
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
in this model a consistent object structures are exposed to user per configurator type. each configurator handle base commands over a device (READ, READ_ALL, DELETE, UPDATE & DEPLOY) the package handles the binding & translation between alteon device to abstract objects it works both ways: abstract <-> alteon structure, in other words it translate abstract to alteon configuration and read from alteon into abstract type. multi choices (enums) are consumed dynamically from the beans package. developer can choose to work with string_value/int/enums directly
the SDK is requires Python >3.6
Minimum Supported Alteon Versions: 31.0.10.0, 32.2.2.0
device direct API, Configurators and Management are available via the Alteon client module:
from radware.alteon.client import AlteonClient
from radware.alteon.beans.SlbNewCfgEnhRealServerTable import *
alteon_client_params = dict(
validate_certs=False,
user='admin',
password='admin',
https_port=443,
server='172.16.1.1',
timeout=15,
)
client = AlteonClient(**alteon_client_params)
# read bean from device:
bean = SlbNewCfgEnhRealServerTable()
bean.Index = 'real_1'
print(client.api.device.read(bean))
# work with Configurators:
client.api.mgmt.config.commit()
print(client.api.mgmt.info.software)
print(client.api.conf.type.dns_responders.read_all())
server_params = ServerParameters()
server_params.index = 'real1'
server_params.ip_address = '3.3.3.3'
client.api.conf.execute('deploy', server_params, dry_run=True, write_on_change=True, get_diff=True)
another way of use is directly via the desire Configurator:
from radware.alteon.sdk.configurators.server import *
connection = AlteonConnection(**alteon_client_params)
server_configurator = ServerConfigurator(connection)
server_params = ServerParameters()
server_params.index = 'real1'
server_params.ip_address = '3.3.3.3'
server_params.availability = 5
server_params.server_ports = [56, 78]
server_params.weight = 5
server_params.server_type = EnumSlbRealServerType.remote_server
server_params.state = EnumSlbRealServerState.enabled
server_configurator.deploy(server_params)
OR the configuration manager:
from radware.sdk.configurator import DeviceConfigurator, DeviceConfigurationManager
from radware.alteon.sdk.configurators.ssl_key import SSLKeyConfigurator
ssl_key_configurator = SSLKeyConfigurator(**alteon_client_params)
cfg_mng = DeviceConfigurationManager()
result = cfg_mng.execute(ssl_key_configurator, DeviceConfigurator.READ_ALL, None, passphrase=passphrase)
print(result.content_translate)
further details & doc will be added later
pip install alteon-sdk
Alteon SDK was created by Leon Meguira
Copyright 2019 Radware LTD
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and
FAQs
Python Alteon SDK
We found that alteon-sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.