Add netstat module

pupy/modules/netstat.py

@@ -0,0 +1,88 @@
+# -*- coding: utf-8 -*-
+from pupylib.PupyModule import *
+from pupylib.PupyCmd import PupyCmd
+from pupylib.utils.rpyc_utils import obtain
+from pupylib.utils.term import colorize
+from modules.lib.utils.shell_exec import shell_exec
+from collections import OrderedDict
+from datetime import datetime, timedelta
+
+import logging
+import socket
+
+__class_name__="NetStatModule"
+
+ADMINS = ('NT AUTHORITY\SYSTEM', 'root')
+
+@config(cat="admin")
+class NetStatModule(PupyModule):
+    """ list terminal sessions """
+
+    dependencies = [ 'pupyps' ]
+    is_module=False
+
+    def init_argparse(self):
+        self.arg_parser = PupyArgumentParser(prog="netstat", description=self.__doc__)
+        self.arg_parser.add_argument('-l', '--listen', action='store_true', help='Show listening sockets')
+        self.arg_parser.add_argument('-t', '--tcp', action='store_true', help='Show TCP')
+        self.arg_parser.add_argument('-u', '--udp', action='store_true', help='Show UDP')
+
+    def run(self, args):
+        try:
+            data = obtain(self.client.conn.modules.pupyps.connections())
+
+            families = {
+                v:k for k,v in socket.__dict__.iteritems() if k.startswith('AF_')
+            }
+
+            sock = {
+                v:k for k,v in socket.__dict__.iteritems() if k.startswith('SOCK_')
+            }
+
+            limit = []
+
+            if args.tcp:
+                limit.append('STREAM')
+            if args.udp:
+                limit.append('DGRAM')
+
+            objects = []
+            for connection in data:
+                if connection['status'] == 'LISTEN' and not args.listen:
+                    continue
+
+                if args.listen and not connection['status'] == 'LISTEN':
+                    continue
+
+                color = ""
+                family = families[connection['family']][3:]
+                stype = sock[connection['type']][5:]
+
+                if limit and not stype in limit:
+                    continue
+
+                if connection['status'] in ('CLOSE_WAIT', 'TIME_WAIT', 'TIME_WAIT2'):
+                    color = 'darkgrey'
+                elif ( '127.0.0.1' in connection['laddr'] or '::1' in connection['laddr'] ):
+                    color = 'grey'
+
+                objects.append({
+                    'AF': colorize(family, color),
+                    'TYPE': colorize(stype, color),
+                    'LADDR': colorize(':'.join([str(x) for x in connection['laddr']]), color),
+                    'RADDR': colorize(':'.join([str(x) for x in connection['raddr']]), color),
+                    'PID': colorize(connection.get('pid', ''), color),
+                    'USER': colorize(connection.get('username', ''), color),
+                    'EXE': colorize(
+                        connection.get(
+                            'exe', connection.get('name', '')
+                        ), color)
+                })
+
+            self.stdout.write(
+                PupyCmd.table_format(objects, wl=[
+                    'AF', 'TYPE', 'LADDR', 'RADDR', 'USER', 'EXE'
+                ]))
+
+        except Exception, e:
+            logging.exception(e)

pupy/packages/all/pupyps.py

@@ -98,9 +98,19 @@ def users():
     return info
 
 def connections():
-    info = {}
-    me = psutil.Process()
+    connections = []
 
+    for connection in psutil.net_connections():
+        obj = { k:v for k,v in connection.__dict__.iteritems() }
+        if connection.pid:
+            obj.update(
+                psutil.Process(connection.pid).as_dict({
+                    'pid', 'exe', 'name', 'username'
+                })
+            )
+        connections.append(obj)
+
+    return connections
 
 if __name__ == '__main__':
     print users()