added cgi scripts
This commit is contained in:
Steffen Vogel
parent
0fb457da95
commit
494a76ae54
49
cgi/auth.py
Executable file
49
cgi/auth.py
Executable file
|
|
@ -0,0 +1,49 @@
|
|||
#!/usr/bin/python
|
||||
|
||||
import os
|
||||
import sys
|
||||
import cgi
|
||||
import cgitb
|
||||
import time
|
||||
|
||||
sys.path.insert(1, os.path.join(sys.path[0], '..'))
|
||||
|
||||
from constants import *
|
||||
|
||||
def cookies(str):
|
||||
return dict(c.split('=') for c in str.split(";"))
|
||||
|
||||
def save_token(timestamp, number, token, filename="tokens"):
|
||||
file = open(filename, 'a')
|
||||
file.write("%s\t%s\t%s\n" % (str(timestamp), number, token))
|
||||
file.close()
|
||||
|
||||
def main():
|
||||
form = cgi.FieldStorage()
|
||||
number = form.getfirst("number")
|
||||
auth_url = form.getfirst("auth_url")
|
||||
token = form.getfirst("code")
|
||||
|
||||
if auth_url:
|
||||
print "Status: 301 Moved"
|
||||
print "Location: %s" % auth_url
|
||||
print "Content-type: text/html"
|
||||
print "Set-Cookie: number=%s" % number
|
||||
print "\n\n";
|
||||
|
||||
elif token and os.environ.has_key('HTTP_COOKIE'):
|
||||
print "Status: 301 Moved"
|
||||
print "Content-type: text/html"
|
||||
print "Location: http://whatsapp.0l.de"
|
||||
print
|
||||
|
||||
c = cookies(os.environ['HTTP_COOKIE'])
|
||||
save_token(time.time(), c['number'], token, TOKEN_FILE)
|
||||
|
||||
else:
|
||||
print "Content-type: text/html"
|
||||
print "\n"
|
||||
print "something strange happened :("
|
||||
|
||||
if __name__ == "__main__":
|
||||
main()
|
||||
11
cgi/index.html
Normal file
11
cgi/index.html
Normal file
|
|
@ -0,0 +1,11 @@
|
|||
<?xml version="1.0" ?>
|
||||
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
||||
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||||
<html xmlns="http://www.w3.org/1999/xhtml">
|
||||
<head>
|
||||
<meta http-equiv="refresh" content="0;url=http://dev.0l.de/projects/transwhat/start">
|
||||
</head>
|
||||
<body>
|
||||
|
||||
</body>
|
||||
</html>
|
||||
237
cgi/sipgate.py
Normal file
237
cgi/sipgate.py
Normal file
|
|
@ -0,0 +1,237 @@
|
|||
#!/usr/bin/env python
|
||||
# -*- encoding: UTF8 -*-
|
||||
|
||||
# author: Philipp Klaus, philipp.klaus →AT→ gmail.com
|
||||
|
||||
# This file is part of python-sipgate-xmlrpc.
|
||||
#
|
||||
# python-sipgate-xmlrpc is free software: you can redistribute it and/or modify
|
||||
# it under the terms of the GNU General Public License as published by
|
||||
# the Free Software Foundation, either version 3 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# python-sipgate-xmlrpc is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with python-sipgate-xmlrpc. If not, see <http://www.gnu.org/licenses/>.
|
||||
|
||||
|
||||
#####################################################################
|
||||
###### This the most important file of the project: #######
|
||||
###### It contains the classe api, which #######
|
||||
###### implements the XML-RPC communication with the #######
|
||||
###### Sipgate API. #######
|
||||
|
||||
#from time import time
|
||||
from sys import stderr
|
||||
from xmlrpclib import ServerProxy, Fault, ProtocolError, ResponseError
|
||||
from exceptions import TypeError
|
||||
from socket import error as socket_error
|
||||
import re
|
||||
|
||||
VERSION = "0.9.2"
|
||||
NAME = "%s - python-sipgate-xmlrpc/sipgate.py"
|
||||
VENDOR = "https://github.com/pklaus/python-sipgate-xmlrpc"
|
||||
|
||||
### ------- Here comes the most important piece of code: the api class with magic methods -----
|
||||
|
||||
class api (ServerProxy):
|
||||
def __init__ (self, username=False, password=False, prog_name=False, verbose=False):
|
||||
if not (username and password and prog_name):
|
||||
raise SipgateAPIException('To use the class sipgate.api you must provide, username, password and a program name.')
