server.py

#!/usr/bin/env python2

"""
	Main web server.
"""

import os
import sys
import socket
import SocketServer, SimpleHTTPServer
import urlparse, urllib2
from capstone import Cs, CS_ARCH_PPC, CS_MODE_BIG_ENDIAN

PORT = 8080
DUMP_PATH = "dumps"

"""
	Display module exports
"""
def display_mexport(addr, data, libname):
	m = module.ModExport(data)

	print "--------------------------------------------------------------------"
	print "- Module Export: %s 0x%x -"%(libname, addr)
	print m
	print "--------------------------------------------------------------------"

"""
	Display module imports
"""
def display_mimport(addr, data, libname):
	"""
		Check for modules in 0xE0000000 space
	"""
	if (addr & 0xE0000000) == 0xE0000000:
		m = module.ModImportSmall(data)
		
		print "--------------------------------------------------------------------"
		print "- Module Import (Small): %s 0x%x -"%(libname, addr)
		print m
		print "--------------------------------------------------------------------"
	else:
		m = module.ModImport(data)
		
		print "--------------------------------------------------------------------"
		print "- Module Import: %s 0x%x -"%(libname, addr)
		print m
		print "--------------------------------------------------------------------"  

"""
	Display module info
"""
def display_minfo(addr, data):
	m = module.ModInfo(data)
	base_addr = addr + module.MODIF_SIZE - m.ent_top
	nexports = (m.ent_end - m.ent_top) / module.MODX_SIZE
	nimports = (m.stub_end - m.stub_top) / module.MODIM_SIZE

	print "--------------------------------------------------------------------"
	print "- Module Info: %s 0x%x -"%(m.modname, addr)
	print "-> Base address: 0x%x"%(base_addr)
	print "-> # Exports: 0x%x"%(nexports)
	print "-> Export table at: 0x%x"%(base_addr + m.ent_top)
	print "-> # Imports: 0x%x"%(nimports)
	print "-> Import table at: 0x%x"%(base_addr + m.stub_top)
	print m
	print "--------------------------------------------------------------------"

"""
	Dump data
"""
def dump_data(data, file_name):
	if not os.path.exists(DUMP_PATH):
		os.makedirs(DUMP_PATH)
	else:
		remove_directory(file_name)
	fp = open(DUMP_PATH + "/" + file_name, "ab")
	fp.write(data)
	fp.close()
	
"""
	Dump text
"""
def dump_text(text, file_name):
	if not os.path.exists(DUMP_PATH):
		os.makedirs(DUMP_PATH)
	else:
		remove_directory(file_name) 
	outPath = DUMP_PATH + "/" + file_name
	if len(file_name) > 1:
		if file_name[1] == ':':
			outPath = file_name
	fp = open(outPath,"a")
	fp.write(text)
	fp.close()
	
"""
	Make directory
"""
def make_directory(dir_name):
	if not os.path.exists(DUMP_PATH + "/" + dir_name):
		os.makedirs(DUMP_PATH + "/" + dir_name)
		
"""
	Remove directory
"""
def remove_directory(dir_name):
	if os.path.exists(DUMP_PATH + "/" + dir_name):
		os.removedirs(DUMP_PATH + "/" + dir_name)

"""
	Display data
"""
def display_data(addr, src, length = 8, n = 8):
	filter_=''.join([(len(repr(chr(x)))==3) and chr(x) or '.' for x in range(256)])
	result=[]
	for i in xrange(0, len(src), length):
	   s = src[i:i+length]
	   hexa = ''.join(["%02X"%ord(x) for x in s])
	   hexa = ' '.join(["".join(hexa[j:j+n]) for j in range(0, len(hexa), n)])
	   printable = s.translate(filter_)
	   result.append("0x%08X: %-*s %s\n" % (addr + i, length*3, hexa, printable))
	return ''.join(result)


"""
	Disassemble data
"""
def disassemble(addr, data):
	none = 0
	md = Cs(CS_ARCH_PPC, CS_MODE_BIG_ENDIAN)
	disassed = md.disasm(data, addr)
	for i in disassed:
		none = 1
		print "0x%x:\t%s\t%s" %(i.address, i.mnemonic, i.op_str)
	if none != 1:
		print "Couldn't disassemble at 0x%x"%(addr)

"""
	Web Server
"""
class PS3WebServer(SimpleHTTPServer.SimpleHTTPRequestHandler):
	"""
		GET Request Handler
		Used for debugging and interactive shell stuff
	"""
	def do_GET(self):
		if self.path.startswith('/Debug'):
			print '[+] DBG: ',
			parsed = urlparse.parse_qs(urlparse.urlparse(self.path).query)
			dbg = parsed['dbg'][0]
			print dbg
		# handle dump
		elif self.path == '/Command':
			sockfd = self.request
			self.send_response(200)
			self.send_header('Content-type', 'text/html')
			self.end_headers()
			cmd = raw_input("%> ")
			self.wfile.write(cmd)
		# normal requests
		else:
			SimpleHTTPServer.SimpleHTTPRequestHandler.do_GET(self)

	"""
		POST Request Handler
		This is only used to dump data from the Vita's memory
	"""
	def do_POST(self):
		length = int(self.headers.getheader('content-length'))
		if length:
			rdata = self.rfile.read(length)
			rdata = urlparse.parse_qs(rdata)
			addr = 0
			extra = ""

			try:
				addr = int(rdata['addr'][0], 0)
			except KeyError:
				print "[+] Warning: addr not received"
			try:
				data = rdata['data'][0]
			except KeyError:
				print "[+] Error: dump not received"
				return
			try:
				typ = rdata['type'][0]
			except KeyError:
				print "[+] Error: msg type not received"
				return

			try:
				extra = rdata['extra'][0]
			except KeyError:
				pass

			if(typ == 'read'):
				print display_data(addr, data.decode('hex'))

			if(typ == 'disasm'):
				disassemble(addr, data.decode('hex'))

			if(typ == 'dump'):
				fname = extra
				dump_data(data.decode('hex'), fname)
				
			if(typ == 'log'):
				fname = extra
				dump_text(data, fname)
				
			if(typ == 'mkdir'):
				make_directory(data)
				
			if(typ == 'rmdir'):
				remove_directory(data)

			if(typ == "mod_info"):
				display_minfo(addr, data.decode('hex'))

			if(typ == "mod_export"):
				display_mexport(addr, data.decode('hex'), extra.decode('hex'))

			if(typ == "mod_import"):
				display_mimport(addr, data.decode('hex'), extra.decode('hex'))
				
		
				
"""
	Print IP+PORT
"""

s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
s.connect(("gmail.com", 80))
localIP = s.getsockname()[0]
s.close()

print "Starting server on " + localIP + ":" + str(PORT)

"""
	Start server
"""
SocketServer.TCPServer.allow_reuse_address = True
server = SocketServer.TCPServer(('', PORT), PS3WebServer)
server.serve_forever()