104 lines
4.5 KiB
Python
104 lines
4.5 KiB
Python
import socket, hashlib, re
|
|
|
|
class RouterOSApi:
|
|
def __init__(self, host, port=8728):
|
|
self.host = host; self.port = port; self.sock = None
|
|
def connect(self, username, password):
|
|
self.sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
|
|
self.sock.settimeout(10)
|
|
self.sock.connect((self.host, self.port))
|
|
self._write_sentence('/login', f'=name={username}', f'=password={password}')
|
|
resp = self._read_response()
|
|
if any(isinstance(r, tuple) and r[0] == '!trap' for r in resp):
|
|
chal = None
|
|
for item in resp:
|
|
if isinstance(item, dict) and 'ret' in item: chal = item['ret']
|
|
if chal and len(chal) == 32:
|
|
response = '00' + hashlib.md5(b'\x00' + password.encode() + bytes.fromhex(chal)).hexdigest()
|
|
self._write_sentence('/login', f'=name={username}', f'=response={response}')
|
|
resp = self._read_response()
|
|
return self
|
|
def _encode_length(self, length):
|
|
if length < 0x80: return bytes([length])
|
|
elif length < 0x4000: length |= 0x8000; return bytes([(length>>8)&0xFF, length&0xFF])
|
|
elif length < 0x200000: length |= 0xC00000; return bytes([(length>>16)&0xFF, (length>>8)&0xFF, length&0xFF])
|
|
elif length < 0x10000000: length |= 0xE0000000; return bytes([(length>>24)&0xFF, (length>>16)&0xFF, (length>>8)&0xFF, length&0xFF])
|
|
else: return bytes([0xF0, (length>>24)&0xFF, (length>>16)&0xFF, (length>>8)&0xFF, length&0xFF])
|
|
def _write_word(self, word): self.sock.sendall(self._encode_length(len(word)) + word.encode('utf-8'))
|
|
def _write_sentence(self, cmd, *words):
|
|
self._write_word(cmd)
|
|
for w in words: self._write_word(w)
|
|
self.sock.sendall(b'\x00')
|
|
def _read_byte(self): return self.sock.recv(1)
|
|
def _read_word(self):
|
|
first = self._read_byte()
|
|
if first == b'\x00': return None
|
|
lb = first[0]
|
|
if lb & 0x80:
|
|
if (lb & 0xC0) == 0x80: length = ((lb & 0x3F)<<8) + self._read_byte()[0]
|
|
elif (lb & 0xE0) == 0xC0: length = ((lb & 0x1F)<<16) + (self._read_byte()[0]<<8) + self._read_byte()[0]
|
|
elif (lb & 0xF0) == 0xE0: length = ((lb & 0x0F)<<24) + (self._read_byte()[0]<<16) + (self._read_byte()[0]<<8) + self._read_byte()[0]
|
|
else: length = (self._read_byte()[0]<<24) + (self._read_byte()[0]<<16) + (self._read_byte()[0]<<8) + self._read_byte()[0]
|
|
else: length = lb
|
|
data = b''
|
|
while len(data) < length:
|
|
chunk = self.sock.recv(length - len(data))
|
|
if not chunk: break
|
|
data += chunk
|
|
return data.decode('utf-8', errors='replace')
|
|
def _read_sentence(self):
|
|
words = []
|
|
while True:
|
|
w = self._read_word()
|
|
if w is None: break
|
|
words.append(w)
|
|
return words
|
|
def _read_response(self):
|
|
responses = []
|
|
while True:
|
|
sentence = self._read_sentence()
|
|
if not sentence: break
|
|
reply = sentence[0]; rest = sentence[1:]
|
|
if reply == '!done': break
|
|
elif reply == '!re':
|
|
d = {}
|
|
for w in rest:
|
|
if '=' in w:
|
|
parts = w.split('=', 2)
|
|
d[parts[1]] = parts[2] if len(parts) >= 3 else ''
|
|
else: d[w] = ''
|
|
responses.append(d)
|
|
elif reply == '!trap': responses.append(('!trap', rest))
|
|
elif reply == '!fatal': raise Exception(f"Fatal: {rest}")
|
|
else: responses.append((reply, rest))
|
|
return responses
|
|
def cmd(self, command, **attrs):
|
|
words = [command]
|
|
for k, v in attrs.items():
|
|
if k.startswith('?'): words.append(f'{k}={v}')
|
|
else: words.append(f'={k}={v}')
|
|
self._write_sentence(*words)
|
|
return self._read_response()
|
|
def close(self):
|
|
if self.sock: self.sock.close(); self.sock = None
|
|
|
|
api = RouterOSApi('192.168.100.2')
|
|
api.connect('mi4', 'm14')
|
|
|
|
profiles = ["Bulanan2", "Bulanan4", "vc-2K3J", "vc-5K10J", "Family", "home", "DevB2"]
|
|
|
|
print("=== ON-LOGIN VERIFICATION ===")
|
|
for p in profiles:
|
|
resp = api.cmd('/ip/hotspot/user/profile/print', **{'?name': p})
|
|
if not resp: continue
|
|
ol = resp[0].get('on-login', '')
|
|
|
|
real_pic = len(re.findall(r':pic(?!k)', ol))
|
|
pick = ol.count(':pick')
|
|
pickk = ol.count(':pickk')
|
|
|
|
status = 'ALL CORRECT' if real_pic == 0 and pickk == 0 else 'BROKEN'
|
|
print(f"{p}: {status} (pic_typo={real_pic} pick={pick} pickk={pickk})")
|
|
|
|
api.close()
|