mirror of https://github.com/dnomd343/ProxyC
7 changed files with 374 additions and 34 deletions
@ -0,0 +1,311 @@ |
|||
#!/usr/bin/env python3 |
|||
# -*- coding: utf-8 -*- |
|||
|
|||
import os |
|||
import re |
|||
import json |
|||
from Basis.Logger import logging |
|||
from Basis.Methods import plugin |
|||
from Basis.Process import Process |
|||
from Basis.Functions import genFlag, getAvailablePort |
|||
|
|||
settings = { |
|||
'serverBind': '127.0.0.1', |
|||
'workDir': '/tmp/ProxyC' |
|||
} |
|||
|
|||
pluginParams = { |
|||
'SITE': 'www.bing.com', |
|||
'PATH': '/test', |
|||
'HOST': '343.re', |
|||
'CERT': '/etc/ssl/certs/343.re/fullchain.pem', |
|||
'KEY': '/etc/ssl/certs/343.re/privkey.pem', |
|||
'PASSWD': 'dnomd343', |
|||
} |
|||
|
|||
pluginConfig = { |
|||
'simple-obfs': { |
|||
'http mode': [ |
|||
'obfs=http', |
|||
'obfs=http;obfs-host=${SITE}', |
|||
], |
|||
'tls mode': [ |
|||
'obfs=tls', |
|||
'obfs=tls;obfs-host=${SITE}', |
|||
], |
|||
'http mode (with uri)': [ |
|||
'obfs=http', |
|||
'obfs=http;obfs-host=${SITE};obfs-uri=${PATH}', |
|||
], |
|||
'http mode (POST method)': [ |
|||
'obfs=http', |
|||
'obfs=http;http-method=POST;obfs-host=${SITE}', |
|||
], |
|||
}, |
|||
'simple-tls': { |
|||
'http mode': [ |
|||
's;n=${HOST};cert=${CERT};key=${KEY}', |
|||
'n=${HOST}', |
|||
], |
|||
'websocket mode': [ |
|||
's;n=${HOST};cert=${CERT};key=${KEY};ws;ws-path=${PATH}', |
|||
'n=${HOST};ws;ws-path=${PATH}', |
|||
], |
|||
'http mode (with mux)': [ |
|||
's;cert=${CERT};key=${KEY};n=${HOST}', |
|||
'n=${HOST};mux=8', |
|||
], |
|||
'http mode (with auth key)': [ |
|||
's;n=${HOST};cert=${CERT};key=${KEY};auth=${PASSWD}', |
|||
'n=${HOST};auth=${PASSWD}', |
|||
], |
|||
}, |
|||
'v2ray': { |
|||
'websocket mode': [ |
|||
'server', |
|||
'', |
|||
], |
|||
'websocket mode (with tls)': [ |
|||
'server;tls;host=${HOST};cert=${CERT};key=${KEY}', |
|||
'tls;host=${HOST}', |
|||
], |
|||
'websocket mode (with path)': [ |
|||
'server;path=${PATH}', |
|||
'path=${PATH}', |
|||
], |
|||
'quic mode': [ |
|||
'server;mode=quic;host=${HOST};cert=${CERT};key=${KEY}', |
|||
'mode=quic;host=${HOST}', |
|||
], |
|||
}, |
|||
'xray': { |
|||
'websocket mode': [ |
|||
'server', |
|||
'', |
|||
], |
|||
'websocket mode (with tls)': [ |
|||
'server;tls;host=${HOST};cert=${CERT};key=${KEY}', |
|||
'tls;host=${HOST}', |
|||
], |
|||
'websocket mode (with path)': [ |
|||
'server;path=${PATH}', |
|||
'path=${PATH}', |
|||
], |
|||
'quic mode': [ |
|||
'server;mode=quic;host=${HOST};cert=${CERT};key=${KEY}', |
|||
'mode=quic;host=${HOST}', |
|||
], |
|||
'grpc mode': [ |
|||
'server;mode=grpc', |
|||
'mode=grpc', |
|||
], |
|||
'grpc mode (with tls)': [ |
|||
'server;tls;mode=grpc;host=${HOST};cert=${CERT};key=${KEY}', |
|||
'tls;mode=grpc;host=${HOST}', |
|||
], |
|||
}, |
|||
'kcptun': { |
|||
'basic mode': [ |
|||
'', '' # aka fast mode |
|||
], |
|||
'with nocomp': [ |
|||
'nocomp', 'nocomp' |
|||
], |
|||
'with key': [ |
|||
'key=${PASSWD}', 'key=${PASSWD}' |
|||
], |
|||
'with multi conn': [ |
|||
'conn=8', 'conn=8' |
|||
], |
|||
}, |
|||
'gost': { |
|||
'ws mode': [ |
|||
'server;mode=ws', |
|||
'mode=ws', |
|||
], |
|||
'mws mode': [ |
|||
'server;mode=mws', |
|||
'mode=mws;mux=1', |
|||
], |
|||
'tls mode': [ |
|||
'server;cert=${CERT};key=${KEY};mode=tls', |
|||
'serverName=${HOST};mode=tls', |
|||
], |
|||
'mtls mode': [ |
|||
'server;cert=${CERT};key=${KEY};mode=mtls', |
|||
