2 require_once('RebootException.class.php');
3 require_once('RouterException.class.php');
6 * @author Jan Altensen (Stricted)
7 * @license GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
8 * @copyright 2015 Jan Altensen (Stricted)
10 class SpeedportHybrid
{
15 const VERSION
= '1.0.3';
21 private $challenge = '';
51 private $derivedk = '';
53 public function __construct ($url = 'http://speedport.ip/') {
58 * Requests the password-challenge from the router.
60 private function getChallenge () {
61 $path = 'data/Login.json';
62 $fields = array('csrf_token' => 'nulltoken', 'showpw' => 0, 'challengev' => 'null');
63 $data = $this->sentRequest($path, $fields);
64 $data = $this->getValues($data['body']);
66 if (isset($data['challengev']) && !empty($data['challengev'])) {
67 return $data['challengev'];
70 throw new RouterException('unable to get the challenge from the router');
75 * login into the router with the given password
77 * @param string $password
80 public function login ($password) {
81 $this->challenge
= $this->getChallenge();
83 $path = 'data/Login.json';
84 $this->hash
= hash('sha256', $this->challenge
.':'.$password);
85 $fields = array('csrf_token' => 'nulltoken', 'showpw' => 0, 'password' => $this->hash
);
86 $data = $this->sentRequest($path, $fields);
87 $json = $this->getValues($data['body']);
89 if (isset($json['login']) && $json['login'] == 'success') {
90 $this->cookie
= $this->getCookie($data);
92 $this->derivedk
= $this->getDerviedk($password);
95 $this->token
= $this->getToken();
97 if ($this->checkLogin(false) === true) {
106 * check if we are logged in
108 * @param boolean $exception
111 public function checkLogin ($exception = true) {
112 // check if challenge or session is empty
113 if (empty($this->challenge
) ||
empty($this->cookie
)) {
114 if ($exception === true) {
115 throw new RouterException('you musst be logged in to use this method');
121 $path = 'data/SecureStatus.json';
123 $data = $this->sentRequest($path, $fields, true);
124 $data = $this->getValues($data['body']);
126 if ($data['loginstate'] != 1) {
127 if ($exception === true) {
128 throw new RouterException('you musst be logged in to use this method');
142 public function logout () {
145 $path = 'data/Login.json';
146 $fields = array('csrf_token' => $this->token
, 'logout' => 'byby');
147 $data = $this->sentRequest($path, $fields, true);
148 $data = $this->getValues($data['body']);
149 if ((isset($data['status']) && $data['status'] == 'ok') && $this->checkLogin(false) === false) {
150 // reset challenge and session
151 $this->challenge
= '';
154 $this->derivedk
= '';
167 public function reboot () {
170 $path = 'data/Reboot.json';
171 $fields = array('csrf_token' => $this->token
, 'reboot_device' => 'true');
172 $data = $this->sentEncryptedRequest($path, $fields, true);
173 $data = $this->getValues($data['body']);
175 if ($data['status'] == 'ok') {
176 // throw an exception because router is unavailable for other tasks
177 // like $this->logout() or $this->checkLogin
178 throw new RebootException('Router Reboot');
185 * change dsl connection status
187 * @param string $status
190 public function changeConnectionStatus ($status) {
193 $path = 'data/Connect.json';
195 if ($status == 'online' ||
$status == 'offline') {
196 $fields = array('csrf_token' => 'nulltoken', 'showpw' => 0, 'password' => $this->hash
, 'req_connect' => $status);
197 $data = $this->sentRequest($path, $fields, true);
198 $data = $this->getValues($data['body']);
200 if ($data['status'] == 'ok') {
208 throw new RouterException();
213 * get uptime based on online (connection) time
217 public function getUptime () {
