#!/usr/bin/ruby
# This program wass made by mr_hai of the Evilzone.org/Hacktalk.net community
# This program is free to use and distribute so long as you keep my name on it, I'd like to ask you to provide
# me with any modifications you make to the code so I may implement them, YOU WILL BE CREDITED.
#TODO:  scan for and implement proper IP addressses from the local subnet
#       implement length checking, for the moment just keep it to less than 50 chars per message
#       I'm new to this and I'm learning as i go. I have noticed a pattern emerging as I experiemnt with length checking on the
#       encrypted and unencrypted string and I expect to have a good limiter in place soon.

#USE:   This program is a small chat client/server using ICMP packets to relay the data and AES-256-CBC to encrypt so your
#       communications cannot be monitored. Before use, please change the $key and $iv values, as well as set the name.
#       This works on the principle that in a bridged LAN or wireless LAN you can send a packet and expect it to be seen by everyone
#       with their eyes open... it doesnt matter if the protocol is filtered because this is all behind the router
#

#BUILD THE PACKET AND SEND IT



#as the creator of this code i declare the use of these libraries
require 'socket'
require 'openssl'
require 'packetfu'
#as the creator of this code i declare these globals
$key = "qwertyuiopasdfghjklzxcvbnmqwerty"
$iv = "qwertyuiopasdfghjklzxcvbnmqwerty"
$iface = "eth1"
$name = "mr_hai"
$sniff = 1



#as the creator of this code i declare the creation of a class that encrpyts strings
class Encryption
    def initialize (string)
        @string = string
    end
    #decrypts
    def encrypt_payload
        cipher = OpenSSL::Cipher::Cipher.new('aes-256-cbc')
        cipher.encrypt
        cipher.key = $key
        cipher.iv = $iv
        cipher.update(@string) + cipher.final

    end
    #encrypts
    def decrypt_payload
        cipher = OpenSSL::Cipher::Cipher.new('aes-256-cbc')
        cipher.decrypt
        cipher.key = $key
        cipher.iv = $iv
        cipher.update(@string) + cipher.final
    end
end



class Net_functions
    #takes IP as an argument to determine the private network class and returns class as a string and assigns IP to @host_ip
    #need to modify the regex to filter out non-private ip's, currently it only matches the range and does not validate.
    #example
    #       network_class(packet.ip_daddr OR packet.ip_saddr)
    def network_class(ip)
        if ip.match(/(192\.168\.[0-9]+\.[0-9]+)/)
            @net_class = "class c" and @host_ip = ip
        elsif ip.match(/(172\.[0-9]+\.[0-9]+\.[0-9]+)/)
            @net_class = "class b" and @host_ip = ip
        elsif ip.match(/(10\.[0-9]+\.[0-9]+\.[0-9]+)/)
            @net_class = "class a" and @host_ip = ip
        else @net_class = false
        end
    end
    #if the network doesnt allow ICMP change to type 3 code 13, thats the code for "administrativley prohibited"    .
    #mimic real traffic to lower your visibility, this cant be blocked but it can be recognized.
    #im working on a seperate library to work with IP address parsing and im going to use part of it on this eventually
    #so you wont have to modify the code the choose an ip
    def build_ICMP_packet(bloop)
        icmp_packet = PacketFu::ICMPPacket.new
        icmp_packet.icmp_type = 3
        icmp_packet.icmp_code = 13
        icmp_packet.payload = bloop
        # sniff, store as var, retrive one of a list?
        icmp_packet.ip_saddr= assign_ip_saddr
        icmp_packet.ip_daddr= assign_ip_daddr
        icmp_packet.recalc
        icmp_packet.to_w($iface)
    end
end



#instances of the server call the encryption functions and manufacture/inject the packet
class Server
    def initialize (message)
        @message = message
    end
#speaks for itself
    def send_message
        outgoing = Encryption.new(@message)
        encrypted_string = outgoing.encrypt_payload
        build_ICMP_packet(encrypted_string)
    end
#ditto
    def recieve_message
        incomming = Encryption.new(@message)
        incomming.decrypt_payload
    end

end



class Client
    def initialize
    #forks the sniffer
    matey = fork do
            Signal.trap('HUP', 'IGNORE')
            Process.setsid
            packet_stream #starts the sniffer
            end
        Process.detach(matey)
#starts the cli
        cli
    end

    def cli
        while $sniff == 1 do
            input = gets.chomp
                message = $name + "=> " + input
                send = Server.new(message)
                send.send_message
        end
    end

    def packet_stream
        cap = PacketFu::Capture.new(:iface => "eth1" , :start => true)
        capture_stream = loop {
            cap.stream.each{
                |pkt| packet = PacketFu::Packet.parse(pkt)
                #matches keyword and rest of message
                if packet.is_icmp? and packet.ip_saddr = "192.168.1.2"
                    grab = Server.new(packet.payload)
                    message = grab.recieve_message
                    puts "\033[34m" + message + "\033[0m\n"
                else nil
                end
                }
            }
    end
end
Client.new