Changeset

6315:cc42d3548452

mod_version_spoofed: add new evil module
author Nicholas George <wirlaburla@worlio.com>
date Tue, 01 Jul 2025 19:14:58 -0500
parents 6314:706867e05809
children 6316:0bd63c52bbed
files mod_version_spoofed/README.md mod_version_spoofed/mod_version_spoofed.lua
diffstat 2 files changed, 83 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/mod_version_spoofed/README.md	Tue Jul 01 19:14:58 2025 -0500
@@ -0,0 +1,23 @@
+# Introduction
+
+This module is a fork of the built-in mod_version that adds spoofing options. Please do not use this module to mess with services that provide statistics and information. Instead, contact the hosts of such services and request blacklisting.
+
+# Configuration
+
+  Name                   Description                                           Type      Default value
+  ---------------------- --------------------------------------------------- -------- ---------------
+  server\_name           the reported name of the server software            string   "Prosody"
+  server\_version        the reported version of the server software         string   `prosody.version`
+  server\_os             the reported platform of the server software        string   nil
+
+This replaces mod_version, so you must disable mod_version when enabling or the modules might conflict. Unconfigured, this module acts the same as mod_version.
+
+As a tip if you want complete spoofing, you should use the `name` option under your VirtualHost and components to hide mentions of Prosody.
+
+Compatibility
+=============
+
+  version   note
+  --------- ---------------------------------------------------------------------------
+  13        Should work
+  0.12      Works
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/mod_version_spoofed/mod_version_spoofed.lua	Tue Jul 01 19:14:58 2025 -0500
@@ -0,0 +1,60 @@
+-- Prosody IM
+-- Copyright (C) 2025-2025 Nicholas George
+-- Original mod_version copyright
+-- Copyright (C) 2008-2010 Matthew Wild
+-- Copyright (C) 2008-2010 Waqas Hussain
+--
+-- This project is MIT/X11 licensed. Please see the
+-- COPYING file in the source package for more information.
+--
+-- This is a fork of mod_version that implements the ability to spoof server information.
+-- This should replace mod_version in the modules_enabled list. Do not load both as they
+-- will conflict.
+
+local st = require "util.stanza";
+
+module:add_feature("jabber:iq:version");
+
+local query = st.stanza("query", {xmlns = "jabber:iq:version"})
+	:text_tag("name", module:get_option_string("server_name", "Prosody"))
+	:text_tag("version", module:get_option_string("server_version", prosody.version));
+
+if not module:get_option_boolean("hide_os_type") then
+	local platform;
+	local spoofed_platform = module:get_option_string("server_platform", nil);
+	if not spoofed_platform then
+		if os.getenv("WINDIR") then
+			platform = "Windows";
+		else
+			local os_version_command = module:get_option_string("os_version_command");
+			local ok, pposix = pcall(require, "prosody.util.pposix");
+			if not os_version_command and (ok and pposix and pposix.uname) then
+				local uname, err = pposix.uname();
+				if not uname then
+					module:log("debug", "Could not retrieve OS name: %s", err);
+				else
+					platform = uname.sysname;
+				end
+			end
+			if not platform then
+				local uname = io.popen(os_version_command or "uname");
+				if uname then
+					platform = uname:read("*a");
+				end
+				uname:close();
+			end
+		end
+		if platform then
+			platform = platform:match("^%s*(.-)%s*$") or platform;
+			query:text_tag("os", platform);
+		end
+	else
+		query:text_tag("os", spoofed_platform);
+	end
+end
+
+module:hook("iq-get/host/jabber:iq:version:query", function(event)
+	local origin, stanza = event.origin, event.stanza;
+	origin.send(st.reply(stanza):add_child(query));
+	return true;
+end);
\ No newline at end of file