mirror of
https://github.com/SickGear/SickGear.git
synced 2024-12-01 08:53:37 +00:00
Merge pull request #881 from JackDandy/feature/UpdateSocks
Update socks from SocksiPy 1.0 to PySocks 1.6.5 (b4323df).
This commit is contained in:
commit
204b4ad425
4 changed files with 882 additions and 393 deletions
|
@ -22,6 +22,7 @@
|
||||||
* Update Requests library 2.9.1 (a1c9b84) to 2.13.0 (fc54869)
|
* Update Requests library 2.9.1 (a1c9b84) to 2.13.0 (fc54869)
|
||||||
* Update SimpleJSON library 3.8.1 (6022794) to 3.10.0 (c52efea)
|
* Update SimpleJSON library 3.8.1 (6022794) to 3.10.0 (c52efea)
|
||||||
* Update Six compatibility library 1.10.0 (r405) to 1.10.0 (r433)
|
* Update Six compatibility library 1.10.0 (r405) to 1.10.0 (r433)
|
||||||
|
* Update socks from SocksiPy 1.0 to PySocks 1.6.5 (b4323df)
|
||||||
|
|
||||||
|
|
||||||
[develop changelog]
|
[develop changelog]
|
||||||
|
|
|
@ -1,393 +0,0 @@
|
||||||
"""SocksiPy - Python SOCKS module.
|
|
||||||
Version 1.00
|
|
||||||
|
|
||||||
Copyright 2006 Dan-Haim. All rights reserved.
|
|
||||||
|
|
||||||
Redistribution and use in source and binary forms, with or without modification,
|
|
||||||
are permitted provided that the following conditions are met:
|
|
||||||
1. Redistributions of source code must retain the above copyright notice, this
|
|
||||||
list of conditions and the following disclaimer.
|
|
||||||
2. Redistributions in binary form must reproduce the above copyright notice,
|
|
||||||
this list of conditions and the following disclaimer in the documentation
|
|
||||||
and/or other materials provided with the distribution.
|
|
||||||
3. Neither the name of Dan Haim nor the names of his contributors may be used
|
|
||||||
to endorse or promote products derived from this software without specific
|
|
||||||
prior written permission.
|
|
||||||
|
|
||||||
THIS SOFTWARE IS PROVIDED BY DAN HAIM "AS IS" AND ANY EXPRESS OR IMPLIED
|
|
||||||
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
|
||||||
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
|
|
||||||
EVENT SHALL DAN HAIM OR HIS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
|
|
||||||
INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
|
||||||
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA
|
|
||||||
OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
|
|
||||||
LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
|
|
||||||
OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMANGE.
|
|
||||||
|
|
||||||
|
|
||||||
This module provides a standard socket-like interface for Python
|
|
||||||
for tunneling connections through SOCKS proxies.
|
|
||||||
|
|
||||||
"""
|
|
||||||
|
|
||||||
"""
|
|
||||||
|
|
||||||
Minor modifications made by Christopher Gilbert (http://motomastyle.com/)
|
|
||||||
for use in PyLoris (http://pyloris.sourceforge.net/)
|
|
||||||
|
|
||||||
Minor modifications made by Mario Vilas (http://breakingcode.wordpress.com/)
|
|
||||||
mainly to merge bug fixes found in Sourceforge
|
|
||||||
|
|
||||||
"""
|
|
||||||
|
|
||||||
import re
|
|
||||||
import socket
|
|
||||||
import struct
|
|
||||||
import sys
|
|
||||||
|
|
||||||
PROXY_TYPE_SOCKS4 = 1
|
|
||||||
PROXY_TYPE_SOCKS5 = 2
|
|
||||||
PROXY_TYPE_HTTP = 3
|
|
||||||
|
|
||||||
PROXY_REGEX = re.compile(r"^(([^:/?#]+):)?(//([^/?#]*):([^/?#]*))?")
|
|
||||||
|
|
||||||
_defaultproxy = None
|
|
||||||
_orgsocket = socket.socket
|
|
||||||
|
|
||||||
class ProxyError(Exception): pass
|
|
||||||
class GeneralProxyError(ProxyError): pass
|
|
||||||
class Socks5AuthError(ProxyError): pass
|
|
||||||
class Socks5Error(ProxyError): pass
|
|
||||||
class Socks4Error(ProxyError): pass
|
|
||||||
class HTTPError(ProxyError): pass
|
|
||||||
|
|
||||||
_generalerrors = ("success",
|
|
||||||
"invalid data",
|
|
||||||
"not connected",
|
|
||||||
"not available",
|
|
||||||
"bad proxy type",
|
|
||||||
"bad input")
|
|
||||||
|
|
||||||
_socks5errors = ("succeeded",
|
|
||||||
"general SOCKS server failure",
|
|
||||||
"connection not allowed by ruleset",
|
|
||||||
"Network unreachable",
|
|
||||||
"Host unreachable",
|
|
||||||
"Connection refused",
|
|
||||||
"TTL expired",
|
|
||||||
"Command not supported",
|
|
||||||
"Address type not supported",
|
|
||||||
"Unknown error")
|
|
||||||
|
|
||||||
_socks5autherrors = ("succeeded",
|
|
||||||
"authentication is required",
|
|
||||||
"all offered authentication methods were rejected",
|
|
||||||
"unknown username or invalid password",
|
|
||||||
"unknown error")
|
|
||||||
|
|
||||||
_socks4errors = ("request granted",
|
|
||||||
"request rejected or failed",
|
|
||||||
"request rejected because SOCKS server cannot connect to identd on the client",
|
|
||||||
"request rejected because the client program and identd report different user-ids",
|
|
||||||
"unknown error")
|
|
||||||
|
|
||||||
def parseproxyuri(proxyurl):
|
|
||||||
"""Parses a http proxy uri in the format x://a.b.c.d:port
|
|
||||||
|
|
||||||
(protocol, addr, port) = parseproxyuri(uri)
|
|
||||||
"""
|
|
||||||
groups = PROXY_REGEX.match(proxyurl).groups()
|
|
||||||
return (groups[1], groups[3], groups[4])
|
|
||||||
|
|
||||||
def setdefaultproxy(proxytype=None, addr=None, port=None, rdns=True, username=None, password=None):
|
|
||||||
"""setdefaultproxy(proxytype, addr[, port[, rdns[, username[, password]]]])
|
|
||||||
Sets a default proxy which all further socksocket objects will use,
|
|
||||||
unless explicitly changed.
|
|
||||||
"""
|
|
||||||
global _defaultproxy
|
|
||||||
_defaultproxy = (proxytype, addr, port, rdns, username, password)
|
|
||||||
|
|
||||||
def wrapmodule(module):
|
|
||||||
"""wrapmodule(module)
|
|
||||||
Attempts to replace a module's socket library with a SOCKS socket. Must set
|
|
||||||
a default proxy using setdefaultproxy(...) first.
|
|
||||||
This will only work on modules that import socket directly into the namespace;
|
|
||||||
most of the Python Standard Library falls into this category.
|
|
||||||
"""
|
|
||||||
if _defaultproxy != None:
|
|
||||||
module.socket.socket = socksocket
|
|
||||||
else:
|
|
||||||
raise GeneralProxyError((4, "no proxy specified"))
|
|
||||||
|
|
||||||
class socksocket(socket.socket):
|
|
||||||
"""socksocket([family[, type[, proto]]]) -> socket object
|
|
||||||
Open a SOCKS enabled socket. The parameters are the same as
|
|
||||||
those of the standard socket init. In order for SOCKS to work,
|
|
||||||
you must specify family=AF_INET, type=SOCK_STREAM and proto=0.
|
|
||||||
"""
|
|
||||||
|
|
||||||
def __init__(self, family=socket.AF_INET, type=socket.SOCK_STREAM, proto=0, _sock=None):
|
|
||||||
_orgsocket.__init__(self, family, type, proto, _sock)
|
|
||||||
if _defaultproxy != None:
|
|
||||||
self.__proxy = _defaultproxy
|
|
||||||
else:
|
|
||||||
self.__proxy = (None, None, None, None, None, None)
|
|
||||||
self.__proxysockname = None
|
|
||||||
self.__proxypeername = None
|
|
||||||
|
|
||||||
def __recvall(self, count):
|
|
||||||
"""__recvall(count) -> data
|
|
||||||
Receive EXACTLY the number of bytes requested from the socket.
|
|
||||||
Blocks until the required number of bytes have been received.
|
|
||||||
"""
|
|
||||||
data = self.recv(count)
|
|
||||||
while len(data) < count:
|
|
||||||
d = self.recv(count-len(data))
|
|
||||||
if not d: raise GeneralProxyError((0, "connection closed unexpectedly"))
|
|
||||||
data = data + d
|
|
||||||
return data
|
|
||||||
|
|
||||||
def setproxy(self, proxytype=None, addr=None, port=None, rdns=True, username=None, password=None):
|
|
||||||
"""setproxy(proxytype, addr[, port[, rdns[, username[, password]]]])
|
|
||||||
Sets the proxy to be used.
