Truyền dữ liệu giữa các máy: socket, UDP và gửi file an toàn

cat > tcp_server.py <<'EOF'
# tcp_server.py - server TCP nho nhat: nhan mot dong chu, tra loi, roi dong.
import socket

with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as server:
    server.bind(("127.0.0.1", 9001))   # doi 127.0.0.1 thanh 0.0.0.0 de may khac vao duoc
    server.listen(1)
    print("Dang cho ket noi o 127.0.0.1:9001 ...")
    conn, addr = server.accept()
    with conn:
        print("Co ket noi tu", addr)
        data = conn.recv(1024)
        print("Nhan duoc:", data.decode("utf-8", errors="replace"))
        conn.sendall(b"Server da nhan: " + data)
EOF

@'
# tcp_server.py - server TCP nho nhat: nhan mot dong chu, tra loi, roi dong.
import socket

with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as server:
    server.bind(("127.0.0.1", 9001))   # doi 127.0.0.1 thanh 0.0.0.0 de may khac vao duoc
    server.listen(1)
    print("Dang cho ket noi o 127.0.0.1:9001 ...")
    conn, addr = server.accept()
    with conn:
        print("Co ket noi tu", addr)
        data = conn.recv(1024)
        print("Nhan duoc:", data.decode("utf-8", errors="replace"))
        conn.sendall(b"Server da nhan: " + data)
'@ | Set-Content -Path tcp_server.py -Encoding ascii

cat > tcp_server.py <<'EOF'
# tcp_server.py - server TCP nho nhat: nhan mot dong chu, tra loi, roi dong.
import socket

with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as server:
    server.bind(("127.0.0.1", 9001))   # doi 127.0.0.1 thanh 0.0.0.0 de may khac vao duoc
    server.listen(1)
    print("Dang cho ket noi o 127.0.0.1:9001 ...")
    conn, addr = server.accept()
    with conn:
        print("Co ket noi tu", addr)
        data = conn.recv(1024)
        print("Nhan duoc:", data.decode("utf-8", errors="replace"))
        conn.sendall(b"Server da nhan: " + data)
EOF

cat > tcp_client.py <<'EOF'
# tcp_client.py - client TCP nho nhat: ket noi, gui mot dong chu, doc tra loi.
import socket

with socket.create_connection(("127.0.0.1", 9001), timeout=5) as conn:   # doi IP thanh IP may server
    conn.sendall("Xin chao tu client".encode("utf-8"))
    print("Tra loi:", conn.recv(1024).decode("utf-8", errors="replace"))
EOF

@'
# tcp_client.py - client TCP nho nhat: ket noi, gui mot dong chu, doc tra loi.
import socket

with socket.create_connection(("127.0.0.1", 9001), timeout=5) as conn:   # doi IP thanh IP may server
    conn.sendall("Xin chao tu client".encode("utf-8"))
    print("Tra loi:", conn.recv(1024).decode("utf-8", errors="replace"))
'@ | Set-Content -Path tcp_client.py -Encoding ascii

cat > tcp_client.py <<'EOF'
# tcp_client.py - client TCP nho nhat: ket noi, gui mot dong chu, doc tra loi.
import socket

with socket.create_connection(("127.0.0.1", 9001), timeout=5) as conn:   # doi IP thanh IP may server
    conn.sendall("Xin chao tu client".encode("utf-8"))
    print("Tra loi:", conn.recv(1024).decode("utf-8", errors="replace"))
EOF

cat > udp_listen.py <<'EOF'
# udp_listen.py - lang nghe goi UDP tren port 9002. Moi goi la mot thong diep rieng, khong co bat tay.
import socket

with socket.socket(socket.AF_INET, socket.SOCK_DGRAM) as s:
    s.bind(("127.0.0.1", 9002))        # doi thanh 0.0.0.0 de nhan tu may khac
    print("Dang nghe UDP o 127.0.0.1:9002 ...")
    while True:
        data, addr = s.recvfrom(2048)
        print(f"Tu {addr[0]}:{addr[1]} -> {data.decode('utf-8', errors='replace')}")
EOF

