switch通过DNS劫持实现连接自建云服务器

switch通过DNS劫持实现连接自建云服务器

1. 安装依赖

服务器安装python3, pip3

安装python的第三方库requests

pip3 install requests

2. 打开53端口(UDP)

3. 新建文件

新建的hosts.txt和dns_server.py两个文件的路径均在服务器目录下

新建hosts.txt，内容为

#this is the default hosts file for the dns proxy
#format: hostname regex -> ip address

# [My Host Entries]
^hivebedrock\.network$ 
^mco\.mineplex\.com$ xxx.xxx.xxx.xxx
^play\.inpvp\.net$ xxx.xxx.xxx.xxx
^mco\.lbsg\.net$ xxx.xxx.xxx.xxx
^mco\.cubecraft\.net$ xxx.xxx.xxx.xxx 

其中xxx.xxx.xxx.xxx全部替换为服务器的ip地址

新建dns_server.py，内容为

#!/usr/bin/python3

import re
import sys
import socket
import traceback
from os.path import isfile

HOSTS_FILE = "hosts.txt"

SERVER_HOST = "0.0.0.0"
SERVER_PORT = 53

#ipv4_exp = re.compile(r"\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}")

class DNSQuery:
    def __init__(self, data):
        self.data = data
        self.domain = bytearray()
        tipo = (data[2] >> 3) & 15
        if tipo == 0:
            ini = 12
            lon = data[ini]
            while lon != 0:
                self.domain += data[ini + 1:ini + lon + 1] + bytes(".", "ascii")
                ini += lon + 1
                lon = data[ini]
        self.domain = str(self.domain, "utf8").rstrip(".")

    def response(self, ip):
        packet = bytearray()
        if self.domain:
            packet += self.data[:2] + bytearray([0x81, 0x80])
            packet += self.data[4:6] + self.data[4:6] + bytearray([0x00, 0x00, 0x00, 0x00])  # Questions and Answers Counts
            packet += self.data[12:]  # Original Domain Name Question
            packet += bytearray([0xC0, 0x0C])  # Pointer to domain name
            packet += bytearray([0x00, 0x01, 0x00, 0x01, 0x00, 0x00, 0x00, 0x3c, 0x00, 0x04])  # Response type, ttl and resource data length -> 4 bytes
            packet += bytearray([int(x) for x in ip.split(".")])  # 4 bytes of IP
        return packet

def parse_host_file_as_regex(data):
    host_list = []
    for line in data.splitlines():
        if line != "" and line[0] != "#":
            split_line = line.split(" ", 1)
            if len(split_line) == 2:
                host_regex = split_line[0]
                ip_addr = split_line[1]
                host_list.append([re.compile(host_regex), ip_addr])
    return host_list

if __name__ == '__main__':
    if isfile(HOSTS_FILE):
        host_data = parse_host_file_as_regex(open(HOSTS_FILE, "r").read())
        sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
        sock.bind((SERVER_HOST, SERVER_PORT))
        print("DNS Proxy server started on UDP port {}!".format(SERVER_PORT))
        while True:
            try:
                (data, addr) = sock.recvfrom(1024)
                p = DNSQuery(data)
                result = [ip_addr for (regex, ip_addr) in host_data if regex.search(p.domain)]
                if result:
                    ip = result[0]
                    print("Local:  {} -> {}".format(p.domain, ip))
                    sock.sendto(p.response(ip), addr)
                else:
                    ip = socket.gethostbyname(p.domain)
                    print("Remote: {} -> {}".format(p.domain, ip))
                    sock.sendto(p.response(ip), addr)
            except KeyboardInterrupt:
                print("Done!")
                sock.close()
                sys.exit(0)
            except:
                traceback.print_exc()
    else:
        print("Host file not found!")

4. 新建一个screen，运行dns_server.py

screen -S dns

python3 dns_server.py