'serverName=${HOST};mode=mtls;mux=1', |
|||
], |
|||
'xtls mode': [ |
|||
'server;cert=${CERT};key=${KEY};mode=xtls', |
|||
'serverName=${HOST};mode=xtls', |
|||
], |
|||
'h2 mode': [ |
|||
'server;cert=${CERT};key=${KEY};mode=h2', |
|||
'serverName=${HOST};mode=h2', |
|||
], |
|||
'wss mode': [ |
|||
'server;cert=${CERT};key=${KEY};mode=wss', |
|||
'serverName=${HOST};mode=wss', |
|||
], |
|||
'mwss mode': [ |
|||
'server;cert=${CERT};key=${KEY};mode=mwss', |
|||
'serverName=${HOST};mode=mwss;mux=1', |
|||
], |
|||
'quic mode': [ |
|||
'server;cert=${CERT};key=${KEY};mode=quic', |
|||
'serverName=${HOST};mode=quic', |
|||
], |
|||
'grpc mode': [ |
|||
'server;cert=${CERT};key=${KEY};mode=grpc', |
|||
'serverName=${HOST};mode=grpc', |
|||
], |
|||
}, |
|||
'cloak': {}, |
|||
'go-quiet': { |
|||
'chrome fingerprint': [ |
|||
os.path.join(settings['workDir'], 'go-quiet_config_${RANDOM}.json'), |
|||
'ServerName=${SITE};key=${PASSWD};TicketTimeHint=300;Browser=chrome', |
|||
], |
|||
'firefox fingerprint': [ |
|||
os.path.join(settings['workDir'], 'go-quiet_config_${RANDOM}.json'), |
|||
'ServerName=${SITE};key=${PASSWD};TicketTimeHint=300;Browser=firefox', |
|||
], |
|||
}, |
|||
'mos-tls-tunnel': { |
|||
'basic mode': [ |
|||
'cert=${CERT};key=${KEY}', |
|||
'n=${HOST}', |
|||
], |
|||
'basic mode (with mux)': [ |
|||
'cert=${CERT};key=${KEY};mux', |
|||
'n=${HOST};mux', |
|||
], |
|||
'wss mode': [ |
|||
'wss;cert=${CERT};key=${KEY}', |
|||
'wss;n=${HOST}', |
|||
], |
|||
'wss mode (with path)': [ |
|||
'wss;cert=${CERT};key=${KEY};wss-path=${PATH}', |
|||
'wss;n=${HOST};wss-path=${PATH}', |
|||
], |
|||
'wss mode (with mux)': [ |
|||
'wss;cert=${CERT};key=${KEY};mux', |
|||
'wss;n=${HOST};mux', |
|||
], |
|||
}, |
|||
'rabbit': { |
|||
'basic mode': [ |
|||
'${RABBIT_PORT}', |
|||
'serviceAddr=127.0.0.1:${RABBIT_PORT};password=${PASSWD};tunnelN=6' # emulate SIP003 (ipv4 localhost) |
|||
], |
|||
}, |
|||
'qtun': { |
|||
'basic mode': [ |
|||
'cert=${CERT};key=${KEY}', |
|||
'host=${HOST}', |
|||
], |
|||
}, |
|||
'gun': { |
|||
'basic mode': [ |
|||
'server:cleartext', |
|||
'client:cleartext', |
|||
], |
|||
'basic mode (with tls)': [ |
|||
'server:${CERT}:${KEY}', |
|||
'client:${HOST}', |
|||
], |
|||
}, |
|||
} |
|||
|
|||
|
|||
def kcptunLoad() -> None: |
|||
for kcptunMode in ['fast', 'fast2', 'fast3', 'normal', 'manual']: # traverse kcptun modes |
|||
pluginConfig['kcptun'][kcptunMode + ' mode'] = ['mode=' + kcptunMode, 'mode=' + kcptunMode] |
|||
for kcptunCrypt in ['aes', 'aes-128', 'aes-192', 'salsa20', 'blowfish', |
|||
'twofish', 'cast5', '3des', 'tea', 'xtea', 'xor', 'none']: # traverse kcptun crypt |
|||
pluginConfig['kcptun']['with %s crypt' % kcptunCrypt] = ['crypt=' + kcptunCrypt, 'crypt=' + kcptunCrypt] |
|||
|
|||
|
|||
def cloakLoad() -> None: |
|||
ckKey = os.popen('ck-server -key').read() # generate public and private key for cloak |
|||
pluginParams['CK_PUBLIC'] = re.search(r'\s+(\S+)$', ckKey.split('\n')[0])[1] |
|||
pluginParams['CK_PRIVATE'] = re.search(r'\s+(\S+)$', ckKey.split('\n')[1])[1] |
|||
pluginParams['CK_UID'] = re.search(r'\s+(\S+)\n', os.popen('ck-server -uid').read())[1] # generate uid for clock |
|||
logging.info('generate clock uid -> %s' % pluginParams['CK_UID']) |
|||
logging.info('generate clock key -> %s (Public) | %s (Private)' % ( |
|||
pluginParams['CK_PUBLIC'], pluginParams['CK_PRIVATE'] |
|||
)) |
|||
ckPrefix = 'UID=${CK_UID};PublicKey=${CK_PUBLIC};ServerName=${SITE};' # cloak plugin's basic command |
