mirror of https://github.com/rscmbbng/Border-Check
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
523 lines
23 KiB
523 lines
23 KiB
#!/usr/local/bin/python
|
|
# -*- coding: iso-8859-15 -*-
|
|
"""
|
|
BC (Border-Check) is a tool to retrieve info of traceroute tests over website navigation routes.
|
|
GPLv3 - 2013 by psy (epsylon@riseup.net)
|
|
"""
|
|
import os, sys, time, re, traceback
|
|
from urlparse import urlparse
|
|
try:
|
|
import pygeoip
|
|
except:
|
|
print "\nError importing: pygeoip lib. \n\nOn Debian based systems, please try like root:\n\n $ apt-get install python-geoip\n"
|
|
sys.exit(2)
|
|
try:
|
|
import sqlite3
|
|
except:
|
|
print "\nError importing: sqlite3 lib. \n\nOn Debian based systems, please try like root:\n\n $ apt-get install sqlite3\n"
|
|
sys.exit(2)
|
|
|
|
import subprocess, socket, threading
|
|
from options import BCOptions
|
|
from webserver import BorderCheckWebserver
|
|
from xml_exporter import xml_reporting
|
|
import webbrowser
|
|
|
|
# set to emit debug messages about errors (0 = off).
|
|
DEBUG = 1
|
|
|
|
class bc(object):
|
|
"""
|
|
BC main Class
|
|
"""
|
|
def __init__(self):
|
|
"""
|
|
Init defaults
|
|
"""
|
|
self.operating_system = '' #The operating system being used
|
|
self.browser = "" # "F" Firefox / "C" Chrome
|
|
self.browser_path = "" #the path to the browser application
|
|
self.browser_history_path = "" # the path to the browser history file
|
|
self.browser_version = "" # the version of the browser
|
|
self.url = ""
|
|
self.old_url = ""
|
|
self.destination_ip = "" #the final destination of a trace
|
|
self.hop_ip = "" #the ip of servers on the route
|
|
self.longitude = ""
|
|
self.latitude = ""
|
|
self.hop_host_name = "" #hostname of servers on the route
|
|
self.city = ""
|
|
self.country = ""
|
|
self.server_name = ""
|
|
self.hop_count = 1 # number of hops
|
|
self.result_list = [] #list to collect all the variables of a trace
|
|
self.vardict ={} #dict to store all the variables of a hop
|
|
self.asn = '' #ASN number of a server
|
|
self.method = '-e' # the tracing method, -e = TCP, -u = UDP
|
|
self.content = '' # the results of a traceroute
|
|
self.attempts = 0 # the number of attempts at a traceroute
|
|
self.timestamp = '' #the time it took to go to a hop
|
|
|
|
if os.path.exists('data.xml'): # removing xml data to has a new map each time that bc is launched
|
|
os.remove('data.xml')
|
|
open('data.xml', 'w') # starting a new xml data container in write mode
|
|
|
|
def set_options(self, options):
|
|
"""
|
|
Set program options
|
|
"""
|
|
self.options = options
|
|
|
|
def create_options(self, args=None):
|
|
"""
|
|
Create options for OptionParser
|
|
"""
|
|
self.optionParser = BCOptions()
|
|
self.options = self.optionParser.get_options(args)
|
|
if not self.options:
|
|
return False
|
|
return self.options
|
|
|
|
def try_running(self, func, error, args=None):
|
|
"""
|
|
Try running a function and print some error if it fails and exists with a fatal error.
