142 lines
5.8 KiB
Python
142 lines
5.8 KiB
Python
import socket, hashlib, time
|
|
|
|
class RouterOSApi:
|
|
def __init__(self, host, port=8728):
|
|
self.host = host; self.port = port; self.sock = None
|
|
def connect(self, username, password):
|
|
self.sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
|
|
self.sock.settimeout(10)
|
|
self.sock.connect((self.host, self.port))
|
|
self._write_sentence('/login', f'=name={username}', f'=password={password}')
|
|
resp = self._read_response()
|
|
if any(isinstance(r, tuple) and r[0] == '!trap' for r in resp):
|
|
chal = None
|
|
for item in resp:
|
|
if isinstance(item, dict) and 'ret' in item: chal = item['ret']
|
|
if chal and len(chal) == 32:
|
|
response = '00' + hashlib.md5(b'\x00' + password.encode() + bytes.fromhex(chal)).hexdigest()
|
|
self._write_sentence('/login', f'=name={username}', f'=response={response}')
|
|
resp = self._read_response()
|
|
return self
|
|
def _encode_length(self, length):
|
|
if length < 0x80: return bytes([length])
|
|
elif length < 0x4000: length |= 0x8000; return bytes([(length>>8)&0xFF, length&0xFF])
|
|
elif length < 0x200000: length |= 0xC00000; return bytes([(length>>16)&0xFF, (length>>8)&0xFF, length&0xFF])
|
|
elif length < 0x10000000: length |= 0xE0000000; return bytes([(length>>24)&0xFF, (length>>16)&0xFF, (length>>8)&0xFF, length&0xFF])
|
|
else: return bytes([0xF0, (length>>24)&0xFF, (length>>16)&0xFF, (length>>8)&0xFF, length&0xFF])
|
|
def _write_word(self, word): self.sock.sendall(self._encode_length(len(word)) + word.encode('utf-8'))
|
|
def _write_sentence(self, cmd, *words):
|
|
self._write_word(cmd)
|
|
for w in words: self._write_word(w)
|
|
self.sock.sendall(b'\x00')
|
|
def _read_byte(self): return self.sock.recv(1)
|
|
def _read_word(self):
|
|
first = self._read_byte()
|
|
if first == b'\x00': return None
|
|
lb = first[0]
|
|
if lb & 0x80:
|
|
if (lb & 0xC0) == 0x80: length = ((lb & 0x3F)<<8) + self._read_byte()[0]
|
|
elif (lb & 0xE0) == 0xC0: length = ((lb & 0x1F)<<16) + (self._read_byte()[0]<<8) + self._read_byte()[0]
|
|
elif (lb & 0xF0) == 0xE0: length = ((lb & 0x0F)<<24) + (self._read_byte()[0]<<16) + (self._read_byte()[0]<<8) + self._read_byte()[0]
|
|
else: length = (self._read_byte()[0]<<24) + (self._read_byte()[0]<<16) + (self._read_byte()[0]<<8) + self._read_byte()[0]
|
|
else: length = lb
|
|
data = b''
|
|
while len(data) < length:
|
|
chunk = self.sock.recv(length - len(data))
|
|
if not chunk: break
|
|
data += chunk
|
|
return data.decode('utf-8', errors='replace')
|
|
def _read_sentence(self):
|
|
words = []
|
|
while True:
|
|
w = self._read_word()
|
|
if w is None: break
|
|
words.append(w)
|
|
return words
|
|
def _read_response(self):
|
|
responses = []
|
|
while True:
|
|
sentence = self._read_sentence()
|
|
if not sentence: break
|
|
reply = sentence[0]; rest = sentence[1:]
|
|
if reply == '!done': break
|
|
elif reply == '!re':
|
|
d = {}
|
|
for w in rest:
|
|
if '=' in w:
|
|
parts = w.split('=', 2)
|
|
d[parts[1]] = parts[2] if len(parts) >= 3 else ''
|
|
else: d[w] = ''
|
|
responses.append(d)
|
|
elif reply == '!trap': responses.append(('!trap', rest))
|
|
elif reply == '!fatal': raise Exception(f"Fatal: {rest}")
|
|
else: responses.append((reply, rest))
|
|
return responses
|
|
def cmd(self, command, **attrs):
|
|
words = [command]
|
|
for k, v in attrs.items():
|
|
if k.startswith('?'): words.append(f'{k}={v}')
|
|
else: words.append(f'={k}={v}')
|
|
self._write_sentence(*words)
|
|
return self._read_response()
|
|
def close(self):
|
|
if self.sock: self.sock.close(); self.sock = None
|
|
|
|
api = RouterOSApi('192.168.100.2')
|
|
api.connect('mi4', 'm14')
|
|
|
|
# 1. Create test user with past expiry
|
|
test_name = "test_expiry_verify"
|
|
print(f"Creating test user '{test_name}' with past expiry...")
|
|
api.cmd('/ip/hotspot/user/add', **{
|
|
'name': test_name,
|
|
'profile': 'Bulanan2',
|
|
'password': 'test123',
|
|
'comment': 'jul/06/2026 00:00:00', # yesterday
|
|
'limit-uptime': '1h',
|
|
})
|
|
|
|
# Verify
|
|
users = list(api.cmd('/ip/hotspot/user/print', **{'?name': test_name}))
|
|
if users:
|
|
print(f" Created: {users[0].get('name')} comment={users[0].get('comment')}")
|
|
|
|
# 2. Get scheduler run count before
|
|
sched_before = {}
|
|
for item in api.cmd('/system/scheduler/print'):
|
|
sched_before[item['name']] = item.get('run-count', '0')
|
|
print(f"\n DevB2 run count before: {sched_before.get('DevB2', '?')}")
|
|
|
|
# 3. Wait for scheduler to run (it runs every ~2.5 min)
|
|
print("\n Waiting 10 seconds for scheduler to execute...")
|
|
time.sleep(10)
|
|
|
|
# 4. Check if user still exists
|
|
users_after = list(api.cmd('/ip/hotspot/user/print', **{'?name': test_name}))
|
|
sched_after = {}
|
|
for item in api.cmd('/system/scheduler/print'):
|
|
sched_after[item['name']] = item.get('run-count', '0')
|
|
print(f" DevB2 run count after: {sched_after.get('DevB2', '?')}")
|
|
|
|
if users_after:
|
|
user = users_after[0]
|
|
print(f"\n User STILL EXISTS: {user.get('name')}")
|
|
print(f" Comment: {user.get('comment')}")
|
|
print(f" limit-uptime: {user.get('limit-uptime')}")
|
|
|
|
# Check if limit-uptime was changed to 1s
|
|
if user.get('limit-uptime') == '1s':
|
|
print(" EXPIRED: limit-uptime=1s - expiry system is WORKING!")
|
|
else:
|
|
print(f" NOT YET EXPIRED: limit-uptime={user.get('limit-uptime')}")
|
|
print(" (may need to wait for next scheduler cycle)")
|
|
else:
|
|
print(f"\n User was REMOVED! Expiry system is WORKING!")
|
|
|
|
# Cleanup
|
|
if users_after:
|
|
api.cmd('/ip/hotspot/user/remove', **{'.id': users_after[0]['.id']})
|
|
print(f"\n Cleaned up test user")
|
|
|
|
api.close()
|