Merge branch 'develop'
This commit is contained in:
commit
da3223ac92
6
.gitignore
vendored
6
.gitignore
vendored
@ -1,4 +1,4 @@
|
|||||||
*.pyc
|
*.py[co]
|
||||||
build/
|
build/
|
||||||
dist/
|
dist/
|
||||||
MANIFEST
|
MANIFEST
|
||||||
@ -7,3 +7,7 @@ docs/_build/
|
|||||||
.tox/
|
.tox/
|
||||||
.coverage
|
.coverage
|
||||||
sleekxmpp.egg-info/
|
sleekxmpp.egg-info/
|
||||||
|
.ropeproject/
|
||||||
|
4913
|
||||||
|
*~
|
||||||
|
.baboon/
|
||||||
|
25
LICENSE
25
LICENSE
@ -167,3 +167,28 @@ PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
|
|||||||
LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
||||||
OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
|
OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
|
||||||
ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||||
|
|
||||||
|
socksipy: A Python SOCKS client module.
|
||||||
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||||||
|
Copyright 2006 Dan-Haim. All rights reserved.
|
||||||
|
|
||||||
|
Redistribution and use in source and binary forms, with or without modification,
|
||||||
|
are permitted provided that the following conditions are met:
|
||||||
|
1. Redistributions of source code must retain the above copyright notice, this
|
||||||
|
list of conditions and the following disclaimer.
|
||||||
|
2. Redistributions in binary form must reproduce the above copyright notice,
|
||||||
|
this list of conditions and the following disclaimer in the documentation
|
||||||
|
and/or other materials provided with the distribution.
|
||||||
|
3. Neither the name of Dan Haim nor the names of his contributors may be used
|
||||||
|
to endorse or promote products derived from this software without specific
|
||||||
|
prior written permission.
|
||||||
|
|
||||||
|
THIS SOFTWARE IS PROVIDED BY DAN HAIM "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||||
|
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||||
|
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
|
||||||
|
EVENT SHALL DAN HAIM OR HIS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
|
||||||
|
INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
||||||
|
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA
|
||||||
|
OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
|
||||||
|
LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
|
||||||
|
OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMANGE.
|
||||||
|
1
setup.py
1
setup.py
@ -74,6 +74,7 @@ packages = [ 'sleekxmpp',
|
|||||||
'sleekxmpp/plugins/xep_0059',
|
'sleekxmpp/plugins/xep_0059',
|
||||||
'sleekxmpp/plugins/xep_0060',
|
'sleekxmpp/plugins/xep_0060',
|
||||||
'sleekxmpp/plugins/xep_0060/stanza',
|
'sleekxmpp/plugins/xep_0060/stanza',
|
||||||
|
'sleekxmpp/plugins/xep_0065',
|
||||||
'sleekxmpp/plugins/xep_0066',
|
'sleekxmpp/plugins/xep_0066',
|
||||||
'sleekxmpp/plugins/xep_0071',
|
'sleekxmpp/plugins/xep_0071',
|
||||||
'sleekxmpp/plugins/xep_0077',
|
'sleekxmpp/plugins/xep_0077',
|
||||||
|
@ -28,6 +28,7 @@ __all__ = [
|
|||||||
'xep_0054', # vcard-temp
|
'xep_0054', # vcard-temp
|
||||||
'xep_0059', # Result Set Management
|
'xep_0059', # Result Set Management
|
||||||
'xep_0060', # Pubsub (Client)
|
'xep_0060', # Pubsub (Client)
|
||||||
|
'xep_0065', # SOCKS5 Bytestreams
|
||||||
'xep_0066', # Out of Band Data
|
'xep_0066', # Out of Band Data
|
||||||
'xep_0071', # XHTML-IM
|
'xep_0071', # XHTML-IM
|
||||||
'xep_0077', # In-Band Registration
|
'xep_0077', # In-Band Registration
|
||||||
|
@ -46,6 +46,7 @@ class Gmail(BasePlugin):
|
|||||||
self._handle_new_mail))
|
self._handle_new_mail))
|
||||||
|
|
||||||
self._last_result_time = None
|
self._last_result_time = None
|
||||||
|
self._last_result_tid = None
|
||||||
|
|
||||||
def plugin_end(self):
|
def plugin_end(self):
|
||||||
self.xmpp.remove_handler('Gmail New Mail')
|
self.xmpp.remove_handler('Gmail New Mail')
|
||||||
@ -57,13 +58,23 @@ class Gmail(BasePlugin):
|
|||||||
|
|
||||||
def check(self, block=True, timeout=None, callback=None):
|
def check(self, block=True, timeout=None, callback=None):
|
||||||
last_time = self._last_result_time
|
last_time = self._last_result_time
|
||||||
self._last_result_time = str(int(time.time() * 1000))
|
last_tid = self._last_result_tid
|
||||||
return self.search(newer=last_time,
|
|
||||||
|
def check_callback(data):
|
||||||
|
self._last_result_time = data["gmail_messages"]["result_time"]
|
||||||
|
if data["gmail_messages"]["threads"]:
|
||||||
|
self._last_result_tid = \
|
||||||
|
data["gmail_messages"]["threads"][0]["tid"]
|
||||||
|
if callback:
|
||||||
|
callback(data)
|
||||||
|
|
||||||
|
return self.search(newer_time=last_time,
|
||||||
|
newer_tid=last_tid,
|
||||||
block=block,
|
block=block,
|
||||||
timeout=timeout,
|
timeout=timeout,
|
||||||
callback=callback)
|
callback=check_callback)
|
||||||
|
|
||||||
def search(self, query=None, newer=None, block=True,
|
def search(self, query=None, newer_time=None, newer_tid=None, block=True,
|
||||||
timeout=None, callback=None):
|
timeout=None, callback=None):
|
||||||
if not query:
|
if not query:
|
||||||
log.info('Gmail: Checking for new email')
|
log.info('Gmail: Checking for new email')
|
||||||
@ -73,5 +84,6 @@ class Gmail(BasePlugin):
|
|||||||
iq['type'] = 'get'
|
iq['type'] = 'get'
|
||||||
iq['to'] = self.xmpp.boundjid.bare
|
iq['to'] = self.xmpp.boundjid.bare
|
||||||
iq['gmail']['search'] = query
|
iq['gmail']['search'] = query
|
||||||
iq['gmail']['newer_than_time'] = newer
|
iq['gmail']['newer_than_time'] = newer_time
|
||||||
|
iq['gmail']['newer_than_tid'] = newer_tid
|
||||||
return iq.send(block=block, timeout=timeout, callback=callback)
|
return iq.send(block=block, timeout=timeout, callback=callback)
|
||||||
|
7
sleekxmpp/plugins/xep_0065/__init__.py
Normal file
7
sleekxmpp/plugins/xep_0065/__init__.py
Normal file
@ -0,0 +1,7 @@
|
|||||||
|
from sleekxmpp.plugins.base import register_plugin
|
||||||
|
|
||||||
|
from sleekxmpp.plugins.xep_0065.stanza import Socks5
|
||||||
|
from sleekxmpp.plugins.xep_0065.proxy import XEP_0065
|
||||||
|
|
||||||
|
|
||||||
|
register_plugin(XEP_0065)
|
235
sleekxmpp/plugins/xep_0065/proxy.py
Normal file
235
sleekxmpp/plugins/xep_0065/proxy.py
Normal file
@ -0,0 +1,235 @@
|
|||||||
|
import logging
|
||||||
|
import threading
|
||||||
|
import socket
|
||||||
|
|
||||||
|
from hashlib import sha1
|
||||||
|
from uuid import uuid4
|
||||||
|
|
||||||
|
from sleekxmpp.thirdparty.socks import socksocket, PROXY_TYPE_SOCKS5
|
||||||
|
|
||||||
|
from sleekxmpp.stanza import Iq
|
||||||
|
from sleekxmpp.exceptions import XMPPError
|
||||||
|
from sleekxmpp.xmlstream import register_stanza_plugin
|
||||||
|
from sleekxmpp.xmlstream.handler import Callback
|
||||||
|
from sleekxmpp.xmlstream.matcher import StanzaPath
|
||||||
|
from sleekxmpp.plugins.base import base_plugin
|
||||||
|
|
||||||
|
from sleekxmpp.plugins.xep_0065 import stanza, Socks5
|
||||||
|
|
||||||
|
|
||||||
|
log = logging.getLogger(__name__)
|
||||||
|
|
||||||
|
|
||||||
|
class XEP_0065(base_plugin):
|
||||||
|
|
||||||
|
name = 'xep_0065'
|
||||||
|
description = "Socks5 Bytestreams"
|
||||||
|
dependencies = set(['xep_0030'])
|
||||||
|
|
||||||
|
def plugin_init(self):
|
||||||
|
register_stanza_plugin(Iq, Socks5)
|
||||||
|
|
||||||
|
self._proxies = {}
|
||||||
|
self._sessions = {}
|
||||||
|
self._sessions_lock = threading.Lock()
|
||||||
|
|
||||||
|
self.xmpp.register_handler(
|
||||||
|
Callback('Socks5 Bytestreams',
|
||||||
|
StanzaPath('iq@type=set/socks/streamhost'),
|
||||||
|
self._handle_streamhost))
|
||||||
|
|
||||||
|
def session_bind(self, jid):
|
||||||
|
self.xmpp['xep_0030'].add_feature(Socks5.namespace)
|
||||||
|
|
||||||
|
def plugin_end(self):
|
||||||
|
self.xmpp.remove_handler('Socks5 Bytestreams')
|
||||||
|
self.xmpp.remove_handler('Socks5 Streamhost Used')
|
||||||
|
self.xmpp['xep_0030'].del_feature(feature=Socks5.namespace)
|
||||||
|
|
||||||
|
def get_socket(self, sid):
|
||||||
|
"""Returns the socket associated to the SID."""
|
||||||
|
return self._sessions.get(sid, None)
|
||||||
|
|
||||||
|
def handshake(self, to, ifrom=None, timeout=None):
|
||||||
|
""" Starts the handshake to establish the socks5 bytestreams
|
||||||
|
connection.
|
||||||
|
"""
|
||||||
|
if not self._proxies:
|
||||||
|
self._proxies = self.discover_proxies()
|
||||||
|
|
||||||
|
sid = uuid4().hex
|
||||||
|
|
||||||
|
used = self.request_stream(to, sid=sid, ifrom=ifrom, timeout=timeout)
|
||||||
|
proxy = used['socks']['streamhost_used']['jid']
|
||||||
|
|
||||||
|
if proxy not in self._proxies:
|
||||||
|
log.warning('Received unknown SOCKS5 proxy: %s', proxy)
|
||||||
|
return
|
||||||
|
|
||||||
|
with self._sessions_lock:
|
||||||
|
self._sessions[sid] = self._connect_proxy(
|
||||||
|
sid,
|
||||||
|
self.xmpp.boundjid,
|
||||||
|
to,
|
||||||
|
self._proxies[proxy][0],
|
||||||
|
self._proxies[proxy][1])
