Skip to content

Instantly share code, notes, and snippets.

@koma5

koma5/pppOverNetcat.ipynb

Last active January 22, 2017 13:06
Show Gist options
  • Save koma5/6248b6fbfc1b3d4b7151e5f476b64c2b to your computer and use it in GitHub Desktop.
Save koma5/6248b6fbfc1b3d4b7151e5f476b64c2b to your computer and use it in GitHub Desktop.
Download ZIP
Display the source blob
Display the rendered blob
Raw
pppOverNetcat.ipynb
{
"cells": [
{
"cell_type": "code",
"execution_count": 1,
"metadata": {
"collapsed": false
},
"outputs": [],
"source": [
"import ipaddress as i"
]
},
{
"cell_type": "code",
"execution_count": 2,
"metadata": {
"collapsed": false
},
"outputs": [
{
"name": "stdout",
"output_type": "stream",
"text": [
"10.42.42.41:10.42.42.42\n"
]
}
],
"source": [
"print ':'.join([a.__str__() for a in i.ip_network(u'10.42.42.42/30', strict=False).hosts()])"
]
},
{
"cell_type": "code",
"execution_count": null,
"metadata": {
"collapsed": true
},
"outputs": [],
"source": [
"# 132:~ marco$ sudo pppd noauth passive pty \"nc -l 42\" debug nodetac 10.42.42.41:10.42.42.42"
]
},
{
"cell_type": "code",
"execution_count": null,
"metadata": {
"collapsed": true
},
"outputs": [],
"source": [
"\"\"\"\n",
"Wed Nov 20 22:19:38 2013 : using link 0\n",
"Wed Nov 20 22:19:38 2013 : Using interface ppp0\n",
"Wed Nov 20 22:19:38 2013 : Connect: ppp0 <--> /dev/ttys005\n",
"Wed Nov 20 22:19:39 2013 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x585bbe29> <pcomp> <accomp>]\n",
"Wed Nov 20 22:19:42 2013 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x585bbe29> <pcomp> <accomp>]\n",
"Wed Nov 20 22:19:45 2013 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x585bbe29> <pcomp> <accomp>]\n",
"Wed Nov 20 22:19:46 2013 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x36aa0423> <pcomp> <accomp>]\n",
"Wed Nov 20 22:19:46 2013 : lcp_reqci: returning CONFACK.\n",
"Wed Nov 20 22:19:46 2013 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x36aa0423> <pcomp> <accomp>]\n",
"Wed Nov 20 22:19:46 2013 : rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x585bbe29> <pcomp> <accomp>]\n",
"Wed Nov 20 22:19:46 2013 : sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 10.42.42.41>]\n",
"Wed Nov 20 22:19:46 2013 : sent [ACSCP ConfReq id=0x1 <route vers 16777216> <domain vers 16777216>]\n",
"Wed Nov 20 22:19:46 2013 : rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x585bbe29> <pcomp> <accomp>]\n",
"Wed Nov 20 22:19:46 2013 : rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x585bbe29> <pcomp> <accomp>]\n",
"Wed Nov 20 22:19:46 2013 : rcvd [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 172.16.0.62>]\n",
"Wed Nov 20 22:19:46 2013 : ipcp: returning Configure-NAK\n",
"Wed Nov 20 22:19:46 2013 : sent [IPCP ConfNak id=0x1 <addr 10.42.42.42>]\n",
"Wed Nov 20 22:19:46 2013 : rcvd [ACSCP ConfReq id=0x1 <route vers 16777216> <domain vers 16777216>]\n",
"Wed Nov 20 22:19:46 2013 : sent [ACSCP ConfRej id=0x1 <route vers 16777216> <domain vers 16777216>]\n",
"Wed Nov 20 22:19:46 2013 : rcvd [IPCP ConfReq id=0x2 <compress VJ 0f 01> <addr 10.42.42.42>]\n",
"Wed Nov 20 22:19:46 2013 : ipcp: returning Configure-ACK\n",
"Wed Nov 20 22:19:46 2013 : sent [IPCP ConfAck id=0x2 <compress VJ 0f 01> <addr 10.42.42.42>]\n",
