前言
之前有个业务,要求拦截特定的流量,并根据其特征测试拦截效果,本身流量分析用wireshark和tcpdump就挺好用的,无奈要测试拦截效果。所以需要自己实现一下简单的代理,并对相关包自己做处理,网上找到一篇写的挺好的,防走丢,转过来保存下
代码实现
#!/usr/bin/python
# -*- coding: UTF-8 -*-
import socket
import sys
import threading
import re
def hexdump(src, length=16):
result = []
digits = 4 if isinstance(src, unicode) else 2
for i in xrange(0, len(src), length):
s = src[i:i + length]
hexa = b''.join(["%0*X" % (digits, ord(x)) for x in s])
text = b''.join([x if 0x20 <= ord(x) < 0x7F else b'.' for x in s])
result.append(b"%04X %-*s %s" % (i, length * (digits + 1), hexa, text))
# print(b'\n'.join(result))
return result
def receive_from(connection):
buffer = ''
# 我们设置了两秒的超时,这取决于目标的情况,可能需要调整
connection.settimeout(2)
try:
# 持续从缓存中读取数据直到没有数据或者超时
while True:
data = connection.recv(4096)
if not data:
break
buffer += data
except:
pass
return buffer
def response_handler(buffer,result):
# 执行包修改
#print('response_test_start')
#print(result)
#print(type(result))
#print('response_test_end')
'''
if '5.7.19' in result[0]:
#print('find version')
# print(result)
return '111'
else:
# print('not find version')
# print(result)
'''
print(buffer)
print(type(buffer))
print(result)
bold = re.compile(r'(5.7.19)')
if '5.7.19' in buffer:
#print('find version')
# print(result)
print('try to change version')
buffer = bold.sub(r'6',buffer)
print(buffer)
return buffer
else:
# print('not find version')
# print(result)
return buffer
def request_handler(buffer,result):
# 执行包修改
'''
if len(result) >= 10 and 'version' in result[9]:
print('find version')
return '111'
else:
print('request_test_start')
print(result)
print('request_test_end')
return buffer
'''
return buffer
def proxy_handler(client_socket, remote_host, remote_port, receive_first):
# 连接远程主机
remote_socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
remote_socket.connect((remote_host, remote_port))
# 如果必要,从远程主机接受数据
if receive_first:
remote_buffer = receive_from(remote_socket)
result = hexdump(remote_buffer)
# 发送给我们的响应处理
remote_buffer = response_handler(remote_buffer,result)
# 如果我们有数据传递给本地客户端,发送之
if len(remote_buffer):
print("[<==] Sending %d bytes to localhost." % len(remote_buffer))
client_socket.send(remote_buffer)
# 现在我们从本地循环读取数据,发送给远程主机和本地主机
while True:
# 从本地提取数据
local_buffer = receive_from(client_socket)
if len(local_buffer):
print("[==>] Received %d bytes from localhost." % len(local_buffer))
result = hexdump(local_buffer)
# 发送给我们的本地请求
local_buffer = request_handler(local_buffer,result)
# 向远程主机发送数据
remote_socket.send(local_buffer)
print("[==>] Sent to remote")
# 接收响应的数据
remote_buffer = receive_from(remote_socket)
if len(remote_buffer):
print("[<==] Received %d bytes from remote." % len(remote_buffer))
result = hexdump(remote_buffer)
# 发送到响应处理函数
remote_buffer = response_handler(remote_buffer,result)
# 将响应发送到本地socket
client_socket.send(remote_buffer)
print("[<==] Sent to localhost.")
# 如果两边都没有数据,关闭连接
if not len(local_buffer) or not len(remote_buffer):
client_socket.close()
remote_socket.close()
print("[*] No more data. Closing Connections.")
break
def server_loop(local_host, local_port, remote_host, remote_port, receive_first):
server = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
# 对绑定端口做错误检查
try:
server.bind((local_host, local_port))
except:
print("[!!] Failed to listen on %s:%d" % (local_host, local_port))
print("[!!] Check for other listening sockets or correcct permissions")
sys.exit(0)
print("[*] Listening on %s:%d" % (local_host, local_port))
server.listen(5)
while True:
client_socket, addr = server.accept()
# 打印出连接进来的IP和port
print("[==>] Received incoming connection from %s:%d" % (addr[0], addr[1]))
# 开启一个线程与远程主机通信
proxy_thread = threading.Thread(target=proxy_handler,
args=(client_socket, remote_host, remote_port, receive_first))
proxy_thread.start()
def main():
# 没有华丽的命令行解析
if len(sys.argv[1:]) != 5:
print("Usage: ./proxy.py [localhost] [localport] [remotehost] [remoteport] [receive_first]")
print("Example: ./proxy.py 127.0.0.1 9000 10.12.132.1 9000 True")
sys.exit(0)
# 设置本地监听参数
local_host = sys.argv[1]
local_port = int(sys.argv[2])
# 设置远程目标
remote_host = sys.argv[3]
remote_port = int(sys.argv[4])
# 告诉代理在发送给远程主机之前连接和接受数据
if "True" in sys.argv[5]:
receive_first = True
else:
receive_first = False
# 现在设置好我们的监听socket
server_loop(local_host, local_port, remote_host, remote_port, receive_first)
__author__ = 'xy'
if __name__ == '__main__':
main()