Skip to content

Instantly share code, notes, and snippets.

@nezza
Created March 28, 2024 19:14
Show Gist options
  • Save nezza/34b89eb664355515b86f69dd2ea0a7ec to your computer and use it in GitHub Desktop.
Save nezza/34b89eb664355515b86f69dd2ea0a7ec to your computer and use it in GitHub Desktop.
A fake telnet server compatible with Mirai - Mirai will detect this Telnet server as a vulnerable target and report it to the scan listener.
import socket
import threading
# Mirai compatible fake telnet server
ALLOW_ALL_CREDENTIALS = False
USER = "root"
PASS = "default"
# Function to handle client connection
def handle_client_connection(client_socket):
try:
# Telnet protocol commands
IAC = bytes([255]) # Interpret As Command
DONT = bytes([254])
DO = bytes([253])
WONT = bytes([252])
WILL = bytes([251])
client_socket.send(IAC + DONT + bytes([1])) # Suppress Go Ahead
client_socket.send(IAC + WILL + bytes([3])) # Suppress Go Ahead
# Skip over IAC
client_socket.recv(3)
client_socket.send(b"login: ")
username = b''
while username == b'':
username = client_socket.recv(1024).strip()
client_socket.send(b"password: ")
password = b''
while password == b'':
password = client_socket.recv(1024).strip()
if not ALLOW_ALL_CREDENTIALS and (username.decode() != USER or password.decode() != PASS):
print(f"Login denied for {username.decode()}:{password.decode()}\n")
client_socket.close()
return
# Log and send back username and password
login_info = f"Logged in with Username: {username.decode()} and Password: {password.decode()}\n"
print(login_info)
while True:
client_socket.send("# \n".encode())
data = client_socket.recv(1024).strip()
if b'/bin/busybox MIRAI' in data:
print("Sending MIRAI confirm.")
client_socket.send(b"MIRAI: applet not found\n")
break
# Close the connection
client_socket.close()
except Exception as e:
print(f"An error occurred: {e}")
client_socket.close()
def start_telnet_server(host, port):
server = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
server.bind((host, port))
server.listen(5) # Listen for up to 5 connections
print(f"Telnet server running on {host}:{port}")
try:
while True:
client_sock, address = server.accept()
print(f"Accepted connection from {address[0]}:{address[1]}")
client_handler = threading.Thread(
target=handle_client_connection,
args=(client_sock,)
)
client_handler.start()
except KeyboardInterrupt:
print("Shutting down the server.")
server.close()
# Start the server
if __name__ == "__main__":
HOST, PORT = "0.0.0.0", 23 # Listening on all network interfaces, port 23
start_telnet_server(HOST, PORT)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment