shell bypass 403
o
_ b@� � @ s6 d dl mZmZmZmZmZ d dlmZ d dlm Z d dl
m Z d dl Z d dlZ
d dlZd dlZd dlZd dlZd dlZd dlZzd dlZW n eyR dZY nw d*dd�Zd d
� ZG d d � d �ZG d
d� de�ZG dd� deje�ZG dd� de�Z G dd� de�Z G dd� dej �Z G dd� d�Z G dd� de�Z!G dd � d ee �Z"G d d � d e e �Z#e$d k�rd dl%Z%G d d!� d!�Z&ed"��KZ'e'�(e)� e'�(d#d$� d%� e'j*e&� dd&� e'�+� e,d'� e,d(� ze'�-� W n e.y� e,d)� e�/d � Y n w W d � dS W d � dS 1 �sw Y dS dS )+� )�Fault�dumps�loads� gzip_encode� gzip_decode)�BaseHTTPRequestHandler)�partial)� signatureNTc C sF |r |� d�}n|g}|D ]}|�d�rtd| ��t| |�} q| S )N�.�_z(attempt to access private attribute "%s")�split�
startswith�AttributeError�getattr)�obj�attr�allow_dotted_namesZattrs�i� r �6/usr/local/python-3.10/lib/python3.10/xmlrpc/server.py�resolve_dotted_attribute| s
� r c s � fdd�t � �D �S )Nc s( g | ]}|� d �stt� |��r|�qS )r )r
�callabler )�.0�member�r r r �
<listcomp>� s
�
�z'list_public_methods.<locals>.<listcomp>)�dirr r r r �list_public_methods� s r c @ sr e Zd Z ddd�Zddd�Zddd�Zd d
� Zd d � Zdd
d�Zdd� Z dd� Z
dd� Z dd� Z dd� Z
dS ) �SimpleXMLRPCDispatcherFNc C s& i | _ d | _|| _|p d| _|| _d S �N�utf-8)�funcs�instance�
allow_none�encoding�use_builtin_types��selfr# r$ r% r r r �__init__� s
z SimpleXMLRPCDispatcher.__init__c C s || _ || _d S �N)r" r )r' r" r r r r �register_instance� s
z(SimpleXMLRPCDispatcher.register_instancec C s4 |d u r t | j|d�S |d u r|j}|| j|< |S )N)�name)r �register_function�__name__r! )r' �functionr+ r r r r, � s
z(SimpleXMLRPCDispatcher.register_functionc C s | j �| j| j| jd�� d S )N)zsystem.listMethodszsystem.methodSignaturezsystem.methodHelp)r! �update�system_listMethods�system_methodSignature�system_methodHelp�r' r r r � register_introspection_functions� s
�z7SimpleXMLRPCDispatcher.register_introspection_functionsc C s | j �d| ji� d S )Nzsystem.multicall)r! r/ �system_multicallr3 r r r � register_multicall_functions� s z3SimpleXMLRPCDispatcher.register_multicall_functionsc C s� z(t || jd�\}}|d ur|||�}n| �||�}|f}t|d| j| jd�}W nE tyD } zt|| j| jd�}W Y d }~n/d }~w t�� \}} }
zttdd|| f �| j| jd�}W d } } }
nd } } }
w Y |� | jd�S )N)r% � )Zmethodresponser# r$ )r# r$ �%s:%s�r$ r# �xmlcharrefreplace)
r r% � _dispatchr r# r$ r �sys�exc_info�encode) r' �data�dispatch_method�path�params�method�response�fault�exc_type� exc_value�exc_tbr r r �_marshaled_dispatch� s0
���� z*SimpleXMLRPCDispatcher._marshaled_dispatchc C sf t | j�� �}| jd ur/t| jd�r |t | j�� �O }t|�S t| jd�s/|t t| j��O }t|�S )N� _listMethodsr; )�setr! �keysr" �hasattrrJ r �sorted)r' �methodsr r r r0 s
�z)SimpleXMLRPCDispatcher.system_listMethodsc C s dS )Nzsignatures not supportedr )r' � method_namer r r r1 / s
z-SimpleXMLRPCDispatcher.system_methodSignaturec C s� d }|| j v r| j | }n+| jd ur9t| jd�r | j�|�S t| jd�s9z
t| j|| j�}W n ty8 Y nw |d u r?dS t�|�S )N� _methodHelpr; � ) r! r" rM rQ r r r �pydoc�getdoc)r' rP rC r r r r2 < s(
� �
z(SimpleXMLRPCDispatcher.system_methodHelpc
C s� g }|D ]Y}|d }|d }z |� | �||�g� W q ty7 } z|� |j|jd�� W Y d }~qd }~w t�� \}}} z|� dd||f d�� W d } }} nd } }} w Y q|S )NZ