"Wed Nov 20 22:19:46 2013 : rcvd [ACSCP ConfReq id=0x2]\n",
"Wed Nov 20 22:19:46 2013 : sent [ACSCP ConfAck id=0x2]\n",
"Wed Nov 20 22:19:49 2013 : sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 10.42.42.41>]\n",
"Wed Nov 20 22:19:49 2013 : sent [ACSCP ConfReq id=0x1 <route vers 16777216> <domain vers 16777216>]\n",
"Wed Nov 20 22:19:49 2013 : rcvd [IPCP ConfAck id=0x1 <compress VJ 0f 01> <addr 10.42.42.41>]\n",
"Wed Nov 20 22:19:49 2013 : ipcp: up\n",
"Wed Nov 20 22:19:49 2013 : local IP address 10.42.42.41\n",
"Wed Nov 20 22:19:49 2013 : remote IP address 10.42.42.42\n",
"Wed Nov 20 22:19:49 2013 : rcvd [ACSCP ConfRej id=0x1 <route vers 16777216> <domain vers 16777216>]\n",
"Wed Nov 20 22:19:49 2013 : sent [ACSCP ConfReq id=0x2]\n",
"Wed Nov 20 22:19:49 2013 : rcvd [ACSCP ConfReq id=0x2]\n",
"Wed Nov 20 22:19:49 2013 : sent [ACSCP ConfAck id=0x2]\n",
"Wed Nov 20 22:19:49 2013 : rcvd [ACSCP ConfAck id=0x2]\n",
"^CWed Nov 20 22:28:14 2013 : Terminating on signal 2.\n",
"Wed Nov 20 22:28:14 2013 : ipcp: down\n",
"Wed Nov 20 22:28:14 2013 : sent [LCP TermReq id=0x2 \"User request\"]\n",
"Wed Nov 20 22:28:14 2013 : Connection terminated.\n",
"Wed Nov 20 22:28:14 2013 : Connect time 8.6 minutes.\n",
"Wed Nov 20 22:28:14 2013 : Sent 5990 bytes, received 5286 bytes.\n",
"Wed Nov 20 22:28:14 2013 : Waiting for 1 child processes...\n",
"Wed Nov 20 22:28:14 2013 : script nc -l 42, pid 2559\n",
"Wed Nov 20 22:28:14 2013 : Child process nc -l 42 (pid 2559) terminated with signal 2\n",
"\"\"\""
]
},
{
"cell_type": "code",
"execution_count": null,
"metadata": {
"collapsed": true
},
"outputs": [],
"source": [
"# marco@probo:~$ sudo pppd noauth pty \"nc 132.byteli.local 42\" debug nodetach"
]
},
{
"cell_type": "code",
"execution_count": null,
"metadata": {
"collapsed": true
},
"outputs": [],
"source": [
"\"\"\"\n",
"Wed Nov 20 22:19:47 2013 : using link 0\n",
"Wed Nov 20 22:19:47 2013 : Using interface ppp0\n",
"Wed Nov 20 22:19:47 2013 : Connect: ppp0 <--> /dev/ttys005\n",
"Wed Nov 20 22:19:47 2013 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x585bbe29> <pcomp> <accomp>]\n",
"Wed Nov 20 22:19:47 2013 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x36aa0423> <pcomp> <accomp>]\n",
"Wed Nov 20 22:19:47 2013 : lcp_reqci: returning CONFACK.\n",
"Wed Nov 20 22:19:47 2013 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x585bbe29> <pcomp> <accomp>]\n",
"Wed Nov 20 22:19:47 2013 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x585bbe29> <pcomp> <accomp>]\n",
"Wed Nov 20 22:19:47 2013 : lcp_reqci: returning CONFACK.\n",
"Wed Nov 20 22:19:47 2013 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x585bbe29> <pcomp> <accomp>]\n",
"Wed Nov 20 22:19:47 2013 : rcvd [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x585bbe29> <pcomp> <accomp>]\n",
"Wed Nov 20 22:19:47 2013 : lcp_reqci: returning CONFACK.\n",
"Wed Nov 20 22:19:47 2013 : sent [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x585bbe29> <pcomp> <accomp>]\n",
"Wed Nov 20 22:19:47 2013 : rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x36aa0423> <pcomp> <accomp>]\n",
"Wed Nov 20 22:19:47 2013 : sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 172.16.0.62>]\n",
"Wed Nov 20 22:19:47 2013 : sent [ACSCP ConfReq id=0x1 <route vers 16777216> <domain vers 16777216>]\n",
