1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
|
import socket
from struct import *
from random import random
def get_hex(data):
return "".join([hex(ord(c))[2:].zfill(2) for c in data])
host = "localhost"
port = 9990
def gen_auth(username, password):
length = 4 + 1 + len(username) + 1 + len(password) + 1
data = pack("!LB", length, 0x00)
data += username
data += "\0"
data += password
data += "\0"
return data
def gen_update_location(token, username, lat, lng):
length = 4 + 1 + 32 + 8 + 8 + len(username) + 1
data = pack("!LB32s", length, 0x01, token)
data += username
data += chr(0)
data += pack("!dd", lat, lng)
return data
def gen_request_location(token, username, gid):
length = 4 + 1 + 32 + 4 + len(username) + 1
data = pack("!LB32s", length, 0x02, token)
data += username
data += chr(0)
data += pack("!L", gid)
return data
def gen_request_user_info(token, username, uid):
length = 4 + 1 + 32 + len(username) + 1 + 4
data = pack("!LB32s", length, 0x03, token)
data += username
data += chr(0)
data += pack("!L", uid)
return data
def send(data):
received = None
try:
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
sock.connect((host, port))
print len(data)
sock.sendall(data)
received = sock.recv(1024)
finally:
sock.close()
return received
from sys import argv
if len(argv) == 2:
host = argv[1]
username = "hello"
password = "world"
gid = 1
resp = send(gen_auth(username, password))
pl, optcode, status, uid, token = unpack("!LBBL32s", resp)
print "size: " + str((pl, len(resp)))
print "opt: " + str(optcode)
print "status: " + str(status)
print "uid: " + str(uid)
print "token: " + get_hex(token)
resp = send(gen_update_location(token, username, random(), random()))
pl, optcode, status = unpack("!LBB", resp)
print "size: " + str((pl, len(resp)))
print "opt: " + str(optcode)
print "status: " + str(status)
resp = send(gen_request_location(token, username, gid))
print len(resp)
pl, optcode, status = unpack("!LBB", resp[:6])
print "size: " + str((pl, len(resp)))
idx = 6
print "length: " + str(len(resp[6:]))
while idx < pl:
print len(resp[idx:idx + 20])
uid, lat, lng = unpack("!Ldd", resp[idx:idx + 20])
idx += 20
print (uid, lat, lng)
resp = send(gen_request_user_info(token, username, uid))
pl, optcode, status = unpack("!LBB", resp[:6])
print "size: " + str((pl, len(resp)))
idx = 6
while idx < pl:
info_key, = unpack("!B", resp[idx:idx + 1])
idx += 1
print info_key
if info_key == 0x00:
info_value, = unpack("!L", resp[idx:idx + 4])
idx += 4
elif info_key == 0x01:
info_value, = unpack("!B", resp[idx:idx + 1])
idx += 1
print (info_key, info_value)
|