network --> python socket scripts

Network_and_802.11/socket/netcat_awesome.py

@@ -4,33 +4,204 @@ __author__ = "bt3"
 
 
 import socket
+import sys
+import getopt
+import threading
+import subprocess
 
-# Definning constants
-PORT = 12345
-HOSTNAME = '54.209.5.48'
+# Defining constants
+LISTEN   = False
+COMMAND  = False
+UPLOAD   = False
+EXECUTE  = ''
+TARGET   = ''
+UP_DEST  = ''
+PORT     = 0
 
 
-def netcat(text_to_send):
+# The option menu
+def usage():
+    print "Usage: netcat_awesome.py -t <HOST> -p <PORT>"
+    print "  -l --listen                  listen on HOST:PORT"
+    print "  -e --execute=file            execute the given file"
+    print "  -c --command                 initialize a command shell"
+    print "  -u --upload=destination      upload file and write to destination"
+    print
+    print "Examples:"
+    print "netcat_awesome.py -t localhost -p 5000 -l -c"
+    print "netcat_awesome.py -t localhost -p 5000 -l -u=example.exe"
+    print "netcat_awesome.py -t localhost -p 5000 -l -e='ls'"
+    print "echo 'AAAAAA' | ./netcat_awesome.py -t localhost -p 5000"
+    sys.exit(0)
 
-    s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
-    s.connect(( HOSTNAME, PORT))
-    s.sendall(text_to_send)
-    s.shutdown(socket.SHUT_WR)
 
-    adata = []
-    while 1:
-        data = s.recv(1024)
-        if data == "":
-            break
-        adata.append(data)
+def client_sender(buffer):
+    # set TCP socket object
+    client = socket.socket( socket.AF_INET, socket.SOCK_STREAM )
 
-    s.close()
-    return adata
+    try:
+        client.connect(( TARGET, PORT ))
 
+        # test to see if received any data
+        if len(buffer):
+            client.send(buffer)
+
+        while True:
+            # wait for data
+            recv_len = 1
+            response = ''
+
+            while recv_len:
+                data = client.recv(4096)
+                recv_len = len(data)
+                response += data
+                if recv_len < 4096:
+                    break
+            print response
+
+            # wait for more input until there is no more data
+            buffer = raw_input('')
+            buffer += '\n'
+
+            # send it
+            client.send(buffer)
+
+    except:
+        print '[*] Exception. Exiting.'
+        client.close()
+
+
+
+def run_command(command):
+    command = command.rstrip()
+    print command
+    try:
+        output = subprocess.check_output(command, stderr=subprocess.STDOUT, \
+                shell=True)
+    except:
+       output = "Failed to execute command.\r\n"
+    return output
+
+
+
+def client_handler(client_socket):
+    global UPLOAD
+    global EXECUTE
+    global COMMAND
+
+    # check for upload
+    # useful for upload and execute malware, for example
+    if len(UP_DEST):
+        # read in bytes and write to destination
+        file_buf = ''
+
+        # keep reading data until no more data is available
+        while True:
+            data = client_socket.recv(1024)
+            if data:
+                file_buffer += data
+            else:
+                break
+
+        # try to write the bytes (wb for binary mode)
+        try:
+            with open(UP_DEST, 'wb') as f:
+                f.write(file_buffer)
+                client_socket.send('File saved to %s\r\n' % UP_DEST)
+        except:
+            client_socket.send('Failed to save file to %s\r\n' % UP_DEST)
+
+    # check for command execution:
+    if len(EXECUTE):
+        output = run_command(EXECUTE)
+        client_socket.send(output)
+
+    # go into a loop if a command shell was requested
+    if COMMAND:
+        while True:
+            # show a prompt:
+            client_socket.send('NETCAT: ')
+            cmd_buffer = ''
+
+            # scans for a newline character to determine when to process a command
+            # if using with a Python client, it's necessary to add this
+            while '\n' not in cmd_buffer:
+                cmd_buffer += client_socket.recv(1024)
+
+            # send back the command output
+            response = run_command(cmd_buffer)
+
+            # send back the response
+            client_socket.send(response)
+
+
+def server_loop():
+    server = socket.socket( socket.AF_INET, socket.SOCK_STREAM )
+    server.bind(( TARGET, PORT ))
+    server.listen(5)
+
+    while True:
+        client_socket, addr = server.accept()
+        client_thread = threading.Thread( target =client_handler, \
+                args=(client_socket,))
+        client_thread.start()
+
+
+
+
+def main():
+    global LISTEN
+    global PORT
+    global EXECUTE
+    global COMMAND
+    global UP_DEST
+    global TARGET
+
+
+    if not len(sys.argv[1:]):
+        usage()
+
+    # parse the arguments
+    try:
+        opts, args = getopt.getopt(sys.argv[1:],"hle:t:p:cu", \
+            ["help", "LISTEN", "EXECUTE", "TARGET", "PORT", "COMMAND", "UPLOAD"])
+    except getopt.GetoptError as err:
+        print str(err)
+        usage()
+
+
+    # Handle the options and arguments
+    for o, a in opts:
+        if o in ('-h', '--help'):
+            usage()
+        elif o in ('-l', '--listen'):
+            LISTEN = True
+        elif o in ('-e', '--execute'):
+            EXECUTE = a
+        elif o in ('-c', '--commandshell'):
+            COMMAND = True
+        elif o in ('-u', '--upload'):
+            UP_DEST = a
+        elif o in ('-t', '--target'):
+            TARGET = a
+        elif o in ('-p', '--port'):
+            PORT = int(a)
+        else:
+            assert False, "Unhandled option"
+
+
+    # NETCAT client (just sending data)
+    if not LISTEN and len(TARGET) and PORT > 0:
+        buffer = sys.stdin.read()
+        client_sender(buffer)
+
+
+    # NETCAT server
+    if LISTEN:
+        if not len(TARGET):
+            TARGET = '0.0.0.0'
+        server_loop()
 
 
 if __name__ == '__main__':
-
-    text_to_send = ''
-    text_recved = netcat(text_to_send))
-    print text_recved[1]
+    main()