methodNamerB )� faultCode� faultStringr7 r8 )�appendr; r rU rV r< r= )
r' Z call_list�results�callrP rB rE rF rG rH r r r r5 [ s0 ���
�� z'SimpleXMLRPCDispatcher.system_multicallc C s� z| j | }W n ty Y nw |d ur||� S td| ��| jd urNt| jd�r2| j�||�S z
t| j|| j�}W n tyE Y n w |d urN||� S td| ��)Nz method "%s" is not supportedr; ) r! �KeyError� Exceptionr" rM r; r r r )r' rC rB �funcr r r r; s0 �
� � z SimpleXMLRPCDispatcher._dispatch�FNF)F�NN)r- �
__module__� __qualname__r( r* r, r4 r6 rI r0 r1 r2 r5 r; r r r r r � s
�
$
)
$r c @ sd e Zd Z dZdZdZdZe�dej ej
B �Z dd� Z dd � Z
d
d � Zd d
� Zdd� Zddd�ZdS )�SimpleXMLRPCRequestHandler)�/z/RPC2ix ���Tz�
\s* ([^\s;]+) \s* #content-coding
(;\s* q \s*=\s* ([0-9\.]+))? #q
c C s^ i }| j �dd�}|�d�D ] }| j�|�}|r,|�d�}|r#t|�nd}|||�d�< q|S )NzAccept-EncodingrR �,� g �?r7 )�headers�getr � aepattern�match�group�float)r' �rZae�eri �vr r r �accept_encodings� s
�z+SimpleXMLRPCRequestHandler.accept_encodingsc C s | j r | j| j v S dS )NT)� rpc_pathsrA r3 r r r �is_rpc_path_valid� s z,SimpleXMLRPCRequestHandler.is_rpc_path_validc
C s� | � � s | �� d S zJd}t| jd �}g }|r6t||�}| j�|�}|s'q6|�|� |t|d �8 }|sd� |�}| �
|�}|d u rGW d S | j � |t
| dd �| j�}W nG ty� } z;| �d� t| j d�r�| j jr�| �dt|�� t�� } t| �d d
�d �} | �d | � | �d d
� | �� W Y d }~d S d }~ww | �d� | �dd� | jd ur�t|�| jkr�| �� �dd�}
|
r�z t |�}| �dd� W n t y� Y nw | �d tt|��� | �� | j � |� d S )Ni � zcontent-lengthrc � r; i� �_send_traceback_headerz X-exception�ASCII�backslashreplacez X-traceback�Content-length�0�� � Content-typeztext/xml�gzipr zContent-Encoding) rq �
report_404�intrf �minZrfile�readrW �len�join�decode_request_content�serverrI r rA r[ �
send_responserM rs � send_header�str� traceback�
format_excr> � end_headers�encode_thresholdro rg r �NotImplementedError�wfile�write) r' Zmax_chunk_sizeZsize_remaining�LZ
chunk_size�chunkr? rD rm Ztrace�qr r r �do_POST� sf
�
�
� ��
�z"SimpleXMLRPCRequestHandler.do_POSTc C s� | j �dd��� }|dkr|S |dkr8zt|�W S ty) | �dd| � Y q@ ty7 | �dd� Y q@w | �dd| � | �dd � | �� d S )
Nzcontent-encoding�identityrz i� zencoding %r not supported� zerror decoding gzip contentrv rw ) rf rg �lowerr r� r� �
ValueErrorr� r� )r' r? r$ r r r r� $ s
� z1SimpleXMLRPCRequestHandler.decode_request_contentc C sF | � d� d}| �dd� | �dtt|��� | �� | j�|� d S )Ni� s No such pagery z
text/plainrv )r� r� r� r r� r� r� �r' rD r r r r{ 5 s
z%SimpleXMLRPCRequestHandler.report_404�-c C s | j jrt�| ||� d S d S r) )r� � logRequestsr � log_request)r' �code�sizer r r r� > s �z&SimpleXMLRPCRequestHandler.log_requestN)r� r� )r- r_ r` rp r� ZwbufsizeZdisable_nagle_algorithm�re�compile�VERBOSE�
IGNORECASErh ro rq r� r� r{ r� r r r r ra � s
� G ra c @ s, e Zd Z dZdZedddddfdd�ZdS )�SimpleXMLRPCServerTFNc C s, || _ t�| |||� tj�| |||� d S r) )r� r r( � socketserver� TCPServer�r' �addrZrequestHandlerr� r# r$ Zbind_and_activater% r r r r( W s zSimpleXMLRPCServer.__init__)r- r_ r` Zallow_reuse_addressrs ra r( r r r r r� D s �r� c @ s> e Zd Z edddddfdd�Zdd� Zdd � Zd d
