333 lines
9.9 KiB
Python
Executable File
333 lines
9.9 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
# quick and dirty test script for smtp relay
|
|
#
|
|
# Done
|
|
# ----
|
|
# add cc, bcc and lists
|
|
# add colors
|
|
# add list of receivers
|
|
# add custom attachment
|
|
# fix <False> CC/BCC if not given
|
|
# fix attachment name to auto name from the file
|
|
# fix multipart issues
|
|
#
|
|
# Todo
|
|
# ----
|
|
# add response check
|
|
# add auth for sender if login is supported
|
|
|
|
import os
|
|
import sys
|
|
import time
|
|
import base64
|
|
import socket
|
|
import random
|
|
import argparse
|
|
|
|
__tool_name__ = 'mailrelay.py'
|
|
__tool_version__ = '0.3.3'
|
|
__tool_author__ = 'dash'
|
|
__tool_desc__ = 'not so quick but dirty\'n\'dirty tool for smtp relay checks, nothing fancy here.'
|
|
|
|
globTimeout=0
|
|
|
|
#https://stackoverflow.com/questions/2330245/python-change-text-color-in-shell
|
|
def liteUp(string, status, bold):
|
|
attr = []
|
|
if status == 'green':
|
|
attr.append('32')
|
|
elif status == 'red':
|
|
attr.append('31')
|
|
elif status == 'orange':
|
|
attr.append('33')
|
|
elif status == 'purple':
|
|
attr.append('35')
|
|
elif status == 'cyan':
|
|
attr.append('36')
|
|
elif status == 'yellow':
|
|
attr.append('93')
|
|
elif status == 'lightblue':
|
|
attr.append('94')
|
|
elif status == 'pink':
|
|
attr.append('95')
|
|
else:
|
|
# red
|
|
attr.append('90')
|
|
if bold:
|
|
attr.append('1')
|
|
return '\x1b[%sm%s\x1b[0m' % (';'.join(attr), string)
|
|
|
|
def buildSocket(host,port):
|
|
sock = socket.socket(socket.AF_INET,socket.SOCK_STREAM)
|
|
try:
|
|
sock.connect((host,int(port)))
|
|
|
|
except socket.gaierror as e:
|
|
errMsg = '{0}:{1}: {2}'.format(host,port,e)
|
|
print(liteUp(errMsg, 'red', 0))
|
|
sys.exit()
|
|
|
|
return sock
|
|
|
|
def parseVariable(var):
|
|
if var.find(':')>0:
|
|
out = var.split(':')
|
|
return out[0],out[1]
|
|
else:
|
|
print('Sorry, unexpected variable.')
|
|
return False, False
|
|
|
|
def parseResponse(respData):
|
|
# response types
|
|
# 250 OK
|
|
# 550 Error
|
|
# 503 Need RCPT (recipient)
|
|
if respData[:3]==(b'250'):
|
|
#print('yay')
|
|
return True
|
|
else:
|
|
return False
|
|
|
|
def recvSmtpData(sock):
|
|
# basic recv function should do the trick for now
|
|
try:
|
|
data = sock.recv(1024)
|
|
except socket.timeout as e:
|
|
errMsg = e
|
|
print(liteUp(errMsg, 'red', 0))
|
|
sys.exit()
|
|
except BrokenPipeError as e:
|
|
errMsg = e
|
|
print(liteUp(errMsg, 'red', 0))
|
|
sys.exit()
|
|
|
|
return data
|
|
|
|
def sendSmtpData(sock, data):
|
|
|
|
# lets send the data over the wire
|
|
try:
|
|
sock.send(data)
|
|
except socket.timeout as e:
|
|
# errMsg = '{0}:{1}: {2}'.format(host,port,e)
|
|
errMsg = e
|
|
print(liteUp(errMsg, 'red', 0))
|
|
sys.exit()
|
|
except BrokenPipeError as e:
|
|
# errMsg = '{0}:{1}: {2}'.format(host,port,e)
|
|
errMsg = e
|
|
print(liteUp(errMsg, 'red', 0))
|
|
sys.exit()
|
|
|
|
# add artifical timeout here
|
|
time.sleep(globTimeout)
|
|
|
|
|
|
return True, data
|
|
|
|
def sendEhlo(sock):
|
|
hihello = ['localhost','127.0.0.2','10.10.10.45']
|
|
ehloMe = random.choice(hihello)
|
|
ehloNow = ('ehlo {0}\r\n'.format(ehloMe)).encode()
|
|
sendSmtpData(sock, ehloNow)
|
|
print(liteUp(ehloNow.decode().rstrip('\n'), 'pink', 0))
|
|
recvData = recvSmtpData(sock)
|
|
print(liteUp(recvData.decode().rstrip('\n'), 'orange', 0))
|
|
result = parseResponse(recvData)
|
|
return result
|
|
|
|
