shell bypass 403
o
^ b^; � @ sh d Z ddlZddlZddlZddlZzddlZdZW n ey% dZY nw ddgZG dd� de �Z
dZ d Z d
Z
d Ze
e Zd ZG d
d� d�ZerVG dd� de�Ze�d� edkr�ddlZeejd �Zee�� � e�ejd � e�ejd � e�� e� � \Z Z e de d �D ] Z e�!e �\Z"Z#Z$ede � e#D ]Z%ede% � q�ed� q�e�&� dS dS )z@A POP3 client class.
Based on the J. Myers POP3 draft, Jan. 96
� NTF�POP3� error_protoc @ s e Zd ZdS )r N)�__name__�
__module__� __qualname__� r r �//usr/local/python-3.10/lib/python3.10/poplib.pyr s �n i� �
�
i c @ s e Zd ZdZdZeejfdd�Zdd� Z dd� Z
d d
� Z d d � Z d
d� Z
dd� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd � Zd d � Zd=d d!�Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,d-� Z d.d/� Z e � d0�Z d1d2� Z!d3d4� Z"d=d5d6�Z#d7d8� Z$d9d:� Z%d=d;d<�Z&d S )>r aP This class supports both the minimal and optional command sets.
Arguments can be strings or integers (where appropriate)
(e.g.: retr(1) and retr('1') both work equally well.
Minimal Command Set:
USER name user(name)
PASS string pass_(string)
STAT stat()
LIST [msg] list(msg = None)
RETR msg retr(msg)
DELE msg dele(msg)
NOOP noop()
RSET rset()
QUIT quit()
Optional Commands (some servers support these):
RPOP name rpop(name)
APOP name digest apop(name, digest)
TOP msg n top(msg, n)
UIDL [msg] uidl(msg = None)
CAPA capa()
STLS stls()
UTF8 utf8()
Raises one exception: 'error_proto'.
Instantiate with:
POP3(hostname, port=110)
NB: the POP protocol locks the mailbox from user
authorization until QUIT, so be sure to get in, suck
the messages, and quit, each time you access the
mailbox.
POP is a line-based protocol, which means large mail
messages consume lots of python cycles reading them
line-by-line.
If it's available on your mail server, use IMAP4
instead, it doesn't suffer from the two problems
above.
zUTF-8c C sP || _ || _d| _t�d| ||� | �|�| _| j�d�| _d| _ | �
� | _ d S )NFzpoplib.connect�rbr ) �host�port�_tls_established�sys�audit�_create_socket�sock�makefile�file�
_debugging�_getresp�welcome)�selfr
r �timeoutr r r �__init__b s z
POP3.__init__c C s( |d ur
|s
t d��t�| j| jf|�S )Nz0Non-blocking socket (timeout=0) is not supported)�
ValueError�socket�create_connectionr
r )r r r r r r m s zPOP3._create_socketc C s: | j dkr tdt|�� t�d| |� | j�|t � d S )N� z*put*zpoplib.putline)r �print�reprr r r �sendall�CRLF�r �liner r r �_putliner s z
POP3._putlinec C s. | j r
tdt|�� t|| j�}| �|� d S )Nz*cmd*)r r r! �bytes�encodingr& r$ r r r �_putcmdz s z POP3._putcmdc C s� | j �td �}t|�tkrtd��| jdkr tdt|�� |s$td��t|�}|dd � tkr8|d d� |fS |d d� t krH|dd� |fS |d d� |fS )Nr z
line too longz*get*z-ERR EOF������)
r �readline�_MAXLINE�lenr r r r! r# �CR)r r% �octetsr r r �_getline� s z
POP3._getlinec C s: | � � \}}| jdkrtdt|�� |�d�st|��|S )Nr z*resp*� +)r1 r r r! �
startswithr )r �resp�or r r r � s
z
POP3._getrespc C sr | � � }g }d}| �� \}}|dkr4|�d�r!|d }|dd � }|| }|�|� | �� \}}|dks|||fS )Nr � .s ..r )r r1 r3 �append)r r4 �listr0 r% r5 r r r � _getlongresp� s
�
zPOP3._getlongrespc C � | � |� | �� S �N)r) r r$ r r r � _shortcmd� �
zPOP3._shortcmdc C r: r; )r) r9 r$ r r r �_longcmd� r= z
POP3._longcmdc C s | j S r; )r �r r r r �
getwelcome� s zPOP3.getwelcomec C s
|| _ d S r; )r )r �levelr r r �set_debuglevel� s
zPOP3.set_debuglevelc C � | � d| �S )zVSend user name, return response
(should indicate password required).