d �ZdS )
�MultiPathXMLRPCServerTFNc
C s2 t �| |||||||� i | _|| _|pd| _d S r )r� r( � dispatchersr# r$ r� r r r r( h s �z MultiPathXMLRPCServer.__init__c C s || j |< |S r) �r� )r' rA �
dispatcherr r r �add_dispatcherr s
z$MultiPathXMLRPCServer.add_dispatcherc C s
| j | S r) r� )r' rA r r r �get_dispatcherv s
z$MultiPathXMLRPCServer.get_dispatcherc C s� z
| j | �|||�}W |S t�� d d� \}}z ttdd||f �| j| jd�}|�| jd�}W d }}Y |S d }}w )N� r7 r8 r9 r: ) r� rI r< r= r r r$ r# r> )r' r? r@ rA rD rF rG r r r rI y s
���
�z)MultiPathXMLRPCServer._marshaled_dispatchr^ )r- r_ r` ra r( r� r� rI r r r r r� ` s
�
r� c @ s2 e Zd Z d dd�Zdd� Zdd� Zd d d
�ZdS )
�CGIXMLRPCRequestHandlerFNc C s t �| |||� d S r) )r r( r& r r r r( � s z CGIXMLRPCRequestHandler.__init__c C sR | � |�}td� tdt|� � t� tj�� tjj�|� tjj�� d S )NzContent-Type: text/xml�Content-Length: %d)rI �printr r< �stdout�flush�bufferr� )r' � request_textrD r r r �
handle_xmlrpc� s
z%CGIXMLRPCRequestHandler.handle_xmlrpcc C s� d}t j| \}}tjj|||d� }|�d�}td||f � tdtjj � tdt|� � t� t j
� � t j
j �
|� t j
j � � d S )Nr� )r� �message�explainr z
Status: %d %szContent-Type: %sr� )r Z responses�httpr� ZDEFAULT_ERROR_MESSAGEr> r� ZDEFAULT_ERROR_CONTENT_TYPEr r< r� r� r� r� )r' r� r� r� rD r r r �
handle_get� s" ��
z"CGIXMLRPCRequestHandler.handle_getc C s| |d u rt j�dd �dkr| �� d S z tt j�dd ��}W n
ttfy, d}Y nw |d u r7tj� |�}| �
|� d S )NZREQUEST_METHOD�GETZCONTENT_LENGTHrc ) �os�environrg r� r| r� � TypeErrorr< �stdinr~ r� )r' r� �lengthr r r �handle_request� s � � z&CGIXMLRPCRequestHandler.handle_requestr] r) )r- r_ r` r( r� r� r� r r r r r� � s
r� c @ s< e Zd Z di i i fdd�Zdi i i dfdd�Zdd� ZdS )�
ServerHTMLDocNc C sX |p| j }g }d}t�d�} |�||�} | sq�| �� \}
} |�||||
� �� | �� \} }
}}}}|
rH|| ��dd�}|�d||f � nQ|r\dt|� }|�d||| �f � n=|rpdt|� }|�d||| �f � n)|| | d � d kr�|�| � ||||�� n|r�|�d
| � n |�| � ||�� | }q|�|||d � �� d �
|�S ) Nr zS\b((http|https|ftp)://\S+[\w/]|RFC[- ]?(\d+)|PEP[- ]?(\d+)|(self\.)?((?:\w|\.)+))\br7 �"z"z<a href="%s">%s</a>z'http://www.rfc-editor.org/rfc/rfc%d.txtz)https://www.python.org/dev/peps/pep-%04d/�(zself.<strong>%s</strong>rR ) �escaper� r� �search�spanrW �groups�replacer| Znamelinkr� )r' �textr� r! �classesrO rX �here�patternri �start�end�all�schemeZrfcZpepZselfdotr+ �urlr r r �markup� s:
�
zServerHTMLDoc.markupc C s� |r|j pdd | }d} d| �|�| �|�f }
t|�r%tt|��} nd} t|t�r9|d p1| } |d p7d} nt�|�} |
| | oI| � d| � }
| �
| | j |||�}|oZd| }d |
|f S )
NrR r� z$<a name="%s"><strong>%s</strong></a>z(...)r r7 z'<font face="helvetica, arial">%s</font>z<dd><tt>%s</tt></dd>z<dl><dt>%s</dt>%s</dl>
) r- r� r r� r �
isinstance�tuplerS rT Zgreyr� � preformat)r' �objectr+ �modr! r� rO Zcl�anchorZnote�titleZargspecZ docstringZdecl�docr r r �
docroutine� s* �
� � zServerHTMLDoc.docroutinec C s� i }|� � D ]\}}d| ||< || ||< q| �|�}d| }| �|dd�}| �|| j|�} | o5d| } |d| }g }
t|� � �} | D ]\}}|
�| j|||d�� qF|| �ddd d
� |
