mirror of
https://github.com/maride/afl-transmit.git
synced 2024-11-21 15:04:25 +00:00
Add some countermeasure to unwanted peers
This commit is contained in:
parent
1e5c8efdce
commit
69de9ba8da
@ -8,6 +8,7 @@ You need to specify your AFL output directory with `--fuzzer-directory`, and you
|
|||||||
Some other options exist to let you fine-tune your *afl-transmit* experience, have a look at them via `--help`.
|
Some other options exist to let you fine-tune your *afl-transmit* experience, have a look at them via `--help`.
|
||||||
|
|
||||||
On default, *afl-transmit* opens port 1337/TCP to wait for incoming connections. If you are not on a private net, make sure to protect this port with a firewall, or anyone on the internet may send you files (although this might become interesting).
|
On default, *afl-transmit* opens port 1337/TCP to wait for incoming connections. If you are not on a private net, make sure to protect this port with a firewall, or anyone on the internet may send you files (although this might become interesting).
|
||||||
|
As a countermeasure, use the `--restrict-to-peers` flags to only allow connections from your known peers.
|
||||||
|
|
||||||
### Quickstart
|
### Quickstart
|
||||||
|
|
||||||
|
@ -13,11 +13,13 @@ import (
|
|||||||
|
|
||||||
var (
|
var (
|
||||||
port int
|
port int
|
||||||
|
restrictToPeers bool
|
||||||
)
|
)
|
||||||
|
|
||||||
// Registers the flags required for the listener
|
// Registers the flags required for the listener
|
||||||
func RegisterListenFlags() {
|
func RegisterListenFlags() {
|
||||||
flag.IntVar(&port, "port", ServerPort, "Port to bind server component to")
|
flag.IntVar(&port, "port", ServerPort, "Port to bind server component to")
|
||||||
|
flag.BoolVar(&restrictToPeers, "restrict-to-peers", false, "Only allow connections from peers")
|
||||||
}
|
}
|
||||||
|
|
||||||
// Sets up a listener and listens forever for packets on the given port, storing their contents in the outputDirectory
|
// Sets up a listener and listens forever for packets on the given port, storing their contents in the outputDirectory
|
||||||
@ -40,8 +42,28 @@ func Listen(outputDirectory string) error {
|
|||||||
log.Printf("Encountered error while accepting from %s: %s", conn.RemoteAddr().String(), connErr)
|
log.Printf("Encountered error while accepting from %s: %s", conn.RemoteAddr().String(), connErr)
|
||||||
continue
|
continue
|
||||||
}
|
}
|
||||||
// Handle in a separate thread
|
|
||||||
go handle(conn, outputDirectory)
|
// Check if we should restrict connections from peers
|
||||||
|
handleConnection := true
|
||||||
|
if restrictToPeers {
|
||||||
|
found := false
|
||||||
|
// Loop over peers
|
||||||
|
for _, p := range peers {
|
||||||
|
// Check if we found the remote address in our peers list
|
||||||
|
if p.Address == conn.RemoteAddr().String() {
|
||||||
|
found = true
|
||||||
|
break
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Handle connection only if its a peer
|
||||||
|
handleConnection = found
|
||||||
|
}
|
||||||
|
|
||||||
|
if handleConnection {
|
||||||
|
// Handle in a separate thread
|
||||||
|
go handle(conn, outputDirectory)
|
||||||
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user