"Wed Nov 20 22:19:47 2013 : rcvd [IPCP ConfNak id=0x1 <addr 10.42.42.42>]\n",
"Wed Nov 20 22:19:47 2013 : sent [IPCP ConfReq id=0x2 <compress VJ 0f 01> <addr 10.42.42.42>]\n",
"Wed Nov 20 22:19:47 2013 : rcvd [ACSCP ConfRej id=0x1 <route vers 16777216> <domain vers 16777216>]\n",
"Wed Nov 20 22:19:47 2013 : sent [ACSCP ConfReq id=0x2]\n",
"Wed Nov 20 22:19:47 2013 : rcvd [IPCP ConfAck id=0x2 <compress VJ 0f 01> <addr 10.42.42.42>]\n",
"Wed Nov 20 22:19:47 2013 : rcvd [ACSCP ConfAck id=0x2]\n",
"Wed Nov 20 22:19:50 2013 : rcvd [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 10.42.42.41>]\n",
"Wed Nov 20 22:19:50 2013 : ipcp: returning Configure-ACK\n",
"Wed Nov 20 22:19:50 2013 : sent [IPCP ConfAck id=0x1 <compress VJ 0f 01> <addr 10.42.42.41>]\n",
"Wed Nov 20 22:19:50 2013 : ipcp: up\n",
"Wed Nov 20 22:19:50 2013 : local IP address 10.42.42.42\n",
"Wed Nov 20 22:19:50 2013 : remote IP address 10.42.42.41\n",
"Wed Nov 20 22:19:50 2013 : rcvd [ACSCP ConfReq id=0x1 <route vers 16777216> <domain vers 16777216>]\n",
"Wed Nov 20 22:19:50 2013 : sent [ACSCP ConfRej id=0x1 <route vers 16777216> <domain vers 16777216>]\n",
"Wed Nov 20 22:19:50 2013 : sent [ACSCP ConfReq id=0x2]\n",
"Wed Nov 20 22:19:50 2013 : rcvd [ACSCP ConfReq id=0x2]\n",
"Wed Nov 20 22:19:50 2013 : sent [ACSCP ConfAck id=0x2]\n",
"Wed Nov 20 22:19:50 2013 : rcvd [ACSCP ConfAck id=0x2]\n",
"Wed Nov 20 22:28:15 2013 : Script nc 132.byteli.local 42 finished (pid 68820), status = 0x0\n",
"^CWed Nov 20 22:28:19 2013 : Terminating on signal 2.\n",
"Wed Nov 20 22:28:19 2013 : ipcp: down\n",
"Wed Nov 20 22:28:19 2013 : sent [LCP TermReq id=0x2 \"User request\"]\n",
"Wed Nov 20 22:28:19 2013 : Connection terminated.\n",
"Wed Nov 20 22:28:19 2013 : Connect time 8.6 minutes.\n",
"Wed Nov 20 22:28:19 2013 : Sent 5286 bytes, received 5990 bytes.\n",
"\"\"\""
]
},
{
"cell_type": "code",
"execution_count": null,
"metadata": {
"collapsed": true
},
"outputs": [],
"source": [
"\"\"\"\n",
"132:~ marco$ netstat -nr\n",
"Routing tables\n",
"\n",
"Internet:\n",
"Destination Gateway Flags Refs Use Netif Expire\n",
"default 172.16.0.1 UGSc 11 0 en0\n",
"default 10.42.42.42 UGScI 1 0 ppp0\n",
"10.42.42.42 10.42.42.41 UHr 3 0 ppp0\n",
"127 127.0.0.1 UCS 0 0 lo0\n",
"127.0.0.1 127.0.0.1 UH 0 616 lo0\n",
"169.254 link#4 UCS 0 0 en0\n",
"172.16/24 link#4 UCS 12 0 en0\n",
"172.16.0.1 0:1f:f3:c6:ee:f7 UHLWIir 12 257 en0 1155\n",
"172.16.0.5 e0:cb:4e:45:16:22 UHLWIi 0 0 en0 1150\n",
"172.16.0.9 4:c:ce:90:71:e4 UHLWIi 0 0 en0 964\n",
"172.16.0.10 e4:ce:8f:e:25:76 UHLWIi 0 2 en0 534\n",
"172.16.0.12 0:21:e9:1c:82:5b UHLWIi 0 0 en0 563\n",
"172.16.0.13 b4:f0:ab:df:75:d5 UHLWIi 0 0 en0 836\n",
"172.16.0.20 f6:fa:b3:84:41:e0 UHLWIi 24 4868 en0 1160\n",
"172.16.0.51 a:d:4:40:f3:50 UHLWIi 3 534321 en0 833\n",
"172.16.0.54 e0:cb:4e:45:16:22 UHLWIi 1 7835 en0 1113\n",
"172.16.0.62 10:9a:dd:47:9b:a UHLWIi 6 1964306 en0 1149\n",
"172.16.0.100 0:14:fd:16:7d:a UHLWIi 3 661 en0 1019\n",
"172.16.0.132 127.0.0.1 UHS 1 696 lo0\n",
"172.16.0.255 ff:ff:ff:ff:ff:ff UHLWbI 0 17 en0\n",
"\"\"\""
]
},
{
"cell_type": "code",
"execution_count": null,
"metadata": {
"collapsed": true
},
"outputs": [],
"source": [
"\"\"\"\n",
"132:~ marco$ ifconfig\n",