|
|
||||||
proxytype - The type of the proxy to be used. Three types
|
|
||||||
are supported: PROXY_TYPE_SOCKS4 (including socks4a),
|
|
||||||
PROXY_TYPE_SOCKS5 and PROXY_TYPE_HTTP
|
|
||||||
addr - The address of the server (IP or DNS).
|
|
||||||
port - The port of the server. Defaults to 1080 for SOCKS
|
|
||||||
servers and 8080 for HTTP proxy servers.
|
|
||||||
rdns - Should DNS queries be preformed on the remote side
|
|
||||||
(rather than the local side). The default is True.
|
|
||||||
Note: This has no effect with SOCKS4 servers.
|
|
||||||
username - Username to authenticate with to the server.
|
|
||||||
The default is no authentication.
|
|
||||||
password - Password to authenticate with to the server.
|
|
||||||
Only relevant when username is also provided.
|
|
||||||
"""
|
|
||||||
self.__proxy = (proxytype, addr, port, rdns, username, password)
|
|
||||||
|
|
||||||
def __negotiatesocks5(self, destaddr, destport):
|
|
||||||
"""__negotiatesocks5(self,destaddr,destport)
|
|
||||||
Negotiates a connection through a SOCKS5 server.
|
|
||||||
"""
|
|
||||||
# First we'll send the authentication packages we support.
|
|
||||||
if (self.__proxy[4]!=None) and (self.__proxy[5]!=None):
|
|
||||||
# The username/password details were supplied to the
|
|
||||||
# setproxy method so we support the USERNAME/PASSWORD
|
|
||||||
# authentication (in addition to the standard none).
|
|
||||||
self.sendall(struct.pack('BBBB', 0x05, 0x02, 0x00, 0x02))
|
|
||||||
else:
|
|
||||||
# No username/password were entered, therefore we
|
|
||||||
# only support connections with no authentication.
|
|
||||||
self.sendall(struct.pack('BBB', 0x05, 0x01, 0x00))
|
|
||||||
# We'll receive the server's response to determine which
|
|
||||||
# method was selected
|
|
||||||
chosenauth = self.__recvall(2)
|
|
||||||
if chosenauth[0:1] != chr(0x05).encode():
|
|
||||||
self.close()
|
|
||||||
raise GeneralProxyError((1, _generalerrors[1]))
|
|
||||||
# Check the chosen authentication method
|
|
||||||
if chosenauth[1:2] == chr(0x00).encode():
|
|
||||||
# No authentication is required
|
|
||||||
pass
|
|
||||||
elif chosenauth[1:2] == chr(0x02).encode():
|
|
||||||
# Okay, we need to perform a basic username/password
|
|
||||||
# authentication.
|
|
||||||
self.sendall(chr(0x01).encode() + chr(len(self.__proxy[4])) + self.__proxy[4] + chr(len(self.__proxy[5])) + self.__proxy[5])
|
|
||||||
authstat = self.__recvall(2)
|
|
||||||
if authstat[0:1] != chr(0x01).encode():
|
|
||||||
# Bad response
|
|
||||||
self.close()
|
|
||||||
raise GeneralProxyError((1, _generalerrors[1]))
|
|
||||||
if authstat[1:2] != chr(0x00).encode():
|
|
||||||
# Authentication failed
|
|
||||||
self.close()
|
|
||||||
raise Socks5AuthError((3, _socks5autherrors[3]))
|
|
||||||
# Authentication succeeded
|
|
||||||
else:
|
|
||||||
# Reaching here is always bad
|
|
||||||
self.close()
|
|
||||||
if chosenauth[1] == chr(0xFF).encode():
|
|
||||||
raise Socks5AuthError((2, _socks5autherrors[2]))
|
|
||||||
else:
|
|
||||||
raise GeneralProxyError((1, _generalerrors[1]))
|
|
||||||
# Now we can request the actual connection
|
|
||||||
req = struct.pack('BBB', 0x05, 0x01, 0x00)
|
|
||||||
# If the given destination address is an IP address, we'll
|
|
||||||
# use the IPv4 address request even if remote resolving was specified.
|
|
||||||
try:
|
|
||||||
ipaddr = socket.inet_aton(destaddr)
|
|
||||||
req = req + chr(0x01).encode() + ipaddr
|
|
||||||
except socket.error:
|
|
||||||
# Well it's not an IP number, so it's probably a DNS name.
|
|
||||||
if self.__proxy[3]:
|
|
||||||
# Resolve remotely
|
|
||||||
ipaddr = None
|
|
||||||
req = req + chr(0x03).encode() + chr(len(destaddr)).encode() + destaddr
|
|
||||||
else:
|
|
||||||
# Resolve locally
|
|
||||||
ipaddr = socket.inet_aton(socket.gethostbyname(destaddr))
|
|
||||||
req = req + chr(0x01).encode() + ipaddr
|
|
||||||
req = req + struct.pack(">H", destport)
|
|
||||||
self.sendall(req)
|
|
||||||
# Get the response
|
|
||||||
resp = self.__recvall(4)
|
|
||||||
if resp[0:1] != chr(0x05).encode():
|
|
||||||
self.close()
|
|
||||||
raise GeneralProxyError((1, _generalerrors[1]))
|
|
||||||
elif resp[1:2] != chr(0x00).encode():
|
|
||||||
# Connection failed
|
|
||||||
self.close()
|
|
||||||
if ord(resp[1:2])<=8:
|
|
||||||
raise Socks5Error((ord(resp[1:2]), _socks5errors[ord(resp[1:2])]))
|
|
||||||
else:
|
|
||||||
raise Socks5Error((9, _socks5errors[9]))
|
|
||||||
# Get the bound address/port
|
|
||||||
elif resp[3:4] == chr(0x01).encode():
|
|
||||||
boundaddr = self.__recvall(4)
|
|
||||||
elif resp[3:4] == chr(0x03).encode():
|
|
||||||
resp = resp + self.recv(1)
|
|
||||||
boundaddr = self.__recvall(ord(resp[4:5]))
|
|
||||||
else:
|
|
||||||
self.close()
|
|
||||||
raise GeneralProxyError((1,_generalerrors[1]))
|
|
||||||
boundport = struct.unpack(">H", self.__recvall(2))[0]
|
|
||||||
self.__proxysockname = (boundaddr, boundport)
|
|
||||||
if ipaddr != None:
|
|
||||||
self.__proxypeername = (socket.inet_ntoa(ipaddr), destport)
|
|
||||||
else:
|
|
||||||
self.__proxypeername = (destaddr, destport)
|
|
||||||
|
|
||||||
def getproxysockname(self):
|
|
||||||
"""getsockname() -> address info
|
|
||||||
Returns the bound IP address and port number at the proxy.
|
|
||||||
"""
|
|
||||||
return self.__proxysockname
|
|
||||||
|
|
||||||
def getproxypeername(self):
|
|
||||||
"""getproxypeername() -> address info
|
|
||||||
Returns the IP and port number of the proxy.
|
|
||||||
"""
|
|
||||||
return _orgsocket.getpeername(self)
|
|
||||||
|
|
||||||
def getpeername(self):
|
|
||||||
"""getpeername() -> address info
|
|
||||||
Returns the IP address and port number of the destination
|
|
||||||
machine (note: getproxypeername returns the proxy)
|
|
||||||
"""
|
|
||||||
return self.__proxypeername
|
|
||||||
|
|
||||||
def __negotiatesocks4(self,destaddr,destport):
|
|
||||||
"""__negotiatesocks4(self,destaddr,destport)
|
|
||||||
Negotiates a connection through a SOCKS4 server.
