cowrie/cowrie
1
0
Fork 0
mirror of https://github.com/cowrie/cowrie.git synced 2025-07-01 18:07:27 -04:00
Code Issues Packages Projects Releases Wiki Activity

Add SSL Support

Browse Source
This commit is contained in:
Max Duijsens
2015-08-30 15:49:21 +02:00
parent 60af26cf56
commit d0a2b836e6
2 changed files with 26 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
cowrie/commands/curl.py
View File

@ -12,9 +12,11 @@ import getopt
import hashlib import hashlib
from twisted.web import client from twisted.web import client
from twisted.internet import reactor from twisted.internet import reactor, ssl
from twisted.python import log from twisted.python import log
from OpenSSL import SSL
from cowrie.core.honeypot import HoneyPotCommand from cowrie.core.honeypot import HoneyPotCommand
from cowrie.core.fs import * from cowrie.core.fs import *
@ -112,11 +114,7 @@ class command_curl(HoneyPotCommand):
host = parsed.hostname host = parsed.hostname
port = parsed.port or (443 if scheme == 'https' else 80) port = parsed.port or (443 if scheme == 'https' else 80)
path = parsed.path or '/' path = parsed.path or '/'
if scheme == 'https': if scheme != 'http' and scheme != 'https':
self.writeln('Sorry, SSL not supported in this release')
self.exit()
return None
elif scheme != 'http':
raise exceptions.NotImplementedError raise exceptions.NotImplementedError
except: except:
self.writeln('%s: Unsupported scheme.' % (url,)) self.writeln('%s: Unsupported scheme.' % (url,))
@ -132,8 +130,15 @@ class command_curl(HoneyPotCommand):
out_addr = None out_addr = None
if self.honeypot.env.cfg.has_option('honeypot', 'out_addr'): if self.honeypot.env.cfg.has_option('honeypot', 'out_addr'):
out_addr = (self.honeypot.env.cfg.get('honeypot', 'out_addr'), 0) out_addr = (self.honeypot.env.cfg.get('honeypot', 'out_addr'), 0)
self.connection = reactor.connectTCP(
host, port, factory, bindAddress=out_addr) if scheme == 'https':
contextFactory = ssl.ClientContextFactory()
contextFactory.method = SSL.SSLv23_METHOD
reactor.connectSSL(host, port, factory, contextFactory)
else: #can only be http
self.connection = reactor.connectTCP(
host, port, factory, bindAddress=out_addr)
return factory.deferred return factory.deferred
def handle_CTRL_C(self): def handle_CTRL_C(self):

21
cowrie/commands/wget.py
View File

@ -10,9 +10,11 @@ import getopt
import hashlib import hashlib
from twisted.web import client from twisted.web import client
from twisted.internet import reactor from twisted.internet import reactor, ssl
from twisted.python import log from twisted.python import log
from OpenSSL import SSL
from cowrie.core.honeypot import HoneyPotCommand from cowrie.core.honeypot import HoneyPotCommand
from cowrie.core.fs import * from cowrie.core.fs import *
@ -112,11 +114,7 @@ class command_wget(HoneyPotCommand):
host = parsed.hostname host = parsed.hostname
port = parsed.port or (443 if scheme == 'https' else 80) port = parsed.port or (443 if scheme == 'https' else 80)
path = parsed.path or '/' path = parsed.path or '/'
if scheme == 'https': if scheme != 'http' and scheme != 'https':
self.writeln('Sorry, SSL not supported in this release')
self.exit()
return None
elif scheme != 'http':
raise exceptions.NotImplementedError raise exceptions.NotImplementedError
except: except:
self.writeln('%s: Unsupported scheme.' % (url,)) self.writeln('%s: Unsupported scheme.' % (url,))
@ -132,8 +130,15 @@ class command_wget(HoneyPotCommand):
out_addr = None out_addr = None
if self.honeypot.env.cfg.has_option('honeypot', 'out_addr'): if self.honeypot.env.cfg.has_option('honeypot', 'out_addr'):
out_addr = (self.honeypot.env.cfg.get('honeypot', 'out_addr'), 0) out_addr = (self.honeypot.env.cfg.get('honeypot', 'out_addr'), 0)
self.connection = reactor.connectTCP(
host, port, factory, bindAddress=out_addr) if scheme == 'https':
contextFactory = ssl.ClientContextFactory()
contextFactory.method = SSL.SSLv23_METHOD
reactor.connectSSL(host, port, factory, contextFactory)
else: #can only be http, since we raised an error above for unknown schemes
self.connection = reactor.connectTCP(
host, port, factory, bindAddress=out_addr)
return factory.deferred return factory.deferred
def handle_CTRL_C(self): def handle_CTRL_C(self):