidden service on port {0}'.format(port)
+    hidserv_dir = 'HiddenServiceDir /var/lib/tor/hidden_service_{0}/'.format(port)
+    hidserv_port = 'HiddenServicePort 80 127.0.0.1:{0}'.format(port)
+    open(torrc_path, 'a+').write("\n{0}\n{1}\n".format(hidserv_dir, hidserv_port))
+    reload_tor()
+
+    # punch a hole in the firewall
+    print 'Punching a hole in the firewall'
+    modify_firewall(port)
+
+    # get hidden service hostname
+    print 'Waiting 10 seconds for hidden service to get configured...'
+    time.sleep(10)
+    onion_host = open('/var/lib/tor/hidden_service_{0}/hostname'.format(port), 'r').read().strip()
+
+    # instructions
+    print '\nGive this information to the person you''re sending the file to:'
+    print 'URL: http://{0}/'.format(onion_host)
+    print 'Username: {0}'.format(auth_username)
+    print 'Password: {0}'.format(auth_password)
+    print ''
+    print 'Press Ctrl-C to stop server\n'
+
+    # start the web server
+    app.run(port=port)
+    print '\n'
+
+    # shutdown
+    print 'Restoring original torrc'
+    open(torrc_path, 'w').write(torrc)
+    reload_tor()
+    print 'Closing hole in firewall'
+    modify_firewall(port, False)
+