|
|
||||||
"""
|
|
||||||
# Check if the destination address provided is an IP address
|
|
||||||
rmtrslv = False
|
|
||||||
try:
|
|
||||||
ipaddr = socket.inet_aton(destaddr)
|
|
||||||
except socket.error:
|
|
||||||
# It's a DNS name. Check where it should be resolved.
|
|
||||||
if self.__proxy[3]:
|
|
||||||
ipaddr = struct.pack("BBBB", 0x00, 0x00, 0x00, 0x01)
|
|
||||||
rmtrslv = True
|
|
||||||
else:
|
|
||||||
ipaddr = socket.inet_aton(socket.gethostbyname(destaddr))
|
|
||||||
# Construct the request packet
|
|
||||||
req = struct.pack(">BBH", 0x04, 0x01, destport) + ipaddr
|
|
||||||
# The username parameter is considered userid for SOCKS4
|
|
||||||
if self.__proxy[4] != None:
|
|
||||||
req = req + self.__proxy[4]
|
|
||||||
req = req + chr(0x00).encode()
|
|
||||||
# DNS name if remote resolving is required
|
|
||||||
# NOTE: This is actually an extension to the SOCKS4 protocol
|
|
||||||
# called SOCKS4A and may not be supported in all cases.
|
|
||||||
if rmtrslv:
|
|
||||||
req = req + destaddr + chr(0x00).encode()
|
|
||||||
self.sendall(req)
|
|
||||||
# Get the response from the server
|
|
||||||
resp = self.__recvall(8)
|
|
||||||
if resp[0:1] != chr(0x00).encode():
|
|
||||||
# Bad data
|
|
||||||
self.close()
|
|
||||||
raise GeneralProxyError((1,_generalerrors[1]))
|
|
||||||
if resp[1:2] != chr(0x5A).encode():
|
|
||||||
# Server returned an error
|
|
||||||
self.close()
|
|
||||||
if ord(resp[1:2]) in (91, 92, 93):
|
|
||||||
self.close()
|
|
||||||
raise Socks4Error((ord(resp[1:2]), _socks4errors[ord(resp[1:2]) - 90]))
|
|
||||||
else:
|
|
||||||
raise Socks4Error((94, _socks4errors[4]))
|
|
||||||
# Get the bound address/port
|
|
||||||
self.__proxysockname = (socket.inet_ntoa(resp[4:]), struct.unpack(">H", resp[2:4])[0])
|
|
||||||
if rmtrslv != None:
|
|
||||||
self.__proxypeername = (socket.inet_ntoa(ipaddr), destport)
|
|
||||||
else:
|
|
||||||
self.__proxypeername = (destaddr, destport)
|
|
||||||
|
|
||||||
def __negotiatehttp(self, destaddr, destport):
|
|
||||||
"""__negotiatehttp(self,destaddr,destport)
|
|
||||||
Negotiates a connection through an HTTP server.
|
|
||||||
"""
|
|
||||||
# If we need to resolve locally, we do this now
|
|
||||||
if not self.__proxy[3]:
|
|
||||||
addr = socket.gethostbyname(destaddr)
|
|
||||||
else:
|
|
||||||
addr = destaddr
|
|
||||||
self.sendall(("CONNECT " + addr + ":" + str(destport) + " HTTP/1.1\r\n" + "Host: " + destaddr + "\r\n\r\n").encode())
|
|
||||||
# We read the response until we get the string "\r\n\r\n"
|
|
||||||
resp = self.recv(1)
|
|
||||||
while resp.find("\r\n\r\n".encode()) == -1:
|
|
||||||
resp = resp + self.recv(1)
|
|
||||||
# We just need the first line to check if the connection
|
|
||||||
# was successful
|
|
||||||
statusline = resp.splitlines()[0].split(" ".encode(), 2)
|
|
||||||
if statusline[0] not in ("HTTP/1.0".encode(), "HTTP/1.1".encode()):
|
|
||||||
self.close()
|
|
||||||
raise GeneralProxyError((1, _generalerrors[1]))
|
|
||||||
try:
|
|
||||||
statuscode = int(statusline[1])
|
|
||||||
except ValueError:
|
|
||||||
self.close()
|
|
||||||
raise GeneralProxyError((1, _generalerrors[1]))
|
|
||||||
if statuscode != 200:
|
|
||||||
self.close()
|
|
||||||
raise HTTPError((statuscode, statusline[2]))
|
|
||||||
self.__proxysockname = ("0.0.0.0", 0)
|
|
||||||
self.__proxypeername = (addr, destport)
|
|
||||||
|
|
||||||
def connect(self, destpair):
|
|
||||||
"""connect(self, despair)
|
|
||||||
Connects to the specified destination through a proxy.
|
|
||||||
destpar - A tuple of the IP/DNS address and the port number.
|
|
||||||
(identical to socket's connect).
|
|
||||||
To select the proxy server use setproxy().
|
|
||||||
"""
|
|
||||||
# Do a minimal input check first
|
|
||||||
if (not type(destpair) in (list,tuple)) or (len(destpair) < 2) or (type(destpair[0]) != type('')) or (type(destpair[1]) != int):
|
|
||||||
raise GeneralProxyError((5, _generalerrors[5]))
|
|
||||||
if self.__proxy[0] == PROXY_TYPE_SOCKS5:
|
|
||||||
if self.__proxy[2] != None:
|
|
||||||
portnum = self.__proxy[2]
|
|
||||||
else:
|
|
||||||
portnum = 1080
|
|
||||||
_orgsocket.connect(self, (self.__proxy[1], portnum))
|
|
||||||
self.__negotiatesocks5(destpair[0], destpair[1])
|
|
||||||
elif self.__proxy[0] == PROXY_TYPE_SOCKS4:
|
|
||||||
if self.__proxy[2] != None:
|
|
||||||
portnum = self.__proxy[2]
|
|
||||||
else:
|
|
||||||
portnum = 1080
|
|
||||||
_orgsocket.connect(self,(self.__proxy[1], portnum))
|
|
||||||
self.__negotiatesocks4(destpair[0], destpair[1])
|
|
||||||
elif self.__proxy[0] == PROXY_TYPE_HTTP:
|
|
||||||
if self.__proxy[2] != None:
|
|
||||||
portnum = self.__proxy[2]
|
|
||||||
else:
|
|
||||||
portnum = 8080
|
|
||||||
_orgsocket.connect(self,(self.__proxy[1], portnum))
|
|
||||||
self.__negotiatehttp(destpair[0], destpair[1])
|
|
||||||
elif self.__proxy[0] == None:
|
|
||||||
_orgsocket.connect(self, (destpair[0], destpair[1]))
|
|
||||||
else:
|
|
||||||
raise GeneralProxyError((4, _generalerrors[4]))
|
|
802
lib/socks/socks.py
Normal file
802
lib/socks/socks.py
Normal file
|
@ -0,0 +1,802 @@
|
||||||
|
"""
|
||||||
|
SocksiPy - Python SOCKS module.
|
||||||
|
Version 1.6.5
|
||||||
|
|
||||||
|
Copyright 2006 Dan-Haim. All rights reserved.
|
||||||
|
|
||||||
|
Redistribution and use in source and binary forms, with or without modification,
|
||||||
|
are permitted provided that the following conditions are met:
|
||||||
|
1. Redistributions of source code must retain the above copyright notice, this
|
||||||
|
list of conditions and the following disclaimer.
|
||||||
|
2. Redistributions in binary form must reproduce the above copyright notice,
|
||||||
|
this list of conditions and the following disclaimer in the documentation
|
||||||
|
and/or other materials provided with the distribution.
|
||||||
|
3. Neither the name of Dan Haim nor the names of his contributors may be used
|
||||||
|
to endorse or promote products derived from this software without specific
|
||||||
|
prior written permission.
|
||||||
|
|
||||||
|
THIS SOFTWARE IS PROVIDED BY DAN HAIM "AS IS" AND ANY EXPRESS OR IMPLIED
|
||||||
|
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
||||||
|
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
|
||||||
|
EVENT SHALL DAN HAIM OR HIS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
|
||||||
|
INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
||||||
|
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA
|
||||||
|
OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
|
||||||
|
LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
|
||||||
|
OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMANGE.
|
||||||
|
|
||||||
|
|
||||||
|
This module provides a standard socket-like interface for Python
|
||||||
|
for tunneling connections through SOCKS proxies.
|
||||||
|
|
||||||
|
===============================================================================
|
||||||
|
|
||||||
|
Minor modifications made by Christopher Gilbert (http://motomastyle.com/)
|
||||||
|
for use in PyLoris (http://pyloris.sourceforge.net/)
|
||||||
|
|
||||||
|
Minor modifications made by Mario Vilas (http://breakingcode.wordpress.com/)
|
||||||
|
mainly to merge bug fixes found in Sourceforge
|
||||||
|
|
||||||
|
Modifications made by Anorov (https://github.com/Anorov)
|
||||||
|
-Forked and renamed to PySocks
|
||||||
|
-Fixed issue with HTTP proxy failure checking (same bug that was in the old ___recvall() method)
|
||||||
|
-Included SocksiPyHandler (sockshandler.py), to be used as a urllib2 handler,
|
||||||
|
courtesy of e000 (https://github.com/e000): https://gist.github.com/869791#file_socksipyhandler.py
|
||||||
|
-Re-styled code to make it readable
|
||||||
|
-Aliased PROXY_TYPE_SOCKS5 -> SOCKS5 etc.