|||
ckConfigPath = os.path.join(settings['workDir'], 'cloak_config_${RANDOM}.json') # clock server's config |
|||
for ckMethod in ['plain', 'aes-128-gcm', 'aes-256-gcm', 'chacha20-poly1305']: # traverse cloak encrypt methods |
|||
pluginConfig['cloak']['%s method' % ckMethod] = [ |
|||
ckConfigPath, ckPrefix + 'EncryptionMethod=' + ckMethod |
|||
] |
|||
for ckBrowser in ['chrome', 'firefox']: # traverse cloak browser fingerprints |
|||
pluginConfig['cloak']['%s fingerprint' % ckBrowser] = [ |
|||
ckConfigPath, ckPrefix + 'EncryptionMethod=plain;BrowserSig=' + ckBrowser |
|||
] |
|||
pluginConfig['cloak']['single connection'] = [ # disable connection multiplexing |
|||
ckConfigPath, ckPrefix + 'EncryptionMethod=plain;NumConn=0' |
|||
] |
|||
|
|||
|
|||
def ssInject(server: Process, pluginInfo: dict) -> Process: |
|||
if pluginInfo['type'] == 'cloak': |
|||
ckConfig = paramFill(json.dumps({ |
|||
'BypassUID': ['${CK_UID}'], |
|||
'RedirAddr': '${SITE}', |
|||
'PrivateKey': '${CK_PRIVATE}' |
|||
})) |
|||
server.setFile(server.file + [{ # add cloak config file |
|||
'path': pluginInfo['server']['param'], |
|||
'content': ckConfig |
|||
}]) |
|||
elif pluginInfo['type'] == 'go-quiet': |
|||
server.setFile(server.file + [{ # add gq-quiet config file |
|||
'path': pluginInfo['server']['param'], |
|||
'content': paramFill(json.dumps({'key': '${PASSWD}'})) |
|||
}]) |
|||
elif pluginInfo['type'] == 'rabbit': # hijack rabbit plugin config |
|||
ssConfig = json.loads(server.file[0]['content']) # modify origin config |
|||
ssConfig.pop('plugin') # remove plugin option |
|||
ssConfig.pop('plugin_opts') |
|||
rabbitBind = ('[%s]' if ':' in ssConfig['server'] else '%s') % ssConfig['server'] # ipv4 / [ipv6] |
|||
rabbitPort = ssConfig['server_port'] |
|||
ssConfig['server'] = '127.0.0.1' # SIP003 use ipv4 localhost for communication |
|||
ssConfig['server_port'] = int(pluginInfo['server']['param']) # aka ${RABBIT_PORT} |
|||
server.file[0]['content'] = json.dumps(ssConfig) |
|||
server.setCmd(['sh', '-c', paramFill( |
|||
'rabbit -mode s -password ${PASSWD} -rabbit-addr %s:%s' % (rabbitBind, rabbitPort) # start rabbit-tcp |
|||
) + ' &\nexec ' + ' '.join(server.cmd)]) # shadowsocks as main process (rabbit as sub process) |
|||
return server |
|||
|
|||
|
|||
def paramFill(param: str) -> str: |
|||
if '${RANDOM}' in param: # refresh RANDOM field |
|||
pluginParams['RANDOM'] = genFlag(length = 8) |
|||
for field in pluginParams: |
|||
param = param.replace('${%s}' % field, pluginParams[field]) # fill ${XXX} field |
|||
return param |
|||
|
|||
|
|||
def load(): |
|||
cloakLoad() # init cloak config |
|||
kcptunLoad() # init kcptun config |
|||
for pluginType in pluginConfig: |
|||
for pluginTest, pluginTestInfo in pluginConfig[pluginType].items(): # traverse all plugin test item |
|||
if pluginType == 'rabbit': |
|||
pluginParams['RABBIT_PORT'] = str(getAvailablePort()) # allocate port before rabbit plugin start |
|||
yield { |
|||
'type': pluginType, |
|||
'caption': pluginTest, |
|||
'server': { # plugin info for server |
|||
'type': plugin[pluginType]['server'], |
|||
'param': paramFill(pluginTestInfo[0]), |
|||
}, |
|||
'client': { # plugin info for client |
|||
'type': plugin[pluginType]['client'], |
|||
'param': paramFill(pluginTestInfo[1]), |
|||
}, |
|||
'inject': ssInject # for some special plugins (only server part) |
|||
} |
|||
Loading…
Reference in new issue