#!/usr/bin/env python3 import os import re import sys import time import socket import traceback # TODO: # scoring interface # config interface DEBUG = False POLL_INTERVAL = 60 IP_DIR = 'iptest/' REPORT_PATH = 'iptest/pollster.html' SOCK_TIMEOUT = 0.5 def socket_poll(ip, port, msg, prot, max_recv=1): ''' Connect via socket to the specified : using the specified , send the specified and return the response or None if something went wrong. specifies how many times to read from the socket (default to once). ''' # create a socket try: sock = socket.socket(socket.AF_INET, prot) except Exception as e: print('pollster: create socket failed (%s)' % e) traceback.print_exc() return None sock.settimeout(SOCK_TIMEOUT) # connect try: sock.connect((ip, port)) except socket.timeout as e: print('pollster: attempt to connect to %s:%d timed out (%s)' % (ip, port, e)) traceback.print_exc() return None except Exception as e: print('pollster: attempt to connect to %s:%d failed (%s)' % (ip, port, e)) traceback.print_exc() return None # send something sock.send(msg) # get a response resp = '' try: # first read data = sock.recv(1024) resp += data.decode('utf-8') max_recv -= 1 # remaining reads as necessary until timeout or socket closes while(len(data) > 0 and max_recv > 0): data = sock.recv(1024) resp += data.decode('utf-8') max_recv -= 1 sock.close() except socket.timeout as e: print('pollster: timed out waiting for a response from %s:%d (%s)' % (ip, port, e)) traceback.print_exc() except Exception as e: print('pollster: receive from %s:%d failed (%s)' % (ip, port, e)) traceback.print_exc() if len(resp) == 0: return None return resp # PUT POLLS FUNCTIONS HERE # Each function should take an IP address and return a team name or None # if (a) the service is not up, (b) it doesn't return a valid team name. def poll_fingerd(ip): ''' Poll the fingerd service. Returns None or a team name. ''' resp = socket_poll(ip, 79, b'flag\n', socket.SOCK_STREAM) if resp is None: return None return resp.strip('\r\n') def poll_noted(ip): ''' Poll the noted service. Returns None or a team name. ''' resp = socket_poll(ip, 4000, b'rflag\n', socket.SOCK_STREAM) if resp is None: return None return resp.strip('\r\n') def poll_catcgi(ip): ''' Poll the cat.cgi web service. Returns None or a team name. ''' request = bytes('GET /cat.cgi/flag HTTP/1.1\r\nHost: %s\r\n\r\n' % ip, 'ascii') resp = socket_poll(ip, 80, request, socket.SOCK_STREAM, 3) if resp is None: return None content = resp.split('\r\n\r\n') if len(content) < 3: return None content = content[1].split('\r\n') try: content_len = int(content[0]) except Exception as e: return None if content_len <= 0: return None return content[1].strip('\r\n') def poll_tftpd(ip): ''' Poll the tftp service. Returns None or a team name. ''' resp = socket_poll(ip, 69, b'\x00\x01' + b'flag' + b'\x00' + b'octet' + b'\x00', socket.SOCK_DGRAM) if resp is None: return None if len(resp) <= 5: return None resp = resp.split('\n')[0] return resp[4:].strip('\r\n') # PUT POLL FUNCTIONS IN HERE OR THEY WONT BE POLLED POLLS = { 'fingerd' : poll_fingerd, 'noted' : poll_noted, 'catcgi' : poll_catcgi, 'tftpd' : poll_tftpd, } ip_re = re.compile('(\d{1,3}\.){3}\d{1,3}') # loop forever while True: t_start = time.time() # gather the list of IPs to poll try: ips = os.listdir(IP_DIR) except Exception as e: print('pollster: could not list dir %s (%s)' % (IP_DIR, e)) traceback.print_exc() try: os.remove(REPORT_PATH) except Exception as e: pass out = open(REPORT_PATH, 'w') out.write('\n\n') out.write('Pollster Results\n') out.write('\n') out.write('\n

Polling Results

\n') for ip in ips: # check file name format is ip if ip_re.match(ip) is None: continue # remove the file try: os.remove(os.path.join(IP_DIR, ip)) except Exception as e: print('pollster: could not remove %s' % os.path.join(IP_DIR, ip)) traceback.print_exc() results = {} if DEBUG is True: print('ip: %s' % ip) out.write('

%s

\n' % ip) out.write('\n') out.write('\n') # perform polls for service,func in POLLS.items(): team = func(ip) if team is None: team = 'dirtbags' if DEBUG is True: print('\t%s - %s' % (service, team)) out.write('\n' % (service, team)) out.write('

Service Name	Flag Holder
%s	%s

\n') if DEBUG is True: print('+-----------------------------------------+') t_end = time.time() exec_time = int(t_end - t_start) sleep_time = POLL_INTERVAL - exec_time out.write('

Next poll in: %ds

\n' % sleep_time) out.write('\n\n') out.close() # sleep until its time to poll again time.sleep(sleep_time)