mirror of
https://github.com/telekom-security/tpotce.git
synced 2026-05-29 17:24:15 +00:00
62 lines
2.4 KiB
Diff
62 lines
2.4 KiB
Diff
|
--- a/conpot/protocols/ipmi/ipmi_server.py
|
||
|
|
+++ b/conpot/protocols/ipmi/ipmi_server.py
|
||
|
|
@@ -92,11 +92,25 @@
|
||
|
|
csum &= 0xFF
|
||
|
|
return csum
|
||
|
|
|
||
|
|
+ def _add_event(self, address, event_data):
|
||
|
|
+ session = conpot_core.get_session(
|
||
|
|
+ "ipmi",
|
||
|
|
+ address[0],
|
||
|
|
+ address[1],
|
||
|
|
+ self.sock.getsockname()[0],
|
||
|
|
+ self.port,
|
||
|
|
+ )
|
||
|
|
+ session.add_event(event_data)
|
||
|
|
+
|
||
|
|
def handle(self, data, address):
|
||
|
|
# make sure self.session exists
|
||
|
|
if not address[0] in self.sessions.keys() or not hasattr(self, "session"):
|
||
|
|
# new session for new source
|
||
|
|
logger.info("New IPMI traffic from %s", address)
|
||
|
|
+ self._add_event(
|
||
|
|
+ address,
|
||
|
|
+ {"type": "NEW_CONNECTION", "request": data, "response": None},
|
||
|
|
+ )
|
||
|
|
self.session = FakeSession(address[0], "", "", address[1])
|
||
|
|
self.session.server = self
|
||
|
|
self.uuid = uuid.uuid4()
|
||
|
|
@@ -165,10 +179,10 @@
|
||
|
|
(clientaddr, clientlun) = struct.unpack("BB", data[17:19])
|
||
|
|
level &= 0b1111
|
||
|
|
self.send_auth_cap(
|
||
|
|
- myaddr, mylun, clientaddr, clientlun, session.sockaddr
|
||
|
|
+ myaddr, mylun, clientaddr, clientlun, session.sockaddr, data
|
||
|
|
)
|
||
|
|
|
||
|
|
- def send_auth_cap(self, myaddr, mylun, clientaddr, clientlun, sockaddr):
|
||
|
|
+ def send_auth_cap(self, myaddr, mylun, clientaddr, clientlun, sockaddr, request=None):
|
||
|
|
header = b"\x06\x00\xff\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10"
|
||
|
|
|
||
|
|
headerdata = (clientaddr, clientlun | (7 << 2))
|
||
|
|
@@ -181,11 +195,19 @@
|
||
|
|
header += chr_py3(self._checksum(*bodydata))
|
||
|
|
self.session.stage += 1
|
||
|
|
logger.info("Connection established with %s", sockaddr)
|
||
|
|
+ self._add_event(
|
||
|
|
+ sockaddr,
|
||
|
|
+ {"type": "GET_CHANNEL_AUTH_CAPABILITIES", "request": request, "response": header},
|
||
|
|
+ )
|
||
|
|
self.session.send_data(header, sockaddr)
|
||
|
|
|
||
|
|
def close_server_session(self):
|
||
|
|
logger.info("IPMI Session closed %s", self.session.sockaddr[0])
|
||
|
|
# cleanup session
|
||
|
|
+ self._add_event(
|
||
|
|
+ self.session.sockaddr,
|
||
|
|
+ {"type": "CONNECTION_LOST", "request": None, "response": None},
|
||
|
|
+ )
|
||
|
|
del self.sessions[self.session.sockaddr[0]]
|
||
|
|
del self.session
|
||
|
|
|