Skip to content
This repository

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Fetching contributors…

Cannot retrieve contributors at this time

file 136 lines (103 sloc) 2.902 kb
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136
#!/usr/bin/perl
# Copyright (c) 2006 Hans Klunder <hans.klunder@bigfoot.com>. All rights reserved.
# This program is free software; you can redistribute it and/or
# modify it under the same terms as Perl itself.


use strict;
use warnings;

use IO::Select;
use IO::Socket;
use Data::Dumper;
use Convert::ASN1 qw(asn_read);
use Net::LDAP::ASN qw(LDAPRequest LDAPResponse);
our $VERSION = '0.1';
use fields qw(socket target);


sub handle($$)
{
  my $clientsocket = shift;
  my $serversocket = shift;

  # read from client
  asn_read($clientsocket, my $reqpdu);
  log_request($reqpdu);
  
  # send to server
  print $serversocket $reqpdu or die "Could not send PDU to server\n";
  
  # read from server
  my $ready;
  my $sel = IO::Select->new($serversocket);
  for( $ready = 1 ; $ready ; $ready = $sel->can_read(0)) {
    asn_read($serversocket, my $respdu) or return 1;
    log_response($respdu);
    # and send the result to the client
    print $clientsocket $respdu;
  }

  return 0;
}


sub log_request($)
{
  my $pdu = shift;

  print '-' x 80,"\n";
  print "Request ASN 1:\n";
  Convert::ASN1::asn_hexdump(\*STDOUT,$pdu);
  print "Request Perl:\n";
  my $request = $LDAPRequest->decode($pdu);
  print Dumper($request);
}


sub log_response($)
{
  my $pdu = shift;

  print '-' x 80,"\n";
  print "Response ASN 1:\n";
  Convert::ASN1::asn_hexdump(\*STDOUT,$pdu);
  print "Response Perl:\n";
  my $response = $LDAPResponse->decode($pdu);
  print Dumper($response);
}


sub run_proxy($$)
{
  my $listenersock = shift;
  my $targetsock = shift;

  return unless ($listenersock && $targetsock);
  
  my $sel = IO::Select->new($listenersock);
  my %Handlers;
  while (my @ready = $sel->can_read) {
    foreach my $fh (@ready) {
      if ($fh == $listenersock) {
# let's create a new socket
my $psock = $listenersock->accept;
$sel->add($psock);
      } else {
my $result = handle($fh,$targetsock);
if ($result) {
# we have finished with the socket
$sel->remove($fh);
$fh->close;
delete $Handlers{*$fh};
}
      }
    }
  }
}


my $listenersock = IO::Socket::INET->new(
Listen => 5,
Proto => 'tcp',
Reuse => 1,
LocalPort => 7070 )
  or die "Could not create listener socket: $!\n";


my $targetsock = IO::Socket::INET->new(
   Proto => 'tcp',
PeerAddr => 'localhost',
PeerPort => 8080 )
  or die "Could not create connection to server: $!\n";

run_proxy($listenersock,$targetsock);

1;

__END__


Hi,

I noticed in the TODO that there was a request for a simple proxy which
can act as a man-in-the-middle.

Well, the attached script provides such a proxy, it is really a simple
proxy as it can currently handle only one client at the time, it will
dump requests and responses to STDOUT both in ASN1 and as perl structure.

Cheers,

Hans
ps. If you need a little more power like returning entries on a query I
suggest to have a look at Net::LDAP::Server on CPAN.

# EOF
Something went wrong with that request. Please try again.