byedpi/main.c

503 lines
12 KiB
C
Raw Normal View History

#define _GNU_SOURCE
2023-06-03 19:52:10 +00:00
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <getopt.h>
2023-06-12 04:00:33 +00:00
#include <limits.h>
2023-06-03 19:52:10 +00:00
#include <params.h>
#include <proxy.h>
#include <packets.h>
#include <arpa/inet.h>
#include <unistd.h>
#include <netdb.h>
#include <fcntl.h>
#define FAKE_SUPPORT 1
2023-07-30 11:23:11 +00:00
#define VERSION 2
2023-06-03 19:52:10 +00:00
2023-06-03 19:52:10 +00:00
struct packet fake_tls = {
sizeof(tls_data), tls_data
},
fake_http = {
sizeof(http_data), http_data
};
struct params params = {
.ttl = 8,
.split = 3,
.sfdelay = 3000,
.attack = DESYNC_NONE,
.split_host = 0,
.def_ttl = 0,
2023-10-16 12:44:24 +00:00
.custom_ttl = 0,
2023-06-03 19:52:10 +00:00
.mod_http = 0,
.de_known = 0,
2023-06-03 19:52:10 +00:00
.ipv6 = 1,
.resolve = 1,
.max_open = 512,
.bfsize = 16384,
.nodelay = 1,
.send_bfsz = 0,
.recv_bfsz = 0,
.baddr = {
.sin6_family = AF_INET6
},
2023-06-03 19:52:10 +00:00
.debug = 0
};
const char help_text[] = {
" -i, --ip, <ip> Listening IP, default 0.0.0.0\n"
" -p, --port <num> Listening port, default 1080\n"
" -D, --daemon Daemonize\n"
" -f, --pidfile <file> Write pid to file\n"
" -c, --max-conn <count> Connection count limit, default 512\n"
" -N, --no-domain Deny domain resolving\n"
" -I --conn-ip <ip> Connection binded IP, default ::\n"
2023-10-16 12:44:24 +00:00
" -b, --buf-size <size> Buffer size, default 16384\n"
" -x, --debug Print logs, 0, 1 or 2\n"
2023-10-16 12:44:24 +00:00
//" -L, --nodelay <0 or 1> Set TCP_NODELAY option\n"
" -S, --snd-buf <size> Set SO_SNDBUF option for out. conn.\n"
" -R, --rcv-buf <size> Set SO_RCVBUF option for out. conn.\n"
" -g, --def-ttl <num> TTL for all outgoing connections\n"
// desync options
" -K, --desync-known Desync only HTTP and TLS with SNI\n"
#ifdef FAKE_SUPPORT
" -m, --method <s|d|f> Desync method: split,disorder,fake\n"
#else
" -m, --method <s|d> Desync method: split,disorder\n"
#endif
" -s, --split-pos <offset> Split position, default 3\n"
" -H, --split-at-host Add Host/SNI offset to split position\n"
#ifdef FAKE_SUPPORT
" -t, --ttl <num> TTL of fake packets, default 8\n"
" -l, --fake-tls <file>\n"
2023-10-10 18:24:46 +00:00
" -o, --fake-http <file> Set custom fake packet\n"
" -n, --tls-sni <str> Change SNI in fake CH\n"
#endif
" -M, --mod-http <h,d,r> Modify http: hcsmix,dcsmix,rmspace\n"
};
const struct option options[] = {
{"daemon", 0, 0, 'D'},
{"no-domain", 0, 0, 'N'},
{"no-ipv6", 0, 0, 'X'},
{"help", 0, 0, 'h'},
{"version", 0, 0, 'v'},
{"pidfile", 1, 0, 'f'},
{"ip", 1, 0, 'i'},
{"port", 1, 0, 'p'},
{"conn-ip", 1, 0, 'I'},
2023-10-16 12:44:24 +00:00
{"buf-size", 1, 0, 'b'},
//{"nodelay", 1, 0, 'L'},
{"snd-buf", 1, 0, 'S'},
{"rcv-buf", 1, 0, 'R'},
{"max-conn", 1, 0, 'c'},
{"debug", 1, 0, 'x'},
{"desync-known ", 0, 0, 'K'},
{"split-at-host", 0, 0, 'H'},
{"method", 1, 0, 'm'},
{"split-pos", 1, 0, 's'},
{"ttl", 1, 0, 't'},
#ifdef FAKE_SUPPORT
{"fake-tls", 1, 0, 'l'},
{"fake-http", 1, 0, 'o'},
{"tls-sni", 1, 0, 'n'},
#endif
{"mod-http", 1, 0, 'M'},
2023-10-16 12:44:24 +00:00
{"def-ttl", 1, 0, 'g'},
{"delay", 1, 0, 'w'}, //
{0}
};
2023-07-07 20:07:27 +00:00
char *ftob(char *name, ssize_t *sl)
2023-06-03 19:52:10 +00:00
{
char *buffer = 0;
2023-07-07 20:07:27 +00:00
long size;
2023-06-03 19:52:10 +00:00
FILE *file = fopen(name, "rb");