|
||||||
|
|
||||||
|
# Request that the proxy activate the session with the target.
|
||||||
|
self.activate(proxy, sid, to, timeout=timeout)
|
||||||
|
return self.get_socket(sid)
|
||||||
|
|
||||||
|
def request_stream(self, to, sid=None, ifrom=None, block=True, timeout=None, callback=None):
|
||||||
|
if sid is None:
|
||||||
|
sid = uuid4().hex
|
||||||
|
|
||||||
|
# Requester initiates S5B negotiation with Target by sending
|
||||||
|
# IQ-set that includes the JabberID and network address of
|
||||||
|
# StreamHost as well as the StreamID (SID) of the proposed
|
||||||
|
# bytestream.
|
||||||
|
iq = self.xmpp.Iq()
|
||||||
|
iq['to'] = to
|
||||||
|
iq['from'] = ifrom
|
||||||
|
iq['type'] = 'set'
|
||||||
|
iq['socks']['sid'] = sid
|
||||||
|
for proxy, (host, port) in self._proxies.items():
|
||||||
|
iq['socks'].add_streamhost(proxy, host, port)
|
||||||
|
return iq.send(block=block, timeout=timeout, callback=callback)
|
||||||
|
|
||||||
|
def discover_proxies(self, jid=None, ifrom=None, timeout=None):
|
||||||
|
"""Auto-discover the JIDs of SOCKS5 proxies on an XMPP server."""
|
||||||
|
if jid is None:
|
||||||
|
if self.xmpp.is_component:
|
||||||
|
jid = self.xmpp.server
|
||||||
|
else:
|
||||||
|
jid = self.xmpp.boundjid.server
|
||||||
|
|
||||||
|
discovered = set()
|
||||||
|
|
||||||
|
disco_items = self.xmpp['xep_0030'].get_items(jid, timeout=timeout)
|
||||||
|
|
||||||
|
for item in disco_items['disco_items']['items']:
|
||||||
|
try:
|
||||||
|
disco_info = self.xmpp['xep_0030'].get_info(item[0], timeout=timeout)
|
||||||
|
except XMPPError:
|
||||||
|
continue
|
||||||
|
else:
|
||||||
|
# Verify that the identity is a bytestream proxy.
|
||||||
|
identities = disco_info['disco_info']['identities']
|
||||||
|
for identity in identities:
|
||||||
|
if identity[0] == 'proxy' and identity[1] == 'bytestreams':
|
||||||
|
discovered.add(disco_info['from'])
|
||||||
|
|
||||||
|
for jid in discovered:
|
||||||
|
try:
|
||||||
|
addr = self.get_network_address(jid, ifrom=ifrom, timeout=timeout)
|
||||||
|
self._proxies[jid] = (addr['socks']['streamhost']['host'],
|
||||||
|
addr['socks']['streamhost']['port'])
|
||||||
|
except XMPPError:
|
||||||
|
continue
|
||||||
|
|
||||||
|
return self._proxies
|
||||||
|
|
||||||
|
def get_network_address(self, proxy, ifrom=None, block=True, timeout=None, callback=None):
|
||||||
|
"""Get the network information of a proxy."""
|
||||||
|
iq = self.xmpp.Iq(sto=proxy, stype='get', sfrom=ifrom)
|
||||||
|
iq.enable('socks')
|
||||||
|
return iq.send(block=block, timeout=timeout, callback=callback)
|
||||||
|
|
||||||
|
def _handle_streamhost(self, iq):
|
||||||
|
"""Handle incoming SOCKS5 session request."""
|
||||||
|
sid = iq['socks']['sid']
|
||||||
|
if not sid:
|
||||||
|
raise XMPPError(etype='modify', condition='not-acceptable')
|
||||||
|
|
||||||
|
streamhosts = iq['socks']['streamhosts']
|
||||||
|
conn = None
|
||||||
|
used_streamhost = None
|
||||||
|
|
||||||
|
for streamhost in streamhosts:
|
||||||
|
try:
|
||||||
|
conn = self._connect_proxy(sid,
|
||||||
|
iq['from'],
|
||||||
|
self.xmpp.boundjid,
|
||||||
|
streamhost['host'],
|
||||||
|
streamhost['port'])
|
||||||
|
used_streamhost = streamhost['jid']
|
||||||
|
break
|
||||||
|
except socket.error:
|
||||||
|
continue
|
||||||
|
else:
|
||||||
|
raise XMPPError(etype='cancel', condition='item-not-found')
|
||||||
|
|
||||||
|
iq.reply()
|
||||||
|
with self._sessions_lock:
|
||||||
|
self._sessions[sid] = conn
|
||||||
|
iq['socks']['sid'] = sid
|
||||||
|
iq['socks']['streamhost_used']['jid'] = used_streamhost
|
||||||
|
iq.send()
|
||||||
|
|
||||||
|
def activate(self, proxy, sid, target, ifrom=None, block=True, timeout=None, callback=None):
|
||||||
|
"""Activate the socks5 session that has been negotiated."""
|
||||||
|
iq = self.xmpp.Iq(sto=proxy, stype='set', sfrom=ifrom)
|
||||||
|
iq['socks']['sid'] = sid
|
||||||
|
iq['socks']['activate'] = target
|
||||||
|
iq.send(block=block, timeout=timeout, callback=callback)
|
||||||
|
|
||||||
|
def deactivate(self, sid):
|
||||||
|
"""Closes the proxy socket associated with this SID."""
|
||||||
|
sock = self._sessions.get(sid)
|
||||||
|
if sock:
|
||||||
|
try:
|
||||||
|
sock.close()
|
||||||
|
except socket.error:
|
||||||
|
pass
|
||||||
|
with self._sessions_lock:
|
||||||
|
del self._sessions[sid]
|
||||||
|
|
||||||
|
def close(self):
|
||||||
|
"""Closes all proxy sockets."""
|
||||||
|
for sid, sock in self._sessions.items():
|
||||||
|
sock.close()
|
||||||
|
with self._sessions_lock:
|
||||||
|
self._sessions = {}
|
||||||
|
|
||||||
|
def _connect_proxy(self, sid, requester, target, proxy, proxy_port):
|
||||||
|
""" Establishes a connection between the client and the server-side
|
||||||
|
Socks5 proxy.
|
||||||
|
|
||||||
|
sid : The StreamID. <str>
|
||||||
|
requester : The JID of the requester. <str>
|
||||||
|
target : The JID of the target. <str>
|
||||||
|
proxy_host : The hostname or the IP of the proxy. <str>
|
||||||
|
proxy_port : The port of the proxy. <str> or <int>
|
||||||
|
"""
|
||||||
|
# Because the xep_0065 plugin uses the proxy_port as string,
|
||||||
|
# the Proxy class accepts the proxy_port argument as a string
|
||||||
|
# or an integer. Here, we force to use the port as an integer.
|
||||||
|
proxy_port = int(proxy_port)
|
||||||
|
|
||||||
|
sock = socksocket()
|
||||||
|
sock.setproxy(PROXY_TYPE_SOCKS5, proxy, port=proxy_port)
|
||||||
|
|
||||||
|
# The hostname MUST be SHA1(SID + Requester JID + Target JID)
|
||||||
|
# where the output is hexadecimal-encoded (not binary).
|
||||||
|
digest = sha1()
|
||||||
|
digest.update(sid)
|
||||||
|
digest.update(str(requester))
|
||||||
|
digest.update(str(target))
|
||||||
|
|
||||||
|
dest = digest.hexdigest()
|
||||||
|
|
||||||
|
# The port MUST be 0.
|
||||||
|
sock.connect((dest, 0))
|
||||||
|
log.info('Socket connected.')
|
||||||
|
|
||||||
|
_close = sock.close
|
||||||
|
def close(*args, **kwargs):
|
||||||
|
with self._sessions_lock:
|
||||||
|
if sid in self._sessions:
|
||||||
|
del self._sessions[sid]
|
||||||
|
_close()
|
||||||
|
sock.close = close
|
||||||
|
|
||||||
|
self.xmpp.event('socks_connected', sid)
|
||||||
|
|
||||||
|
return sock
|
47
sleekxmpp/plugins/xep_0065/stanza.py
Normal file
47
sleekxmpp/plugins/xep_0065/stanza.py
Normal file
@ -0,0 +1,47 @@
|
|||||||
|
from sleekxmpp.jid import JID
|
||||||
|
from sleekxmpp.xmlstream import ElementBase, register_stanza_plugin
|
||||||
|
|
||||||
|
|
||||||
|
class Socks5(ElementBase):
|
||||||
|
name = 'query'
|
||||||
|
namespace = 'http://jabber.org/protocol/bytestreams'
|
||||||
|
plugin_attrib = 'socks'
|
||||||
|
interfaces = set(['sid', 'activate'])
|
||||||
|
sub_interfaces = set(['activate'])
|
||||||
|
|
||||||
|
def add_streamhost(self, jid, host, port):
|
||||||
|
sh = StreamHost(parent=self)
|
||||||
|
sh['jid'] = jid
|
||||||
|
sh['host'] = host
|
||||||
|
sh['port'] = port
|
||||||
|
|
||||||
|
|
||||||
|
class StreamHost(ElementBase):
|
||||||
|
name = 'streamhost'
|
||||||
|
namespace = 'http://jabber.org/protocol/bytestreams'
|
||||||
|
plugin_attrib = 'streamhost'
|
||||||
|
plugin_multi_attrib = 'streamhosts'
|
||||||
|
interfaces = set(['host', 'jid', 'port'])
|
||||||
|
|
||||||
|
def set_jid(self, value):
|
||||||
|
return self._set_attr('jid', str(value))
|
||||||
|
|
||||||
|
def get_jid(self):
|
||||||
|
return JID(self._get_attr('jid'))
|
||||||
|
|
||||||
|
|
||||||
|
class StreamHostUsed(ElementBase):
|
||||||
|
name = 'streamhost-used'
|
||||||
|
namespace = 'http://jabber.org/protocol/bytestreams'
|
||||||
|
plugin_attrib = 'streamhost_used'
|
||||||
|
interfaces = set(['jid'])
|
||||||
|
|
||||||
|
def set_jid(self, value):
|
||||||
|
return self._set_attr('jid', str(value))
|
||||||
|
|
||||||
|
def get_jid(self):
|
||||||
|
return JID(self._get_attr('jid'))
|
||||||
|
|
||||||
|
|
||||||
|
register_stanza_plugin(Socks5, StreamHost, iterable=True)
|
||||||
|
register_stanza_plugin(Socks5, StreamHostUsed)
|
1
sleekxmpp/thirdparty/__init__.py
vendored
1
sleekxmpp/thirdparty/__init__.py
vendored
@ -8,4 +8,5 @@ try:
|
|||||||
except:
|
except:
|
||||||
from sleekxmpp.thirdparty.gnupg import GPG
|
from sleekxmpp.thirdparty.gnupg import GPG
|
||||||
|
|
||||||
|
from sleekxmpp.thirdparty import socks
|
||||||
from sleekxmpp.thirdparty.mini_dateutil import tzutc, tzoffset, parse_iso
|
from sleekxmpp.thirdparty.mini_dateutil import tzutc, tzoffset, parse_iso
|
||||||
|
382
sleekxmpp/thirdparty/socks.py
vendored
Normal file
382
sleekxmpp/thirdparty/socks.py
vendored
Normal file
@ -0,0 +1,382 @@
|
|||||||
|
"""SocksiPy - Python SOCKS module.
