You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
59 lines
2.2 KiB
59 lines
2.2 KiB
from tools.ToolBase import ToolBase
|
|
import pexpect
|
|
|
|
class EchoTool(ToolBase):
|
|
def validate_instruction(self, instruction):
|
|
#指令过滤
|
|
timeout = 60*5
|
|
return instruction,timeout
|
|
|
|
def do_worker_pexpect(self, str_instruction, timeout, ext_params):
|
|
try:
|
|
result = ""
|
|
exc_do = pexpect.spawn('bash', ['-c', str_instruction], timeout=timeout,
|
|
encoding='utf-8') # spawn 第一个参数是可执行文件
|
|
index = exc_do.expect([
|
|
pexpect.TIMEOUT,
|
|
pexpect.EOF
|
|
])
|
|
result += str(exc_do.before)
|
|
if index == 0:
|
|
result += f"\n执行超时{timeout}秒"
|
|
elif index == 1:
|
|
pass
|
|
else:
|
|
print("遇到其他输出！")
|
|
pass
|
|
return result
|
|
except Exception as e:
|
|
return f"执行错误: {str(e)}"
|
|
|
|
def execute_instruction(self, instruction_old):
|
|
ext_params = self.create_extparams()
|
|
# 第一步：验证指令合法性
|
|
instruction,time_out = self.validate_instruction(instruction_old)
|
|
if not instruction:
|
|
return False, instruction_old, "该指令暂不执行！","",ext_params
|
|
# 过滤修改后的指令是否需要判重？同样指令再执行结果一致？待定---#？
|
|
|
|
# 第二步：执行指令---需要对ftp指令进行区分判断
|
|
output = self.do_worker_pexpect(instruction, time_out, ext_params)
|
|
|
|
# 第三步：分析执行结果
|
|
analysis = self.analyze_result(output,instruction,"","")
|
|
|
|
return True, instruction, analysis,output,ext_params
|
|
|
|
def analyze_result(self, result,instruction,stderr,stdout):
|
|
#指令结果分析
|
|
if "GET / HTTP/1.1" in result and "X-Original-URL: /proc/self/environ" in result:
|
|
#通过构造 自定义HTTP请求头 尝试利用服务器配置漏洞，访问敏感文件
|
|
if "HTTP/1.1 200" in result and "PATH=" in result:
|
|
#result = "存在安全问题" #暂时保留结果
|
|
pass
|
|
else:
|
|
result ="不存在安全问题"
|
|
else:
|
|
pass
|
|
|
|
return result
|