@'
# udp_listen.py - lang nghe goi UDP tren port 9002. Moi goi la mot thong diep rieng, khong co bat tay.
import socket

with socket.socket(socket.AF_INET, socket.SOCK_DGRAM) as s:
    s.bind(("127.0.0.1", 9002))        # doi thanh 0.0.0.0 de nhan tu may khac
    print("Dang nghe UDP o 127.0.0.1:9002 ...")
    while True:
        data, addr = s.recvfrom(2048)
        print(f"Tu {addr[0]}:{addr[1]} -> {data.decode('utf-8', errors='replace')}")
'@ | Set-Content -Path udp_listen.py -Encoding ascii

cat > udp_listen.py <<'EOF'
# udp_listen.py - lang nghe goi UDP tren port 9002. Moi goi la mot thong diep rieng, khong co bat tay.
import socket

with socket.socket(socket.AF_INET, socket.SOCK_DGRAM) as s:
    s.bind(("127.0.0.1", 9002))        # doi thanh 0.0.0.0 de nhan tu may khac
    print("Dang nghe UDP o 127.0.0.1:9002 ...")
    while True:
        data, addr = s.recvfrom(2048)
        print(f"Tu {addr[0]}:{addr[1]} -> {data.decode('utf-8', errors='replace')}")
EOF

cat > udp_send.py <<'EOF'
# udp_send.py - gui mot goi UDP. Khong biet ben kia co nhan duoc hay khong.
import socket

with socket.socket(socket.AF_INET, socket.SOCK_DGRAM) as s:
    s.sendto("Toi la thiet bi A".encode("utf-8"), ("127.0.0.1", 9002))   # doi IP thanh IP may nhan
    print("Da gui (khong co bao dam la da toi noi)")
EOF

@'
# udp_send.py - gui mot goi UDP. Khong biet ben kia co nhan duoc hay khong.
import socket

with socket.socket(socket.AF_INET, socket.SOCK_DGRAM) as s:
    s.sendto("Toi la thiet bi A".encode("utf-8"), ("127.0.0.1", 9002))   # doi IP thanh IP may nhan
    print("Da gui (khong co bao dam la da toi noi)")
'@ | Set-Content -Path udp_send.py -Encoding ascii

cat > udp_send.py <<'EOF'
# udp_send.py - gui mot goi UDP. Khong biet ben kia co nhan duoc hay khong.
import socket

with socket.socket(socket.AF_INET, socket.SOCK_DGRAM) as s:
    s.sendto("Toi la thiet bi A".encode("utf-8"), ("127.0.0.1", 9002))   # doi IP thanh IP may nhan
    print("Da gui (khong co bao dam la da toi noi)")
EOF

cat > receiver.py <<'EOF'
# receiver.py - nhan file qua TCP. Dung chung cho bai 9. Chay: python3 receiver.py [--tls] [--host IP]
# Co 5 lop bao ve: token, gioi han kich thuoc, lam sach ten file, kiem tra SHA-256, tuy chon TLS.
import argparse
import hashlib
import hmac
import json
import os
import socket
import ssl
from pathlib import Path

MAX_HEADER = 4096
MAX_SIZE = 50 * 1024 * 1024
SAVE_DIR = Path("received")


def read_header(conn):
    data = b""
    while b"\n" not in data:
        chunk = conn.recv(1)
        if not chunk or len(data) > MAX_HEADER:
            raise ValueError("header sai hoac qua dai")
        data += chunk
    return json.loads(data.decode("utf-8"))


def read_exact(conn, size):
    parts, left = [], size
    while left > 0:
        chunk = conn.recv(min(65536, left))
        if not chunk:
            raise ValueError("ket noi dong giua chung")
        parts.append(chunk)
        left -= len(chunk)
    return b"".join(parts)


def handle(conn, token):
    header = read_header(conn)
    if not hmac.compare_digest(str(header.get("token", "")), token):
        raise PermissionError("sai token")
    size = int(header["size"])
    if not 0 <= size <= MAX_SIZE:
        raise ValueError("kich thuoc khong hop le")
    name = os.path.basename(str(header["name"]).replace("\\", "/"))
    if not name or name.startswith("."):
        raise ValueError("ten file khong hop le")
    body = read_exact(conn, size)
    if hashlib.sha256(body).hexdigest() != header["sha256"]:
        raise ValueError("SHA-256 khong khop: du lieu bi loi hoac bi sua")
    SAVE_DIR.mkdir(exist_ok=True)
    (SAVE_DIR / name).write_bytes(body)
    return name, size