|
||||||
|
Version 1.00
|
||||||
|
|
||||||
|
Copyright 2006 Dan-Haim. All rights reserved.
|
||||||
|
|
||||||
|
Redistribution and use in source and binary forms, with or without modification,
|
||||||
|
are permitted provided that the following conditions are met:
|
||||||
|
1. Redistributions of source code must retain the above copyright notice, this
|
||||||
|
list of conditions and the following disclaimer.
|
||||||
|
2. Redistributions in binary form must reproduce the above copyright notice,
|
||||||
|
this list of conditions and the following disclaimer in the documentation
|
||||||
|
and/or other materials provided with the distribution.
|
||||||
|
3. Neither the name of Dan Haim nor the names of his contributors may be used
|
||||||
|
to endorse or promote products derived from this software without specific
|
||||||
|
prior written permission.
|
||||||
|
|
||||||
|
THIS SOFTWARE IS PROVIDED BY DAN HAIM "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||||
|
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||||
|
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
|
||||||
|
EVENT SHALL DAN HAIM OR HIS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
|
||||||
|
INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
||||||
|
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA
|
||||||
|
OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
|
||||||
|
LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
|
||||||
|
OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMANGE.
|
||||||
|
|
||||||
|
|
||||||
|
This module provides a standard socket-like interface for Python
|
||||||
|
for tunneling connections through SOCKS proxies.
|
||||||
|
|
||||||
|
"""
|
||||||
|
|
||||||
|
"""
|
||||||
|
|
||||||
|
Minor modifications made by Christopher Gilbert (http://motomastyle.com/)
|
||||||
|
for use in PyLoris (http://pyloris.sourceforge.net/)
|
||||||
|
|
||||||
|
Minor modifications made by Mario Vilas (http://breakingcode.wordpress.com/)
|
||||||
|
mainly to merge bug fixes found in Sourceforge
|
||||||
|
|
||||||
|
"""
|
||||||
|
|
||||||
|
import socket
|
||||||
|
import struct
|
||||||
|
import sys
|
||||||
|
|
||||||
|
PROXY_TYPE_SOCKS4 = 1
|
||||||
|
PROXY_TYPE_SOCKS5 = 2
|
||||||
|
PROXY_TYPE_HTTP = 3
|
||||||
|
|
||||||
|
_defaultproxy = None
|
||||||
|
_orgsocket = socket.socket
|
||||||
|
|
||||||
|
class ProxyError(Exception): pass
|
||||||
|
class GeneralProxyError(ProxyError): pass
|
||||||
|
class Socks5AuthError(ProxyError): pass
|
||||||
|
class Socks5Error(ProxyError): pass
|
||||||
|
class Socks4Error(ProxyError): pass
|
||||||
|
class HTTPError(ProxyError): pass
|
||||||
|
|
||||||
|
_generalerrors = ("success",
|
||||||
|
"invalid data",
|
||||||
|
"not connected",
|
||||||
|
"not available",
|
||||||
|
"bad proxy type",
|
||||||
|
"bad input")
|
||||||
|
|
||||||
|
_socks5errors = ("succeeded",
|
||||||
|
"general SOCKS server failure",
|
||||||
|
"connection not allowed by ruleset",
|
||||||
|
"Network unreachable",
|
||||||
|
"Host unreachable",
|
||||||
|
"Connection refused",
|
||||||
|
"TTL expired",
|
||||||
|
"Command not supported",
|
||||||
|
"Address type not supported",
|
||||||
|
"Unknown error")
|
||||||
|
|
||||||
|
_socks5autherrors = ("succeeded",
|
||||||
|
"authentication is required",
|
||||||
|
"all offered authentication methods were rejected",
|
||||||
|
"unknown username or invalid password",
|
||||||
|
"unknown error")
|
||||||
|
|
||||||
|
_socks4errors = ("request granted",
|
||||||
|
"request rejected or failed",
|
||||||
|
"request rejected because SOCKS server cannot connect to identd on the client",
|
||||||
|
"request rejected because the client program and identd report different user-ids",
|
||||||
|
"unknown error")
|
||||||
|
|
||||||
|
def setdefaultproxy(proxytype=None, addr=None, port=None, rdns=True, username=None, password=None):
|
||||||
|
"""setdefaultproxy(proxytype, addr[, port[, rdns[, username[, password]]]])
|
||||||
|
Sets a default proxy which all further socksocket objects will use,
|
||||||
|
unless explicitly changed.
|
||||||
|
"""
|
||||||
|
global _defaultproxy
|
||||||
|
_defaultproxy = (proxytype, addr, port, rdns, username, password)
|
||||||
|
|
||||||
|
def wrapmodule(module):
|
||||||
|
"""wrapmodule(module)
|
||||||
|
Attempts to replace a module's socket library with a SOCKS socket. Must set
|
||||||
|
a default proxy using setdefaultproxy(...) first.