|
||||||
|
-Improved exception handling and output
|
||||||
|
-Removed irritating use of sequence indexes, replaced with tuple unpacked variables
|
||||||
|
-Fixed up Python 3 bytestring handling - chr(0x03).encode() -> b"\x03"
|
||||||
|
-Other general fixes
|
||||||
|
-Added clarification that the HTTP proxy connection method only supports CONNECT-style tunneling HTTP proxies
|
||||||
|
-Various small bug fixes
|
||||||
|
"""
|
||||||
|
|
||||||
|
__version__ = "1.6.5"
|
||||||
|
|
||||||
|
import socket
|
||||||
|
import struct
|
||||||
|
from errno import EOPNOTSUPP, EINVAL, EAGAIN
|
||||||
|
from io import BytesIO
|
||||||
|
from os import SEEK_CUR
|
||||||
|
import os
|
||||||
|
import sys
|
||||||
|
from collections import Callable
|
||||||
|
from base64 import b64encode
|
||||||
|
|
||||||
|
|
||||||
|
if os.name == "nt" and sys.version_info < (3, 0):
|
||||||
|
try:
|
||||||
|
import win_inet_pton
|
||||||
|
except ImportError:
|
||||||
|
raise ImportError("To run PySocks on Windows you must install win_inet_pton")
|
||||||
|
|
||||||
|
PROXY_TYPE_SOCKS4 = SOCKS4 = 1
|
||||||
|
PROXY_TYPE_SOCKS5 = SOCKS5 = 2
|
||||||
|
PROXY_TYPE_HTTP = HTTP = 3
|
||||||
|
|
||||||
|
PROXY_TYPES = {"SOCKS4": SOCKS4, "SOCKS5": SOCKS5, "HTTP": HTTP}
|
||||||
|
PRINTABLE_PROXY_TYPES = dict(zip(PROXY_TYPES.values(), PROXY_TYPES.keys()))
|
||||||
|
|
||||||
|
_orgsocket = _orig_socket = socket.socket
|
||||||
|
|
||||||
|
class ProxyError(IOError):
|
||||||
|
"""
|
||||||
|
socket_err contains original socket.error exception.
|
||||||
|
"""
|
||||||
|
def __init__(self, msg, socket_err=None):
|
||||||
|
self.msg = msg
|
||||||
|
self.socket_err = socket_err
|
||||||
|
|
||||||
|
if socket_err:
|
||||||
|
self.msg += ": {0}".format(socket_err)
|
||||||
|
|
||||||
|
def __str__(self):
|
||||||
|
return self.msg
|
||||||
|
|
||||||
|
class GeneralProxyError(ProxyError): pass
|
||||||
|
class ProxyConnectionError(ProxyError): pass
|
||||||
|
class SOCKS5AuthError(ProxyError): pass
|
||||||
|
class SOCKS5Error(ProxyError): pass
|
||||||
|
class SOCKS4Error(ProxyError): pass
|
||||||
|
class HTTPError(ProxyError): pass
|
||||||
|
|
||||||
|
SOCKS4_ERRORS = { 0x5B: "Request rejected or failed",
|
||||||
|
0x5C: "Request rejected because SOCKS server cannot connect to identd on the client",
|
||||||
|
0x5D: "Request rejected because the client program and identd report different user-ids"
|
||||||
|
}
|
||||||
|
|
||||||
|
SOCKS5_ERRORS = { 0x01: "General SOCKS server failure",
|
||||||
|
0x02: "Connection not allowed by ruleset",
|
||||||
|
0x03: "Network unreachable",
|
||||||
|
0x04: "Host unreachable",
|
||||||
|
0x05: "Connection refused",
|
||||||
|
0x06: "TTL expired",
|
||||||
|
0x07: "Command not supported, or protocol error",
|
||||||
|
0x08: "Address type not supported"
|
||||||
|
}
|
||||||
|
|
||||||
|
DEFAULT_PORTS = { SOCKS4: 1080,
|
||||||
|
SOCKS5: 1080,
|
||||||
|
HTTP: 8080
|
||||||
|
}
|
||||||
|
|
||||||
|
def set_default_proxy(proxy_type=None, addr=None, port=None, rdns=True, username=None, password=None):
|
||||||
|
"""
|
||||||
|
set_default_proxy(proxy_type, addr[, port[, rdns[, username, password]]])
|
||||||
|
|
||||||
|
Sets a default proxy which all further socksocket objects will use,
|
||||||
|
unless explicitly changed. All parameters are as for socket.set_proxy().
|
||||||
|
"""
|
||||||
|
socksocket.default_proxy = (proxy_type, addr, port, rdns,
|
||||||
|
username.encode() if username else None,
|
||||||
|
password.encode() if password else None)
|
||||||
|
|
||||||
|
setdefaultproxy = set_default_proxy
|
||||||
|
|
||||||
|
def get_default_proxy():
|
||||||
|
"""
|
||||||
|
Returns the default proxy, set by set_default_proxy.
|
||||||
|
"""
|
||||||
|
return socksocket.default_proxy
|
||||||
|
|
||||||
|
getdefaultproxy = get_default_proxy
|
||||||
|
|
||||||
|
def wrap_module(module):
|
||||||
|
"""
|
||||||
|
Attempts to replace a module's socket library with a SOCKS socket. Must set
|
||||||
|
a default proxy using set_default_proxy(...) first.
|
||||||
|
This will only work on modules that import socket directly into the namespace;
|
||||||
|
most of the Python Standard Library falls into this category.
|
||||||
|
"""
|
||||||
|
if socksocket.default_proxy:
|
||||||
|
module.socket.socket = socksocket
|
||||||
|
else:
|
||||||
|
raise GeneralProxyError("No default proxy specified")
|
||||||
|
|
||||||
|
wrapmodule = wrap_module
|
||||||
|
|
||||||
|
def create_connection(dest_pair, proxy_type=None, proxy_addr=None,
|
||||||
|
proxy_port=None, proxy_rdns=True,
|
||||||
|
proxy_username=None, proxy_password=None,
|
||||||
|
timeout=None, source_address=None,
|
||||||
|
socket_options=None):
|
||||||
|
"""create_connection(dest_pair, *[, timeout], **proxy_args) -> socket object
|
||||||
|
|
||||||
|
Like socket.create_connection(), but connects to proxy
|
||||||
|
before returning the socket object.
|
||||||
|
|
||||||
|
dest_pair - 2-tuple of (IP/hostname, port).
|
||||||
|
**proxy_args - Same args passed to socksocket.set_proxy() if present.
|
||||||
|
timeout - Optional socket timeout value, in seconds.
|
||||||
|
source_address - tuple (host, port) for the socket to bind to as its source
|
||||||
|
address before connecting (only for compatibility)
|
||||||
|
"""
|
||||||
|
# Remove IPv6 brackets on the remote address and proxy address.
|
||||||
|
remote_host, remote_port = dest_pair
|
||||||
|
if remote_host.startswith('['):
|
||||||
|
remote_host = remote_host.strip('[]')
|
||||||
|
if proxy_addr and proxy_addr.startswith('['):
|
||||||
|
proxy_addr = proxy_addr.strip('[]')
|
||||||
|
|
||||||
|
err = None
|
||||||
|
|
||||||
|
# Allow the SOCKS proxy to be on IPv4 or IPv6 addresses.
|
||||||
|
for r in socket.getaddrinfo(proxy_addr, proxy_port, 0, socket.SOCK_STREAM):
|
||||||
|
family, socket_type, proto, canonname, sa = r
|
||||||
|
sock = None
|
||||||
|
try:
|
||||||
|
sock = socksocket(family, socket_type, proto)
|
||||||
|
|
||||||
|
if socket_options:
|
||||||
|
for opt in socket_options:
|
||||||
|
sock.setsockopt(*opt)
|
||||||
|
|
||||||
|
if isinstance(timeout, (int, float)):
|
||||||
|
sock.settimeout(timeout)
|
||||||
|
|
||||||
|
if proxy_type:
|
||||||
|
sock.set_proxy(proxy_type, proxy_addr, proxy_port, proxy_rdns,
|
||||||
|
proxy_username, proxy_password)
|
||||||
|
if source_address:
|
||||||
|
sock.bind(source_address)
|
||||||
|
|
||||||
|
sock.connect((remote_host, remote_port))
|
||||||
|
return sock
|
||||||
|
|
||||||
|
except (socket.error, ProxyConnectionError) as e:
|
||||||
|
err = e
|
||||||
|
if sock:
|
||||||
|
sock.close()
|
||||||
|
sock = None
|
||||||
|
|
||||||
|
if err:
|
||||||
|
raise err
|
||||||
|
|
||||||
|
raise socket.error("gai returned empty list.")