|
||||
address = SIPGATE_API_URL % {'username':username, 'password':password}
|
||||
### The super() call would be more modern but it doesn't work with the current Python version yet.
|
||||
#super(api, self).__init__(address, verbose=debug)
|
||||
ServerProxy.__init__(self, address,verbose=verbose)
|
||||
### It is considered good practice to Identify the client talking to the server:
|
||||
self.ClientIdentify({ "ClientName" : NAME % prog_name, "ClientVersion" : VERSION, "ClientVendor" : VENDOR })
|
||||
|
||||
def __getattr__(self,name):
|
||||
return _Method(self.__request, name)
|
||||
|
||||
def __request (self, methodname, params):
|
||||
if methodname.replace(API_PREFIX,'') not in VALID_METHODS:
|
||||
stderr.write( UNKNOWN_METHOD_MESSAGE % {
|
||||
'method': methodname.replace(API_PREFIX,''), 'api_prefix': API_PREFIX,
|
||||
'api_version': SIPGATE_API_DOC_V, 'api_date': SIPGATE_API_DOC_D } )
|
||||
if len(params)>0 and not type(params[0]) is dict:
|
||||
raise TypeError(DICT_AS_PARAM_MESSAGE % methodname.replace(API_PREFIX,''))
|
||||
method_function = ServerProxy.__getattr__(self,methodname)
|
||||
try:
|
||||
result = method_function(params[0] if len(params)>0 and type(params[0]) is dict else dict())
|
||||
# cast the result dictionary to a SipgateResponse (custom dictionary):
|
||||
result = SipgateResponse(result)
|
||||
except Fault, e:
|
||||
raise SipgateAPIFault(e.faultCode, e.faultString)
|
||||
except ProtocolError, e:
|
||||
raise SipgateAPIProtocolError(e.url, e.errcode, e.errmsg, e.headers)
|
||||
except socket_error, (value,message):
|
||||
raise SipgateAPISocketError(value, message)
|
||||
return result
|
||||
|
||||
## <http://stackoverflow.com/questions/2390827/how-to-properly-subclass-dict-and-override-get-set>
|
||||
class SipgateResponse(dict):
|
||||
def __init__(self, response_dict):
|
||||
try:
|
||||
self.StatusCode, self.StatusString = int(response_dict['StatusCode']), response_dict['StatusString']
|
||||
self.success = self.StatusCode == 200
|
||||
except:
|
||||
raise TypeError(RESPONSE_NOT_A_DICTIONARY % response_dict)
|
||||
dict.__init__(self, response_dict)
|
||||
|
||||
class _Method:
|
||||
# With the help of this class the api class does not
|
||||
# need to state explicitly the possible XML-RPC calls.
|
||||
def __init__(self, send, name):
|
||||
self.__send = send
|
||||
self.__name = API_PREFIX+name
|
||||
def __call__(self, *args):
|
||||
return self.__send(self.__name, args)
|
||||
|
||||
### ------ now we define the exceptions that could occur ------
|
||||
|
||||
class SipgateAPIException(Exception):
|
||||
pass
|
||||
|
||||
class SipgateAPIFault(Fault, SipgateAPIException):
|
||||
# As this inherits from xmlrpclib.Fault it also has the
|
||||
# attributes faultCode and faultString.
|
||||
pass
|
||||
|
||||
class SipgateAPIProtocolError(ProtocolError, SipgateAPIException):
|
||||
# As this inherits from xmlrpclib.ProtocolError it also has the
|
||||
# attributes errcode and errmsg.
|
||||
pass
|
||||
|
||||
class SipgateAPISocketError(socket_error, SipgateAPIException):
|
||||
# As this inherits from socket.error it also has the
|
||||
# attributes .
|
||||
pass
|
||||
|
||||
### ------ This section contains message strings -------
|
||||
|
||||
UNKNOWN_METHOD_MESSAGE = "The method '%(method)s' for the API prefix '%(api_prefix)s' " + \
|
||||
"was called. This method, however, is currently not documented for the Sipgate API " + \
|
||||
"v%(api_version)s (%(api_date)s). Let's try but I've warned you.\n"
|
||||
DICT_AS_PARAM_MESSAGE = 'Please specify a dictionary as function call parameter for api.%s().'
|
||||
RESPONSE_NOT_A_DICTIONARY = 'The response "%s" does not seem to be a response from the ' + \
|
||||
'Sipgate XML-RPC API.'
