Day 16 - Proxy VII

15th鐵人賽 python系列文章 black hat python python for cybersecurity

monles_yen

2023-09-16 18:48:40

365 瀏覽

分享至

This series of tutorials is aimed to share the notes taken while I was learning python for cybersecurity with the books - Black Hat Python.
這系列教學文章為學習筆記+延伸資源，旨在分享學習書籍 Black Hat Python時所思所學，也希望能幫助想了解Python和資安的大大們入門。

This tutorail has also been written in English in Medium.

看文前, 你應該要具備以下基礎能力:

Let's get started! 開始吧!

Proxy VII

Whole code

def server_loop(local_host, local_port, remote_host, remote_port, receive_first):
    server = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    try:
        server.bind((local_host, local_port))
    except Exception as e:
        print("[!!] Failed to listen on %s:%d" % (local_host, local_port))
        print("[!!] Check for other listening sockets or correct permissions.")
        print(e)
        sys.exit(0)

    print("[*] Listening on %s:%d" % (local_host, local_port))
    server.listen(5)
    while True:
        client_socket, addr = server.accept()
        print("> Received incoming connection from %s:%d" % (addr[0], addr[1]))
        
        proxy_thread = threading.Thread(
            target=proxy_handler,
            args=(client_socket, remote_host,
                  remote_port, receive_first))
        proxy_thread.start()

1.

server = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

建立一個socket

2.

server.bind((local_host, local_port))

The socket binds to the local host and listens.
socket綁定在當地host並聆聽。

3.

while True:
        client_socket, addr = server.accept()
        print("> Received incoming connection from %s:%d" % (addr[0], addr[1]))
        
        proxy_thread = threading.Thread(
            target=proxy_handler,
            args=(client_socket, remote_host,
                  remote_port, receive_first))
        proxy_thread.start()

In the main loop, when a fresh connection request comes in, we hand it off to the proxy_handler in a raw thread, which does all the sending and receiving of juicy bits to either side of the data stream.