def sendMailFrom(sock, senderMail):
|
|
# prepare smtp mail from
|
|
mf = 'MAIL FROM: <{0}>\r\n'.format(senderMail)
|
|
mf = mf.encode()
|
|
sendSmtpData(sock, mf)
|
|
print(liteUp(mf.decode().rstrip('\n'), 'pink', 0))
|
|
recvData = recvSmtpData(sock)
|
|
print(liteUp(recvData.decode().rstrip('\n'), 'orange', 0))
|
|
result = parseResponse(recvData)
|
|
|
|
def sendMailTo(sock, targetMail):
|
|
# prepare smtp rcpt to
|
|
rt = 'RCPT TO: <{0}>\r\n'.format(targetMail)
|
|
# rt = 'RCPT TO: <{0}>,<{0}>\r\n'.format(targetMail)
|
|
rt = rt.encode()
|
|
sendSmtpData(sock, rt)
|
|
print(liteUp(rt.decode().rstrip('\n'), 'pink', 0))
|
|
recvData = recvSmtpData(sock)
|
|
print(liteUp(recvData.decode().rstrip('\n'), 'orange', 0))
|
|
result = parseResponse(recvData)
|
|
|
|
def sendCustom(sock, cmd, recvOn):
|
|
|
|
# prepare smtp rcpt to
|
|
cmd = cmd.encode()
|
|
sendSmtpData(sock, cmd)
|
|
print(liteUp(cmd.decode().rstrip('\n'), 'pink', 0))
|
|
|
|
if recvOn:
|
|
recvData = recvSmtpData(sock)
|
|
print(liteUp(recvData.decode().rstrip('\n'), 'orange', 0))
|
|
result = parseResponse(recvData)
|
|
|
|
return True
|
|
|
|
def openFile(targetList):
|
|
fr = open(targetList, 'r')
|
|
buf = fr.readlines()
|
|
return buf
|
|
|
|
def openFileRead(filename):
|
|
fr = open(filename, 'rb')
|
|
buf = fr.read()
|
|
return buf
|
|
|
|
def run(args):
|
|
|
|
targetMail = args.targetMail
|
|
targetCcMail = args.targetCcMail
|
|
targetBccMail = args.targetBccMail
|
|
|
|
targetList = args.targetList
|
|
targetCcList = args.targetCcList
|
|
targetBccList = args.targetBccList
|
|
|
|
senderMail = args.senderMail
|
|
subject = args.subject
|
|
body = args.body
|
|
|
|
attachment = args.attachment
|
|
attachmentName = args.attachmentName
|
|
|
|
mailHost = args.mtaAddr
|
|
mailHost, mailHostPort = parseVariable(mailHost)
|
|
conn = '[+] Connected: {0}:{1}'.format(mailHost, mailHostPort)
|
|
|
|
sock = buildSocket(mailHost,mailHostPort)
|
|
print(liteUp(conn, 'ppppink', 0))
|
|
|
|
# ehlo at system
|
|
sendEhlo(sock)
|
|
|
|
# send mail from
|
|
sendMailFrom(sock, senderMail)
|
|
|
|
if targetList:
|
|
mails = openFile(targetList)
|
|
for targetMail in mails:
|
|
targetMail = targetMail.rstrip('\r')
|
|
targetMail = targetMail.rstrip('\n')
|
|
# send Mail To
|
|
sendMailTo(sock, targetMail)
|
|
|
|
|
|
else:
|
|
# send Mail To
|
|
sendMailTo(sock, targetMail)
|
|
|
|
|
|
|
|
# initiate DATA block for mailcontent
|
|
sendCustom(sock,'DATA\r\n',True)
|
|
|
|
# send subject
|
|
sub = 'SUBJECT: {0}\r\n'.format(subject)
|
|
sendCustom(sock,sub,False)
|
|
|
|
# cc list or not
|
|
if targetCcList:
|
|
mails = openFile(targetCcList)
|
|
for targetCcMail in mails:
|
|
targetCcMail = targetCcMail.rstrip('\r')
|
|
targetCcMail = targetCcMail.rstrip('\n')
|
|
# send CC Mail
|
|
custData = 'CC: <{0}>\r\n'.format(targetCcMail)
|
|
sendCustom(sock,custData,False)
|
|
elif targetCcMail:
|
|
# initiate DATA block for mailcontent
|
|
custData = 'CC: <{0}>\r\n'.format(targetCcMail)
|
|
sendCustom(sock,custData,False)
|
|
|
|
# bcc list or not
|
|
if targetBccList:
|
|
mails = openFile(targetBccList)
|
|
for targetBccMail in mails:
|
|
targetBccMail = targetBccMail.rstrip('\r')
|
|
targetBccMail = targetBccMail.rstrip('\n')
|
|
# send CC Mail
|
|
custData = 'CC: <{0}>\r\n'.format(targetBccMail)
|
|
sendCustom(sock,custData,False)
|
|
|
|
elif targetBccMail:
|
|
# initiate DATA block for mailcontent
|
|
custData = 'BCC: <{0}>\r\n'.format(targetBccMail)
|
|
sendCustom(sock,custData,False)