|
|
"""
|
|
options = self.options
|
|
args = args or []
|
|
try:
|
|
return func(*args)
|
|
except Exception as e:
|
|
print("[Error] - Something wrong fetching urls. Aborting..."), "\n"
|
|
if DEBUG:
|
|
traceback.print_exc()
|
|
sys.exit(2)
|
|
|
|
def check_root(self):
|
|
"""
|
|
Check root permissions
|
|
"""
|
|
if not os.geteuid()==0:
|
|
sys.exit("\nOnly root can run this script...\n")
|
|
|
|
def check_browser(self):
|
|
"""
|
|
Check browsers used by system
|
|
"""
|
|
if sys.platform == 'darwin':
|
|
self.operating_system = 'darwin'
|
|
# paths to the browsing history db's
|
|
f_his_osx = os.path.join(os.path.expanduser('~'), 'Library/Application Support/Firefox/Profiles')
|
|
c_his_osx = os.path.join(os.path.expanduser('~'), 'Library/Application Support/Google/Chrome/Default/History')
|
|
chromium_his_osx = os.path.join(os.path.expanduser('~'), 'Library/Application Support/Chromium/Default/History')
|
|
s_his_osx = os.path.join(os.path.expanduser('~'), 'Library/Safari/History.plist')
|
|
# path to the browser executables
|
|
f_osx = '/Applications/Firefox.app/Contents/MacOS/firefox'
|
|
c_osx = '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome'
|
|
chromium_osx = '/Applications/Chromium.app/Contents/MacOS/Chromium'
|
|
s_osx = '/Applications/Safari.app/Contents/MacOS/Safari'
|
|
try:
|
|
if os.path.exists(f_his_osx):
|
|
if len(os.listdir(f_his_osx)) > 2:
|
|
print 'You have multiple profiles, choosing the last one used'
|
|
#filtering the directory that was last modified
|
|
all_subdirs = [os.path.join(f_his_osx,d)for d in os.listdir(f_his_osx)]
|
|
try:
|
|
all_subdirs.remove(os.path.join(f_his_osx,'.DS_Store')) #throwing out .DS_store
|
|
except:
|
|
pass
|
|
latest_subdir = max(all_subdirs, key=os.path.getmtime)
|
|
osx_profile = os.path.join(f_his_osx, latest_subdir)
|
|
self.browser_history_path = os.path.join(osx_profile, 'places.sqlite')
|
|
else:
|
|
for folder in os.listdir(f_his_osx):
|
|
if folder.endswith('.default'):
|
|
osx_default = os.path.join(f_his_osx, folder)
|
|
self.browser_history_path = os.path.join(osx_default, 'places.sqlite')
|
|
#print "Setting:", self.browser_history_path, "as history file"
|
|
self.browser = "F"
|
|
self.browser_path = f_osx
|
|
elif os.path.exists(c_his_osx):
|
|
self.browser = "C"
|
|
self.browser_history_path = c_his_osx
|
|
self.browser_path = c_osx
|
|
elif os.path.exists(chromium_his_osx):
|
|
self.browser = "CHROMIUM"
|
|
self.browser_history_path = chromium_his_osx
|
|
self.browser_path = chromium_osx
|
|
elif os.path.exists(s_his_osx):
|
|
self.browser = "S"
|
|
self.browser_history_path = s_his_osx
|
|
self.browser_path = s_osx
|
|
except:
|
|
print "Warning: None of the currently supported browsers (Firefox, Chrome, Chromium, Safari) are installed."
|
|
|
|
elif sys.platform.startswith('linux'):
|
|
self.operating_system = 'linux'
|
|
f_lin = os.path.join(os.path.expanduser('~'), '.mozilla/firefox/') #add the next folder
|
|
c_lin = os.path.join(os.path.expanduser('~'), '.config/google-chrome/History')
|
|
chromium_lin = os.path.join(os.path.expanduser('~'), '.config/chromium/Default/History')
|
|
if os.path.exists(f_lin):
|
|
#missing multiple profile support
|
|
for folder in os.listdir(f_lin):
|
|
if folder.endswith('.default'):
|
|
lin_default = os.path.join(f_lin, folder)
|
|
self.browser_history_path = os.path.join(lin_default, 'places.sqlite')