|
||||||
|
|
||||||
|
class _BaseSocket(socket.socket):
|
||||||
|
"""Allows Python 2's "delegated" methods such as send() to be overridden
|
||||||
|
"""
|
||||||
|
def __init__(self, *pos, **kw):
|
||||||
|
_orig_socket.__init__(self, *pos, **kw)
|
||||||
|
|
||||||
|
self._savedmethods = dict()
|
||||||
|
for name in self._savenames:
|
||||||
|
self._savedmethods[name] = getattr(self, name)
|
||||||
|
delattr(self, name) # Allows normal overriding mechanism to work
|
||||||
|
|
||||||
|
_savenames = list()
|
||||||
|
|
||||||
|
def _makemethod(name):
|
||||||
|
return lambda self, *pos, **kw: self._savedmethods[name](*pos, **kw)
|
||||||
|
for name in ("sendto", "send", "recvfrom", "recv"):
|
||||||
|
method = getattr(_BaseSocket, name, None)
|
||||||
|
|
||||||
|
# Determine if the method is not defined the usual way
|
||||||
|
# as a function in the class.
|
||||||
|
# Python 2 uses __slots__, so there are descriptors for each method,
|
||||||
|
# but they are not functions.
|
||||||
|
if not isinstance(method, Callable):
|
||||||
|
_BaseSocket._savenames.append(name)
|
||||||
|
setattr(_BaseSocket, name, _makemethod(name))
|
||||||
|
|
||||||
|
class socksocket(_BaseSocket):
|
||||||
|
"""socksocket([family[, type[, proto]]]) -> socket object
|
||||||
|
|
||||||
|
Open a SOCKS enabled socket. The parameters are the same as
|
||||||
|
those of the standard socket init. In order for SOCKS to work,
|
||||||
|
you must specify family=AF_INET and proto=0.
|
||||||
|
The "type" argument must be either SOCK_STREAM or SOCK_DGRAM.
|
||||||
|
"""
|
||||||
|
|
||||||
|
default_proxy = None
|
||||||
|
|
||||||
|
def __init__(self, family=socket.AF_INET, type=socket.SOCK_STREAM, proto=0, *args, **kwargs):
|
||||||
|
if type not in (socket.SOCK_STREAM, socket.SOCK_DGRAM):
|
||||||
|
msg = "Socket type must be stream or datagram, not {!r}"
|
||||||
|
raise ValueError(msg.format(type))
|
||||||
|
|
||||||
|
_BaseSocket.__init__(self, family, type, proto, *args, **kwargs)
|
||||||
|
self._proxyconn = None # TCP connection to keep UDP relay alive
|
||||||
|
|
||||||
|
if self.default_proxy:
|
||||||
|
self.proxy = self.default_proxy
|
||||||
|
else:
|
||||||
|
self.proxy = (None, None, None, None, None, None)
|
||||||
|
self.proxy_sockname = None
|
||||||
|
self.proxy_peername = None
|
||||||
|
|
||||||
|
self._timeout = None
|
||||||
|
|
||||||
|
def _readall(self, file, count):
|
||||||
|
"""
|
||||||
|
Receive EXACTLY the number of bytes requested from the file object.
|
||||||
|
Blocks until the required number of bytes have been received.
|
||||||
|
"""
|
||||||
|
data = b""
|
||||||
|
while len(data) < count:
|
||||||
|
d = file.read(count - len(data))
|
||||||
|
if not d:
|
||||||
|
raise GeneralProxyError("Connection closed unexpectedly")
|
||||||
|
data += d
|
||||||
|
return data
|
||||||
|
|
||||||
|
def settimeout(self, timeout):
|
||||||
|
self._timeout = timeout
|
||||||
|
try:
|
||||||
|
# test if we're connected, if so apply timeout
|
||||||
|
peer = self.get_proxy_peername()
|
||||||
|
_BaseSocket.settimeout(self, self._timeout)
|
||||||
|
except socket.error:
|
||||||
|
pass
|
||||||
|
|
||||||
|
def gettimeout(self):
|
||||||
|
return self._timeout
|
||||||
|
|
||||||
|
def setblocking(self, v):
|
||||||
|
if v:
|
||||||
|
self.settimeout(None)
|
||||||
|
else:
|
||||||
|
self.settimeout(0.0)
|
||||||
|
|
||||||
|
def set_proxy(self, proxy_type=None, addr=None, port=None, rdns=True, username=None, password=None):
|
||||||
|
"""set_proxy(proxy_type, addr[, port[, rdns[, username[, password]]]])
|
||||||
|
Sets the proxy to be used.
|
||||||
|
|
||||||
|
proxy_type - The type of the proxy to be used. Three types
|
||||||
|
are supported: PROXY_TYPE_SOCKS4 (including socks4a),
|
||||||
|
PROXY_TYPE_SOCKS5 and PROXY_TYPE_HTTP
|
||||||
|
addr - The address of the server (IP or DNS).
|
||||||
|
port - The port of the server. Defaults to 1080 for SOCKS
|
||||||
|
servers and 8080 for HTTP proxy servers.
|
||||||
|
rdns - Should DNS queries be performed on the remote side
|
||||||
|
(rather than the local side). The default is True.
|
||||||
|
Note: This has no effect with SOCKS4 servers.
|
||||||
|
username - Username to authenticate with to the server.
|
||||||
|
The default is no authentication.
|
||||||
|
password - Password to authenticate with to the server.
|
||||||
|
Only relevant when username is also provided.
|
||||||
|
"""
|
||||||
|
self.proxy = (proxy_type, addr, port, rdns,
|
||||||
|
username.encode() if username else None,
|
||||||
|
password.encode() if password else None)
|
||||||
|
|
||||||
|
setproxy = set_proxy
|
||||||
|
|
||||||
|
def bind(self, *pos, **kw):
|
||||||
|
"""
|
||||||
|
Implements proxy connection for UDP sockets,
|
||||||
|
which happens during the bind() phase.
|
||||||
|
"""
|
||||||
|
proxy_type, proxy_addr, proxy_port, rdns, username, password = self.proxy
|
||||||
|
if not proxy_type or self.type != socket.SOCK_DGRAM:
|
||||||
|
return _orig_socket.bind(self, *pos, **kw)
|
||||||
|
|
||||||
|
if self._proxyconn:
|
||||||
|
raise socket.error(EINVAL, "Socket already bound to an address")
|
||||||
|
if proxy_type != SOCKS5:
|
||||||
|
msg = "UDP only supported by SOCKS5 proxy type"
|
||||||
|
raise socket.error(EOPNOTSUPP, msg)
|
||||||
|
_BaseSocket.bind(self, *pos, **kw)
|
||||||
|
|
||||||
|
# Need to specify actual local port because
|
||||||
|
# some relays drop packets if a port of zero is specified.
|
||||||
|
# Avoid specifying host address in case of NAT though.
|
||||||
|
_, port = self.getsockname()
|
||||||
|
dst = ("0", port)
|
||||||
|
|
||||||
|
self._proxyconn = _orig_socket()
|
||||||
|
proxy = self._proxy_addr()
|
||||||
|
self._proxyconn.connect(proxy)
|
||||||
|
|
||||||
|
UDP_ASSOCIATE = b"\x03"
|
||||||
|
_, relay = self._SOCKS5_request(self._proxyconn, UDP_ASSOCIATE, dst)
|
||||||
|
|
||||||
|
# The relay is most likely on the same host as the SOCKS proxy,
|
||||||
|
# but some proxies return a private IP address (10.x.y.z)
|
||||||
|
host, _ = proxy
|
||||||
|
_, port = relay
|
||||||
|
_BaseSocket.connect(self, (host, port))
|
||||||
|
_BaseSocket.settimeout(self, self._timeout)
|
||||||
|
self.proxy_sockname = ("0.0.0.0", 0) # Unknown
|
||||||
|
|
||||||
|
def sendto(self, bytes, *args, **kwargs):
|
||||||
|
if self.type != socket.SOCK_DGRAM:
|
||||||
|
return _BaseSocket.sendto(self, bytes, *args, **kwargs)
|
||||||
|
if not self._proxyconn:
|
||||||
|
self.bind(("", 0))
|
||||||
|
|
||||||
|
address = args[-1]
|
||||||
|
flags = args[:-1]
|
||||||
|
|
||||||
|
header = BytesIO()
|
||||||
|
RSV = b"\x00\x00"
|
||||||
|
header.write(RSV)
|
||||||
|
STANDALONE = b"\x00"
|
||||||
|
header.write(STANDALONE)
|
||||||
|
self._write_SOCKS5_address(address, header)
|
||||||
|
|
||||||
|
sent = _BaseSocket.send(self, header.getvalue() + bytes, *flags, **kwargs)
|
||||||
|
return sent - header.tell()
|
||||||
|
|
||||||
|
def send(self, bytes, flags=0, **kwargs):
|
||||||
|
if self.type == socket.SOCK_DGRAM:
|
||||||
|
return self.sendto(bytes, flags, self.proxy_peername, **kwargs)
|
||||||
|
else:
|
||||||
|
return _BaseSocket.send(self, bytes, flags, **kwargs)
|
||||||
|
|
||||||
|
def recvfrom(self, bufsize, flags=0):
|
||||||
|
if self.type != socket.SOCK_DGRAM:
|
||||||
|
return _BaseSocket.recvfrom(self, bufsize, flags)
|
||||||
|
if not self._proxyconn:
|
||||||
|
self.bind(("", 0))
|
||||||
|
|
||||||
|
buf = BytesIO(_BaseSocket.recv(self, bufsize + 1024, flags))
|
||||||
|
buf.seek(2, SEEK_CUR)
|
||||||
|
frag = buf.read(1)
|
||||||
|
if ord(frag):
|
||||||
|
raise NotImplementedError("Received UDP packet fragment")
|
||||||
|
fromhost, fromport = self._read_SOCKS5_address(buf)
|
||||||
|
|
||||||
|
if self.proxy_peername:
|
||||||
|
peerhost, peerport = self.proxy_peername
|
||||||
|
if fromhost != peerhost or peerport not in (0, fromport):
|
||||||
|
raise socket.error(EAGAIN, "Packet filtered")
|
||||||
|
|
||||||
|
return (buf.read(bufsize), (fromhost, fromport))
|
||||||
|
|
||||||
|
def recv(self, *pos, **kw):
|
||||||
|
bytes, _ = self.recvfrom(*pos, **kw)
|
||||||
|
return bytes
|
||||||
|
|
||||||
|
def close(self):
|
||||||
|
if self._proxyconn:
|
||||||
|
self._proxyconn.close()
|
||||||
|
return _BaseSocket.close(self)
|
||||||
|
|
||||||
|
def get_proxy_sockname(self):
|
||||||
|
"""
|
||||||
|
Returns the bound IP address and port number at the proxy.