def main():
    ap = argparse.ArgumentParser()
    ap.add_argument("--host", default="127.0.0.1", help="IP de nghe; 0.0.0.0 la moi card mang")
    ap.add_argument("--port", type=int, default=9000)
    ap.add_argument("--token", default="doi-token-nay", help="chuoi bi mat chung giua hai ben")
    ap.add_argument("--tls", action="store_true", help="bat TLS, can cert.pem va key.pem")
    args = ap.parse_args()
    context = None
    if args.tls:
        context = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
        context.load_cert_chain("cert.pem", "key.pem")
    with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as server:
        server.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
        server.bind((args.host, args.port))
        server.listen(5)
        print(f"Dang nghe {args.host}:{args.port} ({'TLS' if args.tls else 'KHONG ma hoa'}). Ctrl+C de dung.")
        while True:
            conn, addr = server.accept()
            conn.settimeout(10)
            try:
                with (context.wrap_socket(conn, server_side=True) if context else conn) as c:
                    try:
                        name, size = handle(c, args.token)
                        c.sendall(b"OK\n")
                        print(f"Nhan {name} ({size} byte) tu {addr[0]}")
                    except (ValueError, PermissionError, KeyError, json.JSONDecodeError) as err:
                        c.sendall(f"LOI {err}\n".encode())
                        print(f"Tu choi {addr[0]}: {err}")
            except (OSError, ssl.SSLError) as err:
                print(f"Loi ket noi tu {addr[0]}: {err}")


if __name__ == "__main__":
    main()
EOF

@'
# receiver.py - nhan file qua TCP. Dung chung cho bai 9. Chay: python3 receiver.py [--tls] [--host IP]
# Co 5 lop bao ve: token, gioi han kich thuoc, lam sach ten file, kiem tra SHA-256, tuy chon TLS.
import argparse
import hashlib
import hmac
import json
import os
import socket
import ssl
from pathlib import Path

MAX_HEADER = 4096
MAX_SIZE = 50 * 1024 * 1024
SAVE_DIR = Path("received")


def read_header(conn):
    data = b""
    while b"\n" not in data:
        chunk = conn.recv(1)
        if not chunk or len(data) > MAX_HEADER:
            raise ValueError("header sai hoac qua dai")
        data += chunk
    return json.loads(data.decode("utf-8"))


def read_exact(conn, size):
    parts, left = [], size
    while left > 0:
        chunk = conn.recv(min(65536, left))
        if not chunk:
            raise ValueError("ket noi dong giua chung")
        parts.append(chunk)
        left -= len(chunk)
    return b"".join(parts)


def handle(conn, token):
    header = read_header(conn)
    if not hmac.compare_digest(str(header.get("token", "")), token):
        raise PermissionError("sai token")
    size = int(header["size"])
    if not 0 <= size <= MAX_SIZE:
        raise ValueError("kich thuoc khong hop le")
    name = os.path.basename(str(header["name"]).replace("\\", "/"))
    if not name or name.startswith("."):
        raise ValueError("ten file khong hop le")
    body = read_exact(conn, size)
    if hashlib.sha256(body).hexdigest() != header["sha256"]:
        raise ValueError("SHA-256 khong khop: du lieu bi loi hoac bi sua")
    SAVE_DIR.mkdir(exist_ok=True)
    (SAVE_DIR / name).write_bytes(body)
    return name, size


def main():
    ap = argparse.ArgumentParser()
    ap.add_argument("--host", default="127.0.0.1", help="IP de nghe; 0.0.0.0 la moi card mang")
    ap.add_argument("--port", type=int, default=9000)
    ap.add_argument("--token", default="doi-token-nay", help="chuoi bi mat chung giua hai ben")
    ap.add_argument("--tls", action="store_true", help="bat TLS, can cert.pem va key.pem")
    args = ap.parse_args()
    context = None
    if args.tls:
        context = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
        context.load_cert_chain("cert.pem", "key.pem")
    with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as server:
        server.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
        server.bind((args.host, args.port))
        server.listen(5)
        print(f"Dang nghe {args.host}:{args.port} ({'TLS' if args.tls else 'KHONG ma hoa'}). Ctrl+C de dung.")
        while True:
            conn, addr = server.accept()
            conn.settimeout(10)
            try:
                with (context.wrap_socket(conn, server_side=True) if context else conn) as c:
                    try:
                        name, size = handle(c, args.token)
                        c.sendall(b"OK\n")
                        print(f"Nhan {name} ({size} byte) tu {addr[0]}")
                    except (ValueError, PermissionError, KeyError, json.JSONDecodeError) as err:
                        c.sendall(f"LOI {err}\n".encode())
                        print(f"Tu choi {addr[0]}: {err}")
            except (OSError, ssl.SSLError) as err:
                print(f"Loi ket noi tu {addr[0]}: {err}")


