Day 05 - TCP伺服器(Server) & 客戶端(Client)

15th鐵人賽 python for cybersecurity 為駭而生 - python black hat python

monles_yen

2023-09-06 04:00:02

876 瀏覽

分享至

Sharpen Python skills in the field of cybersecurity.
讓我們在資安領域磨利Python技術。

看文前, 你應該要具備以下基礎能力:

Let's get started! 開始吧!

如果你想複習什是TCP和UDP...

⭐ 可以查看之前的教學

TCP Server

🔸建伺服器(Server)

在Python建伺服器(Server)，就和建立客戶端一樣簡單(參考這一篇)

🔸當遇見下列情況，推薦使用自己建的伺服器:

寫指令殼層(Writing command shells)
寫代理伺服器(Crafting a proxy)

###🔸建立步驟，如下列所示:

傳送我們希望伺服器聆聽(listen)的 IP位址(IP address) 和通訊埠(port)
告訴伺服器開始聆聽(start listening)，連結過來的最大積壓工作數量設在5(with a maximum backlog of connections set to 5)
當伺服器在等待到來的連結(an coming connection)時，將伺服器放在主要迴圈(這裡指while loop)
客戶端連接過來時，我們接收客戶端socket(client socket) - 來自變數client, 以及遠端連結細節(remote connection details)--來自變數address
建立新的執行緒物件(thread object) - 指向函式handle_client，這裡使用客戶端socket(client socket)當作引數(argument)傳送
開始執行緒(thread), 以此handle客戶端連結(client connection), 此時主要迴圈已準備好handle更多其他連結(connection)
當函式handle_client接收到了，他會傳送一個簡單的訊息回傳給客戶端

# tcp_server.py
import socket
import threading

bind_ip = "0.0.0.0"
bind_port = 9998

server = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

server.bind((bind_ip, bind_port))

server.listen(5)

print("[*] Listening on %s:%d" % (bind_ip, bind_port))

# this is our client handling thread
def handle_client(client_socket):
    # just print out what the client sends
    request = client_socket.recv(1024)

    print("[*] Received: %s" % request)

    # send back a packet
    client_socket.send(b"ACK!")
    print(client_socket.getpeername())
    client_socket.close()

while True:
    client, addr = server.accept()

    print("[*] Accepted connection from: %s:%d" % (addr[0], addr[1]))

    # spin up our client thread to handle incoming data
    client_handler = threading.Thread(target=handle_client, args=(client,))
    client_handler.start()
TCP Client

# tcp_client.py

import socket

target_host = "127.0.0.1"
target_port = 9998

# create a socket object
client = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

# connect the client
client.connect((target_host, target_port))

# send some data
client.send(b"GET / HTTP/1.1 \r\nHost: hacker.com\r\n\r\n")

# receive data
response = client.recv(4096)

print(response.decode())
client.close()

先跑伺服器