-
Notifications
You must be signed in to change notification settings - Fork 18
/
honeyserver.py
245 lines (196 loc) · 7.3 KB
/
honeyserver.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
#!/usr/bin/env python
# Title : IoT(Router)_Honeypot
# Author: BENSAAD Anouar
# -*- coding: utf-8 -*-
# Let's import what we need
import socket
import time
import sys
import mysql.connector
import MySQLdb
import signal
import getpass
import re
colors = True # Output should be colored
machine = sys.platform # Detecting the os of current system
if machine.lower().startswith(('os', 'win', 'darwin', 'ios')):
colors = False # Colors shouldn't be displayed in mac & windows
if not colors:
end = red = white = green = yellow = run = bad = good = info = que = ''
else:
end = '\033[1;m'
red = '\033[91m'
white = '\033[1;97m'
green = '\033[1;32m'
yellow = '\033[1;33m'
run = '\033[1;97m[~]\033[1;m'
bad = '\033[1;31m[-]\033[1;m'
good = '\033[1;32m[+]\033[1;m'
info = '\033[1;33m[!]\033[1;m'
que = '\033[1;34m[?]\033[1;m'
MSGLEN = 1024
dbconn = None
server_sock = None
server_name = 'Apache/2.2.8 (SAGEM-OS) DAV/2'
#server_name = 'lighttpd/2.2.8'
notallowd_error = 'HTTP/1.1 405 Method Not Allowed\r\nAllow: GET, HEAD, POST, PUT\r\nServer: '+server_name+'\r\nContent-Length: 0\r\n'.encode('utf-8')
bad_request = 'HTTP/1.1 400 Bad Request\r\nServer: '+server_name+'\r\nContent-Length: 0\r\n'.encode('utf-8')
def myreceive(c):
chunks = []
first = False
match = False
httpwContent = False
while 1:
try:
data = c.recv(MSGLEN)
if not data: break
chunks.append(data)
first=True
if not match: match = re.match('/1',data)
if not httpwContent: httpwContent = re.match('Content-Type:\s',data)
if first and not match: break # not HTTP stream
if not first and httpwContent: break # HTTP sans Contenu
#if len(data) < MSGLEN: break
except Exception as e:
break
# print(''.join(chunks))
return ''.join(chunks)
def process_request(c,addr,datainput):
global dbconn
try:
cursor = dbconn.cursor()
timestr = time.strftime("%Y/%m/%d-%H/%M/%S")
data = datainput.decode('utf-8')
datastructure=data.split('\r\n')
list = datastructure[0].split(' ')
method = list[0]
requested_file = list[1]
protocol = list[2]
print('Method: ', method)
print('protocol', protocol)
#Allow: GET, HEAD, POST, PUT
if (protocol != 'HTTP/1.0' and protocol != 'HTTP/1.1') or (method != 'GET' and method != 'POST' and method != 'HEAD' and method != 'PUT'):
c.send(notallowd_error)
return
current_time = time.strftime("%Y/%m/%d-%H:%M:%S")
ip_hacker = addr
# FUCNTION INSERT INTO MYSQL
#aa = str(current_time)
#bb = str(ip_hacker)
#cc = str(addr)
#log = (aa, bb, cc)
#cursor.execute("""INSERT INTO log (datetime, iphacker, uri) VALUES (%s, %s, %s)""",log);
#con.commit()
print '%s Time:'% red,current_time, ' Hacker: ', ip_hacker
print '%s Bad guy is looking for : \n\r'% white,data
if method == 'GET' or method == 'POST':
with open('Sys/log/Client Data', 'a') as file :
file.write(timestr +'Informations :' +str(data)+'\r\n')
file = requested_file.split('?')[0]
file = file.lstrip('/')
if (file == ''):
file = 'sign.html'
if (file =='admin.php'):
file = 'sign.html'
try:
file_handler = open(file,'rb')
response = file_handler.read()
file_handler.close()
header = 'HTTP/1.1 200 OK\r\n'
header +='Connection: close\r\n'
header += 'Server: '+server_name+'\r\n'
if(file.endswith(".jpg")):
extension = 'image/jpg'
elif(file.endswith(".css")):
extension = 'text/css'
else:
extension = 'text/html'
header += 'Content-Type: '+str(extension)+'\r\n'
header += 'Content-Length: '+str(len(response))+'\r\n\n'
except Exception as e:
print(e)
header = 'HTTP/1.1 404 Not found\r\n'
response = '<html><body><p>Error 404: not found</p></body></html>'
#/Sys/log/File Requested : Hacker URI Tracing
with open('Sys/log/File Requested', 'a') as file :
file.write(timestr +'Body request :' +str(requested_file)+'\n')
# FUCNTION INSERT INTO MYSQL
aa = str(current_time)
bb = str(ip_hacker)
cc = str(requested_file)
log = (aa, bb, cc)
cursor.execute("""INSERT INTO log (date, iphacker, uri) VALUES (%s, %s, %s)""",log);
dbconn.commit()
reponse_finale = header.encode('utf-8')
reponse_finale += response
#print(reponse_finale)
c.send(reponse_finale)
except Exception, e:
c.send(bad_request)
# print ('Bad Request received')
# print e
#FUNCTION CLOSING SERVER IF U TYPING Ctrl+C.