|
|
|
|
# so you want to send an attachment??
|
|
if not attachmentName:
|
|
attachmentName = attachment
|
|
|
|
if attachment:
|
|
buf=openFileRead(attachment)
|
|
attachmentB64 = base64.b64encode(buf)
|
|
attachmentB64 = attachmentB64.decode('utf-8')
|
|
# i should patent that crap
|
|
rndBoundary = int((str(random.random()+1)).replace('.',''))
|
|
bndry = '{0}'.format(rndBoundary)
|
|
#bndry = '==============={0}=='.format(rndBoundary)
|
|
ct = 'Content-Type: multipart/mixed; boundary="{0}"\r\n'.format(rndBoundary)
|
|
ct2 = 'MIME-Version: 1.0\r\n'
|
|
sendCustom(sock,ct,False)
|
|
sendCustom(sock,ct2,False)
|
|
|
|
ctbody = '--{0}\r\nContent-Type: text/plain; charset="us-ascii"\r\nMIME-Version: 1.0\r\nContent-Transfer-Encoding: 7bit\r\n\r\n{1}\r\n\r\n'.format(bndry,body)
|
|
sendCustom(sock,ctbody,False)
|
|
|
|
ctattach = '--{0}\r\nContent-Type: application/octet-stream\r\nMIME-Version: 1.0\r\nContent-Transfer-Encoding: base64\r\nContent-Disposition: attachment; filename={1}\r\n\r\n{2}\r\n\r\n--{0}\r\n\r\n'.format(bndry,attachmentName, attachmentB64)
|
|
sendCustom(sock,ctattach,False)
|
|
else:
|
|
body = '{0}\r\n'.format(body)
|
|
sendCustom(sock,body,False)
|
|
|
|
done = '.\r\n'
|
|
sendCustom(sock,done,True)
|
|
|
|
quit = 'quit\r\n'
|
|
sendCustom(sock,quit,True)
|
|
|
|
conn = '[+] Finished'
|
|
print(liteUp(conn, 'ppppink', 0))
|
|
|
|
|
|
|
|
def main():
|
|
|
|
parser_desc = '{0} {1} by {2}'.format(__tool_name__, __tool_version__,__tool_author__)
|
|
prog_desc = __tool_desc__
|
|
parser = argparse.ArgumentParser(prog = prog_desc, description=parser_desc)
|
|
parser.add_argument("-z","--socket-timeout",action="store",required=False,type=int,help='time to wait for socket (defaut:5)',dest='sockTimeout',default=5)
|
|
parser.add_argument("-Z","--manual-timeout",action="store",required=False,type=int,help='time to wait for socket (defat:5)',dest='sockTimeout',default=5)
|
|
parser.add_argument("-t","--target-email",action="store",required=False,help='single e-mail address the mails to sent to',dest='targetMail')
|
|
parser.add_argument("-cc","--target-cc-email",action="store",required=False,help='single CC e-mail address the mails to sent to',dest='targetCcMail', default=False)
|
|
parser.add_argument("-bcc","--target-bcc-email",action="store",required=False,help='single BCC e-mail address the mails to sent to',dest='targetBccMail', default=False)
|
|
parser.add_argument("-CC","--target-cc-list",action="store",required=False,help='single CC e-mail address the mails to sent to',dest='targetCcList', default=False)
|
|
parser.add_argument("-BCC","--target-bcc-list",action="store",required=False,help='single BCC e-mail address the mails to sent to',dest='targetBccList', default=False)
|
|
parser.add_argument("-T","--target-list",action="store",required=False,help='list with email addresses mail sent to',dest='targetList',default= False)
|
|
parser.add_argument("-e","--sender-email",action="store",required=False,help='single sender e-mail addr, FORMAT:<email>password>',dest='senderMail')
|
|
parser.add_argument("-s","--email-subject",action="store",required=False,help='the subject',dest='subject',default='Imptant Notice about your paypal account')
|
|
parser.add_argument("-b","--email-body",action="store",required=False,help='the body, e.g. \'hi there, this is a massivtest. please ignore.\'',dest='body',default='Sorry, you have been hacked.')
|
|
parser.add_argument("-a","--attachment",action="store",required=False,help='send attachment',dest='attachment',default=False)
|
|
parser.add_argument("-A","--attachment-name",action="store",required=False,help='send attachment',dest='attachmentName',default=False)
|
|
parser.add_argument("-m","--mta",action="store",required=False,help='the mta, FORMAT:<smtp>:<port>, e.g. smtp.provider.m:25',dest='mtaAddr',default='smtp.gmail.com:25')
|
|
|
|
if len(sys.argv)==1:
|
|
parser.print_help()
|
|
sys.exit()
|
|
|
|
args = parser.parse_args()
|
|
run(args)
|
|
|
|
if __name__ == "__main__":
|
|
main()
|
|
|
|
|