zUSER %s�r< �r �userr r r rF � � z POP3.userc C rC )z�Send password, return response
(response includes message count, mailbox size).
NB: mailbox is locked by server from here to 'quit()'
zPASS %srD )r Zpswdr r r �pass_� s z
POP3.pass_c C sF | � d�}|�� }| jrtdt|�� t|d �}t|d �}||fS )z]Get mailbox status.
Result is tuple of 2 ints (message count, mailbox size)
ZSTATz*stat*r � )r< �splitr r r! �int)r ZretvalZretsZ numMessagesZ sizeMessagesr r r �stat� s
z POP3.statNc C � |dur | � d| �S | �d�S )a Request listing, return result.
Result without a message number argument is in form
['response', ['mesg_num octets', ...], octets].
Result when a message number argument is given is a
single response: the "scan listing" for that message.
NzLIST %s�LIST�r< r> �r �whichr r r r8 � s
z POP3.listc C rC )zoRetrieve whole message number 'which'.
Result is in form ['response', ['line', ...], octets].
zRETR %s�r> rP r r r �retr� rG z POP3.retrc C rC )zFDelete message number 'which'.
Result is 'response'.
zDELE %srD rP r r r �dele rG z POP3.delec C �
| � d�S )zXDoes nothing.
One supposes the response indicates the server is alive.
ZNOOPrD r? r r r �noop s
z POP3.noopc C rU )z(Unmark all messages marked for deletion.ZRSETrD r? r r r �rset s
z POP3.rsetc C s | � d�}| �� |S )zDSignoff: commit changes on server, unlock mailbox, close connection.ZQUIT)r< �close)r r4 r r r �quit s
z POP3.quitc C sB zY| j }d| _ |dur|�� W | j}d| _|durXz8z|�tj� W n! tyD } z|jtjkr:t |dd�dkr:� W Y d}~n d}~ww W |�� dS W |�� dS |�� w dS | j}d| _|dur�z6z|�tj� W n! ty� } z|jtjkr�t |dd�dkr�� W Y d}~n d}~ww W |�� w W |�� w |�� w w )z8Close the connection without assuming anything about it.N�winerrorr i&' )
r rX r �shutdownr � SHUT_RDWR�OSError�errnoZENOTCONN�getattr)r r r �excr r r rX sP � ���� � �� ����
� �z
POP3.closec C rC )zNot sure what this does.zRPOP %srD rE r r r �rpop7 s z POP3.rpops \+OK.[^<]*(<.*>)c C s\ t || j�}| j�| j�}|std��ddl}|�d�| }|�|�� � }| �
d||f �S )a Authorisation
- only possible if server has supplied a timestamp in initial greeting.
Args:
user - mailbox user;
password - mailbox password.
NB: mailbox is locked by server from here to 'quit()'
z!-ERR APOP not supported by serverr Nr z
APOP %s %s) r' r( � timestamp�matchr r �hashlib�group�md5� hexdigestr< )r rF �passwordZsecret�mrd �digestr r r �apop> s z POP3.apopc C s | � d||f �S )z�Retrieve message header of message number 'which'
and first 'howmuch' lines of message body.
Result is in form ['response', ['line', ...], octets].
z TOP %s %srR )r rQ Zhowmuchr r r �topS s zPOP3.topc C rM )z�Return message digest (unique id) list.
If 'which', result contains unique id for that message
in the form 'response mesgnum uid', otherwise result is
the list ['response', ['mesgnum uid', ...], octets]
NzUIDL %sZUIDLrO rP r r r �uidl\ s
z POP3.uidlc C rU )zITry to enter UTF-8 mode (see RFC 6856). Returns server response.
