soak 0.1.0

data/Gemfile

@@ -0,0 +1,2 @@
+source 'https://rubygems.org'
+gemspec

data/Gemfile.lock

@@ -0,0 +1,20 @@
+PATH
+  remote: .
+  specs:
+    soak (0.0.1)
+      asetus (>= 0.0.7)
+      logger (>= 1.2.8)
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    asetus (0.0.7)
+      slop
+    logger (1.2.8)
+    slop (3.5.0)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  soak!

data/README.md

@@ -0,0 +1,36 @@
+## SOAK
+
+lightweight ARP sponge.
+
+## requirements
+
++ ruby 1.9.3
++ asetus 0.1.2
++ logger 1.2.8
+
+soakd requires root privileges to run.
+
+# install
+
+	> gem install soak
+	>
+
+## usage
+
+	> soakd
+ 	>
+
+## files
+
+the configuration file is generated during the first run at: /root/.config/soak/config
+
+## configuration example
+
+	---
+	interface: eth0
+	local_mac: ff:ff:ff:ff:ff:ff
+	sponge: [ '192.0.2.44', '192.0.2.101', '192.0.2.253' ]
+	debug: true
+
+
+

data/Rakefile

@@ -0,0 +1,30 @@
+begin
+  require 'rubygems'
+  require 'bundler'
+  Bundler.setup
+rescue => e
+  warn "FATAL - #{e}"
+  exit 1
+end
+
+gemspec = eval(File.read(Dir['*.gemspec'].first))
+file    = [gemspec.name, gemspec.version].join('-') + '.gem'
+
+task :validate do
+  gemspec.validate
+end
+
+task :build do
+  system "gem build #{gemspec.name}.gemspec"
+  FileUtils.mkdir_p 'gems'
+  FileUtils.mv file, 'gems'
+end
+
+task :install => [:validate, :build] do
+  system "sudo -E sh -c \'umask 022; gem install gems/#{file} --no-ri --no-rdoc\'"
+  FileUtils.rm_rf 'gems'
+end
+
+task :remove do
+  system "sudo -E sh -c \'umask 022; gem uninstall #{gemspec.name}\'"
+end

data/bin/soakd

@@ -0,0 +1,12 @@
+#!/usr/bin/env ruby
+
+require 'soak'
+
+def help
+  puts 'usage: soakd'
+  exit 1
+end
+
+begin
+  sponge = Soak::Lookup.new
+end

data/lib/soak.rb

@@ -0,0 +1,9 @@
+module Soak
+ Directory = File.expand_path File.join File.dirname(__FILE__), '../'
+ require 'socket'
+ require 'ipaddr'
+ require 'thread'
+ require 'soak/core'
+ require 'soak/lookup'
+ require 'soak/packet'
+end

data/lib/soak/core.rb

@@ -0,0 +1,40 @@
+module Soak
+
+  require 'logger'
+  target = STDOUT
+  Log = Logger.new target
+
+  # import user configuration
+  require 'asetus'
+  if File.exists? '/etc/soak/config'
+    Cfg  			= Asetus.cfg name: 'soak'
+  else
+    CFG = Asetus.new :name=>'soak', :load=>false
+    CFG.default.interface 	= 'eth0'
+    CFG.default.local_mac 	= 'ff:ff:ff:ff:ff:ff'
+    CFG.default.sponge 		= []
+    CFG.default.debug 		= false
+    CFG.load
+    if CFG.create
+      CFG.save
+      puts '+ base configuration built at: /root/.config/soak/config'
+      exit 0
+    else
+      Cfg = CFG.cfg
+    end
+  end
+  Process.daemon if not Cfg.debug
+
+  # constants
+  ETH_P_ALL     =  0x03_00
+  SIOCGIFINDEX  =  0x89_33
+  PF_PACKET     =  17
+  AF_PACKET     =  PF_PACKET
+  IFREQ		=  [ Cfg.interface.dup ].pack 'a32'
+  RawSocket     =  Socket.open Socket::PF_PACKET, Socket::SOCK_RAW, ETH_P_ALL
+
+  # setup sending device
+  RawSocket.ioctl(SIOCGIFINDEX, IFREQ)
+  RawSocket.bind [AF_PACKET].pack('s') + [ETH_P_ALL].pack('n') + IFREQ[16..20] + ("\x00" * 12)
+
+end