|
|
self.browser = "F"
|
|
elif os.path.exists(c_lin):
|
|
self.browser = "C"
|
|
self.browser_history_path = c_lin
|
|
elif os.path.exists(chromium_lin):
|
|
self.browser = "CHROMIUM"
|
|
self.browser_history_path = chromium_lin
|
|
|
|
print "Browser Options:\n" + '='*45 + "\n"
|
|
if sys.platform.startswith('linux'):
|
|
if self.browser == "F":
|
|
print "Currently used: Firefox\n"
|
|
if self.browser == "C":
|
|
print "Currently used: Chrome\n"
|
|
if self.browser == "CHROMIUM":
|
|
print "Currently used: Chromium\n"
|
|
else:
|
|
print "Currently used:", self.browser_path.split('/')[-1], "\n"
|
|
|
|
if self.options.debug == True:
|
|
if sys.platform == 'darwin':
|
|
if self.browser == "F" or self.browser == "C" or self.browser == "CHROMIUM":
|
|
self.browser_version = subprocess.check_output([self.browser_path, '--version']).strip('\n')
|
|
elif sys.platform.startswith('linux') and self.browser == "F":
|
|
try:
|
|
self.browser_version = subprocess.check_output(['firefox', '--version']).strip('\n')
|
|
except:
|
|
a = subprocess.Popen(['firefox', '--version'], stdout=subprocess.PIPE)
|
|
self.browser_version = a.stdout.read()
|
|
if self.browser == "S":
|
|
print "Can't get Safari version information, you'll have to look it up manually \n"
|
|
else:
|
|
print "Version:", self.browser_version, "\n"
|
|
print "History:", self.browser_history_path, "\n"
|
|
|
|
def getURL(self):
|
|
"""
|
|
Set urls to visit
|
|
"""
|
|
if self.browser == "F": #Firefox history database
|
|
conn = sqlite3.connect(self.browser_history_path)
|
|
c = conn.cursor()
|
|
c.execute('select url, last_visit_date from moz_places ORDER BY last_visit_date DESC')
|
|
url = c.fetchone()
|
|
|
|
elif self.browser == "C" or self.browser == "CHROMIUM": #Chrome/Chromium history database
|
|
#Hack that makes a copy of the locked database to access it while Chrome is running.
|
|
#Removes the copied database afterwards
|
|
import filecmp
|
|
a = self.browser_history_path + 'Copy'
|
|
if os.path.exists(a):
|
|
if filecmp.cmp(self.browser_history_path, a) == False:
|
|
os.system('rm "' + a+'"')
|
|
os.system('cp "' + self.browser_history_path + '" "' + a + '"')
|
|
else:
|
|
os.system('cp "' + self.browser_history_path + '" "' + a + '"')
|
|
|
|
conn = sqlite3.connect(a)
|
|
c = conn.cursor()
|
|
c.execute('select urls.url, urls.last_visit_time FROM urls ORDER BY urls.last_visit_time DESC')
|
|
url = c.fetchone()
|
|
os.system('rm "' + a + '"')
|
|
|
|
elif self.browser == "S": #Safari history database
|
|
try:
|
|
from biplist import readPlist
|
|
except:
|
|
print "\nError importing: biplist lib. \n\nTo run BC with Safari you need the biplist Python Library:\n\n $ pip install biplist\n"
|
|
|
|
plist = readPlist(self.browser_history_path)
|
|
url = [plist['WebHistoryDates'][0][''], '']
|
|
|
|
else: # Browser not allowed
|
|
print "\nSorry, don't have a compatible browser\n\n"
|
|
exit(2)
|
|
|
|
self.url = url
|
|
return url[0]
|
|
|
|
def lft(self):
|
|
"""
|
|
Run an LFT
|
|
"""
|
|
#try:
|
|
if self.operating_system == 'darwin':
|
|
self.content = subprocess.check_output(['lft', self.method, '-n', '-S', self.destination_ip])
|
|
|
|
if self.operating_system == 'linux':
|
|
if self.method == '-e':
|
|
self.method = '-E'
|
|
try:
|
|
self.content = subprocess.check_output(['lft', '-S', '-n', self.destination_ip])
|
