197 lines
7.8 KiB
Python
197 lines
7.8 KiB
Python
|
# -*- coding: utf-8 -*-
|
|||
|
|
|
|||
|
|
import socket
|
|||
|
|
import dns.message
|
|||
|
|
import dns.rdatatype
|
|||
|
|
import dns.rdata
|
|||
|
|
import dns.rdataclass
|
|||
|
|
import binascii
|
|||
|
|
import csv
|
|||
|
|
import datetime
|
|||
|
|
|
|||
|
|
from scapy.all import *
|
|||
|
|
|
|||
|
|
#from crypto.PublicKey import Ed448
|
|||
|
|
#import dns.rdatatype
|
|||
|
|
|
|||
|
|
# 定义代理服务器的地址和端口
|
|||
|
|
proxy_host = '10.0.8.14' # 代理服务器的IP地址
|
|||
|
|
proxy_port = 53 # 代理服务器的端口
|
|||
|
|
#proxy_port = 22 # 代理服务器的端口
|
|||
|
|
|
|||
|
|
# 定义上游DNS服务器的地址和端口
|
|||
|
|
upstream_host = '127.0.0.1' # 上游DNS服务器的IP地址
|
|||
|
|
upstream_port = 9999 # 上游DNS服务器的端口
|
|||
|
|
|
|||
|
|
csv_file = "dnssec_log.csv"
|
|||
|
|
|
|||
|
|
def proxy_dns_request(request, client_addr, proxy_socket):
|
|||
|
|
# 创建与上游DNS服务器的套接字连接
|
|||
|
|
upstream_socket = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
|
|||
|
|
|
|||
|
|
# 发送DNS请求到上游DNS服务器
|
|||
|
|
upstream_socket.sendto(request, (upstream_host, upstream_port))
|
|||
|
|
|
|||
|
|
# 接收上游DNS服务器的响应
|
|||
|
|
response, _ = upstream_socket.recvfrom(4096)
|
|||
|
|
|
|||
|
|
# 修改DNS应答中的字段
|
|||
|
|
modified_response = modify_dns_response(response,client_addr,len(request))
|
|||
|
|
#modified_response = response
|
|||
|
|
|
|||
|
|
# 将修改后的DNS应答发送给客户端
|
|||
|
|
#client_socket = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
|
|||
|
|
#client_socket.sendto(modified_response, client_addr)
|
|||
|
|
proxy_socket.sendto(modified_response, client_addr)
|
|||
|
|
# print("finish",client_addr)
|
|||
|
|
# 关闭套接字连接
|
|||
|
|
upstream_socket.close()
|
|||
|
|
#client_socket.close()
|
|||
|
|
|
|||
|
|
def modify_dns_response(response,client_addr,len_request):
|
|||
|
|
# 在这里添加你的修改逻辑
|
|||
|
|
# 解析DNS应答消息，并修改需要的字段
|
|||
|
|
# 可以使用dnspython等DNS库来解析和构造DNS消息
|
|||
|
|
# print("response ",response)
|
|||
|
|
dns_response = dns.message.from_wire(response)
|
|||
|
|
# print("dns_response ",dns_response)
|
|||
|
|
qweasd = 0
|
|||
|
|
|
|||
|
|
packet = DNS(response)
|
|||
|
|
# 解析DNS流量
|
|||
|
|
if DNS in packet:
|
|||
|
|
dns1 = packet[DNS]
|
|||
|
|
if dns1.qd[0].qtype != 1:
|
|||
|
|
print("************No Change************")
|
|||
|
|
return response
|
|||
|
|
if dns1.ancount > 0:
|
|||
|
|
print("Answers:")
|
|||
|
|
for an in dns1.an:
|
|||
|
|
print(" Name:", an.rrname.decode())
|
|||
|
|
print(" Type:", an.type)
|
|||
|
|
#print(" Data:", an.rdata)
|
|||
|
|
|
|||
|
|
for rrset in dns_response.answer:
|
|||
|
|
if rrset.rdtype == dns.rdatatype.RRSIG and qweasd == 0 :
|
|||
|
|
qweasd = 1
|
|||
|
|
current_time = datetime.now()
|
|||
|
|
# with open(csv_file, "a", newline="") as file:
|
|||
|
|
# writer = csv.writer(file)
|
|||
|
|
# writer.writerow([client_addr, len_request, current_time])
|
|||
|
|
# print("dnssec_log.csv:",csv_file)
|
|||
|
|
# new_rdata = dns.rdata.from_text(rrset.rdclass, rrset.rdtype, rrset.to_text())
|
|||
|
|
# new_rdata.algorithm = 16 # 设置为 5 或其他你想要的值
|
|||
|
|
|
|||
|
|
# 替换原始 RRSIG 记录
|
|||
|
|
# rrset.clear()
|
|||
|
|
# rrset.add(new_rdata)
|
|||
|
|
# for attrr in dir(rrset):
|
|||
|
|
# print(attrr)
|
|||
|
|
# print("rdata.algorithm",rrset.algorithm)
|
|||
|
|
# new_rdata = dns.rdatatype.from_text(rdtype_text.replace(dns.rdatatype.RSASHA1,dns.rdatatype.ED448))
|
|||
|
|
# rrset.items = new_rdata
|
|||
|
|
# print(rrset.items)
|
|||
|
|
# print(rrset[1])
|
|||
|
|
# print(bin(rrset.items[1]))
|
|||
|
|
# for qwe in rrset:
|
|||
|
|
#print(qwe)
|
|||
|
|
#print(type(qwe)," key: ",qwe," qweqweqweqweqwe ")
|
|||
|
|
# for attrr in dir(qwe):
|
|||
|
|
# print(attrr)
|
|||
|
|
# qwe.algorithm = 16
|
|||
|
|
# print(qwe.algorithm)
|
|||
|
|
# 遍历DNS响应中的资源记录
|
|||
|
|
|
|||
|
|
modified_response = dns_response.to_wire()
|
|||
|
|
binary_string = bin(int(binascii.hexlify(modified_response), 16))
|
|||
|
|
# print("len: ",len(binary_string),"\n",binary_string)
|
|||
|
|
formatted_string = str(binary_string)
|
|||
|
|
index = str(binary_string).find("01100101001000001101110000001111")
|
|||
|
|
new_string = formatted_string[:index+1] + '0' + formatted_string[index+2:]
|
|||
|
|
new_string = new_string[:index+2] + '1' + new_string[index+3:]
|
|||
|
|
new_string = new_string[:index+3] + '0' + new_string[index+4:]
|
|||
|
|
new_string = new_string[:index+4] + '0' + new_string[index+5:]
|
|||
|
|
new_string = new_string[:index+5] + '1' + new_string[index+6:]
|
|||
|
|
new_string = new_string[:index+6] + '0' + new_string[index+7:]
|
|||
|
|
formatted_string = new_string[:index+7] + '1' + new_string[index+8:]
|
|||
|
|
|
|||
|
|
# index = str(binary_string).find("0000010100000011")
|
|||
|
|
index = str(binary_string).find("0000110100000011")
|
|||
|
|
|
|||
|
|
# formatted_string = str(binary_string)
|
|||
|
|
new_string = formatted_string[:index+1] + '1' + formatted_string[index+2:]
|
|||
|
|
new_string = new_string[:index+2] + '1' + new_string[index+3:]
|
|||
|
|
new_string = new_string[:index+3] + '1' + new_string[index+4:]
|
|||
|
|
new_string = new_string[:index+4] + '0' + new_string[index+5:]
|
|||
|
|
new_string = new_string[:index+5] + '0' + new_string[index+6:]
|
|||
|
|
new_string = new_string[:index+6] + '0' + new_string[index+7:]
|
|||
|
|
formatted_string = new_string[:index+7] + '0' + new_string[index+8:]
|
|||
|
|
# print("len: ",len(formatted_string),"\n",formatted_string)
|
|||
|
|
# print("index: ",formatted_string[index:])
|
|||
|
|
binary_string = formatted_string[2:]
|
|||
|
|
binary_number = int(binary_string, 2)
|
|||
|
|
formatted_string = binary_number.to_bytes((binary_number.bit_length() + 7) // 8, 'big')
|
|||
|
|
# print("index: ",formatted_string)
|
|||
|
|
try:
|
|||
|
|
dns_response = dns.message.from_wire(formatted_string)
|
|||
|
|
except:
|
|||
|
|
modified_response = dns_response.to_wire()
|
|||
|
|
# print(dns_response)
|
|||
|
|
modified_response = dns_response.to_wire()
|
|||
|
|
print("**********************************************************************************************************************")
|
|||
|
|
return modified_response
|
|||
|
|
|
|||
|
|
def start_proxy_server():
|
|||
|
|
# 创建代理服务器的套接字
|
|||
|
|
proxy_socket = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
|
|||
|
|
|
|||
|
|
# 将套接字绑定到代理服务器的地址和端口
|
|||
|
|
proxy_socket.bind((proxy_host, proxy_port))
|
|||
|
|
|
|||
|
|
# 循环监听客户端请求并代理流量
|
|||
|
|
|
|||
|
|
num = 1
|
|||
|
|
|
|||
|
|
print("START: ")
|
|||
|
|
while True:
|
|||
|
|
|
|||
|
|
print("start")
|
|||
|
|
request, client_addr = proxy_socket.recvfrom(4096)
|
|||
|
|
print("num: ",num)
|
|||
|
|
num = num + 1
|
|||
|
|
try:
|
|||
|
|
packet = DNS(request)
|
|||
|
|
# 解析DNS流量
|
|||
|
|
if DNS in packet:
|
|||
|
|
dns1 = packet[DNS]
|
|||
|
|
if dns1.qdcount > 0:
|
|||
|
|
print("Queries:")
|
|||
|
|
for qd in dns1.qd:
|
|||
|
|
print(" Query Name:", qd.qname.decode())
|
|||
|
|
print(" Query Type:", qd.qtype)
|
|||
|
|
print(" Query Class:", qd.qclass)
|
|||
|
|
query_current_time = datetime.now()
|
|||
|
|
query_current_time = query_current_time.strftime("%H%M%S%f")[:-2]
|
|||
|
|
# src = request[IP].src
|
|||
|
|
print(" Query src:", client_addr)
|
|||
|
|
print(" Query Current Time:", query_current_time)
|
|||
|
|
tmp = qd.qname.decode()
|
|||
|
|
if tmp[0] == "D":
|
|||
|
|
with open("shiyan1_query", "a", newline="") as file:
|
|||
|
|
writer = csv.writer(file)
|
|||
|
|
writer.writerow([qd.qname.decode(), qd.qtype, qd.qclass, client_addr, query_current_time])
|
|||
|
|
print("finish")
|
|||
|
|
except Exception as e:
|
|||
|
|
print("error",str(e))
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
proxy_dns_request(request, client_addr, proxy_socket)
|
|||
|
|
|
|||
|
|
# 关闭套接字连接
|
|||
|
|
proxy_socket.close()
|
|||
|
|
|
|||
|
|
|
|||
|
|
# 启动代理服务器
|
|||
|
|
start_proxy_server()
|