if (!file)
return 0;
do {
if (fseek(file, 0, SEEK_END)) {
break;
}
2023-07-07 20:07:27 +00:00
size = ftell(file);
2023-06-03 19:52:10 +00:00
if (!size || fseek(file, 0, SEEK_SET)) {
break;
}
if (!(buffer = malloc(size))) {
break;
}
if (fread(buffer, 1, size, file) != size) {
free(buffer);
buffer = 0;
}
} while (0);
2023-07-07 20:07:27 +00:00
if (buffer) {
*sl = size;
}
2023-06-03 19:52:10 +00:00
fclose(file);
return buffer;
}
2023-10-16 12:44:24 +00:00
2023-06-03 19:52:10 +00:00
void daemonize(void)
{
pid_t pid = fork();
if (pid < 0) {
perror("fork");
exit(1);
}
else if (pid) {
exit(0);
}
if (setsid() < 0) {
2023-10-16 12:44:24 +00:00
exit(1);
2023-06-03 19:52:10 +00:00
}
close(STDIN_FILENO);
close(STDOUT_FILENO);
close(STDERR_FILENO);
open("/dev/null", O_RDWR);
dup(0);
dup(0);
}
2023-10-16 12:44:24 +00:00
int get_addr(char *str, struct sockaddr_ina *addr)
{
struct addrinfo hints = {0}, *res = 0;
hints.ai_socktype = SOCK_STREAM;
hints.ai_family = AF_UNSPEC;
hints.ai_flags = AI_NUMERICHOST;
if (getaddrinfo(str, 0, &hints, &res) || !res) {
return -1;
}
if (res->ai_addr->sa_family == AF_INET6)
addr->in6 = *(struct sockaddr_in6 *)res->ai_addr;
else
addr->in = *(struct sockaddr_in *)res->ai_addr;
freeaddrinfo(res);
return 0;
}
2023-06-03 19:52:10 +00:00
2023-10-16 12:44:24 +00:00
int get_default_ttl()
{
int orig_ttl = -1, fd;
socklen_t tsize = sizeof(orig_ttl);
if ((fd = socket(AF_INET, SOCK_STREAM, 0)) < 0) {
perror("socket");
return -1;
}
if (getsockopt(fd, IPPROTO_IP, IP_TTL,
(char *)&orig_ttl, &tsize) < 0) {
perror("getsockopt IP_TTL");
}
close(fd);
return orig_ttl;
}
2023-06-03 19:52:10 +00:00
int main(int argc, char **argv)
{
struct sockaddr_ina s = {
.in = {
.sin_family = AF_INET,
.sin_port = htons(1080)
}},
b = { .in6 = params.baddr };
int optc = sizeof(options)/sizeof(*options);
for (int i = 0, e = optc; i < e; i++)
optc += options[i].has_arg;
char opt[optc + 1];
opt[optc] = 0;
for (int i = 0, o = 0; o < optc; i++, o++) {
opt[o] = options[i].val;
for (int c = options[i].has_arg; c; c--) {
o++;
opt[o] = ':';
}
}
2023-06-03 19:52:10 +00:00
char daemon = 0;
char *pidfile = 0;
int rez;
int invalid = 0;
long val = 0;
char *end = 0;
uint16_t port = htons(1080);
2023-06-03 19:52:10 +00:00
while (!invalid && (rez = getopt_long_only(
argc, argv, opt, options, 0)) != -1) {
2023-06-03 19:52:10 +00:00
switch (rez) {
case 'D':
daemon = 1;
break;
case 'N':
params.resolve = 0;
break;
case 'X':
params.ipv6 = 0;
break;
case 'h':
printf(help_text);
return 0;
case 'v':
printf("%d\n", VERSION);
return 0;
case 'f':
pidfile = optarg;
break;
case 'i':
if (get_addr(optarg, &s) < 0)
invalid = 1;
break;
2023-06-03 19:52:10 +00:00
case 'p':
val = strtol(optarg, &end, 0);
if (val <= 0 || val > 0xffff || *end)
invalid = 1;
else
port = htons(val);
break;
case 'I':
if (get_addr(optarg, &b) < 0)
invalid = 1;
else
params.baddr = b.in6;
break;
case 'b':
2023-06-03 19:52:10 +00:00
val = strtol(optarg, &end, 0);
if (val <= 0 || val > INT_MAX/4 || *end)
invalid = 1;
else
params.bfsize = val;
break;
case 'L':
2023-06-03 19:52:10 +00:00
val = strtol(optarg, &end, 0);
if (val < 0 || val > 1 || *end)
2023-06-03 19:52:10 +00:00
invalid = 1;
else
params.nodelay = val;
2023-06-03 19:52:10 +00:00
break;
case 'S':
val = strtol(optarg, &end, 0);
if (val <= 0 || val > INT_MAX || *end)
2023-06-03 19:52:10 +00:00
invalid = 1;
else
params.send_bfsz = val;
2023-06-03 19:52:10 +00:00