|
# support for older python versions (<2.7) that don't support subprocess.check_output
|
|
except:
|
|
a = subprocess.Popen(['lft', '-S', '-n', self.destination_ip], stdout=subprocess.PIPE)
|
|
self.content = a.stdout.read()
|
|
|
|
self.attempts += 1
|
|
if self.options.debug == True:
|
|
print "Tracing:", self.destination_ip, "with method:", self.method, 'attempt:', self.attempts, '\n'
|
|
self.lft_parse()
|
|
|
|
# except:
|
|
# print "Error: network is not responding correctly. Aborting...\n"
|
|
# sys.exit(2)
|
|
|
|
def lft_parse(self):
|
|
"""
|
|
Parse the lft to see if it produced any results, if not, run another LFT using a different method
|
|
"""
|
|
output = self.content.splitlines()
|
|
|
|
if output[-1] == "** [80/tcp no reply from target] Try advanced options (use -VV to see packets).":
|
|
if self.options.debug == True:
|
|
print 'TCP method doesn''t work, switching to UDP \n'
|
|
self.method = '-u'
|
|
time.sleep(2)
|
|
self.lft()
|
|
|
|
if '[target closed]' in output[-1] and self.method == '-e' or self.method == '-E':
|
|
if self.options.debug == True:
|
|
print 'Target closed, retrying with UDP \n'
|
|
self.method = '-u'
|
|
time.sleep(2)
|
|
self.lft()
|
|
|
|
if '[target open]' in output[-1] and len(output) < 5:
|
|
if self.options.debug == True:
|
|
print 'Target open, but filtered. Retrying with UDP \n'
|
|
self.method = '-u'
|
|
time.sleep(2)
|
|
self.lft()
|
|
|
|
if 'udp no reply from target] Use -VV to see packets.' in output[-1] and len(output) > 5:
|
|
if self.options.debug == True:
|
|
print 'Trace ended with results \n'
|
|
return
|
|
|
|
if '[port unreachable]' in output[-1]:
|
|
if self.options.debug == True:
|
|
print 'Port unreachable \n'
|
|
return
|
|
|
|
if '[target open]' in output[-1] and len(output) > 5:
|
|
if self.options.debug == True:
|
|
print 'Target open, with results \n'
|
|
return
|
|
|
|
def traces(self):
|
|
'''
|
|
Use LFT to traceroute objetives and pass data to webserver
|
|
'''
|
|
# Set database (GeoLiteCity)
|
|
self.geoip = pygeoip.GeoIP('GeoLiteCity.dat')
|
|
self.geoasn = pygeoip.GeoIP('GeoIPASNum.dat')
|
|
|
|
print '='*45 + "\n", "Status target:\n" + '='*45 + "\n"
|
|
print "URL:", self.url[0], "\n"
|
|
|
|
url = urlparse(self.getURL()).netloc #changed this for prototyping
|
|
url = url.replace('www.','') #--> doing a tracert to example.com and www.example.com yields different results.
|
|
url_ip = socket.gethostbyname(url)
|
|
self.destination_ip = url_ip
|
|
print "Host:", url, "\n"
|
|
if url != self.old_url:
|
|
self.hop_count = 0
|
|
self.attempts = 0
|
|
self.result_list = []
|
|
self.lft()
|
|
if self.options.debug == True:
|
|
logfile = open('tracelogfile', 'a')
|
|
thingstolog = ['='*45 + "\n", "Browser: ", self.browser_path.split('/')[-1], "\n", "Version: ", self.browser_version, "\n", "Path to browser: ", self.browser_path, "\n", "History db: ", self.browser_history_path, "\n","URL: ", self.url[0], "\n", "Host: ",url, "\n", "Host ip: ", url_ip, "\n", '='*45, "\n"]
|
|
for item in thingstolog:
|
|
logfile.write(item)
|
|
print '='*45 + "\n" + "Packages Route:\n" + '='*45
|
|
output = self.content.splitlines()
|
|
for line in output:
|
|
if self.options.debug == True:
|
|
logfile.write(line+'\n')
|
|
|
|
line = line.split()
|
|
for ip in line:
|
|
if re.match(r"^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$",ip):
|
|