data/lib/soak/lookup.rb

@@ -0,0 +1,60 @@
+module Soak
+  class Lookup
+
+    def initialize
+      @rx_queue = Queue.new
+      @in_sock = Socket.new Socket::PF_PACKET, Socket::SOCK_RAW, 0x03_00
+      listen
+    end
+
+    def listen
+      enqueue = Thread.new do
+        while true do
+	  r, w, e = IO.select([@in_sock], nil, nil)
+          if r[0]
+            data = @in_sock.recvfrom_nonblock(1500).first
+	    @rx_queue << data
+          end
+        end
+      end
+      worker = Thread.new do
+	while true do
+          begin
+            @data = @rx_queue.pop
+            if @data[0..13].unpack('nnnnnnn')[6].to_s(16).to_i == 806 # process arp packets only
+	      pkt_lu
+            end
+          rescue => e
+	    Log.warn e if Cfg.debug
+	  end
+        end
+      end
+      worker.join
+    end
+
+    def pkt_lu
+      @src_mac = []
+      pkt = @data[14..-1].unpack('nnCCnnnnL>nnnL>')
+      case pkt[4].to_s(16).to_i
+        when 1
+          @dst_ip = IPAddr.new(pkt[12], Socket::AF_INET)
+          if Cfg.sponge.include? @dst_ip.to_s
+            [ pkt[5], pkt[6], pkt[7] ].each do |p|
+              if p.to_s(16).size < 4
+                @src_mac << [ [ '00' ] + [ p.to_s(16) ] ].join
+              else
+                @src_mac << p.to_s(16)
+              end
+            end
+            @src_ip = IPAddr.new(pkt[8], Socket::AF_INET)
+            Log.debug [ 'matching arp request - target address:', @dst_ip.to_s, '- sender info:', @src_ip, '@', @src_mac ].join(' ') if Cfg.debug
+	    @src_mac = @src_mac.join.scan(/../).join ':'
+            pkt = Packet.new @dst_ip, @src_ip, @src_mac, @data[12..19]
+          else
+            Log.debug [ 'address is not in the database -', @dst_ip.to_s, '.. ignoring ..' ].join(' ') if Cfg.debug
+          end
+      end
+    end
+
+  end
+end

data/lib/soak/packet.rb

@@ -0,0 +1,38 @@
+module Soak
+  class Packet
+
+    def initialize dst_ip, src_ip, src_mac, head_data
+      @dst_ip 		= dst_ip
+      @src_ip 		= src_ip
+      @src_mac 		= src_mac
+      @head_data 	= head_data
+      pkt_gen
+      inject
+    end
+
+    def pkt_gen
+      begin
+        smac = Cfg.local_mac.split(':').pack 'H2H2H2H2H2H2'
+        dmac = @src_mac.split(':').pack 'H2H2H2H2H2H2'
+        opcode = [ 2 ].pack 'n'
+        sha = Cfg.local_mac.split(':').pack 'H2H2H2H2H2H2'
+        spa = @dst_ip.to_s.split('.').map{ |s| s.to_i }.pack 'CCCC'
+        tha = @src_mac.split(':').pack 'H2H2H2H2H2H2'
+        tpa = @src_ip.to_s.split('.').map{ |s| s.to_i }.pack 'CCCC'
+        @packet = [ dmac, smac, @head_data, opcode, sha, spa, tha, tpa ].join
+      rescue => e
+        Log.warn e
+      end
+    end
+
+    def inject
+      begin
+        RawSocket.send @packet, 0
+        Log.debug [ 'arp packet injected - sponge address:', Cfg.local_mac ].join(' ') if Cfg.debug
+      rescue => e
+	Log.warn e
+      end
+    end
+
+  end
+end

data/soak.gemspec

@@ -0,0 +1,18 @@
+Gem::Specification.new do |s|
+  s.name              = 'soak'
+  s.version           = '0.1.0'
+  s.platform          = Gem::Platform::RUBY
+  s.authors           = [ 'Samer Abdel-Hafez' ]
+  s.email             = %w( sam@arahant.net )
+  s.homepage          = 'http://github.com/nopedial/soak'
+  s.summary           = 'soak'
+  s.description       = 'just an arp sponge'
+  s.rubyforge_project = s.name
+  s.files             = `git ls-files`.split("\n")
+  s.executables       = %w( soakd )
+  s.require_path      = 'lib'
+
+  s.required_ruby_version = '>= 1.9.3'
+  s.add_dependency 'asetus', '>= 0.1.2'
+  s.add_dependency 'logger', '>= 1.2.8'
+end

metadata

@@ -0,0 +1,88 @@
+--- !ruby/object:Gem::Specification
+name: soak
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+  prerelease: 
+platform: ruby
+authors:
+- Samer Abdel-Hafez
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2014-09-01 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: asetus
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.1.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 0.1.2
+- !ruby/object:Gem::Dependency
+  name: logger
+  requirement: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 1.2.8
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    none: false
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: 1.2.8
+description: just an arp sponge
+email:
+- sam@arahant.net
+executables:
+- soakd
+extensions: []
+extra_rdoc_files: []
+files:
+- Gemfile
+- Gemfile.lock
+- README.md
+- Rakefile
+- bin/soakd
+- lib/soak.rb
+- lib/soak/core.rb
+- lib/soak/lookup.rb
+- lib/soak/packet.rb
+- soak.gemspec
+homepage: http://github.com/nopedial/soak
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: 1.9.3
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: soak
+rubygems_version: 1.8.23
+signing_key: 
+specification_version: 3
+summary: soak
+test_files: []