
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
.. image:: https://badge.fury.io/py/smsgateway-gammu.svg :target: https://badge.fury.io/py/smsgateway-gammu
Send SMS messages via REST api using Gammu as backend.
The following program works both on Linux and OSX.
You must already have Gammu <https://wammu.eu/docs/manual/project>
_ installed and configured on the right device.
Note it's obvious that your device must manage SMS sending/receiving with Gammu perfectly.
Install the package into your project's virtual environment :
pip install smsgateway-gammu
/etc/smsgateway.yml
configuration file with your favorite text editor... code-block:: yaml
server:
host: "127.0.0.1"
port: 1234
gammu: # PIN code, enter pin code there to unlock directly from application pin: 1234
# Configuration : instead of a .gammurc file you can give configuration there
# config:
# Device: /dev/tty.HUAWEIMobile-Modem
# Connection: at
send_blacklist: ["+33689898989", "+33652525252"]
receive_whitelist: ["+33638383838", "+33614141414"]
Start the gateway
* To start the gateway, just type the command :
``smsgateway``
* Or if configuration file is elsewhere than ``/etc/smsgateway.yml`` :
``smsgateway --config <your_configuration_file>``
Sending a text message
There are different ways to send a message :
GET method
GET /sms?number=mynumbers&message=mymessage
Where mynumbers are phone numbers, comma separated.
For instance : GET /sms?number=+33565656565,+33689898989&message=Hello
Will send "Hello" message to the 2 phone numbers and return the JSON : {"status": "ok", "message": "messages sent"}
.
POST method
::
POST /sms?number=mynumbers { "message": "Hello World" }
Where POST data is JSON containing the field string "message".
::
POST /sms?number=mynumbers { "messages": [ "Hello", "World" ] }
Where JSON contains the field "messages" which is a list for multiple messages.
User interaction
Users allowed to send SMS messages to the gateway (receive_whitelist in config) can interact with the system.
**Keywords are :**
* **PING** : to check if the gateway works correctly, returns PONG if all is good.
* **PAUSE** : temporary pause messages coming from the gateway. It's worth to have this feature when a monitoring system spams you. To enable again just resend **PAUSE**.
Prometheus Alertmanager
The gateway was primary designed to work with Prometheus Alertmanager <https://prometheus.io/docs/alerting/alertmanager/>
_, allowing sending alerts with SMS messages.
To configure it, create a new receiver entry in the alertmanager configuration file :
.. code-block:: yaml
receivers: ...
...
- name: sms
webhook_configs:
- url: http://localhost:9876/sms?number=+33623232323,+33690909090
FAQs
Send SMS messages via REST api using Gammu
We found that smsgateway-gammu demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.