self.hop_ip = ip
|
|
record = self.geoip.record_by_addr(ip)
|
|
try:
|
|
self.asn = self.geoasn.org_by_addr(ip)
|
|
except:
|
|
self.asn = 'No ASN provided'
|
|
#print record
|
|
try:
|
|
self.hop_host_name = socket.gethostbyaddr(ip)[0]
|
|
except:
|
|
self.hop_host_name = 'No hostname'
|
|
try:
|
|
longitude = str(record['longitude'])
|
|
self.longitude = longitude
|
|
latitude = str(record['latitude'])
|
|
self.latitude = latitude
|
|
except:
|
|
self.longitude = '4.0'
|
|
self.latitude = '40.0'
|
|
try:
|
|
if record.has_key('country_name') and record['city'] is not '':
|
|
country = record['country_name']
|
|
city = record['city']
|
|
print "Trace:", self.hop_count, "->", ip, "->", longitude + ":" + latitude, "->", city, "->", country, "->", self.hop_host_name, "->", self.asn
|
|
#self.hop_count +=1
|
|
self.city = city
|
|
self.country = country
|
|
self.server_name = self.hop_host_name
|
|
elif record.has_key('country_name'):
|
|
country = record['country_name']
|
|
print "Trace:", self.hop_count, "->", ip, "->", longitude + ":" + latitude, "->", country, "->", self.hop_host_name, "->", self.asn
|
|
self.country = country
|
|
self.city = '-'
|
|
self.server_name = self.hop_host_name
|
|
#self.hop_count+=1
|
|
self.vardict = {'destination_ip': self.destination_ip, 'hop_count': self.hop_count,'hop_ip': self.hop_ip, 'server_name': self.server_name, 'country': self.country, 'city': self.city, 'longitude': self.longitude, 'latitude': self.latitude, 'asn' : self.asn, 'timestamp' : self.timestamp }
|
|
except:
|
|
print "Trace:", self.hop_count, "->", "Not allowed"
|
|
self.vardict = {'destination_ip': self.destination_ip, 'hop_count': self.hop_count,'hop_ip': self.hop_ip, 'server_name': self.server_name, 'country': '-', 'city': '-', 'longitude': '-', 'latitude': '-', 'asn' : self.asn, 'timestamp' : self.timestamp }
|
|
|
|
self.hop_count+=1
|
|
# write xml data to file
|
|
self.result_list.append(self.vardict)
|
|
xml_results = xml_reporting(self)
|
|
xml_results.print_xml_results('data.xml')
|
|
|
|
if re.match(r'\d{1,2}\.\dms$', ip):
|
|
self.timestamp = ip.replace('ms', '')
|
|
|
|
if self.options.debug == True:
|
|
logfile.close()
|
|
self.old_url = url
|
|
print "\n"
|
|
self.hop_count = 0 # to start a new map
|
|
return
|
|
|
|
def getGEO(self):
|
|
"""
|
|
Get Geolocation database (http://dev.maxmind.com/geoip/legacy/geolite/)
|
|
"""
|
|
maxmind = 'http://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz'
|
|
geo_db_mirror1 = 'http://xsser.sf.net/map/GeoLiteCity.dat.gz'
|
|
print "="*45 + "\n", "GeoIP Options:\n" + '='*45 + "\n"
|
|
# Download, extract and set geoipdatabase
|
|
if not os.path.exists('GeoLiteCity.dat'):
|
|
import urllib, gzip
|
|
geo_db_path = '/'
|
|
try:
|
|
print "Downloading GeoIP database...\n"
|
|
if self.options.debug == True:
|
|
print "Fetching from:", maxmind, '\n'
|
|
urllib.urlretrieve(maxmind,
|
|
'GeoLiteCity.gz')
|
|
except:
|
|
try:
|
|
if self.options.debug == True:
|
|
print "Fetching from:", geo_db_mirror1
|
|
urllib.urlretrieve(geo_db_mirror1,
|
|
'GeoLiteCity.gz')
|
|
except:
|
|
print("[Error] - Something wrong fetching GeoIP maps from the Internet. Aborting..."), "\n"
|
|
sys.exit(2)
|
|
f_in = gzip.open('GeoLiteCity.gz', 'rb')
|
|
f_out = open('GeoLiteCity.dat', 'wb')
|
|
f_out.write(f_in.read())
|
|
f_in.close()
|
|
|
|
os.remove('GeoLiteCity.gz')
|
|
|
|