|
||||||
|
"""
|
||||||
|
return self.proxy_sockname
|
||||||
|
|
||||||
|
getproxysockname = get_proxy_sockname
|
||||||
|
|
||||||
|
def get_proxy_peername(self):
|
||||||
|
"""
|
||||||
|
Returns the IP and port number of the proxy.
|
||||||
|
"""
|
||||||
|
return _BaseSocket.getpeername(self)
|
||||||
|
|
||||||
|
getproxypeername = get_proxy_peername
|
||||||
|
|
||||||
|
def get_peername(self):
|
||||||
|
"""
|
||||||
|
Returns the IP address and port number of the destination
|
||||||
|
machine (note: get_proxy_peername returns the proxy)
|
||||||
|
"""
|
||||||
|
return self.proxy_peername
|
||||||
|
|
||||||
|
getpeername = get_peername
|
||||||
|
|
||||||
|
def _negotiate_SOCKS5(self, *dest_addr):
|
||||||
|
"""
|
||||||
|
Negotiates a stream connection through a SOCKS5 server.
|
||||||
|
"""
|
||||||
|
CONNECT = b"\x01"
|
||||||
|
self.proxy_peername, self.proxy_sockname = self._SOCKS5_request(self,
|
||||||
|
CONNECT, dest_addr)
|
||||||
|
|
||||||
|
def _SOCKS5_request(self, conn, cmd, dst):
|
||||||
|
"""
|
||||||
|
Send SOCKS5 request with given command (CMD field) and
|
||||||
|
address (DST field). Returns resolved DST address that was used.
|
||||||
|
"""
|
||||||
|
proxy_type, addr, port, rdns, username, password = self.proxy
|
||||||
|
|
||||||
|
writer = conn.makefile("wb")
|
||||||
|
reader = conn.makefile("rb", 0) # buffering=0 renamed in Python 3
|
||||||
|
try:
|
||||||
|
# First we'll send the authentication packages we support.
|
||||||
|
if username and password:
|
||||||
|
# The username/password details were supplied to the
|
||||||
|
# set_proxy method so we support the USERNAME/PASSWORD
|
||||||
|
# authentication (in addition to the standard none).
|
||||||
|
writer.write(b"\x05\x02\x00\x02")
|
||||||
|
else:
|
||||||
|
# No username/password were entered, therefore we
|
||||||
|
# only support connections with no authentication.
|
||||||
|
writer.write(b"\x05\x01\x00")
|
||||||
|
|
||||||
|
# We'll receive the server's response to determine which
|
||||||
|
# method was selected
|
||||||
|
writer.flush()
|
||||||
|
chosen_auth = self._readall(reader, 2)
|
||||||
|
|
||||||
|
if chosen_auth[0:1] != b"\x05":
|
||||||
|
# Note: string[i:i+1] is used because indexing of a bytestring
|
||||||
|
# via bytestring[i] yields an integer in Python 3
|
||||||
|
raise GeneralProxyError("SOCKS5 proxy server sent invalid data")
|
||||||
|
|
||||||
|
# Check the chosen authentication method
|
||||||
|
|
||||||
|
if chosen_auth[1:2] == b"\x02":
|
||||||
|
# Okay, we need to perform a basic username/password
|
||||||
|
# authentication.
|
||||||
|
writer.write(b"\x01" + chr(len(username)).encode()
|
||||||
|
+ username
|
||||||
|
+ chr(len(password)).encode()
|
||||||
|
+ password)
|
||||||
|
writer.flush()
|
||||||
|
auth_status = self._readall(reader, 2)
|
||||||
|
if auth_status[0:1] != b"\x01":
|
||||||
|
# Bad response
|
||||||
|
raise GeneralProxyError("SOCKS5 proxy server sent invalid data")
|
||||||
|
if auth_status[1:2] != b"\x00":
|
||||||
|
# Authentication failed
|
||||||
|
raise SOCKS5AuthError("SOCKS5 authentication failed")
|
||||||
|
|
||||||
|
# Otherwise, authentication succeeded
|
||||||
|
|
||||||
|
# No authentication is required if 0x00
|
||||||
|
elif chosen_auth[1:2] != b"\x00":
|
||||||
|
# Reaching here is always bad
|
||||||
|
if chosen_auth[1:2] == b"\xFF":
|
||||||
|
raise SOCKS5AuthError("All offered SOCKS5 authentication methods were rejected")
|
||||||
|
else:
|
||||||
|
raise GeneralProxyError("SOCKS5 proxy server sent invalid data")
|
||||||
|
|
||||||
|
# Now we can request the actual connection
|
||||||
|
writer.write(b"\x05" + cmd + b"\x00")
|
||||||
|
resolved = self._write_SOCKS5_address(dst, writer)
|
||||||
|
writer.flush()
|
||||||
|
|
||||||
|
# Get the response
|
||||||
|
resp = self._readall(reader, 3)
|
||||||
|
if resp[0:1] != b"\x05":
|
||||||
|
raise GeneralProxyError("SOCKS5 proxy server sent invalid data")
|
||||||
|
|
||||||
|
status = ord(resp[1:2])
|
||||||
|
if status != 0x00:
|
||||||
|
# Connection failed: server returned an error
|
||||||
|
error = SOCKS5_ERRORS.get(status, "Unknown error")
|
||||||
|
raise SOCKS5Error("{0:#04x}: {1}".format(status, error))
|
||||||
|
|
||||||
|
# Get the bound address/port
|
||||||
|
bnd = self._read_SOCKS5_address(reader)
|
||||||
|
|
||||||
|
_BaseSocket.settimeout(self, self._timeout)
|
||||||
|
return (resolved, bnd)
|
||||||
|
finally:
|
||||||
|
reader.close()
|
||||||
|
writer.close()
|
||||||
|
|
||||||
|
def _write_SOCKS5_address(self, addr, file):
|
||||||
|
"""
|
||||||
|
Return the host and port packed for the SOCKS5 protocol,
|
||||||
|
and the resolved address as a tuple object.
