|
@@ -0,0 +1,109 @@
|
|
|
+
|
|
|
+
|
|
|
+import TorControl
|
|
|
+import threading
|
|
|
+import socket
|
|
|
+import struct
|
|
|
+import random
|
|
|
+
|
|
|
+SOCKS_PORT=9050
|
|
|
+CONTROL_PORT=9051
|
|
|
+
|
|
|
+def runSocks4A(nonce, targetHost, targetPort, targetURL):
|
|
|
+ s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
|
|
|
+ s.connect(("127.0.0.1", SOCKS_PORT))
|
|
|
+ socksheader = struct.pack("!BBHL", 4, 0x01, targetPort, 1)
|
|
|
+ username = ""
|
|
|
+ socksheader = "%s%s\x00%s\x00" %(socksheader, username, nonce)
|
|
|
+ s.send(socksheader)
|
|
|
+ response = s.recv(8)
|
|
|
+ version,status,port=struct.unpack("!BBH",response[:4])
|
|
|
+ if status != 90:
|
|
|
+ print "Error: non-successful SOCKS status"
|
|
|
+ s.close()
|
|
|
+ return 0
|
|
|
+
|
|
|
+ s.send("GET %s HTTP/1.0\r\nHost: %s\r\n\r\n"%(targetURL,targetHost))
|
|
|
+ while 1:
|
|
|
+ r = s.recv(1024)
|
|
|
+ if not r:
|
|
|
+ s.close()
|
|
|
+ return 1
|
|
|
+
|
|
|
+HOSTS_TO_TEST = [ "moria1", "mordor", "tor26"]
|
|
|
+EXITS_TO_TEST = [ "pvt", ]
|
|
|
+TARGETS = [ ("www.seul.org", "/"), ]
|
|
|
+
|
|
|
+CIRCS_AT_A_TIME = 3
|
|
|
+CIRC_LEN = 3
|
|
|
+
|
|
|
+def launchCirc(s):
|
|
|
+ htt = HOSTS_TO_TEST[:]
|
|
|
+ random.shuffle(htt)
|
|
|
+ path = htt[:CIRC_LEN-1]+[random.choice(EXITS_TO_TEST)]
|
|
|
+ circid = TorControl.extend_circuit(s, 0, path)
|
|
|
+ return circid, path
|
|
|
+
|
|
|
+def runControl(s):
|
|
|
+ circs = {}
|
|
|
+ streams = {}
|
|
|
+ _h = lambda body,circs=circs,streams=streams,s=s:handleEvent(s,body,
|
|
|
+ circs,streams)
|
|
|
+ TorControl._event_handler = _h
|
|
|
+ TorControl.set_events(s,
|
|
|
+ [TorControl.EVENT_TYPE.CIRCSTATUS,
|
|
|
+ TorControl.EVENT_TYPE.STREAMSTATUS])
|
|
|
+ TorControl.set_option(s,"__LeaveStreamsUnattached 1")
|
|
|
+ while 1:
|
|
|
+ while len(circs) < CIRCS_AT_A_TIME:
|
|
|
+ c,p = launchCirc(s)
|
|
|
+ print "launching circuit %s to %s"%(c,p)
|
|
|
+ circs[c]=p
|
|
|
+ _, tp, body = TorControl.receive_message(s)
|
|
|
+ if tp == TorControl.MSG_TYPE.EVENT:
|
|
|
+ handleEvent(s, body, circs, streams)
|
|
|
+
|
|
|
+def handleEvent(s, body, circs, streams):
|
|
|
+ event, args = TorControl.unpack_event(body)
|
|
|
+ if event == TorControl.EVENT_TYPE.STREAMSTATUS:
|
|
|
+ status, ident, target = args
|
|
|
+ print "Got stream event:",TorControl.STREAM_STATUS.nameOf[status],\
|
|
|
+ ident,target
|
|
|
+ if status in (TorControl.STREAM_STATUS.NEW_CONNECT,
|
|
|
+ TorControl.STREAM_STATUS.NEW_RESOLVE,
|
|
|
+ TorControl.STREAM_STATUS.DETACHED):
|
|
|
+ if not target.endswith(".exnonce"):
|
|
|
+ TorControl.attach_stream(s, ident, 0)
|
|
|
+ else:
|
|
|
+ circid, (host,url) = streams[target]
|
|
|
+ TorControl.redirect_stream(s, ident, host)
|
|
|
+ TorControl.attach_stream(s, ident, circid)
|
|
|
+ elif event == TorControl.EVENT_TYPE.CIRCSTATUS:
|
|
|
+ status, ident, path = args
|
|
|
+ print "Got circuit event",TorControl.CIRC_STATUS.nameOf[status],\
|
|
|
+ ident,path
|
|
|
+ if status in (TorControl.CIRC_STATUS.CLOSED,
|
|
|
+ TorControl.CIRC_STATUS.FAILED):
|
|
|
+ if circs.has_key(ident):
|
|
|
+ print "Circuit failed."
|
|
|
+ del circs[ident]
|
|
|
+ elif status == TorControl.CIRC_STATUS.BUILT:
|
|
|
+ nonce = random.randint(1,100000000)
|
|
|
+ nonce = "%s.exnonce" % nonce
|
|
|
+ host,url = random.choice(TARGETS)
|
|
|
+ streams[nonce] = ident, (host,url)
|
|
|
+ print "Launching socks4a connection"
|
|
|
+ t = threading.Thread(target=runSocks4A, args=(nonce, host, 80, url))
|
|
|
+ t.setDaemon(1)
|
|
|
+ t.start()
|
|
|
+
|
|
|
+
|
|
|
+def run():
|
|
|
+ s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
|
|
|
+ s.connect(("127.0.0.1", CONTROL_PORT))
|
|
|
+ TorControl.authenticate(s)
|
|
|
+ runControl(s)
|
|
|
+
|
|
|
+if __name__ == '__main__':
|
|
|
+ run()
|
|
|
+
|