cowrie/commands/base.py

import os, time
from core.Kippo import HoneyPotCommand
from core.fstypes import *

class command_whoami(HoneyPotCommand):
    def call(self, args):
        self.writeln(self.honeypot.user.username)

class command_cat(HoneyPotCommand):
    def call(self, args):
        path = self.honeypot.fs.resolve_path(args, self.honeypot.cwd)

        if not path or not self.honeypot.fs.exists(path):
            self.writeln('bash: cat: %s: No such file or directory' % args)
            return

        fakefile = './honeyfs/%s' % path
        if os.path.exists(fakefile) and \
                not os.path.islink(fakefile) and os.path.isfile(fakefile):
            f = file(fakefile, 'r')
            self.write(f.read())
            f.close()

class command_cd(HoneyPotCommand):
    def call(self, args):
        if not args:
            args = '/root'

        try:
            newpath = self.honeypot.fs.resolve_path(args, self.honeypot.cwd)
            newdir = self.honeypot.fs.get_path(newpath)
        except IndexError:
            newdir = None

        if newdir is None:
            self.writeln('bash: cd: %s: No such file or directory' % args)
            return
        self.honeypot.cwd = newpath

class command_rm(HoneyPotCommand):
    def call(self, args):
        for f in args.split(' '):
            path = self.honeypot.fs.resolve_path(f, self.honeypot.cwd)
            try:
                dir = self.honeypot.fs.get_path('/'.join(path.split('/')[:-1]))
            except IndexError:
                self.writeln(
                    'rm: cannot remove `%s\': No such file or directory' % f)
                continue
            basename = path.split('/')[-1]
            contents = [x for x in dir]
            for i in dir[:]:
                if i[A_NAME] == basename:
                    if i[A_TYPE] == T_DIR:
                        self.writeln(
                            'rm: cannot remove `%s\': Is a directory' % \
                            i[A_NAME])
                    else:
                        dir.remove(i)

class command_mkdir(HoneyPotCommand):
    def call(self, args):
        for f in args.split(' '):
            path = self.honeypot.fs.resolve_path(f, self.honeypot.cwd)
            try:
                dir = self.honeypot.fs.get_path('/'.join(path.split('/')[:-1]))
            except IndexError:
                self.writeln(
                    'mkdir: cannot create directory `%s\': ' % f + \
                    'No such file or directory')
                return
            if f in [x[A_NAME] for x in dir]:
                self.writeln(
                    'mkdir: cannot create directory `test\': File exists')
                return
            dir.append([f, T_DIR, 0, 0, 4096, 16877, time.time(), [], None])

class command_uptime(HoneyPotCommand):
    def call(self, args):
        self.writeln(
            ' %s up 14 days,  3:53,  0 users,  load average: 0.08, 0.02, 0.01' % \
            time.strftime('%T'))
        #self.writeln('USER     TTY      FROM              LOGIN@   IDLE   JCPU   PCPU WHAT')

class command_w(HoneyPotCommand):
    def call(self, args):
        self.writeln(
            ' %s up 14 days,  3:53,  0 users,  load average: 0.08, 0.02, 0.01' % \
            time.strftime('%T'))
        self.writeln('USER     TTY      FROM              LOGIN@   IDLE   JCPU   PCPU WHAT')

class command_echo(HoneyPotCommand):
    def call(self, args):
        self.writeln(args)

class command_quit(HoneyPotCommand):
    def call(self, args):
        self.honeypot.terminal.reset()
        self.writeln('Connection to server closed.')
        self.honeypot.hostname = 'localhost'

class command_clear(HoneyPotCommand):
    def call(self, args):
        self.honeypot.terminal.reset()

class command_vi(HoneyPotCommand):
    def call(self, args):
        self.writeln('E558: Terminal entry not found in terminfo')

class command_uname(HoneyPotCommand):
    def call(self, args):
        if args.strip() == '-a':
            self.writeln('Linux sales 2.6.26-2-686 #1 SMP Wed Nov 4 20:45:37 UTC 2009 i686 GNU/Linux')
        else:
            self.writeln('Linux')

class command_id(HoneyPotCommand):
    def call(self, args):
        self.writeln('uid=0(root) gid=0(root) groups=0(root)')

class command_mount(HoneyPotCommand):
    def call(self, args):
        if len(args.strip()):
            return
        for i in [
                '/dev/sda1 on / type ext3 (rw,errors=remount-ro)',
                'tmpfs on /lib/init/rw type tmpfs (rw,nosuid,mode=0755)',
                'proc on /proc type proc (rw,noexec,nosuid,nodev)',
                'sysfs on /sys type sysfs (rw,noexec,nosuid,nodev)',
                'udev on /dev type tmpfs (rw,mode=0755)',
                'tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev)',
                'devpts on /dev/pts type devpts (rw,noexec,nosuid,gid=5,mode=620)',
                ]:
            self.writeln(i)

class command_pwd(HoneyPotCommand):
    def call(self, args):
        self.writeln(self.honeypot.cwd)

class command_passwd(HoneyPotCommand):
    def start(self):
        self.write('Enter new UNIX password: ')
        self.honeypot.password_input = True
        self.callbacks = [self.ask_again, self.finish]

    def ask_again(self):
        self.write('Retype new UNIX password: ')

    def finish(self):
        self.honeypot.password_input = False
        self.writeln('Sorry, passwords do not match')
        self.writeln(
            'passwd: Authentication information cannot be recovered')
        self.writeln('passwd: password unchanged')
        self.exit()

    def lineReceived(self, line):
        print 'passwd input:', line
        self.callbacks.pop(0)()

class command_nop(HoneyPotCommand):
    def call(self, args):
        pass