Home Explore Help
Sign In
leon.boeck
/
ID2T-toolkit-BotnetTraffic
forked from SPIN/ID2T-toolkit
2
0
Fork 0
Files Issues 0 Wiki
Tree: 63606968e5
Branches Tags
ID2T-toolkit...
/
code
/
Attack
/
AttackParameters.py

AttackParameters.py 4.2 KB
History Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081 
  1. from enum import Enum
    2. 

  2. 

  3. 

  4. class Parameter(Enum):
    5. 

  5.     """
    6. 

  6.     Defines the shortname for attack parameters. The shortname may be used for attack parameter specification
    7. 

  7.     when calling ID2T via the command line.
    8. 

  8.     """
    9. 

  9.     # recommended type: IP address -------------------------------
    10. 

  10.     IP_SOURCE = 'ip.src'  # source IP address
    11. 

  11.     IP_DESTINATION = 'ip.dst'  # destination IP address
    12. 

  12.     IP_DNS = 'ip.dns'  # IP address of DNS server
    13. 

  13.     HOSTING_IP = 'hosting.ip'
    14. 

  14.     IP_DESTINATION_END = 'ip.dst.end'
    15. 

  15.     # recommended type: MAC address ------------------------------
    16. 

  16.     MAC_SOURCE = 'mac.src'  # MAC address of source
    17. 

  17.     MAC_DESTINATION = 'mac.dst'  # MAC address of destination
    18. 

  18.     # recommended type: Port -------------------------------------
    19. 

  19.     PORT_OPEN = 'port.open'  # open ports
    20. 

  20.     PORT_DESTINATION = 'port.dst'  # destination ports
    21. 

  21.     PORT_SOURCE = 'port.src'  # source ports
    22. 

  22.     # recommended type: Integer positive -------------------------
    23. 

  23.     PACKETS_LIMIT = 'packets.limit'
    24. 

  24.     NUMBER_ATTACKERS = 'attackers.count'
    25. 

  25.     ATTACK_DURATION = 'attack.duration' # in seconds
    26. 

  26.     VICTIM_BUFFER = 'victim.buffer' # in packets
    27. 

  27.     TARGET_URI = 'target.uri'
    28. 

  28.     NUMBER_INITIATOR_BOTS = 'bots.count'
    29. 

  29.     # recommended type: domain -----------------------------------
    30. 

  30.     TARGET_HOST = 'target.host'
    31. 

  31. 

  32.     # recommended type: Float ------------------------------------
    33. 

  33.     PACKETS_PER_SECOND = 'packets.per-second'  # packets per second
    34. 

  34.     INJECT_AT_TIMESTAMP = 'inject.at-timestamp'  # unix epoch time (seconds.millis) where attack should be injected
    35. 

  35.     # recommended type: Packet Position ----------------------------------
    36. 

  36.     INJECT_AFTER_PACKET = 'inject.after-pkt'  # packet after which attack should be injected
    37. 

  37.     # recommended type: boolean  --------------------------------
    38. 

  38.     PORT_DEST_SHUFFLE = 'port.dst.shuffle'  # shuffles the destination ports if a list of ports is given
    39. 

  39.     PORT_DEST_ORDER_DESC = 'port.dst.order-desc'  # uses a descending port order instead of a ascending order
    40. 

  40.     IP_SOURCE_RANDOMIZE = 'ip.src.shuffle'  # randomizes the sources IP address if a list of IP addresses is given
    41. 

  41.     PORT_SOURCE_RANDOMIZE = 'port.src.shuffle'  # randomizes the source port if a list of sources ports is given
    42. 

  42. 

  43.     PROTOCOL_VERSION = 'protocol.version'
    44. 

  44.     HOSTING_VERSION = 'hosting.version'
    45. 

  45.     SOURCE_PLATFORM = 'src.platform'
    46. 

  46.     CUSTOM_PAYLOAD = 'custom.payload'  # custom payload for ftp exploits
    47. 

  47.     CUSTOM_PAYLOAD_FILE = 'custom.payload.file'  # file that contains custom payload for ftp exploits
    48. 

  48. 

  49.     NAT_PRESENT = 'nat.present'  # if NAT is active, external computers cannot initiate a communication in MembersMgmtCommAttack
    50. 

  50.     TTL_FROM_CAIDA = 'ttl.from.caida'  # if True, TTLs are assigned based on the TTL distributions from the CAIDA dataset
    51. 

  51.     # recommended type: Filepath ------------------------------------
    52. 

  52.     FILE_CSV = 'file.csv'  # filepath to CSV containing a communication pattern
    53. 

  53.     FILE_XML = 'file.xml'  # filepath to XML containing a communication pattern
    54. 

  54.     # recommended type: CommType ------------------------------------
    55. 

  55.     COMM_TYPE = "comm.type"  # the locality of bots in botnet communication (e.g. local, external, mixed)
    56. 

  56.     # recommended type: Percentage (0.0-1.0) ------------------------------------
    57. 

  57.     IP_REUSE_TOTAL = 'ip.reuse.total'  # percentage of IPs in original PCAP to be reused
    58. 

  58.     IP_REUSE_LOCAL = 'ip.reuse.local'  # percentage of private IPs in original PCAP to be reused
    59. 

  59.     IP_REUSE_EXTERNAL = 'ip.reuse.external'  # percentage of public IPs in original PCAP to be reused
    60. 

  60.     # recommended type: Positive Integer between 0 and 100 ------------------------------------
    61. 

  61.     PACKET_PADDING = 'packet.padding'
    62. 

  62. 

  63. class ParameterTypes(Enum):
    64. 

  64.     """
    65. 

  65.     Defines types for parameters. These types may be used in the specification of allowed parameters within the
    66. 

  66.     individual attack classes. The type is used to verify the validity of the given value.
    67. 

  67.     """
    68. 

  68.     TYPE_IP_ADDRESS = 0
    69. 

  69.     TYPE_MAC_ADDRESS = 1
    70. 

  70.     TYPE_PORT = 2
    71. 

  71.     TYPE_INTEGER_POSITIVE = 3
    72. 

  72.     TYPE_TIMESTAMP = 4
    73. 

  73.     TYPE_BOOLEAN = 5
    74. 

  74.     TYPE_FLOAT = 6
    75. 

  75.     TYPE_PACKET_POSITION = 7  # used to derive timestamp from parameter INJECT_AFTER_PACKET
    76. 

  76.     TYPE_DOMAIN = 8
    77. 

  77.     TYPE_FILEPATH = 9
    78. 

  78.     TYPE_COMM_TYPE = 10
    79. 

  79.     TYPE_PERCENTAGE = 11
    80. 

  80.     TYPE_PADDING = 12
    81. 

  81.     TYPE_STRING = 9
    82.