break;
case 'R':
2023-06-03 19:52:10 +00:00
val = strtol(optarg, &end, 0);
if (val <= 0 || val > INT_MAX || *end)
2023-06-03 19:52:10 +00:00
invalid = 1;
else
params.recv_bfsz = val;
2023-06-03 19:52:10 +00:00
break;
case 'c':
val = strtol(optarg, &end, 0);
if (val <= 0 || val >= (0xffff/2) || *end)
invalid = 1;
else
params.max_open = val;
break;
case 'x': //
params.debug = strtol(optarg, 0, 0);
if (params.debug < 0)
invalid = 1;
break;
// desync options
case 'K':
params.de_known = 1;
break;
case 'H':
params.split_host = 1;
break;
2023-06-03 19:52:10 +00:00
case 'm':
if (params.attack != DESYNC_NONE) {
fprintf(stderr, "methods incompatible\n");
invalid = 1;
}
else switch (*optarg) {
case 's':
params.attack = DESYNC_SPLIT;
break;
case 'd':
params.attack = DESYNC_DISORDER;
break;
2023-10-16 12:44:24 +00:00
#ifdef FAKE_SUPPORT
2023-06-03 19:52:10 +00:00
case 'f':
params.attack = DESYNC_FAKE;
break;
2023-10-16 12:44:24 +00:00
#endif
2023-06-03 19:52:10 +00:00
default:
invalid = 1;
}
break;
case 's':
val = strtol(optarg, &end, 0);
if (val < INT_MIN || val > INT_MAX || *end)
invalid = 1;
else
params.split = val;
break;
case 't':
val = strtol(optarg, &end, 0);
if (val <= 0 || val > 255 || *end)
invalid = 1;
else
params.ttl = val;
break;
case 'n':
if (change_tls_sni(optarg, fake_tls.data, fake_tls.size)) {
fprintf(stderr, "error chsni\n");
return -1;
}
printf("sni: %s\n", optarg);
break;
case 'l':
2023-07-07 20:07:27 +00:00
fake_tls.data = ftob(optarg, &fake_tls.size);
2023-06-03 19:52:10 +00:00
if (!fake_tls.data) {
perror("read file");
return -1;
}
break;
case 'o':
2023-07-07 20:07:27 +00:00
fake_http.data = ftob(optarg, &fake_http.size);
2023-06-03 19:52:10 +00:00
if (!fake_http.data) {
perror("read file");
return -1;
}
break;
case 'M':
end = optarg;
while (end && !invalid) {
switch (*end) {
case 'r':
params.mod_http |= MH_SPACE;
break;
case 'h':
params.mod_http |= MH_HMIX;
break;
case 'd':
params.mod_http |= MH_DMIX;
break;
default:
invalid = 1;
continue;
}
end = strchr(end, ',');
if (end) end++;
}
break;
2023-10-16 12:44:24 +00:00
case 'g':
2023-06-03 19:52:10 +00:00
val = strtol(optarg, &end, 0);
if (val <= 0 || val > 255 || *end)
invalid = 1;
2023-10-16 12:44:24 +00:00
else {
2023-06-03 19:52:10 +00:00
params.def_ttl = val;
2023-10-16 12:44:24 +00:00
params.custom_ttl = 1;
}
2023-06-03 19:52:10 +00:00
break;
case 'w': //
params.sfdelay = strtoul(optarg, &end, 0);
2023-06-12 08:01:40 +00:00
if (optarg == end || params.sfdelay > 1000000 || *end)
2023-06-03 19:52:10 +00:00
invalid = 1;
break;
case 0:
break;
case '?':
return -1;
default:
printf("?: %c\n", rez);
return -1;
}
}
if (invalid) {
fprintf(stderr, "invalid value: -%c %s\n", rez, optarg);
return -1;
}
s.in.sin_port = port;
b.in.sin_port = 0;
if (b.sa.sa_family != AF_INET6) {
params.ipv6 = 0;
}
if (params.send_bfsz &&
params.send_bfsz * 2 <= params.bfsize) {
2023-06-03 19:52:10 +00:00
fprintf(stderr, "send buffer too small\n");
return -1;
}
2023-06-03 19:52:10 +00:00
FILE *file;
if (pidfile) {
file = fopen(pidfile, "w");
if (!file) {
perror("fopen");
return -1;
}
}
if (daemon) {
daemonize();
}
if (pidfile) {
fprintf(file, "%d", getpid());
fclose(file);
}
2023-10-16 12:44:24 +00:00
if (!params.def_ttl && params.attack != DESYNC_NONE) {
if ((params.def_ttl = get_default_ttl()) < 1) {
2023-06-03 19:52:10 +00:00
return -1;
}
}
2023-06-03 19:52:10 +00:00
return listener(s);
}