maxmind_asn = 'http://download.maxmind.com/download/geoip/database/asnum/GeoIPASNum.dat.gz'
|
|
# Download, extract and set geoipdatabase
|
|
if not os.path.exists('GeoIPASNum.dat'):
|
|
import urllib, gzip
|
|
geo_db_path = '/'
|
|
try:
|
|
print "Downloading GeoIP ASN database...\n"
|
|
if self.options.debug == True:
|
|
print "Fetching from:", maxmind_asn,'\n'
|
|
urllib.urlretrieve(maxmind_asn,
|
|
'GeoIPASNum.gz')
|
|
except:
|
|
print("[Error] - Something wrong fetching GeoIP maps from the Internet. Aborting..."), "\n"
|
|
sys.exit(2)
|
|
f_in = gzip.open('GeoIPASNum.gz', 'rb')
|
|
f_out = open('GeoIPASNum.dat', 'wb')
|
|
f_out.write(f_in.read())
|
|
f_in.close()
|
|
|
|
os.remove('GeoIPASNum.gz')
|
|
print "Database: GeoIPASNum \n"
|
|
|
|
def run(self, opts=None):
|
|
"""
|
|
Run BorderCheck
|
|
"""
|
|
# set options
|
|
if opts:
|
|
options = self.create_options(opts)
|
|
self.set_options(options)
|
|
options = self.options
|
|
p = self.optionParser
|
|
# banner
|
|
print('='*75)
|
|
print(str(p.version))
|
|
print('='*75)
|
|
# root checker
|
|
root = self.try_running(self.check_root, "\nInternal error checking root permissions.")
|
|
# extract browser type and path
|
|
browser = self.try_running(self.check_browser, "\nInternal error checking browser files path.")
|
|
# extract url
|
|
url = self.try_running(self.getURL, "\nInternal error getting urls from browser's database.")
|
|
# set geoip database
|
|
geo = self.try_running(self.getGEO, "\nInternal error setting geoIP database.")
|
|
# run traceroutes
|
|
match_ip = self.url[0].strip('http://').strip(':8080')
|
|
if re.match(r'^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$', match_ip) or re.match(r'^10\.\d{1,3}\.\d{1,3}\.\d{1,3}$', match_ip) or re.match(r'^192.168\.\d{1,3}$', match_ip) or re.match(r'^172.(1[6-9]|2[0-9]|3[0-1]).[0-9]{1,3}.[0-9]{1,3}$', match_ip):
|
|
pass
|
|
else:
|
|
traces = self.try_running(self.traces, "\nInternal error tracerouting.")
|
|
# start web mode (on a different thread)
|
|
try:
|
|
t = threading.Thread(target=BorderCheckWebserver, args=(self, ))
|
|
t.start()
|
|
time.sleep(2)
|
|
except:
|
|
print "Error: unable to start thread"
|
|
pass
|
|
# open same browser of history access on a new tab
|
|
try:
|
|
webbrowser.open('http://127.0.0.1:8080', new=1)
|
|
except:
|
|
print "Error: Browser is not responding correctly.\n"
|
|
|
|
print '='*45 + "\n"
|
|
print "Status: Waiting for new urls ...\n"
|
|
# stay latent waiting for new urls
|
|
while True:
|
|
url = urlparse(self.getURL()).netloc
|
|
url = url.replace('www.','')
|
|
match_ip = url.strip('http://').strip(':8080')
|
|
if url != self.old_url:
|
|
if re.match(r'^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$', match_ip) or re.match(r'^10\.\d{1,3}\.\d{1,3}\.\d{1,3}$', match_ip) or re.match(r'^192.168\.\d{1,3}$', match_ip) or re.match(r'^172.(1[6-9]|2[0-9]|3[0-1]).[0-9]{1,3}.[0-9]{1,3}$', match_ip):
|
|
pass
|
|
else:
|
|
if os.path.exists('data.xml'): # removing xml data to has a new map each time that bc is launched
|
|
os.remove('data.xml')
|
|
open('data.xml', 'w') # starting a new xml data container in write mode
|
|
|
|
traces = self.try_running(self.traces, "\nInternal error tracerouting.")
|
|
|
|
if __name__ == "__main__":
|
|
app = bc()
|
|
options = app.create_options()
|
|
if options:
|
|
app.set_options(options)
|
|
app.run()
|
|
|