|
||||
|
||||
### ------ This section contains constants of the Sipgate XML-RPC API -------
|
||||
|
||||
# This constant represents the version of the currently implemented Sipgate API
|
||||
# ans is taken from the API description PDF:
|
||||
SIPGATE_API_DOC_V = '1.06'
|
||||
SIPGATE_API_DOC_D = 'August 21, 2007'
|
||||
|
||||
# Sipgate basic and plus accounts must use this API URL:
|
||||
SIPGATE_API_URL = "https://%(username)s:%(password)s@samurai.sipgate.net/RPC2"
|
||||
# Sipgate one and team have a different URL: api.sipgate.net.
|
||||
# see <http://groups.google.com/group/sipgate-api/msg/51a3535b6d61241f>
|
||||
API_PREFIX = 'samurai.'
|
||||
|
||||
VALID_METHODS = [
|
||||
'AccountStatementGet',
|
||||
'BalanceGet',
|
||||
'ClientIdentify',
|
||||
'HistoryGetByDate',
|
||||
'ItemizedEntriesGet',
|
||||
'OwnUriListGet',
|
||||
'PhonebookEntryGet',
|
||||
'PhonebookListGet',
|
||||
'RecommendedIntervalGet',
|
||||
'ServerdataGet',
|
||||
'SessionClose',
|
||||
'SessionInitiate',
|
||||
'SessionInitiateMulti',
|
||||
'SessionStatusGet',
|
||||
'TosListGet',
|
||||
'TosListGet',
|
||||
'UmSummaryGet',
|
||||
'UserdataGreetingGet',
|
||||
'UserdataSipGet',
|
||||
]
|
||||
|
||||
SERVER_STATUS_CODES = {
|
||||
### From Table A.1 and A.2 of the API docu: general server status codes
|
||||
200: 'Method success',
|
||||
400: 'Method not supported',
|
||||
401: 'Request denied (no reason specified)',
|
||||
402: 'Internal error',
|
||||
403: 'Invalid arguments',
|
||||
404: 'Resources exceeded (this MUST not be used to indicate parameters in error)',
|
||||
405: 'Invalid parameter name',
|
||||
406: 'Invalid parameter type',
|
||||
407: 'Invalid parameter value',
|
||||
408: 'Attempt to set a non-writable parameter',
|
||||
409: 'Notification request rejected.',
|
||||
410: 'Parameter exceeds maximum size.',
|
||||
411: 'Missing parameter.',
|
||||
412: 'Too many requests.',
|
||||
500: 'Date out of range.',
|
||||
501: 'Uri does not belong to user.',
|
||||
502: 'Unknown type of service.',
|
||||
503: 'Selected payment method failed.',
|
||||
504: 'Selected currency not supported.',
|
||||
505: 'Amount exceeds limit.',
|
||||
506: 'Malformed SIP URI.',
|
||||
507: 'URI not in list.',
|
||||
508: 'Format is not valid E.164.',
|
||||
509: 'Unknown status.',
|
||||
510: 'Unknown ID.',
|
||||
511: 'Invalid timevalue.',
|
||||
512: 'Referenced session not found.',
|
||||
513: 'Only single default per TOS allowed.',
|
||||
514: 'Malformed VCARD format.',
|
||||
515: 'Malformed PID format.',
|
||||
516: 'Presence information not available.',
|
||||
517: 'Invalid label name.',
|
||||
518: 'Label not assigned.',
|
||||
519: 'Label doesn’t exist.',
|
||||
520: 'Parameter includes invalid characters.',
|
||||
521: 'Bad password. (Rejected due to security concerns.)',
|
||||
522: 'Malformed timezone format.',
|
||||
523: 'Delay exceeds limit.',
|
||||
524: 'Requested VPN type not available.',
|
||||
525: 'Requested TOS not available.',
|
||||
526: 'Unified messaging not available.',
|
||||
527: 'URI not available for registration.',
|
||||
}
|
||||
|
||||
TYPE_OF_SERVICE = {
|
||||
'fax': 'pages', # fax transmission
|
||||
'text': 'characters', # text message (e.g. "SMS")
|
||||
'video': 'seconds', # video communication
|
||||
'voice': 'seconds', # voice communication
|
||||
}
|
||||
|
||||
|
||||
class helpers (object):
|
||||
@staticmethod
|
||||
def FQTN(phone_number, default_country_code):
|
||||
"""
|
||||
Assures phone numbers are in the form of a E164 Fully Qualified Telephone Number
|
||||
without the leading + sign.