"p2p0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> mtu 2304\n",
"\tether 0e:2d:aa:47:c8:b1 \n",
"\tmedia: autoselect\n",
"\tstatus: inactive\n",
"ppp0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500\n",
"\tinet 10.42.42.41 --> 10.42.42.42 netmask 0xff000000\n",
"\"\"\""
]
},
{
"cell_type": "code",
"execution_count": null,
"metadata": {
"collapsed": true
},
"outputs": [],
"source": [
"\"\"\"\n",
"marco@probo:~$ netstat -nr\n",
"Routing tables\n",
"\n",
"Internet:\n",
"Destination Gateway Flags Refs Use Netif Expire\n",
"default 172.16.0.1 UGSc 13 13 en0\n",
"default 10.42.42.41 UGScI 1 0 ppp0\n",
"10.42.42.41 10.42.42.42 UH 3 0 ppp0\n",
"127 127.0.0.1 UCS 0 0 lo0\n",
"127.0.0.1 127.0.0.1 UH 16 5280 lo0\n",
"169.254 link#4 UCS 0 0 en0\n",
"172.16/24 link#4 UCS 13 0 en0\n",
"172.16.0.1 0:1f:f3:c6:ee:f7 UHLWIi 14 242 en0 1198\n",
"172.16.0.4 dc:2b:61:36:1c:7d UHLWIi 2 1526 en0 253\n",
"172.16.0.5 e0:cb:4e:45:16:22 UHLWIi 0 0 en0 1193\n",
"172.16.0.9 4:c:ce:90:71:e4 UHLWIi 1 1 en0 1007\n",
"172.16.0.10 e4:ce:8f:e:25:76 UHLWIi 0 2 en0 577\n",
"172.16.0.12 0:21:e9:1c:82:5b UHLWIi 0 0 en0 606\n",
"172.16.0.13 b4:f0:ab:df:75:d5 UHLWIi 0 1 en0 879\n",
"172.16.0.20 f6:fa:b3:84:41:e0 UHLWIi 10 3547 en0 1189\n",
"172.16.0.50 e0:cb:4e:45:16:22 UHLWIi 2 400 en0 1162\n",
"172.16.0.54 e0:cb:4e:45:16:22 UHLWIi 1 841 en0 1193\n",
"172.16.0.62 127.0.0.1 UHS 7 640 lo0\n",
"172.16.0.100 0:14:fd:16:7d:a UHLWIi 6 4553 en0 417\n",
"172.16.0.132 a8:20:66:53:d0:8a UHLWIi 3 67621 en0 1156\n",
"172.16.0.255 ff:ff:ff:ff:ff:ff UHLWbI 0 4 en0\n",
"\"\"\""
]
},
{
"cell_type": "code",
"execution_count": null,
"metadata": {
"collapsed": true
},
"outputs": [],
"source": [
"\"\"\"\n",
"marco@probo:~$ ifconfig\n",
"p2p0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> mtu 2304\n",
"\tether 0a:bc:c8:e8:75:36 \n",
"\tmedia: autoselect\n",
"\tstatus: inactive\n",
"ppp0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500\n",
"\tinet 10.42.42.42 --> 10.42.42.41 netmask 0xff000000\n",
"\"\"\""
]
},
{
"cell_type": "code",
"execution_count": 3,
"metadata": {
"collapsed": false
},
"outputs": [
{
"name": "stderr",
"output_type": "stream",
"text": [
"WARNING: No route found for IPv6 destination :: (no default route?)\n",
"WARNING:scapy.runtime:No route found for IPv6 destination :: (no default route?)\n"
]
}
],
"source": [
"from scapy.all import *"
]
},
{
"cell_type": "code",
"execution_count": 4,
"metadata": {
"collapsed": false
},
"outputs": [],
"source": [
"packets = rdpcap('pppOnc_ethernet.pcap')"
]
},
{
"cell_type": "code",
"execution_count": 5,
"metadata": {
"collapsed": false
},
"outputs": [
{
"data": {
"text/plain": [
"<pppOnc_ethernet.pcap: TCP:1656 UDP:6291 ICMP:19 Other:92>"
]
},
"execution_count": 5,
"metadata": {},
"output_type": "execute_result"
}
],
"source": [
"packets"
]
}
],
"metadata": {
"kernelspec": {
"display_name": "Python 3",
"language": "python",
"name": "python3"
},
"language_info": {
"codemirror_mode": {
"name": "ipython",
"version": 3
},
"file_extension": ".py",
"mimetype": "text/x-python",
"name": "python",
"nbconvert_exporter": "python",
"pygments_lexer": "ipython3",
"version": "3.6.0"
}
},
"nbformat": 4,
"nbformat_minor": 0
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment