123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248 |
- # Public Domain SOCKS proxy protocol implementation
- # Adapted from https://gist.github.com/bluec0re/cafd3764412967417fd3
- from __future__ import unicode_literals
- import collections
- import socket
- from .compat import (
- struct_pack,
- struct_unpack,
- )
- __author__ = 'Timo Schmid <coding@timoschmid.de>'
- class ProxyError(IOError):
- pass
- class Socks4Error(ProxyError):
- CODES = {
- 0x5B: 'request rejected or failed',
- 0x5C: 'request rejected becasue SOCKS server cannot connect to identd on the client',
- 0x5D: 'request rejected because the client program and identd report different user-ids'
- }
- def __init__(self, code=None, msg=None):
- if code is not None and msg is None:
- msg = self.CODES.get(code)
- if msg is None:
- msg = 'unknown error'
- super(Socks4Error, self).__init__(code, msg)
- class Socks5Error(Socks4Error):
- CODES = {
- 0x01: 'general SOCKS server failure',
- 0x02: 'connection not allowed by ruleset',
- 0x03: 'Network unreachable',
- 0x04: 'Host unreachable',
- 0x05: 'Connection refused',
- 0x06: 'TTL expired',
- 0x07: 'Command not supported',
- 0x08: 'Address type not supported',
- 0xFE: 'unknown username or invalid password',
- 0xFF: 'all offered authentication methods were rejected'
- }
- class ProxyType(object):
- SOCKS4 = 0
- SOCKS4A = 1
- SOCKS5 = 2
- Proxy = collections.namedtuple('Proxy', ('type', 'host', 'port', 'username', 'password', 'remote_dns'))
- class sockssocket(socket.socket):
- @property
- def _proxy(self):
- return self.__proxy
- @property
- def _proxy_port(self):
- if self._proxy:
- if self._proxy.port:
- return self._proxy.port
- return 1080
- return None
- def setproxy(self, proxytype=None, addr=None, port=None, rdns=True, username=None, password=None):
- if proxytype is None:
- self.__proxy = None
- else:
- self.__proxy = Proxy(proxytype, addr, port, username, password, rdns)
- def recvall(self, cnt):
- data = b''
- while len(data) < cnt:
- cur = self.recv(cnt - len(data))
- if not cur:
- raise IOError('{0} bytes missing'.format(cnt - len(data)))
- data += cur
- return data
- def _setup_socks4(self, address, is_4a=False):
- destaddr, port = address
- try:
- ipaddr = socket.inet_aton(destaddr)
- except socket.error:
- if is_4a and self._proxy.remote_dns:
- ipaddr = struct_pack('!BBBB', 0, 0, 0, 0xFF)
- else:
- ipaddr = socket.inet_aton(socket.gethostbyname(destaddr))
- packet = struct_pack('!BBH', 0x4, 0x1, port) + ipaddr
- if self._proxy.username:
- username = self._proxy.username
- if hasattr(username, 'encode'):
- username = username.encode()
- packet += struct_pack('!{0}s'.format(len(username) + 1), username)
- else:
- packet += b'\x00'
- if is_4a and self._proxy.remote_dns:
- if hasattr(destaddr, 'encode'):
- destaddr = destaddr.encode()
- packet += struct_pack('!{0}s'.format(len(destaddr) + 1), destaddr)
- self.sendall(packet)
- packet = self.recvall(8)
- nbyte, resp_code, dstport, dsthost = struct_unpack('!BBHI', packet)
- # check valid response
- if nbyte != 0x00:
- self.close()
- raise ProxyError(
- 0, 'Invalid response from server. Expected {0:02x} got {1:02x}'.format(0, nbyte))
- # access granted
- if resp_code != 0x5a:
- self.close()
- raise Socks4Error(resp_code)
- return (dsthost, dstport)
- def _setup_socks5(self, address):
- destaddr, port = address
- try:
- ipaddr = socket.inet_aton(destaddr)
- except socket.error:
- if self._proxy.remote_dns:
- ipaddr = None
- else:
- ipaddr = socket.inet_aton(socket.gethostbyname(destaddr))
- auth_methods = 1
- if self._proxy.username and self._proxy.password:
- # two auth methods available
- auth_methods = 2
- packet = struct_pack('!BBB', 0x5, auth_methods, 0x00) # no auth
- if self._proxy.username and self._proxy.password:
- packet += struct_pack('!B', 0x02) # user/pass auth
- self.sendall(packet)
- packet = self.recvall(2)
- version, method = struct_unpack('!BB', packet)
- # check valid response
- if version != 0x05:
- self.close()
- raise ProxyError(
- 0, 'Invalid response from server. Expected {0:02x} got {1:02x}'.format(5, version))
- # no auth methods
- if method == 0xFF:
- self.close()
- raise Socks5Error(method)
- # user/pass auth
- if method == 0x01:
- username = self._proxy.username
- if hasattr(username, 'encode'):
- username = username.encode()
- password = self._proxy.password
- if hasattr(password, 'encode'):
- password = password.encode()
- packet = struct_pack('!BB', 1, len(username)) + username
- packet += struct_pack('!B', len(password)) + password
- self.sendall(packet)
- packet = self.recvall(2)
- version, status = struct_unpack('!BB', packet)
- if version != 0x01:
- self.close()
- raise ProxyError(
- 0, 'Invalid response from server. Expected {0:02x} got {1:02x}'.format(1, version))
- if status != 0x00:
- self.close()
- raise Socks5Error(1)
- elif method == 0x00: # no auth
- pass
- packet = struct_pack('!BBB', 5, 1, 0)
- if ipaddr is None:
- if hasattr(destaddr, 'encode'):
- destaddr = destaddr.encode()
- packet += struct_pack('!BB', 3, len(destaddr)) + destaddr
- else:
- packet += struct_pack('!B', 1) + ipaddr
- packet += struct_pack('!H', port)
- self.sendall(packet)
- packet = self.recvall(4)
- version, status, _, atype = struct_unpack('!BBBB', packet)
- if version != 0x05:
- self.close()
- raise ProxyError(
- 0, 'Invalid response from server. Expected {0:02x} got {1:02x}'.format(5, version))
- if status != 0x00:
- self.close()
- raise Socks5Error(status)
- if atype == 0x01:
- destaddr = self.recvall(4)
- elif atype == 0x03:
- alen = struct_unpack('!B', self.recv(1))[0]
- destaddr = self.recvall(alen)
- elif atype == 0x04:
- destaddr = self.recvall(16)
- destport = struct_unpack('!H', self.recvall(2))[0]
- return (destaddr, destport)
- def _make_proxy(self, connect_func, address):
- if self._proxy.type == ProxyType.SOCKS4:
- result = connect_func(self, (self._proxy.host, self._proxy_port))
- if result != 0 and result is not None:
- return result
- self._setup_socks4(address)
- elif self._proxy.type == ProxyType.SOCKS4A:
- result = connect_func(self, (self._proxy.host, self._proxy_port))
- if result != 0 and result is not None:
- return result
- self._setup_socks4(address, is_4a=True)
- elif self._proxy.type == ProxyType.SOCKS5:
- result = connect_func(self, (self._proxy.host, self._proxy_port))
- if result != 0 and result is not None:
- return result
- self._setup_socks5(address)
- else:
- return connect_func(self, address)
- def connect(self, address):
- self._make_proxy(socket.socket.connect, address)
- def connect_ex(self, address):
- return self._make_proxy(socket.socket.connect_ex, address)
|