|
||||||
|
"""
|
||||||
|
host, port = addr
|
||||||
|
proxy_type, _, _, rdns, username, password = self.proxy
|
||||||
|
family_to_byte = {socket.AF_INET: b"\x01", socket.AF_INET6: b"\x04"}
|
||||||
|
|
||||||
|
# If the given destination address is an IP address, we'll
|
||||||
|
# use the IP address request even if remote resolving was specified.
|
||||||
|
# Detect whether the address is IPv4/6 directly.
|
||||||
|
for family in (socket.AF_INET, socket.AF_INET6):
|
||||||
|
try:
|
||||||
|
addr_bytes = socket.inet_pton(family, host)
|
||||||
|
file.write(family_to_byte[family] + addr_bytes)
|
||||||
|
host = socket.inet_ntop(family, addr_bytes)
|
||||||
|
file.write(struct.pack(">H", port))
|
||||||
|
return host, port
|
||||||
|
except socket.error:
|
||||||
|
continue
|
||||||
|
|
||||||
|
# Well it's not an IP number, so it's probably a DNS name.
|
||||||
|
if rdns:
|
||||||
|
# Resolve remotely
|
||||||
|
host_bytes = host.encode('idna')
|
||||||
|
file.write(b"\x03" + chr(len(host_bytes)).encode() + host_bytes)
|
||||||
|
else:
|
||||||
|
# Resolve locally
|
||||||
|
addresses = socket.getaddrinfo(host, port, socket.AF_UNSPEC, socket.SOCK_STREAM, socket.IPPROTO_TCP, socket.AI_ADDRCONFIG)
|
||||||
|
# We can't really work out what IP is reachable, so just pick the
|
||||||
|
# first.
|
||||||
|
target_addr = addresses[0]
|
||||||
|
family = target_addr[0]
|
||||||
|
host = target_addr[4][0]
|
||||||
|
|
||||||
|
addr_bytes = socket.inet_pton(family, host)
|
||||||
|
file.write(family_to_byte[family] + addr_bytes)
|
||||||
|
host = socket.inet_ntop(family, addr_bytes)
|
||||||
|
file.write(struct.pack(">H", port))
|
||||||
|
return host, port
|
||||||
|
|
||||||
|
def _read_SOCKS5_address(self, file):
|
||||||
|
atyp = self._readall(file, 1)
|
||||||
|
if atyp == b"\x01":
|
||||||
|
addr = socket.inet_ntoa(self._readall(file, 4))
|
||||||
|
elif atyp == b"\x03":
|
||||||
|
length = self._readall(file, 1)
|
||||||
|
addr = self._readall(file, ord(length))
|
||||||
|
elif atyp == b"\x04":
|
||||||
|
addr = socket.inet_ntop(socket.AF_INET6, self._readall(file, 16))
|
||||||
|
else:
|
||||||
|
raise GeneralProxyError("SOCKS5 proxy server sent invalid data")
|
||||||
|
|
||||||
|
port = struct.unpack(">H", self._readall(file, 2))[0]
|
||||||
|
return addr, port
|
||||||
|
|
||||||
|
def _negotiate_SOCKS4(self, dest_addr, dest_port):
|
||||||
|
"""
|
||||||
|
Negotiates a connection through a SOCKS4 server.
|
||||||
|
"""
|
||||||
|
proxy_type, addr, port, rdns, username, password = self.proxy
|
||||||
|
|
||||||
|
writer = self.makefile("wb")
|
||||||
|
reader = self.makefile("rb", 0) # buffering=0 renamed in Python 3
|
||||||
|
try:
|
||||||
|
# Check if the destination address provided is an IP address
|
||||||
|
remote_resolve = False
|
||||||
|
try:
|
||||||
|
addr_bytes = socket.inet_aton(dest_addr)
|
||||||
|
except socket.error:
|
||||||
|
# It's a DNS name. Check where it should be resolved.
|
||||||
|
if rdns:
|
||||||
|
addr_bytes = b"\x00\x00\x00\x01"
|
||||||
|
remote_resolve = True
|
||||||
|
else:
|
||||||
|
addr_bytes = socket.inet_aton(socket.gethostbyname(dest_addr))
|
||||||
|
|
||||||
|
# Construct the request packet
|
||||||
|
writer.write(struct.pack(">BBH", 0x04, 0x01, dest_port))
|
||||||
|
writer.write(addr_bytes)
|
||||||
|
|
||||||
|
# The username parameter is considered userid for SOCKS4
|
||||||
|
if username:
|
||||||
|
writer.write(username)
|
||||||
|
writer.write(b"\x00")
|
||||||
|
|
||||||
|
# DNS name if remote resolving is required
|
||||||
|
# NOTE: This is actually an extension to the SOCKS4 protocol
|
||||||
|
# called SOCKS4A and may not be supported in all cases.
|
||||||
|
if remote_resolve:
|
||||||
|
writer.write(dest_addr.encode('idna') + b"\x00")
|
||||||
|
writer.flush()
|
||||||
|
|
||||||
|
# Get the response from the server
|
||||||
|
resp = self._readall(reader, 8)
|
||||||
|
if resp[0:1] != b"\x00":
|
||||||
|
# Bad data
|
||||||
|
raise GeneralProxyError("SOCKS4 proxy server sent invalid data")
|
||||||
|
|
||||||
|
status = ord(resp[1:2])
|
||||||
|
if status != 0x5A:
|
||||||
|
# Connection failed: server returned an error
|
||||||
|
error = SOCKS4_ERRORS.get(status, "Unknown error")
|
||||||
|
raise SOCKS4Error("{0:#04x}: {1}".format(status, error))
|
||||||
|
|
||||||
|
# Get the bound address/port
|
||||||
|
self.proxy_sockname = (socket.inet_ntoa(resp[4:]), struct.unpack(">H", resp[2:4])[0])
|
||||||
|
if remote_resolve:
|
||||||
|
self.proxy_peername = socket.inet_ntoa(addr_bytes), dest_port
|
||||||
|
else:
|
||||||
|
self.proxy_peername = dest_addr, dest_port
|
||||||
|
finally:
|
||||||
|
reader.close()
|
||||||
|
writer.close()
|
||||||
|
|
||||||
|
def _negotiate_HTTP(self, dest_addr, dest_port):
|
||||||
|
"""
|
||||||
|
Negotiates a connection through an HTTP server.
|
||||||
|
NOTE: This currently only supports HTTP CONNECT-style proxies.
|
||||||
|
"""
|
||||||
|
proxy_type, addr, port, rdns, username, password = self.proxy
|
||||||
|
|
||||||
|
# If we need to resolve locally, we do this now
|
||||||
|
addr = dest_addr if rdns else socket.gethostbyname(dest_addr)
|
||||||
|
|
||||||
|
http_headers = [
|
||||||
|
b"CONNECT " + addr.encode('idna') + b":" + str(dest_port).encode() + b" HTTP/1.1",
|
||||||
|
b"Host: " + dest_addr.encode('idna')
|
||||||
|
]
|
||||||
|
|
||||||
|
if username and password:
|
||||||
|
http_headers.append(b"Proxy-Authorization: basic " + b64encode(username + b":" + password))
|
||||||
|
|
||||||
|
http_headers.append(b"\r\n")
|
||||||
|
|
||||||
|
self.sendall(b"\r\n".join(http_headers))
|
||||||
|
|
||||||
|
# We just need the first line to check if the connection was successful
|
||||||
|
fobj = self.makefile()
|
||||||
|
status_line = fobj.readline()
|
||||||
|
fobj.close()
|
||||||
|
|
||||||
|
if not status_line:
|
||||||
|
raise GeneralProxyError("Connection closed unexpectedly")
|
||||||
|
|
||||||
|
try:
|
||||||
|
proto, status_code, status_msg = status_line.split(" ", 2)
|
||||||
|
except ValueError:
|
||||||
|
raise GeneralProxyError("HTTP proxy server sent invalid response")
|
||||||
|
|
||||||
|
if not proto.startswith("HTTP/"):
|
||||||
|
raise GeneralProxyError("Proxy server does not appear to be an HTTP proxy")
|
||||||
|
|
||||||
|
try:
|
||||||
|
status_code = int(status_code)
|
||||||
|
except ValueError:
|
||||||
|
raise HTTPError("HTTP proxy server did not return a valid HTTP status")
|
||||||
|
|
||||||
|
if status_code != 200:
|
||||||
|
error = "{0}: {1}".format(status_code, status_msg)
|
||||||
|
if status_code in (400, 403, 405):
|
||||||
|
# It's likely that the HTTP proxy server does not support the CONNECT tunneling method
|
||||||
|
error += ("\n[*] Note: The HTTP proxy server may not be supported by PySocks"
|
||||||
|
" (must be a CONNECT tunnel proxy)")
|
||||||
|
raise HTTPError(error)
|
||||||
|
|
||||||
|
self.proxy_sockname = (b"0.0.0.0", 0)
|
||||||
|
self.proxy_peername = addr, dest_port
|
||||||
|
|
||||||
|
_proxy_negotiators = {
|
||||||
|
SOCKS4: _negotiate_SOCKS4,
|
||||||
|
SOCKS5: _negotiate_SOCKS5,
|
||||||
|
HTTP: _negotiate_HTTP
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
def connect(self, dest_pair):
|
||||||
|
"""
|
||||||
|
Connects to the specified destination through a proxy.
|
||||||
|
Uses the same API as socket's connect().
|
||||||
|
To select the proxy server, use set_proxy().
|
||||||
|
|
||||||
|
dest_pair - 2-tuple of (IP/hostname, port).
