NineSec Team Shell
Server IP : 184.107.3.203  /  Your IP : 216.73.216.51
Web Server : Apache
System : Linux dedicated2.avenfashion.com.ph 4.18.0-553.40.1.el8_10.x86_64 #1 SMP Mon Feb 10 12:11:18 EST 2025 x86_64
User : adminteladeoro ( 1015)
PHP Version : 8.2.28
Disable Function : exec,passthru,shell_exec,system
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : ON
Directory (0755) :  /usr/lib/python3.6/site-packages/sos/cleaner/mappings/__pycache__/

[  Home  ][  C0mmand  ][  Upload File  ]

Current File : //usr/lib/python3.6/site-packages/sos/cleaner/mappings/__pycache__/ipv6_map.cpython-36.pyc
3

~�gl-�@sRddlZddlmZddlmZdd�Zdd�ZGdd	�d	e�ZGd
d�d�ZdS)�N)�getrandbits)�SoSMapcCsdd�|D�S)a�Generate a random set of hextets, based on the length of the source
    hextet. If any hextets are compressed, keep that compression.

    E.G. '::1234:bcd' will generate a leading empty '' hextet, followed by two
    4-character hextets.

    :param hextets:     The extracted hextets from a source address
    :type hextets:      ``list``

    :returns:           A set of randomized hextets for use in an obfuscated
                        address
    :rtype:             ``list``
    cSsg|]}|rtd�nd�qS)��)�
random_hex)�.0�h�r	�/usr/lib/python3.6/ipv6_map.py�
<listcomp>sz$generate_hextets.<locals>.<listcomp>r	)Zhextetsr	r	r
�generate_hextetssrcCstd|�d|�d��S)z�Generate a string of size length of random hex characters.

    :param length:  The number of characters to generate
    :type length:   ``int``

    :returns:       A string of ``length`` hex characters
    :rtype:         ``str``
    r�0�x)r)Zlengthr	r	r
r"s	rc@sHeZdZdZiZddddgZdgZdZdZd	d
�Z	dd�Z
ddd�ZdS)�
SoSIPv6MapatMapping for IPv6 addresses and networks.

    Much like the IP map handles IPv4 addresses, this map is designed to take
    IPv6 strings and obfuscate them consistently to maintain network topology.
    To do this, addresses will be manipulated by the ipaddress library.

    If an IPv6 address is encountered without a netmask, it is assumed to be a
    /64 address.
    z^::1/.*z::/0zfd53:.*z^53..:�534fF�cCs�d|krdSx�|dD]|}tj|�}|d|d}|j||�}|j|j|j<xB|d|dD].}|d|d|}|j||�||j|<q`WqWdS)z�Override the base conf_update() so that we can load the existing
        networks into ObfuscatedIPv6Network() objects for the current run.
        �networksN�
obfuscated�hosts)�	ipaddress�
ip_network�_get_network�obfuscated_address�dataset�original_address�add_obfuscated_host_address)�self�configZnetworkZ_origZ_obfuscated�_net�host�_ob_hostr	r	r
�conf_updateGs
zSoSIPv6Map.conf_updatecCs�d|kr|jd�dnd}|}|s*|d7}ytj|�}|j|�}|j}Wndtk
r�tj|dd�}|j|�}|j|jkr�|j|j|j<tj	|jd�d�}|j
|�}YnX|r�d|kr�|�d|��S|S)	N�/rrz/64F)�strictr���)�splitrrrr�
ValueError�network_addrrrZ
ip_address�obfuscate_host_address)r�item�_prefixZ_ipaddr�_addrrZ	_hostaddrr	r	r
�
sanitize_itemWs$



zSoSIPv6Map.sanitize_itemrcCs.|j}||jkr$t|||j�|j|<|j|S)z�Attempt to find an existing ObfuscatedIPv6Network object from which
        to either find an existing obfuscated match, or create a new one. If
        no such object already exists, create it.
        )�
compressedr�ObfuscatedIPv6Network�first_hexes)rZaddressrr+r	r	r
rts

zSoSIPv6Map._get_networkN)r)�__name__�
__module__�__qualname__�__doc__rZignore_matchesr/Zcompile_regexes�versionr!r,rr	r	r	r
r.s	rc@sZeZdZdZddd�Zedd��Zedd	��Zd
d�Zdd
�Z	dd�Z
dd�Zdd�ZdS)r.a�An abstraction class that represents a network that is (to be) handled
    by sos.

    Each distinct IPv6 network that we encounter will have a representative
    instance of this class, from which new obfuscated subnets and host
    addresses will be generated.

    This class should be built from an ``ipaddress.IPv6Network`` object. If
    an obfuscation string is not passed, one will be created during init.
    rNcCs�t|tj�std��||_|j|_|jj|_	i|_
|dkrDdg|_n||_|sZ|j�|_
n,t|t�svtdt|�����|jd�d|_
dS)a�Basic setup for the obfuscated network. Minor validation on the addr
        used to create the instance, as well as on an optional ``obfuscation``
        which if set, will serve as the obfuscated_network address.

        :param addr:        The *un*obfuscated network to be handled
        :type addr:         ``ipaddress.IPv6Network``

        :param obfuscation: An optional pre-determined string representation of
                            the obfuscated network address
        :type obfuscation:  ``str``

        :param used_hexes:  A list of already used hexes for the first hextet
                            of a potential global address obfuscation
        :type used_hexes:   ``list``
        z*Invalid network: not an IPv6Network objectNrz;Pre-determined obfuscated network address must be str, not r"r)�
isinstancerZIPv6Network�	Exception�addrZ	prefixlen�prefixZnetwork_addressr-r'rr/�_obfuscate_network_address�_obfuscated_network�str�	TypeError�typer%)rr7ZobfuscationZ
used_hexesr	r	r
�__init__�s


zObfuscatedIPv6Network.__init__cCs|j�d|j��S)Nr")r:r8)rr	r	r
r�sz(ObfuscatedIPv6Network.obfuscated_addresscCs|jjS)N)r7r-)rr	r	r
r�sz&ObfuscatedIPv6Network.original_addresscCs4|jjr|j�S|jjr|jS|jjr.|j�S|jS)z�Generate the obfuscated pair for the network address. This is
        determined based on the netmask of the network this class was built
        on top of.
        )r7Z	is_global�_obfuscate_global_addressZ
is_link_localr'Z
is_private�_obfuscate_private_address)rr	r	r
r9�sz0ObfuscatedIPv6Network._obfuscate_network_addresscCs�|jjd�dd�}dg}tdd�|D��r�dt|j�d}|�td	���}x||jkrl|�td	���}qPW|jj|�|g}|jt|��dj	|�S)
aGlobal unicast addresses have a 48-bit global routing prefix and a
        16-bit subnet. We set the global routing prefix to a static
        sos-specific identifier that could never be seen in the wild,
        '534f:'

        We then randomize the subnet hextet.
        �:rNrcss|]}|VqdS)Nr	)r�cr	r	r
�	<genexpr>�szBObfuscatedIPv6Network._obfuscate_global_address.<locals>.<genexpr>�5��)
r'r%�all�lenr/r�append�extendr�join)r�_hextets�_ob_hexZ_startr	r	r
r?�sz/ObfuscatedIPv6Network._obfuscate_global_addresscCs2|jjd�dd�}dg}|jt|��dj|�S)a
The first 8 bits will always be 'fd', the next 40 bits are meant
        to be a global ID, followed by 16 bits for the subnet. To keep things
        relatively simply we maintain the first hextet as 'fd53', and then
        randomize any remaining hextets
        rArNZfd53)r'r%rJrrK)rrLrMr	r	r
r@�sz0ObfuscatedIPv6Network._obfuscate_private_addresscsz�fdd�}|j�jkrn�jjd�}|jt|�d�jd�}||�}x|�jj�kr^||�}qFW�j|j|��j|jS)a�Given an unobfuscated address, generate an obfuscated match for it,
        and save it to this network for tracking during the execution of clean.

        Note: another way to do this would be to convert the obfuscated network
        to bytes, and add a random amount to that based on the number of
        addresses that the network can support and from that new bytes count
        craft a new IPv6 address. This has the advantage of absolutely
        guaranteeing the new address is within the network space (whereas the
        method employed below could *theoretically* generate an overlapping
        address), but would in turn remove any ability to compress obfuscated
        addresses to match the general format/syntax of the address it is
        replacing. For the moment, it is assumed that being able to maintain a
        quick mental note of "unobfuscated device ff00::1 is obfuscated device
        53ad::a1b2" is more desireable than "ff00::1 is now obfuscated as
        53ad::1234:abcd:9876:a1b2:".

        :param addr:        The unobfuscated IPv6 address
        :type addr:         ``ipaddress.IPv6Address``

        :returns:           An obfuscated address within this network
        :rtype:             ``str``
        cs dj�jdjt|jd���g�S)NrrA)rKr:rr%)r)rr	r
�_generate_addressszGObfuscatedIPv6Network.obfuscate_host_address.<locals>._generate_addressrAN)r-rr'�rstriprH�lstrip�valuesr)rr7rNZ_nZ_hostr r	)rr
r(�sz,ObfuscatedIPv6Network.obfuscate_host_addresscCs||j|<dS)zjAdds an obfuscated pair to the class for tracking and ongoing
        consistency in obfuscation.
        N)r)rrrr	r	r
rsz1ObfuscatedIPv6Network.add_obfuscated_host_address)rN)
r0r1r2r3r>�propertyrrr9r?r@r(rr	r	r	r
r.�s

"'r.)	rZrandomrZsos.cleaner.mappingsrrrrr.r	r	r	r
�<module>sR

NineSec Team - 2022