ZUTF8rD r? r r r �utf8h s
z POP3.utf8c C sZ dd� }i }z| � d�}|d }|D ] }||�\}}|||< qW |S ty, td��w )a Return server capabilities (RFC 2449) as a dictionary
>>> c=poplib.POP3('localhost')
>>> c.capa()
{'IMPLEMENTATION': ['Cyrus', 'POP3', 'server', 'v2.2.12'],
'TOP': [], 'LOGIN-DELAY': ['0'], 'AUTH-RESP-CODE': [],
'EXPIRE': ['NEVER'], 'USER': [], 'STLS': [], 'PIPELINING': [],
'UIDL': [], 'RESP-CODES': []}
>>>
Really, according to RFC 2449, the cyrus folks should avoid
having the implementation split into multiple arguments...
c S s" | � d��� }|d |dd � fS )N�asciir r )�decoderJ )r% Zlstr r r � _parsecap{ s z POP3.capa.<locals>._parsecapZCAPAr z!-ERR CAPA not supported by server)r> r )r rq �capsr4 ZrawcapsZcaplineZcapnmZcapargsr r r �capan s
� ��z POP3.capac C sx t std��| jr
td��| �� }d|vrtd��|du r!t�� }| �d�}|j| j| j d�| _| j�
d�| _ d| _|S ) z{Start a TLS session on the active connection as specified in RFC 2595.
context - a ssl.SSLContext
z-ERR TLS support missing�$-ERR TLS session already establishedZSTLSz!-ERR STLS not supported by serverN�Zserver_hostnamer T) �HAVE_SSLr r rs �ssl�_create_stdlib_contextr< � wrap_socketr r
r r )r �contextrr r4 r r r �stls� s
�z POP3.stlsr; )'r r r �__doc__r( � POP3_PORTr �_GLOBAL_DEFAULT_TIMEOUTr r r& r) r1 r r9 r< r> r@ rB rF rH rL r8 rS rT rV rW rY rX ra �re�compilerb rk rl rm rn rs r{ r r r r r 3 sD +
�
c @ s8 e Zd ZdZeddejdfdd�Zdd� Zd dd�Z dS )
�POP3_SSLa POP3 client class over SSL connection
Instantiate with: POP3_SSL(hostname, port=995, keyfile=None, certfile=None,
context=None)
hostname - the hostname of the pop3 over ssl server
port - port number
keyfile - PEM formatted file that contains your private key
certfile - PEM formatted certificate chain file
context - a ssl.SSLContext
See the methods of the parent class POP3 for more documentation.
Nc C s� |d ur |d ur t d��|d ur|d urt d��|d us |d ur+dd l}|�dtd� || _|| _|d u r<tj||d�}|| _t �
| |||� d S )Nz4context and keyfile arguments are mutually exclusivez5context and certfile arguments are mutually exclusiver zAkeyfile and certfile are deprecated, use a custom context insteadrI )�certfile�keyfile) r �warnings�warn�DeprecationWarningr� r� rw rx rz r r )r r
r r� r� r rz r� r r r r � s" ��zPOP3_SSL.__init__c C s" t �| |�}| jj|| jd�}|S )Nru )r r rz ry r
)r r r r r r r � s
�zPOP3_SSL._create_socketc C s t d��)z�The method unconditionally raises an exception since the
STLS command doesn't make any sense on an already established
SSL/TLS session.
rt )r )r r� r� rz r r r r{ � s z
POP3_SSL.stls)NNN)
r r r r| �
POP3_SSL_PORTr r~ r r r{ r r r r r� � s
�r� �__main__r rI � z Message %d:z z-----------------------)'r| r^ r r r rw rv � ImportError�__all__� Exceptionr r} r� r/ ZLFr# r- r r� r7 r �argv�ar r@ rF rH r8 rL ZnumMsgsZ totalSize�range�irS �header�msgr0 r% rY r r r r �<module> sR � p
0
