Gallopsled/pwntools

ssh proxy_sock is broken

Open

#1,787 创建于 2021年2月7日

在 GitHub 查看
 (0 评论) (0 反应) (0 负责人)Python (11,127 star) (1,684 fork)batch import
backport-requiredbuggood first issue

描述

It appears that the SSH option proxy_sock does not work.

Works

>>> ssh(host='example.pwnme').whoami()
b'travis'

Does not work

>>> r = remote('localhost', 22)
>>> ssh(host='example.pwnme', proxy_sock=r.sock).whoami()
...
AuthenticationException: Authentication failed.

Works but should not work

It appears that there is some state in the remote that is bugged. When doing proxy_sock=r first, then proxy_sock=r.sock, everything works.

>>> r = remote('localhost', 22)
>>> ssh(host='example.pwnme', proxy_sock=r).whoami()
...
TypeError: '<' not supported between instances of 'NoneType' and 'int'
>>> ssh(host='example.pwnme', proxy_sock=r.sock).whoami()
b'travis'

贡献者指南

技术栈
python
领域
security
议题类型
bug
难度面向新贡献者的预计实现难度，1 表示很小改动，5 表示专家级工作。
3
预计时间有经验贡献者完成调查、实现、测试并准备 pull request 的粗略时间范围。
1-3 hours
活动状态议题当前的可参与程度：新鲜、活跃、陈旧、阻塞或等待维护者输入。
stale
清晰度议题是否清楚说明期望改动、验收标准和下一步。
mostly clear
前置要求
Pythonpwntools basics
新手友好度1-100 的估计分数，表示该议题对首次贡献者的友好程度。
40
研究方向
Investigate the pwntools ssh module, specifically how proxy sock is handled. Check the `remote` object's state when using proxy sock. Compare the behavior when passing the socket directly vs. the remote object. Look for issues with the comparison operator in the remote class.