if __name__ == "__main__":
    main()
'@ | Set-Content -Path receiver.py -Encoding ascii

cat > receiver.py <<'EOF'
# receiver.py - nhan file qua TCP. Dung chung cho bai 9. Chay: python3 receiver.py [--tls] [--host IP]
# Co 5 lop bao ve: token, gioi han kich thuoc, lam sach ten file, kiem tra SHA-256, tuy chon TLS.
import argparse
import hashlib
import hmac
import json
import os
import socket
import ssl
from pathlib import Path

MAX_HEADER = 4096
MAX_SIZE = 50 * 1024 * 1024
SAVE_DIR = Path("received")


def read_header(conn):
    data = b""
    while b"\n" not in data:
        chunk = conn.recv(1)
        if not chunk or len(data) > MAX_HEADER:
            raise ValueError("header sai hoac qua dai")
        data += chunk
    return json.loads(data.decode("utf-8"))


def read_exact(conn, size):
    parts, left = [], size
    while left > 0:
        chunk = conn.recv(min(65536, left))
        if not chunk:
            raise ValueError("ket noi dong giua chung")
        parts.append(chunk)
        left -= len(chunk)
    return b"".join(parts)


def handle(conn, token):
    header = read_header(conn)
    if not hmac.compare_digest(str(header.get("token", "")), token):
        raise PermissionError("sai token")
    size = int(header["size"])
    if not 0 <= size <= MAX_SIZE:
        raise ValueError("kich thuoc khong hop le")
    name = os.path.basename(str(header["name"]).replace("\\", "/"))
    if not name or name.startswith("."):
        raise ValueError("ten file khong hop le")
    body = read_exact(conn, size)
    if hashlib.sha256(body).hexdigest() != header["sha256"]:
        raise ValueError("SHA-256 khong khop: du lieu bi loi hoac bi sua")
    SAVE_DIR.mkdir(exist_ok=True)
    (SAVE_DIR / name).write_bytes(body)
    return name, size


def main():
    ap = argparse.ArgumentParser()
    ap.add_argument("--host", default="127.0.0.1", help="IP de nghe; 0.0.0.0 la moi card mang")
    ap.add_argument("--port", type=int, default=9000)
    ap.add_argument("--token", default="doi-token-nay", help="chuoi bi mat chung giua hai ben")
    ap.add_argument("--tls", action="store_true", help="bat TLS, can cert.pem va key.pem")
    args = ap.parse_args()
    context = None
    if args.tls:
        context = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
        context.load_cert_chain("cert.pem", "key.pem")
    with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as server:
        server.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
        server.bind((args.host, args.port))
        server.listen(5)
        print(f"Dang nghe {args.host}:{args.port} ({'TLS' if args.tls else 'KHONG ma hoa'}). Ctrl+C de dung.")
        while True:
            conn, addr = server.accept()
            conn.settimeout(10)
            try:
                with (context.wrap_socket(conn, server_side=True) if context else conn) as c:
                    try:
                        name, size = handle(c, args.token)
                        c.sendall(b"OK\n")
                        print(f"Nhan {name} ({size} byte) tu {addr[0]}")
                    except (ValueError, PermissionError, KeyError, json.JSONDecodeError) as err:
                        c.sendall(f"LOI {err}\n".encode())
                        print(f"Tu choi {addr[0]}: {err}")
            except (OSError, ssl.SSLError) as err:
                print(f"Loi ket noi tu {addr[0]}: {err}")


if __name__ == "__main__":
    main()
EOF

cat > sender.py <<'EOF'
# sender.py - gui file qua TCP toi receiver.py. Chay: python3 sender.py FILE [--host IP] [--tls]
import argparse
import hashlib
import json
import socket
import ssl
from pathlib import Path