|
||||||
|
"""
|
||||||
|
if len(dest_pair) != 2 or dest_pair[0].startswith("["):
|
||||||
|
# Probably IPv6, not supported -- raise an error, and hope
|
||||||
|
# Happy Eyeballs (RFC6555) makes sure at least the IPv4
|
||||||
|
# connection works...
|
||||||
|
raise socket.error("PySocks doesn't support IPv6")
|
||||||
|
|
||||||
|
dest_addr, dest_port = dest_pair
|
||||||
|
|
||||||
|
if self.type == socket.SOCK_DGRAM:
|
||||||
|
if not self._proxyconn:
|
||||||
|
self.bind(("", 0))
|
||||||
|
dest_addr = socket.gethostbyname(dest_addr)
|
||||||
|
|
||||||
|
# If the host address is INADDR_ANY or similar, reset the peer
|
||||||
|
# address so that packets are received from any peer
|
||||||
|
if dest_addr == "0.0.0.0" and not dest_port:
|
||||||
|
self.proxy_peername = None
|
||||||
|
else:
|
||||||
|
self.proxy_peername = (dest_addr, dest_port)
|
||||||
|
return
|
||||||
|
|
||||||
|
proxy_type, proxy_addr, proxy_port, rdns, username, password = self.proxy
|
||||||
|
|
||||||
|
# Do a minimal input check first
|
||||||
|
if (not isinstance(dest_pair, (list, tuple))
|
||||||
|
or len(dest_pair) != 2
|
||||||
|
or not dest_addr
|
||||||
|
or not isinstance(dest_port, int)):
|
||||||
|
raise GeneralProxyError("Invalid destination-connection (host, port) pair")
|
||||||
|
|
||||||
|
|
||||||
|
# We set the timeout here so that we don't hang in connection or during
|
||||||
|
# negotiation.
|
||||||
|
_BaseSocket.settimeout(self, self._timeout)
|
||||||
|
|
||||||
|
if proxy_type is None:
|
||||||
|
# Treat like regular socket object
|
||||||
|
self.proxy_peername = dest_pair
|
||||||
|
_BaseSocket.settimeout(self, self._timeout)
|
||||||
|
_BaseSocket.connect(self, (dest_addr, dest_port))
|
||||||
|
return
|
||||||
|
|
||||||
|
proxy_addr = self._proxy_addr()
|
||||||
|
|
||||||
|
try:
|
||||||
|
# Initial connection to proxy server.
|
||||||
|
_BaseSocket.connect(self, proxy_addr)
|
||||||
|
|
||||||
|
except socket.error as error:
|
||||||
|
# Error while connecting to proxy
|
||||||
|
self.close()
|
||||||
|
proxy_addr, proxy_port = proxy_addr
|
||||||
|
proxy_server = "{0}:{1}".format(proxy_addr, proxy_port)
|
||||||
|
printable_type = PRINTABLE_PROXY_TYPES[proxy_type]
|
||||||
|
|
||||||
|
msg = "Error connecting to {0} proxy {1}".format(printable_type,
|
||||||
|
proxy_server)
|
||||||
|
raise ProxyConnectionError(msg, error)
|
||||||
|
|
||||||
|
else:
|
||||||
|
# Connected to proxy server, now negotiate
|
||||||
|
try:
|
||||||
|
# Calls negotiate_{SOCKS4, SOCKS5, HTTP}
|
||||||
|
negotiate = self._proxy_negotiators[proxy_type]
|
||||||
|
negotiate(self, dest_addr, dest_port)
|
||||||
|
except socket.error as error:
|
||||||
|
# Wrap socket errors
|
||||||
|
self.close()
|
||||||
|
raise GeneralProxyError("Socket error", error)
|
||||||
|
except ProxyError:
|
||||||
|
# Protocol error while negotiating with proxy
|
||||||
|
self.close()
|
||||||
|
raise
|
||||||
|
|
||||||
|
def _proxy_addr(self):
|
||||||
|
"""
|
||||||
|
Return proxy address to connect to as tuple object
|
||||||
|
"""
|
||||||
|
proxy_type, proxy_addr, proxy_port, rdns, username, password = self.proxy
|
||||||
|
proxy_port = proxy_port or DEFAULT_PORTS.get(proxy_type)
|
||||||
|
if not proxy_port:
|
||||||
|
raise GeneralProxyError("Invalid proxy type")
|
||||||
|
return proxy_addr, proxy_port
|
79
lib/socks/sockshandler.py
Normal file
79
lib/socks/sockshandler.py
Normal file
|
@ -0,0 +1,79 @@
|
||||||
|
#!/usr/bin/env python
|
||||||
|
"""
|
||||||
|
SocksiPy + urllib2 handler
|
||||||
|
|
||||||
|
version: 0.3
|
||||||
|
author: e<e@tr0ll.in>
|
||||||
|
|
||||||
|
This module provides a Handler which you can use with urllib2 to allow it to tunnel your connection through a socks.sockssocket socket, with out monkey patching the original socket...
|
||||||
|
"""
|
||||||
|
import ssl
|
||||||
|
|
||||||
|
try:
|
||||||
|
import urllib2
|
||||||
|
import httplib
|
||||||
|
except ImportError: # Python 3
|
||||||
|
import urllib.request as urllib2
|
||||||
|
import http.client as httplib
|
||||||
|
|
||||||
|
import socks # $ pip install PySocks
|
||||||
|
|
||||||
|
def merge_dict(a, b):
|
||||||
|
d = a.copy()
|
||||||
|
d.update(b)
|
||||||
|
return d
|
||||||
|
|
||||||
|
class SocksiPyConnection(httplib.HTTPConnection):
|
||||||
|
def __init__(self, proxytype, proxyaddr, proxyport=None, rdns=True, username=None, password=None, *args, **kwargs):
|
||||||
|
self.proxyargs = (proxytype, proxyaddr, proxyport, rdns, username, password)
|
||||||
|
httplib.HTTPConnection.__init__(self, *args, **kwargs)
|
||||||
|
|
||||||
|
def connect(self):
|
||||||
|
self.sock = socks.socksocket()
|
||||||
|
self.sock.setproxy(*self.proxyargs)
|
||||||
|
if type(self.timeout) in (int, float):
|
||||||
|
self.sock.settimeout(self.timeout)
|
||||||
|
self.sock.connect((self.host, self.port))
|
||||||
|
|
||||||
|
class SocksiPyConnectionS(httplib.HTTPSConnection):
|
||||||
|
def __init__(self, proxytype, proxyaddr, proxyport=None, rdns=True, username=None, password=None, *args, **kwargs):
|
||||||
|
self.proxyargs = (proxytype, proxyaddr, proxyport, rdns, username, password)
|
||||||
|
httplib.HTTPSConnection.__init__(self, *args, **kwargs)
|
||||||
|
|
||||||
|
def connect(self):
|
||||||
|
sock = socks.socksocket()
|
||||||
|
sock.setproxy(*self.proxyargs)
|
||||||
|
if type(self.timeout) in (int, float):
|
||||||
|
sock.settimeout(self.timeout)
|
||||||
|
sock.connect((self.host, self.port))
|
||||||
|
self.sock = ssl.wrap_socket(sock, self.key_file, self.cert_file)
|
||||||
|
|
||||||
|
class SocksiPyHandler(urllib2.HTTPHandler, urllib2.HTTPSHandler):
|
||||||
|
def __init__(self, *args, **kwargs):
|
||||||
|
self.args = args
|
||||||
|
self.kw = kwargs
|
||||||
|
urllib2.HTTPHandler.__init__(self)
|
||||||
|
|
||||||
|
def http_open(self, req):
|
||||||
|
def build(host, port=None, timeout=0, **kwargs):
|
||||||
|
kw = merge_dict(self.kw, kwargs)
|
||||||
|
conn = SocksiPyConnection(*self.args, host=host, port=port, timeout=timeout, **kw)
|
||||||
|
return conn
|
||||||
|
return self.do_open(build, req)
|
||||||
|
|
||||||
|
def https_open(self, req):
|
||||||
|
def build(host, port=None, timeout=0, **kwargs):
|
||||||
|
kw = merge_dict(self.kw, kwargs)
|
||||||
|
conn = SocksiPyConnectionS(*self.args, host=host, port=port, timeout=timeout, **kw)
|
||||||
|
return conn
|
||||||
|
return self.do_open(build, req)
|
||||||
|
|
||||||
|
if __name__ == "__main__":
|
||||||
|
import sys
|
||||||
|
try:
|
||||||
|
port = int(sys.argv[1])
|
||||||
|
except (ValueError, IndexError):
|
||||||
|
port = 9050
|
||||||
|
opener = urllib2.build_opener(SocksiPyHandler(socks.PROXY_TYPE_SOCKS5, "localhost", port))
|
||||||
|
print("HTTP: " + opener.open("http://httpbin.org/ip").read().decode())
|
||||||
|
print("HTTPS: " + opener.open("https://httpbin.org/ip").read().decode())
|
Loading…
Reference in a new issue