|
||||||
|
This will only work on modules that import socket directly into the namespace;
|
||||||
|
most of the Python Standard Library falls into this category.
|
||||||
|
"""
|
||||||
|
if _defaultproxy != None:
|
||||||
|
module.socket.socket = socksocket
|
||||||
|
else:
|
||||||
|
raise GeneralProxyError((4, "no proxy specified"))
|
||||||
|
|
||||||
|
class socksocket(socket.socket):
|
||||||
|
"""socksocket([family[, type[, proto]]]) -> socket object
|
||||||
|
Open a SOCKS enabled socket. The parameters are the same as
|
||||||
|
those of the standard socket init. In order for SOCKS to work,
|
||||||
|
you must specify family=AF_INET, type=SOCK_STREAM and proto=0.
|
||||||
|
"""
|
||||||
|
|
||||||
|
def __init__(self, family=socket.AF_INET, type=socket.SOCK_STREAM, proto=0, _sock=None):
|
||||||
|
_orgsocket.__init__(self, family, type, proto, _sock)
|
||||||
|
if _defaultproxy != None:
|
||||||
|
self.__proxy = _defaultproxy
|
||||||
|
else:
|
||||||
|
self.__proxy = (None, None, None, None, None, None)
|
||||||
|
self.__proxysockname = None
|
||||||
|
self.__proxypeername = None
|
||||||
|
|
||||||
|
def __recvall(self, count):
|
||||||
|
"""__recvall(count) -> data
|
||||||
|
Receive EXACTLY the number of bytes requested from the socket.
|
||||||
|
Blocks until the required number of bytes have been received.
|
||||||
|
"""
|
||||||
|
data = self.recv(count)
|
||||||
|
while len(data) < count:
|
||||||
|
d = self.recv(count-len(data))
|
||||||
|
if not d: raise GeneralProxyError((0, "connection closed unexpectedly"))
|
||||||
|
data = data + d
|
||||||
|
return data
|
||||||
|
|
||||||
|
def setproxy(self, proxytype=None, addr=None, port=None, rdns=True, username=None, password=None):
|
||||||
|
"""setproxy(proxytype, addr[, port[, rdns[, username[, password]]]])
|
||||||
|
Sets the proxy to be used.
|
||||||
|
proxytype - The type of the proxy to be used. Three types
|
||||||
|
are supported: PROXY_TYPE_SOCKS4 (including socks4a),
|
||||||
|
PROXY_TYPE_SOCKS5 and PROXY_TYPE_HTTP
|
||||||
|
addr - The address of the server (IP or DNS).
|
||||||
|
port - The port of the server. Defaults to 1080 for SOCKS
|
||||||
|
servers and 8080 for HTTP proxy servers.
|
||||||
|
rdns - Should DNS queries be preformed on the remote side
|
||||||
|
(rather than the local side). The default is True.
|
||||||
|
Note: This has no effect with SOCKS4 servers.
|
||||||
|
username - Username to authenticate with to the server.
|
||||||
|
The default is no authentication.
|
||||||
|
password - Password to authenticate with to the server.
|
||||||
|
Only relevant when username is also provided.
|
||||||
|
"""
|
||||||
|
self.__proxy = (proxytype, addr, port, rdns, username, password)
|
||||||
|
|
||||||
|
def __negotiatesocks5(self, destaddr, destport):
|
||||||
|
"""__negotiatesocks5(self,destaddr,destport)
|
||||||
|
Negotiates a connection through a SOCKS5 server.
|
||||||
|
"""
|
||||||
|
# First we'll send the authentication packages we support.
|
||||||
|
if (self.__proxy[4]!=None) and (self.__proxy[5]!=None):
|
||||||
|
# The username/password details were supplied to the
|
||||||
|
# setproxy method so we support the USERNAME/PASSWORD
|
||||||
|
# authentication (in addition to the standard none).
|
||||||
|
self.sendall(struct.pack('BBBB', 0x05, 0x02, 0x00, 0x02))
|
||||||
|
else:
|
||||||
|
# No username/password were entered, therefore we
|
||||||
|
# only support connections with no authentication.
|
||||||
|
self.sendall(struct.pack('BBB', 0x05, 0x01, 0x00))
|
||||||
|
# We'll receive the server's response to determine which
|
||||||
|
# method was selected
|
||||||
|
chosenauth = self.__recvall(2)
|
||||||
|
if chosenauth[0:1] != chr(0x05).encode():
|
||||||
|
self.close()
|
||||||
|
raise GeneralProxyError((1, _generalerrors[1]))
|
||||||
|
# Check the chosen authentication method
|
||||||
|
if chosenauth[1:2] == chr(0x00).encode():
|
||||||
|
# No authentication is required
|
||||||
|
pass
|
||||||
|
elif chosenauth[1:2] == chr(0x02).encode():
|
||||||
|
# Okay, we need to perform a basic username/password
|
||||||
|
# authentication.
|
||||||
|
self.sendall(chr(0x01).encode() + chr(len(self.__proxy[4])) + self.__proxy[4] + chr(len(self.__proxy[5])) + self.__proxy[5])
|
||||||
|
authstat = self.__recvall(2)
|
||||||
|
if authstat[0:1] != chr(0x01).encode():
|
||||||
|
# Bad response
|
||||||
|
self.close()
|
||||||
|
raise GeneralProxyError((1, _generalerrors[1]))
|
||||||
|
if authstat[1:2] != chr(0x00).encode():
|
||||||
|
# Authentication failed
|
||||||
|
self.close()
|
||||||
|
raise Socks5AuthError((3, _socks5autherrors[3]))
|
||||||
|
# Authentication succeeded
|
||||||
|
else:
|
||||||
|
# Reaching here is always bad
|
||||||
|
self.close()
|
||||||
|
if chosenauth[1] == chr(0xFF).encode():
|
||||||
|
raise Socks5AuthError((2, _socks5autherrors[2]))
|
||||||
|
else:
|
||||||
|
raise GeneralProxyError((1, _generalerrors[1]))
|
||||||
|
# Now we can request the actual connection
|
||||||
|
req = struct.pack('BBB', 0x05, 0x01, 0x00)
