首页
学习
活动
专区
圈层
工具
发布
首页
学习
活动
专区
圈层
工具
MCP广场
社区首页 >问答首页 >Probelms:使用Blackhat Python3在Python3中重新创建Netcat

Probelms:使用Blackhat Python3在Python3中重新创建Netcat
EN

Stack Overflow用户
提问于 2022-02-21 19:28:54
回答 1查看 294关注 0票数 0

帮助我是个初学者,我在AWS免费层上运行kali,我尝试用python重新创建netcat。我能够编译它,但是在运行它时,只有-h命令才能工作,它没有侦听(-l)。请帮帮忙。我添加了一些随机的文本,因为它不允许我提交这个问题。我用的是一本书“黑帽蟒”和“你管”系列。

代码语言:javascript
运行
复制
import argparse
import socket
import shlex
import subprocess
import sys
import textwrap
import threading

def execute(cmd):
    cmd = cmd.strip()
    if not cmd:
        return
    output = subprocess.check_output(shlex.split(cmd),stderr=subprocess.STDOUT)
    return output.decode()

# the engine of netcat
class Netcat:
    def __init__(self,args,buffer=None):
        self.args = args
        self.buffer = buffer
        self.socket = socket.socket(socket.AF_INET, sock.SOCK_STREAM)
        self.socket.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
        
    def run(self):
        if self.args.listen:
            self.listen()
        else:
            self.send()
                    
    #if we are not running a listener
    def send(self):
        self.socket.connect((self.args.target , self.args.port))
        if self.buffer:
            self.socket.send(self.buffer)
            try:
                while True:
                    recv_len = 1
                    response = ''
                    while recv_len:
                        data = self.socket.recv(4096)
                        recv_len = len(data)
                        response += data.decode()
                        if recv_len < 4096:
                            break
                        if response:
                            print(response)
                            buffer = input('>')
                            buffer += '\n'
                            self.socket.send(buffer.encode())
            except KeyboardInterrupt:   
                print('User terminated.')
                self.socket.close()
                sys.exit()
                                                
    #if we are running a listener
    def listen(self):
        self.socket.bind((self.args.target, self.args.port))
        self.socket.listen(5)
        while True:
            client_socket, _ = self.socket.accept()
            client_threading = threading.Thread(target=self.handle,args=(client_socket,))
            client_threading.start()
                        
    def handle(self, client_socket):
        if self.args.execute:
            output = execute(self.args.execute)
            client_socket.send(output.encode())
                                
        #if argument for file upload is passed   
        elif self.args.upload:
            file_buffer = b''
            while True:
                data = client_socket.recv(4096)
                if data:
                    file_buffer += data
                    print(len(file_buffer))
                else:
                    break
                                    
            with open(self.args.upload, 'wb') as f:
                f.write(file_buffer)
            message = f'Saved file {self.args.upload}'
            client_socket.send(message.encode())
                                        
        elif self.args.command:
            cmd_buffer = b''
            while True:
                try:
                    client.socket.send(b' #> ' )
                    while '\n' not in cmd_buffer.decode():
                        cmd_buffer += client_socket.recv(64)
                    response = execute(cmd_buffer.decode())
                    if response:
                        client_socket.send(response.encode())
                    cmd_buffer = b''
                except Exception as e:
                    print(f'server killed {e}')
                    self.socket.close()
                    sys.exit()
                                        
                                    
                                                
if __name__ == '__main__':
    parser = argparse.ArgumentParser(
    description='BHP Net Tool',
    formatter_class=argparse.RawDescriptionHelpFormatter,
    epilog=textwrap.dedent('''Example:
    netcat.py -t 192.16.1.108 -p 5555 -l -c #command shell
    netcat.py -t 192.16.1.108 -p 5555 -l -u=mytest.text #uplod file
    netcat.py -t 192.16.1.108 -p 5555 -l -e=\"cat /etc/passwd\" #execute command
    echo 'ABC' | ./netcat.py -t 192.16.1.108 -p 135 #echo text to server port 135
    netcat.py -t 192.16.1.108 -p 5555 #connect to server
    '''))
    parser.add_argument('-c', '--command', action='store_true', help='command shell')
    parser.add_argument('-e', '--execute', help='execute specified command')
    parser.add_argument('-l', '--listen', action='store_true', help='listen')
    parser.add_argument('-p', '--port', type=int,default=5555, help='specified port')
    parser.add_argument('-t', '--target', default='192.168.1.203', help='specified IP')
    parser.add_argument('-u', '--upload', help='upload file')
    args = parser.parse_args()
    
    if args.listen:
        buffer = ''
    else:
        buffer = sys.stdin.read()
            
        nc = NetCat(args, buffer.encode())
EN

回答 1

Stack Overflow用户

回答已采纳

发布于 2022-02-22 21:28:12

您不会在脚本的任何一点调用run函数。

这里还犯了一个简单的语法错误:

代码语言:javascript
运行
复制
[...]    
elif self.args.command:
            cmd_buffer = b''
            while True:
                try:
                    client.socket.send(b' #> ' )
                    while '\n' not in cmd_buffer.decode():
                        cmd_buffer += client_socket.recv(64)
                    response = execute(cmd_buffer.decode())
                    if response:
                        client_socket.send(response.encode())
                    cmd_buffer = b''
                except Exception as e:
                    print(f'server killed {e}')
                    self.socket.close()
                    sys.exit()

这是client_socket.send(b' #> ' )而不是client.socket.send(b' #> ' )

希望我能帮上忙!

票数 0
EN
页面原文内容由Stack Overflow提供。腾讯云小微IT领域专用引擎提供翻译支持
原文链接:

https://stackoverflow.com/questions/71211986

复制
相关文章

相似问题

领券
问题归档专栏文章快讯文章归档关键词归档开发者手册归档开发者手册 Section 归档