def signal_handler(sig, frame):
global server_sock
server_sock.shutdown(socket.SHUT_RDWR)
print('You pressed Ctrl+C!')
sys.exit(0)
signal.signal(signal.SIGINT, signal_handler)
def Main():
#ISETSO BANNER ASCII
print("%s _ __ _____ __ __ " % red)
print("%s (_)_______ / /_/ ___/____ / / / /___ ____ ___ __ __" % red)
print("%s / / ___/ _ \/ __/\__ \/ __ \ / /_/ / __ \/ __ \/ _ \/ / / /" % red)
print("%s / (__ ) __/ /_ ___/ / /_/ / / __ / /_/ / / / / __/ /_/ / " % red)
print("%s/_/____/\___/\__//____/\____/____/_/ /_/\____/_/ /_/\___/\__, / " % white)
print("%s /_____/ /____/ " % white)
#Global Variable.
global dbconn, server_sock
timestr = time.strftime("%Y/%m/%d-%H/%M/%S")
print '\nLogin Request '
password = "123"
username = "isetadmin"
#DataBase Connect
dbconn = MySQLdb.connect("honeydb", "honeypot", "123", "honeypot")
#user_in = raw_input('Username : ')
#user_input = getpass.getpass('Password : ')
#/Sys/log/login, PWD : Hacker Try of Login & Password
#with open('Sys/log/login, PWD','a') as file :
# file.write(timestr +'\n' +'LOGIN: ' +str(user_in)+'\n' +'PWD: '+str(user_input)+'\n')
#Administrator Condition Connexion.
#if user_input != password or user_in != username :
#Warning File, Administrator Typing Fault.
# with open('Warning', 'a+r') as file :
# file.write(timestr + '**** Warning **** : It is a Brute Force:' +str(user_in) +'/' +str(user_input))
# sys.exit('%s Incorrect Password, terminating... \n' % bad,white)
#print '\n%s Connexion avec Succes' % good
#Socket Connexion
server_sock = socket.socket(socket.AF_INET,socket.SOCK_STREAM)
server_name = ''
server_port = 999
#Banner of IoT : Router
server_banner = """Sagem F@st 2604 ADSL router linux 7 3.49a4G_Topnet
| banner: \xFF\xFD\x01\xFF\xFD!\xFF\xFB\x01\xFF\xFB\x03FAST2604 ADSL Rout
|_er (Software Version:3.49a4G_Topnet)\x0D\x0ALogin:
Service Info: Device: broadband router """
server_sock.bind((server_name, server_port))
header = ''
#Server Running.
print '%s Starting Server ON' % run,white,server_name, server_port
server_sock.listen(5)
try:
while 1:
data = None
(c,addr) = server_sock.accept()
c.settimeout(3)
try:
data = myreceive(c)
except socket.error, ex:
print ex
if data : process_request(c,addr,data)
c.close()
except Exception, ex:
print ex
server_sock.close()
if __name__== '__main__' :
Main ()