|
||||||
|
# If the given destination address is an IP address, we'll
|
||||||
|
# use the IPv4 address request even if remote resolving was specified.
|
||||||
|
try:
|
||||||
|
ipaddr = socket.inet_aton(destaddr)
|
||||||
|
req = req + chr(0x01).encode() + ipaddr
|
||||||
|
except socket.error:
|
||||||
|
# Well it's not an IP number, so it's probably a DNS name.
|
||||||
|
if self.__proxy[3]:
|
||||||
|
# Resolve remotely
|
||||||
|
ipaddr = None
|
||||||
|
req = req + chr(0x03).encode() + chr(len(destaddr)).encode() + destaddr
|
||||||
|
else:
|
||||||
|
# Resolve locally
|
||||||
|
ipaddr = socket.inet_aton(socket.gethostbyname(destaddr))
|
||||||
|
req = req + chr(0x01).encode() + ipaddr
|
||||||
|
req = req + struct.pack(">H", destport)
|
||||||
|
self.sendall(req)
|
||||||
|
# Get the response
|
||||||
|
resp = self.__recvall(4)
|
||||||
|
if resp[0:1] != chr(0x05).encode():
|
||||||
|
self.close()
|
||||||
|
raise GeneralProxyError((1, _generalerrors[1]))
|
||||||
|
elif resp[1:2] != chr(0x00).encode():
|
||||||
|
# Connection failed
|
||||||
|
self.close()
|
||||||
|
if ord(resp[1:2])<=8:
|
||||||
|
raise Socks5Error((ord(resp[1:2]), _socks5errors[ord(resp[1:2])]))
|
||||||
|
else:
|
||||||
|
raise Socks5Error((9, _socks5errors[9]))
|
||||||
|
# Get the bound address/port
|
||||||
|
elif resp[3:4] == chr(0x01).encode():
|
||||||
|
boundaddr = self.__recvall(4)
|
||||||
|
elif resp[3:4] == chr(0x03).encode():
|
||||||
|
resp = resp + self.recv(1)
|
||||||
|
boundaddr = self.__recvall(ord(resp[4:5]))
|
||||||
|
else:
|
||||||
|
self.close()
|
||||||
|
raise GeneralProxyError((1,_generalerrors[1]))
|
||||||
|
boundport = struct.unpack(">H", self.__recvall(2))[0]
|
||||||
|
self.__proxysockname = (boundaddr, boundport)
|
||||||
|
if ipaddr != None:
|
||||||
|
self.__proxypeername = (socket.inet_ntoa(ipaddr), destport)
|
||||||
|
else:
|
||||||
|
self.__proxypeername = (destaddr, destport)
|
||||||
|
|
||||||
|
def getproxysockname(self):
|
||||||
|
"""getsockname() -> address info
|
||||||
|
Returns the bound IP address and port number at the proxy.
|
||||||
|
"""
|
||||||
|
return self.__proxysockname
|
||||||
|
|
||||||
|
def getproxypeername(self):
|
||||||
|
"""getproxypeername() -> address info
|
||||||
|
Returns the IP and port number of the proxy.
|
||||||
|
"""
|
||||||
|
return _orgsocket.getpeername(self)
|
||||||
|
|
||||||
|
def getpeername(self):
|
||||||
|
"""getpeername() -> address info
|
||||||
|
Returns the IP address and port number of the destination
|
||||||
|
machine (note: getproxypeername returns the proxy)
|
||||||
|
"""
|
||||||
|
return self.__proxypeername
|
||||||
|
|
||||||
|
def __negotiatesocks4(self,destaddr,destport):
|
||||||
|
"""__negotiatesocks4(self,destaddr,destport)
|
||||||
|
Negotiates a connection through a SOCKS4 server.
|
||||||
|
"""
|
||||||
|
# Check if the destination address provided is an IP address
|
||||||
|
rmtrslv = False
|
||||||
|
try:
|
||||||
|
ipaddr = socket.inet_aton(destaddr)
|
||||||
|
except socket.error:
|
||||||
|
# It's a DNS name. Check where it should be resolved.
|
||||||
|
if self.__proxy[3]:
|
||||||
|
ipaddr = struct.pack("BBBB", 0x00, 0x00, 0x00, 0x01)
|
||||||
|
rmtrslv = True
|
||||||
|
else:
|
||||||
|
ipaddr = socket.inet_aton(socket.gethostbyname(destaddr))
|
||||||
|
# Construct the request packet
|
||||||
|
req = struct.pack(">BBH", 0x04, 0x01, destport) + ipaddr
|
||||||
|
# The username parameter is considered userid for SOCKS4
|
||||||
|
if self.__proxy[4] != None:
|
||||||
|
req = req + self.__proxy[4]
|
||||||
|
req = req + chr(0x00).encode()