def main():
    ap = argparse.ArgumentParser()
    ap.add_argument("file")
    ap.add_argument("--host", default="127.0.0.1")
    ap.add_argument("--port", type=int, default=9000)
    ap.add_argument("--token", default="doi-token-nay")
    ap.add_argument("--tls", action="store_true", help="dung TLS va tin cert.pem")
    ap.add_argument("--name", help="ghi de ten file gui di (dung de thu nghiem)")
    args = ap.parse_args()
    body = Path(args.file).read_bytes()
    header = {"name": args.name or Path(args.file).name, "size": len(body),
              "sha256": hashlib.sha256(body).hexdigest(), "token": args.token}
    try:
        raw = socket.create_connection((args.host, args.port), timeout=10)
        if args.tls:
            context = ssl.create_default_context(cafile="cert.pem")
            raw = context.wrap_socket(raw, server_hostname="localhost")
        with raw as conn:
            conn.sendall(json.dumps(header).encode("utf-8") + b"\n" + body)
            print("May nhan tra loi:", conn.recv(200).decode("utf-8", errors="replace").strip())
    except (OSError, ssl.SSLError) as err:
        raise SystemExit(f"Khong gui duoc: {err}")


if __name__ == "__main__":
    main()
EOF

@'
# sender.py - gui file qua TCP toi receiver.py. Chay: python3 sender.py FILE [--host IP] [--tls]
import argparse
import hashlib
import json
import socket
import ssl
from pathlib import Path


def main():
    ap = argparse.ArgumentParser()
    ap.add_argument("file")
    ap.add_argument("--host", default="127.0.0.1")
    ap.add_argument("--port", type=int, default=9000)
    ap.add_argument("--token", default="doi-token-nay")
    ap.add_argument("--tls", action="store_true", help="dung TLS va tin cert.pem")
    ap.add_argument("--name", help="ghi de ten file gui di (dung de thu nghiem)")
    args = ap.parse_args()
    body = Path(args.file).read_bytes()
    header = {"name": args.name or Path(args.file).name, "size": len(body),
              "sha256": hashlib.sha256(body).hexdigest(), "token": args.token}
    try:
        raw = socket.create_connection((args.host, args.port), timeout=10)
        if args.tls:
            context = ssl.create_default_context(cafile="cert.pem")
            raw = context.wrap_socket(raw, server_hostname="localhost")
        with raw as conn:
            conn.sendall(json.dumps(header).encode("utf-8") + b"\n" + body)
            print("May nhan tra loi:", conn.recv(200).decode("utf-8", errors="replace").strip())
    except (OSError, ssl.SSLError) as err:
        raise SystemExit(f"Khong gui duoc: {err}")


if __name__ == "__main__":
    main()
'@ | Set-Content -Path sender.py -Encoding ascii

cat > sender.py <<'EOF'
# sender.py - gui file qua TCP toi receiver.py. Chay: python3 sender.py FILE [--host IP] [--tls]
import argparse
import hashlib
import json
import socket
import ssl
from pathlib import Path


def main():
    ap = argparse.ArgumentParser()
    ap.add_argument("file")
    ap.add_argument("--host", default="127.0.0.1")
    ap.add_argument("--port", type=int, default=9000)
    ap.add_argument("--token", default="doi-token-nay")
    ap.add_argument("--tls", action="store_true", help="dung TLS va tin cert.pem")
    ap.add_argument("--name", help="ghi de ten file gui di (dung de thu nghiem)")
    args = ap.parse_args()
    body = Path(args.file).read_bytes()
    header = {"name": args.name or Path(args.file).name, "size": len(body),
              "sha256": hashlib.sha256(body).hexdigest(), "token": args.token}
    try:
        raw = socket.create_connection((args.host, args.port), timeout=10)
        if args.tls:
            context = ssl.create_default_context(cafile="cert.pem")
            raw = context.wrap_socket(raw, server_hostname="localhost")
        with raw as conn:
            conn.sendall(json.dumps(header).encode("utf-8") + b"\n" + body)
            print("May nhan tra loi:", conn.recv(200).decode("utf-8", errors="replace").strip())
    except (OSError, ssl.SSLError) as err:
        raise SystemExit(f"Khong gui duoc: {err}")


if __name__ == "__main__":
    main()
EOF