shell bypass 403
o
` bo � @ s d dl Z d dlZd dlZd dlZd dlZd dlZd dlmZ m
Z
m Z d dl m
Z
d dlmZ e j�e�ZejZe j�ed�ZG dd� de �ZG dd � d e
�ZG d
d � d e �ZG d d
� d
ej�Zdeedd�dd�Z e dk�r d dl Z e j dd�Z e j!dde"ddd� e j!dddd d d d � e j!d d!d"d#d$d%d � e j!d&d'e#d(d)d*� e j!d+d,e#d-d.� e j!d/d0e#d(d1d*� e �$� Z%e%j&e
_&e%j'r�eZ(neZ(e �)� e(_*e�+ej,j-�Z.e.�/e� e%j0r�e.�1e%j0� e%j2r�e.�3e%j2� e%j4r�e.�5e%j4� ed2e%j6fe(e.�Z7e%j&�re8d3�9e%�� e7�:d4� dS dS )5� N)�
HTTPServer�SimpleHTTPRequestHandler�BaseHTTPRequestHandler)�support)�
socket_helperz keycert.pemc @ s$ e Zd Zdd� Zdd� Zdd� ZdS )� HTTPSServerc C s t �| ||� || _d S �N)� _HTTPServer�__init__�context)�self�server_address�
handler_classr � r �9/usr/local/python-3.10/lib/python3.10/test/ssl_servers.pyr
s
zHTTPSServer.__init__c C s d| j j| j| jf S )Nz
<%s %s:%s>)� __class__�__name__Z server_name� server_port�r r r r �__str__ s ��zHTTPSServer.__str__c
C sZ z| j �� \}}| jj|dd�}W ||fS ty, } z tjr'tj� d| � � d }~ww )NT)Z server_sidezGot an error:
%s
)
�socket�acceptr Z wrap_socket�OSErrorr �verbose�sys�stderr�write)r �sock�addrZsslconn�er r r � get_request! s ���zHTTPSServer.get_requestN)r �
__module__� __qualname__r
r r r r r r r s r c @ s* e Zd ZdZeZejZdd� Z dd� Z
dS )�RootedHTTPRequestHandlerz
TestHTTPS/1.0c C sz t j�|�d }tj�t j�|��}|�d�}td|�}| j }|D ]}tj�
|�\}}tj�|�\}}tj� ||�}q!|S )z�Translate a /-separated PATH to the local filename syntax.
Components that mean special things to the local file system
(e.g. drive or directory names) are ignored. (XXX They should
probably be diagnosed.)
� �/N) �urllib�parse�urlparse�os�path�normpath�unquote�split�filter�root�
splitdrive�join)r r* �wordsZword�drive�headr r r �translate_path7 s
z'RootedHTTPRequestHandler.translate_pathc G s> t jr tj�d| jj| jj| j� � | �
� || f � d S d S )Nz server (%s:%d %s):
[%s] %s
) r r r �stdoutr �serverr
r Zrequest�cipherZlog_date_time_string�r �format�argsr r r � log_messageK s �
��z$RootedHTTPRequestHandler.log_messageN) r r! r" �server_version�herer/ r ZLOOPBACK_TIMEOUT�timeoutr5 r< r r r r r# - s r# c @ s. e Zd ZdZdZd dd�Zdd� Zdd � Zd
S ) �StatsRequestHandlerzSExample HTTP request handler which returns SSL statistics on GET
requests.
zStatsHTTPS/1.0Tc C s� | j jj}|j}|�� |�� |�� d�}t�|�}|� d�}| �
d� | � dd� | � dt t
|��� | �� |rA| j�|� dS dS )zServe a GET request.)Z
session_cacher8 � compressionzutf-8�� z Content-typeztext/plain; charset=utf-8zContent-LengthN)Zrfile�raw�_sockr Z
session_statsr8 rA �pprintZpformat�encodeZ
send_responseZ send_header�str�lenZ end_headersZwfiler )r � send_bodyr r Zstats�bodyr r r �do_GET] s
�
�zStatsRequestHandler.do_GETc C s | j dd� dS )zServe a HEAD request.F)rI N)rK r r r r �do_HEADo s zStatsRequestHandler.do_HEADc G s" t jrtj| |g|�R � d S d S r )r r r � log_requestr9 r r r rM s s �z StatsRequestHandler.log_requestN)T)r r! r" �__doc__r= rK rL rM r r r r r@ V s
r@ c @ s< e Zd Zedfdd�Zdd� Zd dd�Zdd � Zd
d � ZdS )
�HTTPSServerThreadNc C s< d | _ t|df|p
t|�| _| jj| _tj�| � d| _ d S )Nr T)
�flagr r# r7 r �port� threading�Threadr
�daemon)r r �hostr r r r r
z s �
zHTTPSServerThread.__init__c C s d| j j| jf S )Nz<%s %s>)r r r7 r r r r r � s zHTTPSServerThread.__str__c C s || _ tj�| � d S r )rP rR rS �start)r rP r r r rV � s zHTTPSServerThread.startc C s: | j r| j �� z| j�d� W | j�� d S | j�� w )Ng�������?)rP �setr7 �
serve_foreverZ server_closer r r r �run� s
zHTTPSServerThread.runc C s | j �� d S r )r7 �shutdownr r r r �stop� s zHTTPSServerThread.stopr ) r r! r" �HOSTr
r rV rY r[ r r r r rO x s
rO )r �certfilerU r c s` |d u r t �t jj�}|�|� t|||�� t�� }� �|� |� � � fdd�}| �
|� � S )Nc s8 t jr tj�d� � �� t jrtj�d� � �� d S )Nzstopping HTTPS server
zjoining HTTPS thread
)r r r r6 r r[ r1 r �r7 r r �cleanup� s z"make_https_server.<locals>.cleanup) �ssl�create_default_context�Purpose� CLIENT_AUTH�load_cert_chainrO rR �EventrV �waitZ
addCleanup)�caser r] rU r rP r_ r r^ r �make_https_server� s
rh �__main__zERun a test HTTPS server. By default, the current directory is served.)� descriptionz-pz--portiQ z(port to listen on (default: %(default)s))�type�default�helpz-qz--quietr T� store_falsezbe less verbose)�destrl �actionrm z-sz--stats�use_stats_handlerF�
store_truezalways return stats pagez --curve-name�
curve_name�storez&curve name for EC-based Diffie-Hellman)ro rk rp rm z --ciphers�cipherszallowed cipher list)ro rk rm z--dh�dh_filez!PEM file containing DH parameters� z'Listening on https://localhost:{0.port}g�������?);r) r r` rE rR � urllib.parser& Z http.serverr r r r �testr Z test.supportr r* �dirname�__file__r> r\ r1 ZCERTFILEr r# r@ rS rO rh r �argparse�ArgumentParser�parser� add_argument�intrG �
parse_argsr; r rq r �getcwdr/ ra rb rc r rd rs Zset_ecdh_curverv Zload_dh_paramsru Z set_ciphersrQ r7 �printr: rX r r r r �<module> s| )" �
� � � �
�
� �
