bubaxy stands for Bushwhackers Ban Proxy.
usage: ./bubaxy.py [-h] (--cmd command | --net host:port)
[--patterns PATTERNS] [-c CHUNK_SIZE] -p PORT [-l LEVEL]
IO wrapper for arbitrary executables.
optional arguments:
-h, --help show this help message and exit
--cmd command A command to execute
--net host:port Host and port to connect
--patterns PATTERNS Path to the file with patterns to ban
-c CHUNK_SIZE, --chunk-size CHUNK_SIZE
Chunk size for socket I/O
-p PORT, --port PORT Port for wrapper to listen
-l LEVEL, --level LEVEL
Log level. DON'T USE DEBUG ON CTF!
Example:
Wrap ssh on bushwhackers.ru and listen at 31337:
./bubaxy.py --patterns patterns.yaml --net bushwhackers.ru:22 -p 31337 --level=DEBUG
Hint: use single quote to enclose raw strings in YAML, e.g. '\n' will be interpreted as r"\n" in python
max_len- maximum length of a pattern to ban. Possible values:auto, positive number
plain- list of plaintext patterns to ban.python- list of python literals, e.g.'\x0c\x0b\x0a'.hex- list of hex encoded patterns, e.g.'61616161'.base64- list of base64 encoded patterns, e.g.'QnVzaHdoYWNrZXJz'regexp- list of python regular expressions. Keep in mind, that bad regular expressions, like(a+)+can affect a performance dramatically. Also regular expressions have a limited support because of bufferization.
bubaxy has an interactive console attached to the stdin. Try it by typing some python expression into console:
[ 2018-04-19 12:37:03,608 ][INFO]: Namespace(chunk_size=1024, cmd=None, log='INFO', net='example.com:80', patterns=None, port=31337)
[ 2018-04-19 12:37:16,947 ][INFO]: <type=remote conn=(10.0.0.159, 63801) -> (93.184.216.34, 80)> was spawned
2 * 2
4
import this
The Zen of Python, by Tim Peters
...