218 // TODO: search for a better solution, calling Connect.json need some time
219 $data = $this->getData('Connect');
220 $data = $this->getValues($data);
222 return $data['days_online'];
226 * return the given json as array
228 * @param string $file
231 public function getData ($file) {
232 if ($file != 'Status') $this->checkLogin();
234 $path = 'data/'.$file.'.json';
236 $data = $this->sentRequest($path, $fields, true);
238 return $data['body'];
242 * get the router syslog
246 public function getSyslog() {
247 return $this->exportData('0');
251 * get the Missed Calls from router
255 public function getMissedCalls() {
256 return $this->exportData('1');
260 * get the Taken Calls from router
264 public function getTakenCalls() {
265 return $this->exportData('2');
269 * get the Dialed Calls from router
273 public function getDialedCalls() {
274 return $this->exportData('3');
278 * export data from router
282 private function exportData ($type) {
285 $path = 'data/Syslog.json';
286 $fields = array('exporttype' => $type);
287 $data = $this->sentRequest($path, $fields, true);
289 return explode("\n", $data['body']);
297 public function reconnectLte () {
300 $path = 'data/modules.json';
301 $fields = array('csrf_token' => $this->token
, 'lte_reconn' => '1');
302 $data = $this->sentEncryptedRequest($path, $fields, true);
304 return $data['body'];
308 * reset the router to Factory Default
313 public function resetToFactoryDefault () {
316 $path = 'data/resetAllSetting.json';
317 $fields = array('csrf_token' => 'nulltoken', 'showpw' => 0, 'password' => $this->hash
, 'reset_all' => 'true');
318 $data = $this->sentRequest($path, $fields, true);
320 return $data['body'];
325 * check if firmware is actual
329 public function checkFirmware () {
332 $path = 'data/checkfirmware.json';
333 $fields = array('checkfirmware' => 'true');
334 $data = $this->sentRequest($path, $fields, true);
336 return $data['body'];
340 * decrypt data from router
342 * @param string $data
345 private function decrypt ($data) {
346 require_once 'CryptLib/CryptLib.php';
347 $factory = new CryptLib\Cipher\
Factory();
348 $aes = $factory->getBlockCipher('rijndael-128');
350 $iv = hex2bin(substr($this->challenge
, 16, 16));
351 $adata = hex2bin(substr($this->challenge
, 32, 16));
352 $dkey = hex2bin($this->derivedk
);
353 $enc = hex2bin($data);
356 $mode = $factory->getMode('ccm', $aes, $iv, [ 'adata' => $adata, 'lSize' => 7]);
358 $mode->decrypt($enc);
360 return $mode->finish();
364 * decrypt data for the router
369 private function encrypt ($data) {
370 require_once 'CryptLib/CryptLib.php';
371 $factory = new CryptLib\Cipher\
Factory();
372 $aes = $factory->getBlockCipher('rijndael-128');
374 $iv = hex2bin(substr($this->challenge
, 16, 16));
375 $adata = hex2bin(substr($this->challenge
, 32, 16));
376 $dkey = hex2bin($this->derivedk
);
379 $mode = $factory->getMode('ccm', $aes, $iv, [ 'adata' => $adata, 'lSize' => 7]);
380 $mode->encrypt(http_build_query($data));
382 return bin2hex($mode->finish());
386 * get the values from array
388 * @param array $array
391 private function getValues($array) {
393 foreach ($array as $item) {
394 // thank you telekom for this piece of bullshit
395 if ($item['vartype'] == 'template') {
396 if (is_array($item['varvalue'])) {
397 $data[$item['varid']][] = $this->getValues($item['varvalue']);
400 $data[$item['varid']] = $item['varvalue'];
404 if (is_array($item['varvalue'])) {
405 $data[$item['varid']] = $this->getValues($item['varvalue']);
408 $data[$item['varid']] = $item['varvalue'];
417 * sends the encrypted request to router
419 * @param string $path
420 * @param mixed $fields
421 * @param string $cookie
424 private function sentEncryptedRequest ($path, $fields, $cookie = false) {
425 $count = count($fields);
426 $fields = $this->encrypt($fields);
427 return $this->sentRequest($path, $fields, $cookie, $count);
431 * sends the request to router
433 * @param string $path
434 * @param mixed $fields
435 * @param string $cookie
436 * @param integer $count
439 private function sentRequest ($path, $fields, $cookie = false, $count = 0) {
440 $url = $this->url
.$path.'?lang=en';
442 curl_setopt($ch, CURLOPT_URL
, $url);
444 if (!empty($fields)) {
445 if (is_array($fields)) {
446 curl_setopt($ch, CURLOPT_POST
, count($fields));
447 curl_setopt($ch, CURLOPT_POSTFIELDS
, http_build_query($fields));
450 curl_setopt($ch, CURLOPT_POST
, $count);
451 curl_setopt($ch, CURLOPT_POSTFIELDS
, $fields);
455 if ($cookie === true) {
456 curl_setopt($ch, CURLOPT_COOKIE
, 'lang=en; challengev='.$this->challenge
.'; '.$this->cookie
);
459 curl_setopt($ch, CURLOPT_RETURNTRANSFER
, true);
460 curl_setopt($ch, CURLOPT_HEADER
, true);
466 $result = curl_exec($ch);
468 $header_size = curl_getinfo($ch, CURLINFO_HEADER_SIZE
);
469 $header = substr($result, 0, $header_size);
470 $body = substr($result, $header_size);
473 // check if response is empty
475 throw new RouterException('empty response');
478 // check if body is encrypted (hex instead of json)
479 if (ctype_xdigit($body)) {
480 $body = $this->decrypt($body);
484 $body = preg_replace("/(\r\n)|(\r)/", "\n", $body);
485 $body = preg_replace('/\'/i', '"', $body);
486 $body = preg_replace("/\[\s+\]/i", '[ {} ]', $body);
487 $body = preg_replace("/},\s+]/", "}\n]", $body);
490 if (strpos($url, '.json') !== false && strpos($url, 'Syslog.json') === false) {
491 $body = json_decode($body, true);
494 return array('header' => $this->parse_headers($header), 'body' => $body);
502 private function getToken () {
505 $path = 'html/content/overview/index.html';
507 $data = $this->sentRequest($path, $fields, true);
509 $a = explode('csrf_token = "', $data['body']);
510 $a = explode('";', $a[1]);
512 if (isset($a[0]) && !empty($a[0])) {
516 throw new RouterException('unable to get csrf_token');
521 * calculate the derivedk
523 * @param string $password
526 private function getDerviedk ($password) {
529 // calculate derivedk
530 if (!function_exists('hash_pbkdf2')) {
531 require_once 'CryptLib/CryptLib.php';
532 $pbkdf2 = new CryptLib\Key\Derivation\PBKDF\
PBKDF2(array('hash' => 'sha1'));
533 $derivedk = bin2hex($pbkdf2->derive(hash('sha256', $password), substr($this->challenge
, 0, 16), 1000, 32));
534 $derivedk = substr($derivedk, 0, 32);
537 $derivedk = hash_pbkdf2('sha1', hash('sha256', $password), substr($this->challenge
, 0, 16), 1000, 32);
540 if (empty($derivedk)) {
541 throw new RouterException('unable to calculate derivedk');
548 * get cookie from header data
553 private function getCookie ($data) {
555 if (isset($data['header']['Set-Cookie']) && !empty($data['header']['Set-Cookie'])) {
556 preg_match('/^.*(SessionID_R3=[a-z0-9]*).*/i', $data['header']['Set-Cookie'], $match);
557 if (isset($match[1]) && !empty($match[1])) {
562 if (empty($cookie)) {
563 throw new RouterException('unable to get the session cookie from the router');
570 * parse the curl return header into an array
572 * @param string $response
575 private function parse_headers($response) {
577 $header_text = substr($response, 0, strpos($response, "\r\n\r\n"));
579 $header_text = explode("\r\n", $header_text);
580 foreach ($header_text as $i => $line) {
582 $headers['http_code'] = $line;
585 list ($key, $value) = explode(': ', $line);
586 $headers[$key] = $value;