github/bettercap
1
0
Fork 0
mirror of https://github.com/bettercap/bettercap synced 2025-08-20 21:43:18 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

new: new upnp discovery response parser

Browse source
This commit is contained in:
evilsocket 2018-09-13 12:51:48 +02:00
commit 1da54080b9
No known key found for this signature in database
GPG key ID: 1564D7F30393A456
2 changed files with 39 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
modules/net_sniff_parsers.go
View file

@ -49,6 +49,8 @@ func udpParser(ip *layers.IPv4, pkt gopacket.Packet, verbose bool) {
return return
} else if krb5Parser(ip, pkt, udp) { } else if krb5Parser(ip, pkt, udp) {
return return
} else if upnpParser(ip, pkt, udp) {
return
} else if verbose { } else if verbose {
NewSnifferEvent( NewSnifferEvent(
pkt.Metadata().Timestamp, pkt.Metadata().Timestamp,

37
modules/net_sniff_upnp.go Normal file
View file

@ -0,0 +1,37 @@
package modules
import (
"fmt"
"github.com/bettercap/bettercap/core"
"github.com/bettercap/bettercap/packets"
"github.com/google/gopacket"
"github.com/google/gopacket/layers"
)
func upnpParser(ip *layers.IPv4, pkt gopacket.Packet, udp *layers.UDP) bool {
if data := packets.UPNPGetMeta(pkt); data != nil && len(data) > 0 {
s := ""
for name, value := range data {
s += fmt.Sprintf("%s:%s ", core.Blue(name), core.Yellow(value))
}
NewSnifferEvent(
pkt.Metadata().Timestamp,
"upnp",
ip.SrcIP.String(),
ip.DstIP.String(),
nil,
"%s %s -> %s : %s",
core.W(core.BG_RED+core.FG_BLACK, "upnp"),
vIP(ip.SrcIP),
vIP(ip.DstIP),
core.Trim(s),
).Push()
return true
}
return false
}