|
||||||
|
# DNS name if remote resolving is required
|
||||||
|
# NOTE: This is actually an extension to the SOCKS4 protocol
|
||||||
|
# called SOCKS4A and may not be supported in all cases.
|
||||||
|
if rmtrslv:
|
||||||
|
req = req + destaddr + chr(0x00).encode()
|
||||||
|
self.sendall(req)
|
||||||
|
# Get the response from the server
|
||||||
|
resp = self.__recvall(8)
|
||||||
|
if resp[0:1] != chr(0x00).encode():
|
||||||
|
# Bad data
|
||||||
|
self.close()
|
||||||
|
raise GeneralProxyError((1,_generalerrors[1]))
|
||||||
|
if resp[1:2] != chr(0x5A).encode():
|
||||||
|
# Server returned an error
|
||||||
|
self.close()
|
||||||
|
if ord(resp[1:2]) in (91, 92, 93):
|
||||||
|
self.close()
|
||||||
|
raise Socks4Error((ord(resp[1:2]), _socks4errors[ord(resp[1:2]) - 90]))
|
||||||
|
else:
|
||||||
|
raise Socks4Error((94, _socks4errors[4]))
|
||||||
|
# Get the bound address/port
|
||||||
|
self.__proxysockname = (socket.inet_ntoa(resp[4:]), struct.unpack(">H", resp[2:4])[0])
|
||||||
|
if rmtrslv != None:
|
||||||
|
self.__proxypeername = (socket.inet_ntoa(ipaddr), destport)
|
||||||
|
else:
|
||||||
|
self.__proxypeername = (destaddr, destport)
|
||||||
|
|
||||||
|
def __negotiatehttp(self, destaddr, destport):
|
||||||
|
"""__negotiatehttp(self,destaddr,destport)
|
||||||
|
Negotiates a connection through an HTTP server.
|
||||||
|
"""
|
||||||
|
# If we need to resolve locally, we do this now
|
||||||
|
if not self.__proxy[3]:
|
||||||
|
addr = socket.gethostbyname(destaddr)
|
||||||
|
else:
|
||||||
|
addr = destaddr
|
||||||
|
self.sendall(("CONNECT " + addr + ":" + str(destport) + " HTTP/1.1\r\n" + "Host: " + destaddr + "\r\n\r\n").encode())
|
||||||
|
# We read the response until we get the string "\r\n\r\n"
|
||||||
|
resp = self.recv(1)
|
||||||
|
while resp.find("\r\n\r\n".encode()) == -1:
|
||||||
|
resp = resp + self.recv(1)
|
||||||
|
# We just need the first line to check if the connection
|
||||||
|
# was successful
|
||||||
|
statusline = resp.splitlines()[0].split(" ".encode(), 2)
|
||||||
|
if statusline[0] not in ("HTTP/1.0".encode(), "HTTP/1.1".encode()):
|
||||||
|
self.close()
|
||||||
|
raise GeneralProxyError((1, _generalerrors[1]))
|
||||||
|
try:
|
||||||
|
statuscode = int(statusline[1])
|
||||||
|
except ValueError:
|
||||||
|
self.close()
|
||||||
|
raise GeneralProxyError((1, _generalerrors[1]))
|
||||||
|
if statuscode != 200:
|
||||||
|
self.close()
|
||||||
|
raise HTTPError((statuscode, statusline[2]))
|
||||||
|
self.__proxysockname = ("0.0.0.0", 0)
|
||||||
|
self.__proxypeername = (addr, destport)
|
||||||
|
|
||||||
|
def connect(self, destpair):
|
||||||
|
"""connect(self, despair)
|
||||||
|
Connects to the specified destination through a proxy.
|
||||||
|
destpar - A tuple of the IP/DNS address and the port number.
|
||||||
|
(identical to socket's connect).
|
||||||
|
To select the proxy server use setproxy().
|
||||||
|
"""
|
||||||
|
# Do a minimal input check first
|
||||||
|
if (not type(destpair) in (list,tuple)) or (len(destpair) < 2) or (type(destpair[0]) != type('')) or (type(destpair[1]) != int):
|
||||||
|
raise GeneralProxyError((5, _generalerrors[5]))
|
||||||
|
if self.__proxy[0] == PROXY_TYPE_SOCKS5:
|
||||||
|
if self.__proxy[2] != None:
|
||||||
|
portnum = self.__proxy[2]
|
||||||
|
else:
|
||||||
|
portnum = 1080
|
||||||
|
_orgsocket.connect(self, (self.__proxy[1], portnum))
|
||||||
|
self.__negotiatesocks5(destpair[0], destpair[1])
|
||||||
|
elif self.__proxy[0] == PROXY_TYPE_SOCKS4:
|
||||||
|
if self.__proxy[2] != None:
|
||||||
|
portnum = self.__proxy[2]
|
||||||
|
else:
|
||||||
|
portnum = 1080
|
||||||
|
_orgsocket.connect(self,(self.__proxy[1], portnum))
|
||||||
|
self.__negotiatesocks4(destpair[0], destpair[1])
|
||||||
|
elif self.__proxy[0] == PROXY_TYPE_HTTP:
|
||||||
|
if self.__proxy[2] != None:
|
||||||
|
portnum = self.__proxy[2]
|
||||||
|
else:
|
||||||
|
portnum = 8080
|
||||||
|
_orgsocket.connect(self,(self.__proxy[1], portnum))
|
||||||
|
self.__negotiatehttp(destpair[0], destpair[1])
|
||||||
|
elif self.__proxy[0] == None:
|
||||||
|
_orgsocket.connect(self, (destpair[0], destpair[1]))
|
||||||
|
else:
|
||||||
|
raise GeneralProxyError((4, _generalerrors[4]))
|
Loading…
Reference in New Issue
Block a user