�� }|S ) Nz#-z)<big><big><strong>%s</strong></big></big>z#ffffffz#7799eez <tt>%s</tt>z
<p>%s</p>
)r! ZMethodsz#eeaa77rR )
�itemsr� �headingr� r� rN rW r� Z
bigsectionr� ) r' � server_nameZpackage_documentationrO Zfdict�key�value�head�resultr� �contentsZ method_itemsr r r � docserver s&
�zServerHTMLDoc.docserver)r- r_ r` r� r� r� r r r r r� � s )
� r� c @ s6 e Zd Z dd� Zdd� Zdd� Zdd� Zd d
� Zd S ) �XMLRPCDocGeneratorc C s d| _ d| _d| _d S )Nz XML-RPC Server DocumentationzGThis server exports the following methods through the XML-RPC protocol.)r� �server_documentation� server_titler3 r r r r( : s �
zXMLRPCDocGenerator.__init__c C � || _ d S r) )r� )r' r� r r r �set_server_titleB �
z#XMLRPCDocGenerator.set_server_titlec C r� r) )r� )r' r� r r r �set_server_nameG r� z"XMLRPCDocGenerator.set_server_namec C r� r) )r� )r' r� r r r �set_server_documentationL r� z+XMLRPCDocGenerator.set_server_documentationc C s� i }| � � D ]]}|| jv r| j| }nL| jd ur`d d g}t| jd�r+| j�|�|d< t| jd�r9| j�|�|d< t|�}|dkrD|}q`t| jd�s^zt| j|�}W q` ty] |}Y q`w |}|||< qt � }|�
| j | j |�}|�
t�| j�|�S )N�_get_method_argstringr rQ r7 r^ r; )r0 r! r" rM r� rQ r� r r r� r� r� r� Zpage�htmlr� r� )r' rO rP rC Z method_infoZ
documenterZ
documentationr r r �generate_html_documentationQ s@
� �
�z.XMLRPCDocGenerator.generate_html_documentationN)r- r_ r` r( r� r� r� r� r r r r r� 3 s r� c @ s e Zd Z dd� ZdS )�DocXMLRPCRequestHandlerc C sh | � � s | �� d S | j�� �d�}| �d� | �dd� | �dtt|��� | � � | j
� |� d S )Nr rx ry z text/htmlrv ) rq r{ r� r� r> r� r� r� r r� r� r� r� r r r �do_GET� s
z DocXMLRPCRequestHandler.do_GETN)r- r_ r` r� r r r r r� � s r� c @ s$ e Zd Z edddddfdd�ZdS )�DocXMLRPCServerTFNc
C s& t �| |||||||� t�| � d S r) )r� r( r� r� r r r r( � s
�zDocXMLRPCServer.__init__)r- r_ r` r� r( r r r r r� � s �r� c @ s e Zd Z dd� Zdd� ZdS )�DocCGIXMLRPCRequestHandlerc C sV | � � �d�}td� tdt|� � t� tj�� tjj�|� tjj�� d S )Nr zContent-Type: text/htmlr� ) r� r> r� r r< r� r� r� r� r� r r r r� � s
z%DocCGIXMLRPCRequestHandler.handle_getc C s t �| � t�| � d S r) )r� r( r� r3 r r r r( � s
z#DocCGIXMLRPCRequestHandler.__init__N)r- r_ r` r� r( r r r r r� � s r� �__main__c @ s" e Zd Zdd� ZG dd� d�ZdS )�ExampleServicec C s dS )NZ42r r3 r r r �getData� s zExampleService.getDatac @ s e Zd Zedd� �ZdS )zExampleService.currentTimec C s
t j �� S r) )�datetimeZnowr r r r �getCurrentTime� s
z)ExampleService.currentTime.getCurrentTimeN)r- r_ r` � staticmethodr� r r r r � currentTime� s r� N)r- r_ r` r� r� r r r r r� � s r� )� localhosti@ c C s | | S r) r )�x�yr r r �<lambda>� s r� �add)r z&Serving XML-RPC on localhost port 8000zKIt is advisable to run this example server within a secure, closed network.z&
Keyboard interrupt received, exiting.)T)0�
xmlrpc.clientr r r r r Z http.serverr � functoolsr �inspectr r� r� r� r< r� r� rS r� �fcntl� ImportErrorr r r ra r� r� r� r� ZHTMLDocr� r� r� r� r� r- r� r� r� r, �powr* r6 r� Z
serve_forever�KeyboardInterrupt�exitr r r r �<module> sx j �
� ,EbQ � �
��� $��