cowrie/cowrie
1
0
Fork 0
mirror of https://github.com/cowrie/cowrie.git synced 2025-07-01 18:07:27 -04:00
Code Issues Packages Projects Releases Wiki Activity

implement subshell (primitively)

Browse Source
This commit is contained in:
Michel Oosterhof
2019-10-03 20:04:02 +03:00
parent 0af419bbb1
commit 7d3ddffb8d
1 changed files with 31 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

37
src/cowrie/shell/honeypot.py
View File

@ -42,23 +42,40 @@ class HoneyPotShell(object):
self.lexer.wordchars += '@%{}=$:+^,()' self.lexer.wordchars += '@%{}=$:+^,()'
tokens = [] tokens = []
parc_tokens = [] # stack of parcial command substitution tokens parc_tokens = [] # stack of parcial command substitution tokens
last_token = False # control the command substitution tokens processing subshell_tokens = [] # stack of subshell tokens
last_parc_token = False # control the command substitution tokens processing
last_subshell_token = False # control the subshell token processing
while True: while True:
try: try:
if not last_token: if not last_parc_token:
# if we are processing the command substitution dont read token # if we are processing the command substitution dont read token
tok = self.lexer.get_token() tok = self.lexer.get_token()
# log.msg("tok: %s" % (repr(tok))) # log.msg("tok: %s" % (repr(tok)))
if len(subshell_tokens):
if tok:
if tok.endswith(')'):
subshell_tokens.append(tok[:-1])
last_subshell_token = True
else:
subshell_tokens.append(tok)
if not tok or last_subshell_token:
cmds = " ".join(subshell_tokens)
self.cmdpending.append((subshell_tokens))
last_subshell_token = False
subshell_tokens = []
continue
if len(parc_tokens): if len(parc_tokens):
if tok: if tok:
if tok.endswith(')'): if tok.endswith(')'):
parc_tokens.append(tok[:-1]) parc_tokens.append(tok[:-1])
last_token = True last_parc_token = True
else: else:
parc_tokens.append(tok) parc_tokens.append(tok)
if not tok or last_token: if not tok or last_parc_token:
cmds = " ".join(parc_tokens) cmds = " ".join(parc_tokens)
# instantiate new shell with redirect output # instantiate new shell with redirect output
self.protocol.cmdstack.append(HoneyPotShell(self.protocol, interactive=False, redirect=True)) self.protocol.cmdstack.append(HoneyPotShell(self.protocol, interactive=False, redirect=True))
@ -67,7 +84,7 @@ class HoneyPotShell(object):
# remove the shell # remove the shell
result = self.protocol.cmdstack.pop() result = self.protocol.cmdstack.pop()
tokens.append(result.protocol.pp.redirected_data.decode()[:-1]) tokens.append(result.protocol.pp.redirected_data.decode()[:-1])
last_token = False last_parc_token = False
parc_tokens = [] parc_tokens = []
continue continue
@ -108,6 +125,14 @@ class HoneyPotShell(object):
break break
elif tok == '$?': elif tok == '$?':
tok = "0" tok = "0"
elif tok[0] == '(':
subshell_tokens.append(tok[1:])
if tok[-1] == ')':
last_parc_token = True
tok = None
continue
elif tok[0] == '$': elif tok[0] == '$':
envRex = re.compile(r'^\$\(([_a-zA-Z0-9]+)*') envRex = re.compile(r'^\$\(([_a-zA-Z0-9]+)*')
envSearch = envRex.search(tok) envSearch = envRex.search(tok)
@ -115,7 +140,7 @@ class HoneyPotShell(object):
envMatch = envSearch.group(1) envMatch = envSearch.group(1)
parc_tokens.append(envMatch) parc_tokens.append(envMatch)
if tok[-1] == ')': if tok[-1] == ')':
last_token = True last_parc_token = True
tok = None tok = None
continue continue
envRex = re.compile(r'^\$([_a-zA-Z0-9]+)$') envRex = re.compile(r'^\$([_a-zA-Z0-9]+)$')