|
||||
The alternative would be the Python port of Google's libphonenumber:
|
||||
https://github.com/daviddrysdale/python-phonenumbers
|
||||
"""
|
||||
phone_number = phone_number.replace(' ','').replace('-','').replace('+','').replace('/','')
|
||||
|
||||
## number starting with 00 (so it's an international format)
|
||||
if re.compile("^00[1-9][0-9]*$").match(phone_number):
|
||||
return phone_number[2:]
|
||||
|
||||
## number starting with your country code (so it was already a FQTN):
|
||||
if re.compile("^"+default_country_code+"[1-9][0-9]*$").match(phone_number):
|
||||
return phone_number
|
||||
|
||||
if re.compile("^0[1-9]*$").match(phone_number):
|
||||
return default_country_code+phone_number[1:]
|
||||
|
||||
if re.compile("^[1-9]*$").match(phone_number):
|
||||
return phone_number
|
||||
|
||||
raise TypeError("Couldn't parse this phone number: "+phone_number)
|
||||
75
cgi/sniff.py
Executable file
75
cgi/sniff.py
Executable file
|
|
@ -0,0 +1,75 @@
|
|||
#!/usr/bin/python
|
||||
|
||||
import os
|
||||
import sys
|
||||
import cgi
|
||||
import cgitb
|
||||
import time
|
||||
import pycurl
|
||||
import StringIO
|
||||
import json
|
||||
import sipgate
|
||||
|
||||
sys.path.insert(1, os.path.join(sys.path[0], '..'))
|
||||
|
||||
from constants import *
|
||||
|
||||
def send_sms(recipient, content):
|
||||
sg = sipgate.api(SIPGATE_USERNAME, SIPGATE_PASSWORD, 'transwhat')
|
||||
|
||||
default_uri = 'sip:NULL@sipgate.net'
|
||||
for own_uri in sg.OwnUriListGet()['OwnUriList']:
|
||||
if own_uri['DefaultUri']:
|
||||
default_uri = own_uri['SipUri']
|
||||
|
||||
# SessionInitiate may return the following server status codes in case of errors: 501, 502, 506, 520, 525
|
||||
return sg.SessionInitiate({'LocalUri': default_uri, 'RemoteUri': 'sip:%s@sipgate.de' % recipient, 'TOS': 'text', 'Content': content })
|
||||
|
||||
def main():
|
||||
url = os.environ['SCRIPT_URI'] + '?' + os.environ['QUERY_STRING']
|
||||
|
||||
writer = StringIO.StringIO()
|
||||
ch = pycurl.Curl()
|
||||
|
||||
ch.setopt(pycurl.URL, url)
|
||||
ch.setopt(pycurl.USERAGENT, os.environ['HTTP_USER_AGENT'])
|
||||
|
||||
ch.setopt(pycurl.WRITEFUNCTION, writer.write)
|
||||
ch.setopt(pycurl.SSL_VERIFYPEER, False)
|
||||
ch.setopt(pycurl.HEADER, True)
|
||||
|
||||
ch.perform()
|
||||
|
||||
response = writer.getvalue()
|
||||
headers, body = response.split("\r\n\r\n", 1)
|
||||
headers = headers.split("\n")
|
||||
preamble = headers.pop(0)
|
||||
|
||||
code = preamble.split(" ", 2)[1]
|
||||
status = preamble.split(" ", 2)[2]
|
||||
|
||||
print "Status: %s %s" % (code, status)
|
||||
for header in headers:
|
||||
print header
|
||||
|
||||
print
|
||||
print body
|
||||
|
||||
file = open(REQUESTS_FILE, "a")
|
||||
file.write("\n--- Time: %s\n>>> Request: %s\n<<< Reponse Headers:\n%s\nResponse Body:\n%s\n" % (time.strftime("%a, %d %b %Y %H:%M:%S"), url, "\n".join(headers), body))
|
||||
file.close()
|
||||
|
||||
# send password via sms to requester
|
||||
if code == "200":
|
||||
parsed = json.loads(body)
|
||||
form = cgi.FieldStorage()
|
||||
cc = form.getfirst("cc")
|
||||
number = form.getfirst("in")
|
||||
|
||||
if parsed.has_key('pw') and parsed.has_key('login'):
|
||||
send_sms(parsed['login'], parsed['pw'])
|
||||
|
||||
ch.close()
|
||||
|
||||
if __name__ == "__main__":
|
||||
main()
|
||||
Loading…
Reference in a new issue