mt_racket 1.0.12a

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 0cf3a98036c8d66c0b7e9cc2684f5c1f6b5f5ab0dbe2655ecc7e750dfe28d513
+  data.tar.gz: c2d597fa40aa7d3ea531e87fef6429e2915eb31dbda2bf1cec4c211522f2821e
+SHA512:
+  metadata.gz: 6ff0c92579162fbc6ca2026545cd6730631bd8ffd9231ccf8cbf453276db599c0772762b2d11dc91ab480d9669aa8e66efce32cdc351ec8083eda81e8cb5cafe
+  data.tar.gz: 65692c82e9f50fd30ff4d04512176aba59be2d0b3a37889728aa48fe56f8693d9e359d4e6b3a0f12d49644a53873b3e3b581b8b2e1fa495f2e9783c4f76402ec

data/README

@@ -0,0 +1,76 @@
+#  $Id$
+
+Racket -- Ruby Raw Packet library.  
+
+Comments, concerns, bugs, money, food, libations to:
+
+  Jon Hart <jhart@spoofed.org>
+
+Installation is simple:
+
+  gem install --source http://spoofed.org/files/racket/ racket
+
+If you desire the source:
+
+  svn co http://spoofed.org/racket/svn racket     
+
+Includes support for reading and writing most major layer 2, 3, 4 and
+5 protocols.
+
+Basic packet construction and writing is as simple (!) as walking
+the stack:
+
+  require 'rubygems'
+  require 'racket'
+
+  include Racket
+  unless (ARGV.size == 4)
+    puts "Usage: #{$0} <srcip> <dstip> <dst_port> <size>"
+    exit
+  end
+
+  # create a new Racket object and pick an interface
+  n = Racket::Racket.new
+  n.iface = "eth0"
+
+  # skip right to layer3, layer2 will be done automatically
+  # build a new IPv4 layer, and assign src and dst ip from the command line
+  n.l3 = IPv4.new
+  n.l3.src_ip = ARGV[0]
+  n.l3.dst_ip = ARGV[1]
+  n.l3.protocol = 0x11
+
+  # tack on UDP 
+  n.l4 = UDP.new
+  # randomize source port
+  n.l4.src_port = 1024 + rand(65535-1024)
+  # take destination port from the commandline
+  n.l4.dst_port = ARGV[2].to_i
+  # build a random amount of garbage for the payload
+  n.l4.payload = Misc.randstring(ARGV[3].to_i)
+
+  # fix 'er  up (checksum, length) prior to sending
+  n.l4.fix!(n.l3.src_ip, n.l3.dst_ip)
+
+  # off you go
+  f = n.sendpacket
+
+  # print out what we built
+  n.layers.compact.each do |l|
+    puts l.pretty
+  end
+  puts "Sent #{f}"
+
+Packet reading, done through something like Pcap, is pretty straight forward too:
+
+  require 'rubygems'
+  require 'racket'
+
+  # Get the raw capture data from somewhere.  In this case, I've hardcoded it
+  binary = "\x45\x10\x00\x3c\x2f\xdf\x40\x00\x40\x06\x89\x17\xc0\xa8\x00\x64\xc0\xa8\x00\x01\x99\xb7\x00\x35\x29\x39\x28\x66\x00\x00\x00\x00\xa0\x02\x16\xd0\xbc\x04\x00\x00\x02\x04\x05\xb4\x04\x02\x08\x0a\x00\x31\x07\xb9\x00\x00\x00\x00\x01\x03\x03\x07"
+  i = Racket::IPv4.new(binary)
+
+  # this will print it out all pretty like, and should show a 60 byte TCP packet from 192.168.0.100 to 192.168.0.1
+  puts i.pretty
+
+

data/examples/arp-send

@@ -0,0 +1,24 @@
+#!/usr/bin/env ruby
+#
+# $Id$
+#
+# Example that just writes a simple arp packet to eth0
+require 'rubygems'
+require 'racket'
+
+include Racket
+
+unless (ARGV.size == 2) 
+  puts "Usage: #{$0} <interface> <opcode>"
+  exit
+end
+
+n = Racket::Racket.new
+n.iface = ARGV[0] 
+
+n.l2 = L2::Ethernet.new(Misc.randstring(14))
+n.l2.ethertype = 0x0806
+n.l3 = L3::ARP.new
+n.l3.opcode = ARGV[1].to_i
+
+n.sendpacket

data/examples/arp-send2

@@ -0,0 +1,30 @@
+#!/usr/bin/env ruby
+#
+# $Id$
+#
+# Send an arp packet that is VLAN tagged
+require 'rubygems'
+require 'racket'
+
+unless (ARGV.size == 7) 
+  puts "Usage: #{$0} <interface> <vlan> <opcode> <sha> <spa> <tha> <tpa>"
+  exit
+end
+
+include Racket
+n = Racket::Racket.new
+n.iface = ARGV[0] 
+
+n.l2 = L2::Ethernet.new(Misc.randstring(14))
+n.l2.ethertype = 0x8100
+n.l3 = L2::VLAN.new
+n.l3.type = 0x0806
+n.l3.id = ARGV[1].to_i
+n.l4 = L3::ARP.new
+n.l4.opcode = ARGV[2].to_i
+n.l4.sha = ARGV[3]
+n.l4.spa = ARGV[4]
+n.l4.tha = ARGV[5]
+n.l4.tpa = ARGV[6]
+
+n.sendpacket

data/examples/cdp

@@ -0,0 +1,39 @@
+#!/usr/bin/env ruby
+#
+# $Id$
+#
+# Send amusing CDP packets
+require 'rubygems'
+require 'racket'
+
+unless (ARGV.size == 1) 
+  puts "Usage: #{$0} <interface>"
+  exit
+end
+
+include Racket
+n = Racket::Racket.new
+n.iface = ARGV[0]
+
+n.layers[2] = L2::EightOTwoDotThree.new(Misc.randstring(14))
+n.layers[2].dst_mac = "01:00:0c:cc:cc:cc"
+n.layers[2].length = 0
+n.layers[3] = L2::LLC.new()
+n.layers[4] = L2::SNAP.new()
+n.layers[4].pid = 0x2000
+
+n.layers[5] = L3::CDP.new()
+n.layers[5].version = 1
+n.layers[5].add_field(1, "CDP, FTW!")
+n.layers[5].add_field(3, "PetabitEthernet0/1")
+n.layers[5].add_field(5, "Some really old version of IOS that nobody, except you, uses.")
+n.layers[5].add_field(6, "Linux")
+n.layers[5].add_field(4, "\xff\xff\xff\xff") # capabilities galore!
+n.layers[5].add_field(9, "wtf.edu") # vlan management domain
+n.layers[5].add_field(10, "\x00\x20")
+
+n.layers.compact.each do |l|
+  puts l.pretty
+end
+
+n.sendpacket

data/examples/cdp-spew

@@ -0,0 +1,52 @@
+#!/usr/bin/env ruby
+#
+# $Id$
+#
+# Spew CDP packets to all Cisco devices on the network
+#
+# Jon Hart <jhart@spoofed.org>
+
+require 'rubygems'
+require 'racket'
+include Racket
+
+unless (ARGV.size >= 1)
+  puts "Usage: #{$0} <iface> [num fields per CDP packet]"
+  exit 
+end
+
+def tick 
+  @it += 1
+  @it = 0 if @it >= @ticks.size
+  print "\r#{@ticks[@it]}"
+  STDOUT.flush
+end
+
+def randcdp
+  @n.layers[2] = L2::EightOTwoDotThree.new(Misc.randstring(14))
+  @n.layers[2].dst_mac = "01:00:0c:cc:cc:cc"
+  @n.layers[2].length = 0
+  @n.layers[3] = L2::LLC.new()
+  @n.layers[4] = L2::SNAP.new()
+  @n.layers[4].pid = 0x2000
+  @n.layers[5] = L3::CDP.new()
+  @n.layers[5].version = 1
+
+  limit = ARGV[1].to_i || 100
+  1.upto(limit) do |f|
+    @n.layers[5].add_field(f, Misc.randstring(5))
+  end
+  @n.sendpacket
+  tick
+end
+
+@it = 0
+@ticks = %w( / - \\ | )
+
+@n = Racket::Racket.new
+@n.iface = ARGV[0]
+
+puts "Spewing..."
+while (true)
+  randcdp
+end

data/examples/dhcp

@@ -0,0 +1,42 @@
+#!/usr/bin/env ruby
+#
+# $Id$
+#
+# Send useless DHCP packets
+require 'rubygems'
+require 'racket'
+
+include Racket
+
+unless (ARGV.size == 2) 
+  puts "Usage: #{$0} <srcip> <dstip>"
+  exit
+end
+
+n = Racket::Racket.new
+n.iface = "eth0"
+
+n.layers[3] = L3::IPv4.new
+n.layers[3].src_ip = ARGV[0]
+n.layers[3].dst_ip = ARGV[1]
+n.layers[3].version = 4
+n.layers[3].hlen = 0x5 #
+n.layers[3].ttl = 44
+n.layers[3].protocol = 0x11
+
+n.layers[4] = L4::UDP.new
+n.layers[4].src_port = 68
+n.layers[4].dst_port = 67
+
+n.layers[5] = L5::BOOTP.new
+n.layers[5].yip = "192.168.0.4"
+n.layers[5].file = "foobar?"
+
+n.layers[4].payload = n.layers[5]
+n.layers[4].fix!(n.layers[3].src_ip, n.layers[3].dst_ip)
+n.layers[4].payload = ""
+
+f = n.sendpacket
+
+puts "Sent! #{f}"
+# vim: set ts=2 et sw=2:

data/examples/dhcp-spew

@@ -0,0 +1,48 @@
+#!/usr/bin/env ruby
+#
+# $Id$
+#
+# Send useless DHCP packets
+require 'rubygems'
+require 'racket'
+
+include Racket
+unless (ARGV.size == 2) 
+  puts "Usage: #{$0} <srcip> <dstip>"
+  exit
+end
+
+n = Racket::Racket.new
+n.iface = "eth0"
+
+n.layers[3] = L3::IPv4.new
+n.layers[3].src_ip = ARGV[0]
+n.layers[3].dst_ip = ARGV[1]
+n.layers[3].version = 4
+n.layers[3].hlen = 0x5 #
+n.layers[3].ttl = 44
+n.layers[3].protocol = 0x11
+
+n.layers[4] = L4::UDP.new
+n.layers[4].src_port = 68
+n.layers[4].dst_port = 67
+
+n.layers[5] = L5::BOOTP.new
+n.layers[5].type = 1
+n.layers[5].id = 0x12345
+n.layers[5].yip = "192.168.0.4"
+n.layers[5].chaddr = "00:de:ad:ba:be:ff"
+#n.layers[5].file = "foobar?"
+#n.layers[5].add_option(4, "\x11\x22\x33\x44")
+n.layers[5].add_option(53, "\x01")
+
+n.layers[5].fix!
+
+n.layers[4].payload = n.layers[5]
+n.layers[4].fix!(n.layers[3].src_ip, n.layers[3].dst_ip)
+n.layers[4].payload = ""
+
+f = n.sendpacket
+
+puts "Sent! #{f}"
+# vim: set ts=2 et sw=2:

data/examples/dns

@@ -0,0 +1,38 @@
+#!/usr/bin/env ruby
+#
+# $Id$
+#
+# Send a DNS request
+
+require 'rubygems'
+require 'racket'
+
+include Racket
+unless (ARGV.size == 3) 
+  puts "Usage: #{$0} <srcip> <dstip> <domain>"
+  exit
+end
+
+n = Racket::Racket.new
+n.iface = "eth0"
+
+n.l3 = Racket::L3::IPv4.new
+n.l3.src_ip = ARGV[0] 
+n.l3.dst_ip = ARGV[1]
+n.l3.protocol = 0x11
+
+n.l4 = Racket::L4::UDP.new
+n.l4.src_port = 48484
+n.l4.dst_port = 53
+
+n.l5 = Racket::L5::DNS.new
+n.l5.add_question(ARGV[2], 1, 1)
+n.l4.payload = n.l5
+n.l4.fix!(n.l3.src_ip, n.l3.dst_ip)
+n.l4.payload = ""
+
+f = n.sendpacket
+n.layers.compact.each do |l|
+  puts l.pretty
+end
+puts "Sent #{f}"

data/examples/egp

@@ -0,0 +1,30 @@
+#!/usr/bin/env ruby
+#
+# $Id$
+#
+
+require 'rubygems'
+require 'racket'
+
+include Racket
+unless (ARGV.size == 3) 
+  puts "Usage: #{$0} <srcip> <dstip> <code>"
+  exit
+end
+
+n = Racket::Racket.new
+n.iface = "eth0"
+
+n.l3 = L3::IPv4.new
+n.l3.src_ip = ARGV[0] 
+n.l3.dst_ip = ARGV[1]
+n.l3.protocol = 0x8
+
+n.l4 = L3::EGP.new
+n.l4.code = ARGV[2].to_i
+
+f = n.sendpacket
+n.layers.compact.each do |l|
+  puts l.pretty
+end
+puts "Sent #{f}"

data/examples/hsrp

@@ -0,0 +1,43 @@
+#!/usr/bin/env ruby
+#
+# $Id$
+#
+#
+# Make all of your Cisco devices unhappy by hurling HSRP packets
+# at them.  Hot, Hot HSRP takeover.
+require 'rubygems'
+require 'racket'
+
+include Racket
+unless (ARGV.size == 3)
+  puts "Usage: #{$0} <srcip> <group> <vip>"
+  exit
+end
+
+n = Racket::Racket.new
+n.iface = "eth0"
+
+n.l2 = L2::Ethernet.new(Misc.randstring(14))
+n.l2.ethertype = 0x0800
+n.l2.dst_mac = "01:00:5e:00:00:02"
+
+n.l3 = L3::IPv4.new
+n.l3.protocol = 17
+n.l3.dst_ip = "224.0.0.2"
+n.l3.src_ip = ARGV[0]
+
+n.l4 = L4::UDP.new
+n.l4.src_port = 1985
+n.l4.dst_port = 1985
+
+n.l5 = L5::HSRP.new
+n.l5.vip = ARGV[2]
+n.l5.group = ARGV[1].to_i
+
+n.l4.payload = n.l5
+n.l4.fix!(n.l3.src_ip, n.l3.dst_ip)
+n.l4.payload = ""
+
+n.sendpacket
+
+puts n.pretty

data/examples/hsrp_takeover

@@ -0,0 +1,69 @@
+#!/usr/bin/env ruby
+#
+# $Id$
+#
+#
+# Listen for HSRP broadcasts and use the information learned 
+# therein to perform an active "takeover" of that VIP.  Evil.
+#
+# Jon Hart <jhart@spoofed.org>
+
+require 'rubygems'
+require 'pcaprub'
+require 'racket'
+
+include Racket
+if (ARGV.size != 2)
+  puts "Usage: #{$0} <iface> <new router>"
+  exit
+end
+
+iface = ARGV[0]
+router = ARGV[1]
+
+begin
+  p = Pcap::open_live(iface, 1500, true, 1000)
+  unless (iface.nil?)
+    p.setfilter("! host #{router}")
+  end
+rescue Exception => e
+  puts "Pcap: Cannot open device #{ARGV[0]}: #{e}"
+  exit
+end
+
+# prep our new takeover.  
+takeover = Racket::Racket.new
+takeover.l3 = L3::IPv4.new
+takeover.l3.src_ip = router 
+takeover.l3.dst_ip = "224.0.0.2"
+takeover.l3.protocol = 17 
+takeover.l4 = L4::UDP.new
+takeover.l4.src_port = 1985
+takeover.l4.dst_port = 1985
+
+p.each do |pkt|
+  if (p.datalink == Pcap::DLT_EN10MB) 
+      puts "Found ethernet"
+    eth = L2::Ethernet.new(pkt)
+    if (eth.ethertype == 0x0800)
+      ip = L3::IPv4.new(eth.payload)
+      if (ip.protocol == 17) 
+        udp = L4::UDP.new(ip.payload)
+        if (udp.src_port == 1985 && udp.dst_port == 1985)
+          takeover.l5 = L5::HSRP.new(udp.payload)
+          takeover.l5.opcode = L5::HSRP::HSRP_HELLO
+          takeover.l5.state = L5::HSRP::HSRP_ACTIVE
+          takeover.l5.priority = 0xffff
+         
+          takeover.l4.payload = takeover.l5
+          takeover.l4.fix!(takeover.l3.src_ip, takeover.l3.dst_ip)
+          takeover.l4.payload = ""
+
+          puts "Perfoming takeover on #{takeover.l5.vip}"
+          takeover.sendpacket
+        end
+      end
+    end
+  end
+end
+# vim: set ts=2 et sw=2:

data/examples/icmp-recv

@@ -0,0 +1,34 @@
+#!/usr/bin/env ruby
+#
+# $Id$
+#
+#
+# Simple re-implementation of tcpdump using Racket
+require 'pcaplet'
+include Pcap
+require 'rubygems'
+require 'racket'
+#require 'racket-all'
+
+include Racket
+pcaplet = Pcaplet.new("-s 65535" + ARGV.join)
+pcaplet.each_packet { |pkt|
+  if (pkt.datalink == DLT_EN10MB)
+    l2 = L2::Ethernet.new(pkt.raw_data)
+    puts l2.pretty
+    if (l2.ethertype == 0x0800)
+      l3 = L3::IPv4.new(l2.payload)
+      puts l3.pretty 
+      case l3.protocol
+        when 1
+          l4 = L4::ICMP.new(l3.payload)
+          puts l4.pretty
+        else
+          next
+        end
+    end
+  else
+    puts "Skipping unknown datalink #{pkt.datalink}"
+  end
+}
+# vim: set ts=2 et sw=2:

data/examples/icmp-spew

@@ -0,0 +1,50 @@
+#!/usr/bin/env ruby
+#
+# $Id$
+#
+# Given a source and destination IP address
+# and a data size, spew all 65536 possible ICMP 
+
+require 'rubygems'
+require 'racket'
+
+include Racket
+if (ARGV.size != 3) 
+  puts "Usage #{$0} <src_ip> <dst_ip> <icmp data size>"
+  exit!
+end
+
+
+def tick 
+  @it += 1
+  @it = 0 if @it >= @ticks.size
+  print "\r#{@ticks[@it]}"
+  STDOUT.flush
+end
+
+def rand_icmp(n)
+  n.l3 = L3::IPv4.new
+  n.l3.src_ip= ARGV[0]
+  n.l3.dst_ip = ARGV[1]
+  n.l3.version = 0x4
+  n.l3.hlen = 0x5
+  n.l3.protocol = 0x1
+  n.l3.flags = 0x0
+  n.l3.foffset = 0x0
+  n.l4 = L4::ICMP.new(Misc.randstring(20))
+  n.sendpacket
+  tick
+end
+  
+@it = 0
+@ticks = %w( / - \\ | )
+
+n = Racket::Racket.new
+n.iface = "eth0"
+
+puts "Spewing..."
+while (true)
+  rand_icmp(n)
+end
+
+# vim: set ts=2 et sw=2:

data/examples/icmpv6

@@ -0,0 +1,84 @@
+#!/usr/bin/env ruby
+#
+# $Id$
+
+require 'rubygems'
+require 'racket'
+
+include Racket
+unless (ARGV.size == 3) 
+  puts "Usage: #{$0} <interface> <srcip> <dstip>"
+  exit
+end
+
+n = Racket::Racket.new
+n.iface = ARGV[0]
+
+#n.l2 = L2::Ethernet.new(Misc.randstring(14))
+n.l2 = L2::Ethernet.new
+n.l2.src_mac = L2::Misc.randommac
+n.l2.dst_mac = L2::Misc.randommac
+n.l2.ethertype = 0x86DD
+
+n.l3 = L3::IPv6.new
+n.l3.src_ip = L3::Misc.ipv62long(ARGV[1])
+n.l3.dst_ip = L3::Misc.ipv62long(ARGV[2])
+n.l3.nhead = 58
+
+def build(i)
+  i.l4.fix!(i.l3.src_ip, i.l3.dst_ip)
+  f = i.sendpacket
+  puts "Sent #{f}"
+end
+
+n.l4 = L4::ICMPv6DestinationUnreachable.new
+n.l4.payload = L3::IPv6.new(Misc.randstring(40))
+build(n)
+n.l4 = L4::ICMPv6TimeExceeded.new
+n.l4.payload = L3::IPv6.new(Misc.randstring(40))
+build(n)
+n.l4 = L4::ICMPv6EchoRequest.new
+build(n)
+n.l4 = L4::ICMPv6EchoReply.new
+build(n)
+n.l4 = L4::ICMPv6PacketTooBig.new
+n.l4.mtu = rand(65535)
+n.l4.payload = L3::IPv6.new(Misc.randstring(40))
+build(n)
+n.l4 = L4::ICMPv6ParameterProblem.new
+payload = L3::IPv6.new(Misc.randstring(40))
+n.l4.payload = payload
+n.l4.pointer = 0x20
+build(n)
+n.l4 = L4::ICMPv6MulticastListenerQuery.new
+build(n)
+n.l4 = L4::ICMPv6MulticastListenerReport.new
+build(n)
+n.l4 = L4::ICMPv6MulticastListenerDone.new
+build(n)
+n.l4 = L4::ICMPv6RouterSolicitation.new
+build(n)
+n.l4 = L4::ICMPv6RouterAdvertisement.new
+build(n)
+n.l4 = L4::ICMPv6NeighborSolicitation.new
+build(n)
+n.l4 = L4::ICMPv6NeighborAdvertisement.new
+n.l4.solicited = 1
+n.l4.slla = "01:02:03:04:aa:bb"
+build(n)
+n.l4 = L4::ICMPv6Redirect.new
+n.l4.slla = "01:02:03:04:aa:bb"
+n.l4.src_ip = L3::Misc.ipv62long(ARGV[2])
+n.l4.dst_ip = L3::Misc.ipv62long(ARGV[1])
+build(n)
+
+n.l4 = L4::ICMPv6NodeInformationRequest.new
+n.l4.payload = Misc.randstring(rand(32))
+n.l4.code = 2
+n.l4.payload = [L3::Misc.ipv42long("192.168.1.10")].pack("N")
+n.l4.qtype = 2
+build(n)
+
+n.l4 = L4::ICMPv6NodeInformationReply.new
+n.l4.payload = Misc.randstring(rand(32))
+build(n)