Tony Virelli - Web Developer - HTML, xHTML, PHP, MySQL, JavaScript» Perl

Make 007 Jealous With RSA Encryption

John Hass — Mon, 15 Mar 2010 22:50:17 +0000

Make 007 Jealous

Public/Private encryption is not a new thing, did you know you can use my favorite swiss army knife to send secret messages to your friends…. Scratch that, I don’t have any friends… Perl Makes this easy with a little module calls Crypt::RSA, yes RSA is under fire for security blah blah, I don’t care, it’s still secure, because Mr. S’s (yes it’s a dudes name) I can’t pronounce nor spell, I know it will be fairly decent, I am almost about sure Mr. S should be Dr. S, but that just sounds evil, so without further ado, public/private key encryption with perl.

Two people in this Article Tony and John, John wants all correspondence encrypted Tony Encrypts.

I am on my new Mac now, so your mileage may very….

sudo perl -MCPAN -e shell
install Crypt::RSA

it asks you about a ton of dependencies, don’t do what your high school guidance counselor told you and just say yes.

Create something to make the keys

#!/usr/bin/perl
use Crypt::RSA;
$rsa = new Crypt::RSA;
if ($ARGV[0] eq "--makekeys") {
	($public, $private) = $rsa->keygen( 
				Size => 2048,
				Filename => "keylock",
				);
	exit;
}

The start of out program generate our rsa key, keylock.private (and keep this private, no touchy no sendy) and keylock.private, send this to everyone

ok send the public key to tony, so he can send us a message…. Tony should create the message now

if ($ARGV[0] eq "--createmessage") {
	$key = $ARGV[1];
	$message = $ARGV[2];
 
	#open the key
	$akey = new Crypt::RSA::Key::Public (	Filename => "$key");
	my $output = $rsa->encrypt(Message => $message,Key=> $akey)|| die $rsa->errstr();
	open ENC, ">message" or die $!;
	binmode ENC;
	print ENC $output;
	exit;
}

One thing that was a gotcha for me was writing the file, I forgot to tell perl to write it binary, since the encryption is all binary, we must write it so. We now have a file called “message” if you try to edit the file, it’s all gobble gook. Tony can now send you this message, and only you can read it, but how?

if ($ARGV[0] eq "--readmessage") {
	$key = $ARGV[1];
	$message = $ARGV[2];
 
	open FILE, "$message" or die $!; 
	binmode FILE;
	my ($buf, $data, $n);
	while (($n = read FILE, $data, 4) != 0) {
		$buf .= $data;
	} 
	close(FILE); 
	$akey = new Crypt::RSA::Key::Private->read(Filename => "$key");
	my $output = $rsa->decrypt(Cyphertext => "$buf",Key => $akey)|| die $rsa->errstr();
	print $output ."\n";
 
	exit;
}

So now we read the file “message” in using our private key, since Tony encrypted the message with our public key, we can now read it with the private key…. So how does this work?

John-Hasss-Mac-Pro:~ john$ ./keylock.pl --makekeys
John-Hasss-Mac-Pro:~ john$ ./keylock.pl --createmessage keylock.public "007 would be so jealous"
John-Hasss-Mac-Pro:~ john$ cat message 
?????u?????מ?n???-@?l?Q??)??~}3?"h2??=,??3??݁/m?s?[?M)?F?}?|ߩJ????k;?7??i???D?\w;?U??ʬ??y7ǳ??&?]pXv?-???E@"X?E?HH0?(S?"?`?,?R??7???ϳ
  ??Ցh???촇??K??Rs??uxs;??r^΀?G?????5??W??Y???4Y??_~?(YͷӍr\űeĥr??John-Hasss-Mac-Pro:~ john$ 
John-Hasss-Mac-Pro:~ john$ 
John-Hasss-Mac-Pro:~ john$ ./keylock.pl --readmessage keylock.private message
007 would be so jealous
John-Hasss-Mac-Pro:~ john$

Welcome to the magic of public private key encryption!

Have fun!

keylock.zip (34)

Clearing Out Postfix Deferred Mail Queue

Tony Virelli — Fri, 05 Mar 2010 17:06:16 +0000

I had a bit of a situation with my Postfix Mail Queue. Mail stopped sending and the queue built up. When I did a mailq I found a lot of double-bounce@domain.com emails in my queue. I knew it would take forever for those to clear and get the good mail flowing again.

