MCPcopy Create free account
hub / github.com/alexandre-lavoie/python-log4rce / HTTPHandler

Class HTTPHandler

log4rce.py:180–201  ·  view source on GitHub ↗

Malicious fetch handler.

Source from the content-addressed store, hash-verified

178 acknowledge = self.request.recv(8096)
179
180class HTTPHandler(http.server.BaseHTTPRequestHandler):
181 """
182 Malicious fetch handler.
183 """
184
185 __java_class: JavaClass
186
187 def __init__(self, java_class: JavaClass):
188 self.__java_class = java_class
189
190 def __call__(self, *args, **kwargs):
191 super().__init__(*args, **kwargs)
192
193 def do_GET(self):
194 self.send_response(200)
195 self.send_header("Content-type", "application/octet-stream")
196 self.end_headers()
197
198 self.wfile.write(self.__java_class.raw)
199
200 def log_message(self, format, *args):
201 http_logger.info(f"Request from {self.client_address} to {self.path}")
202
203class Log4RCE():
204 """

Callers 1

_http_processMethod · 0.85

Calls

no outgoing calls

Tested by

no test coverage detected