So after doing some searching on Google I found this site:
http://www.cyberciti.biz/tips/howto-postfix-flush-mail-queue.html

It has some of the common Postfix commands, but what interested me was the Perl script to delete mailqs that matched regular expressions.

postfix-delete.pl script

The following script deletes all mail from the mailq which matches the regular expression specified as the first argument.

(Credit: Vivek Gite of cyberciti.biz. His credit: Credit: ??? – I found it on old good newsgroup)

#!/usr/bin/perl
 
$REGEXP = shift || die "no email-adress given (regexp-style, e.g. bl.*\@yahoo.com)!";
 
@data = qx;
for (@data) {
  if (/^(\w+)(\*|\!)?\s/) {
     $queue_id = $1;
  }
  if($queue_id) {
    if (/$REGEXP/i) {
      $Q{$queue_id} = 1;
      $queue_id = "";
    }
  }
}
 
#open(POSTSUPER,"|cat") || die "couldn't open postsuper" ;
open(POSTSUPER,"|postsuper -d -") || die "couldn't open postsuper" ;
 
foreach (keys %Q) {
  print POSTSUPER "$_\n";
};
close(POSTSUPER);

For example, delete all queued messages from or to the domain called double-bounce@domain.com, enter:

./postfix-delete.pl double-bounce@domain.com

Delete all queued messages that contain the word “xyz” in the e-mail address:

./postfix-delete.pl xyz

For more information about this script make sure and checkout http://www.cyberciti.biz/tips/howto-postfix-flush-mail-queue.html

Setting Your Clock From Google

John Hass — Thu, 17 Dec 2009 14:30:40 +0000

It’s time for another episode of, why the hell would you want to do that, I am your host John Hass. On Today’s show we are going to teach you how to set the time from Google’s web server.

So the first question is why, my answer is why not. The web is full of useless things, lets add one more. Once again using Linux and Perl, you must be root to set the time.

#!/usr/bin/perl
use IO::Socket;

IO::Socket is the only required library for this endeavor.

$host=shift || 'www.google.com';

Google does not have to be where you get your time, so you can call the program with your favorite web host, but I figure you go to them for everything else why not go to them for the time.

my $sock = new IO::Socket::INET (
PeerAddr =>; $host,
PeerPort =>; '80',
Proto =>; 'tcp',
);
die "Could not create connection to $host $!\n" unless $sock;

Create the socket connection to Google, we only support http so I just forced the port to 80.

print $sock "HEAD / HTTP/1.1\r\n\r\n";
$ok = 0;
$loop = 0;
$date = "";

Give Google the Head command to ask for some juicy info.

while() {
chomp($_);
#print $_ . "\n";
if ($ok == 0 &;&; $loop == 1) {
print "Could not get the time\n";
close($sock);
}
if ($ok == 1 &;&; $loop == 1) {
if ($_ =~ /Date:/) {
$date = $_;
close($sock);
}
}
if ($_ =~ /200 OK/) {
$ok=1;
$loop++;
}
}
close($sock);

Parse what your momma gave you, we are looking to make sure the request worked ok and we are making sure that we have a date.

if ($date =~ /GMT/) {
print "Date and time is in GMT\n";
print "$date\n";
$date =~ s/\r//g;
$date =~ s/Date: //g;
`date -s "$date"`;
}

lastly we parse out all the junk that we can’t pass to the Linux date command. then we simply set the date.

Thanks for wasting your time with me.

Now go give that network administrator the finger for not letting you specify your own ntp servers!

Source Files: gettime.zip (14)

Sweet Google TTS

John Hass — Wed, 16 Dec 2009 15:00:27 +0000

Google now has a text to speech service that allows you to type in a URL and some text and it will give you an mp3! It works fairly well, so I decided to use my Swiss Army knife (Perl) and write a script that will make it easy to get mp3′s

#!/usr/bin/perl
use LWP;
 
$speak = $ARGV[0];
 
if (length($speak) ==0 || length($speak) > 100) {
print "what you speak needs to be > 0 and <100\n";
exit;
}

This code will check to make sure that what we want to say follows with google standards. The program is called ./speak.pl “this is what I want to say”

my @headers1 = (
'Host' => 'translate.google.com',
'User-Agent' => 'Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.5) Gecko/20091109 Ubuntu/9.10 (karmic) Firefox/3.5.5',
'Accept' => 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8',
'Accept-Language' => 'en-us,en;q=0.5',
'Accept-Encoding' => 'gzip,deflate',
'Accept-Charset' => 'ISO-8859-1,utf-8;q=0.7,*;q=0.7',
'Keep-Alive' => '300',
'Connection' => 'keep-alive',
);
 
$browser = LWP::UserAgent->new;

The above is our magic headers. This allows us to use Google and the browser instantiation.

next we need to format it so Google can see it correctly

$speak =~ s/ /+/g;

This removes all spaces and makes them +’s

lastly we connect and download

$sec = time();
$resp = $browser->get("http://translate.google.com/translate_tts?q=$speak",@headers1);
 
open(FILE,">$sec.mp3");
print FILE $resp->content;
close(FILE);
print "Wrote $sec.mp3\n";

What we do here get the number of seconds for the out filename and write the file.

Have fun and don’t abuse this service.

Source Files: tts.zip (156)

Using Perl To Get Free MP3s!

John Hass — Wed, 16 Dec 2009 07:05:18 +0000

In this article I am going to code up a program that will actually download music from free.napster.com and give you the 32k mp3 file contained within. So without further ado, let the Free mp3′s reign.

Using libwww, swftools, and some trickery we can easily download mp3′s from free.napster.com. I am using Linux, but all the requirements for this application should work in Windows.

I am calling my application getTunes.pl for reference. The full source will be attached to this Blog posting.

Create the document

#!/usr/bin/perl
use LWP;
use Time::HiRes qw(gettimeofday);
use XML::Simple;
use Data::Dumper;

The above are the only required Perl libraries, and on my Ubuntu machine all were installed by default.

We have one requirement for a binary swfextract. You can get swftools from: http://www.swftools.org/

Our code requires the path to swfextract

#!/usr/bin/perl
use LWP;
use Time::HiRes qw(gettimeofday);
use XML::Simple;
/tuse Data::Dumper;
$swfextract = "/usr/bin/swfextract";
if (!-e $swfextract) {
print "You must have swftools installed to use this application\n";
exit;
}

The code does a double check to make sure that swfextract is located where you said it was (that is what -e does stands for exists).

We need to create a browser object and an XML object

$browser = LWP::UserAgent->new;
$xml = new XML::Simple;

These will get used later on in the code.

our application is called like ./getTunes.pl song_id so for example. ./getTunes.pl 28908362 will download the Song “Fireflies by Owl City”

Our code needs to make sure that the user passes an argument.

$song_id = $ARGV[0];
if ($song_id eq "") {
print "You must include the sond id to download\n";
exit;
}

Our code includes 2 subroutines the main purpose of them is to generate random information

sub random {
$min = shift;
$max = shift;
$random = rand();
return (($max-$min + 1)*$random+$min);
}
sub randomID {
#lifted from: http://www.codeproject.com/KB/perl/perl_randomstring.aspx
my $passwordsize = shift;
my @alphanumeric = ('a'..'z', 'A'..'Z', 0..9);
my $randpassword = join '', map $alphanumeric[rand @alphanumeric], 0..$passwordsize;
return $randpassword;
}

The first one takes two arguments, minimum number and maximum number it then uses Perl’s built in rand() function to create a decimal number

The second generate a random alpha numeric string. It was quicker to google this then writing my own, but you get the idea.

In order to download a song we have to make 3 separate connections to napster in order, or the song won’t download, each time you connect you must send Napster different headers.

I will outline these connections now.

$r = random();
my @headers1 = (
'User-Agent' => 'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.11',
);
$url1 = "http://napsterweb.112.2o7.net/b/ss/napsterweb/1/G.9p2/s68966730169826?[AQB]&ndh=1&t=$Day/$Month/$Year%201%3A9%3A41%204%20300&pageName=Napster%20Web%20-%20Album&g=http%3A//free.napster.com/view/album/index.html%3Fid%3D12601251&r=http%3A//free.napster.com/&ch=Napster%20Web&events=event2&cc=USD&Sc3=Returning%20Anonymous&v3=Play_Track_21470573_http%3A//free.napster.com/view/album/index.html&v4=Returning%20Anonymous&v5=US&s=800x600&c=24&j=1.3&v=Y&k=Y&bw=640x480&bh=$r&p=Shockwave%20Flash%3B&[AQE]";
$resp=$browser->get($url1,@headers1);

This code may look scary, but there is only a few things needed to make it function correctly, to me this is my way of saying “Hello Napster I am here”.
You have to fill in $Day,$month,$year (see full source for that code) $r which is simply a random number.

Then using Perl we pass the query off to napster, and we don’t care what napster says back, in fact it’s a picture, a picture of nothing.

$random_play = random(10000000,99999999);
$id = randomID(43);
$cookie = "L115=1.1190942847196; SCD=r%3D0%26ch%3DNapster%2520Web%2520Player%26time%3D$time%26FPF%3D0%26ter%3D0%26utype%3D0%26FUID%3D-%26$id%3Dnl; NQ=%3Fquery%3DCooler+Online%26type%3Dartist; s_cc=true; s_sq=%5B%5BB%5D%5D; COUNTRYCODE=US";
my @headers2 = (
'User-Agent' => 'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.11',
'Host' => 'free.napster.com',
'Accept' => 'text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5',
'Accept-Language','en-us,en;q=0.5',
'Accept-Charset','UTF-8,*',
'Keep-Alive', '30',
'Proxy-Connection','keep-alive',
'X-Requested-With','XMLHttpRequest',
'X-Prototype-Version','1.4.0',
'Referer',"http://free.napster.com/player/?play_id=$random_play&type=track",
'Cookie',$cookie,
);
$url2 = "http://free.napster.com/playXML/track/$song_id?r=$r";
$resp=$browser->get($url2,@headers2);
$data = $xml->XMLin($resp->content);

The second is a query is to get the xml output from Napster with the all important pld, the only thing new here to report is the random_play option on the referrer this is just some more trickery, and the $id which makes use of our alpha numeric string.

you can see above that we loaded the response right into xml. If you were to do a data dump you would see this

$VAR1 = {
'clip' => {
'track_number' => '9',
'album_name' => 'Ocean Eyes',
'album_id' => '13291611',
'track_id' => '28908362',
'album_price' => '9.95',
'image_max' => 'http://images.napster.com/mp3s/2462/resources/194/471/files/194471299.jpg',
'artist_id' => '12425061',
'pld' => 'UmFuZG9tSVZCAI0C.XUUM.tWuyOSGlVb9a8s1hy9sgXORKsWYPpLIwTFi9z6IcXOxX6158hu9Ig.akD1tQXHugZfp15bmWvvZQc.qVhuw8BSql35_Lg6pNB3ZVaRYbi5',
'is_free' => 'Y',
'afs' => 'Y',
'streaming_is_active' => 'Y',
'explicit' => 'N',
'track_price' => '1.29',
'artist_name' => 'Owl City',
'duration' => '03:48',
'display_name' => 'Fireflies',
'image' => 'http://images.napster.com/mp3s/2462/resources/194/471/files/194471301.jpg',
'can_purchase' => 'Y',
'genre_id' => '1'
},
'content_title' => ''
};

As you can see there is lots of juicy information in this, I only care about the pld and the display_name

$pld=$data->{clip}->{pld};
$name=$data->{clip}->{display_name};

The last query is the file download, it is not too scary.

$cookie2 = "L115=1.1190942847196; SCD=r%3D0%26ch%3DNapster%2520Web%2520Player%26time%3D$time%26FPF%3D0%26ter%3D0%26utype%3D0%26FUID%3D$id-%26uac%3Dnl; NQ=%3Fquery%3DCooler+Online%26type%3Dartist; s_cc=true; s_sq=%5B%5BB%5D%5D; COUNTRYCODE=US; NTLG=UmFuZG9tSVZQv5fLKbtRWco69MsjQmjCc.i8u9_1Z1ThyeJxaqPSfQ--%211";
my @headers3 = (
'User-Agent' => 'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.11',
'Host' => 'sms.napster.com',
'Accept' => 'text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5',
'Accept-Language','en-us,en;q=0.5',
'Accept-Charset','UTF-8,*',
'X-Requested-With','XMLHttpRequest',
'X-Prototype-Version','1.4.0',
'Referer',"http://free.napster.com/player/?play_id=$random_play&type=track",
'Cookie',$cookie2,
);
#get the file
$url3="http://sms.napster.com/cgi-bin/fetchncomurl.cgi?clip=$pld&suf=.swf";
$resp=$browser->get($url3,@headers3);

Not too much different then the rest of the queries, but you notice that it looks like I am downloading a swf?

$url3="http://sms.napster.com/cgi-bin/fetchncomurl.cgi?clip=$pld&suf=.swf";

That is because I am downloading a swf, so before we get too much into that lets save the file.

open (SONG, ">$song_id.swf");
print SONG $resp->content;
close(SONG);

this will create a file called 28908362.swf we now need to extract the mp3

`$swfextract  -m $song_id.swf -o $name.mp3`;
unlink("$song_id.swf");

Your mp3 is now created.

So the big question left now is. How do I get song id’s? Simply go to free.napster.com click play on the song you want and then in the window get the play_id.

That is it for now!

Source Files: getTunes.zip (19)