shell bypass 403
UnknownSec Shell
:
/
lib
/
python3
/
dist-packages
/
twisted
/
words
/
protocols
/
jabber
/
__pycache__
/ [
drwxr-xr-x
]
upload
mass deface
mass delete
console
info server
name :
sasl.cpython-312.pyc
� Ϫ�f� � � � d Z ddlZddlmZmZ ddlmZ ddlmZm Z ddl m Z dZ d� Z G d � d e� Z G d � d e� Z G d � de� Z G d� de� Z ej& d� Zd� Z G d� de j, � Zy)z XMPP-specific SASL profile. � N)� b64decode� b64encode)�defer)�sasl_mechanisms� xmlstream)�domishz urn:ietf:params:xml:ns:xmpp-saslc � � g }| j t df j � D ], }|j dk( s�|j t |� � �. |S )zJ Parse the SASL feature to extract the available mechanism names. � mechanisms� mechanism)�features� NS_XMPP_SASL�elements�name�append�str)�xsr �elements �E/usr/lib/python3/dist-packages/twisted/words/protocols/jabber/sasl.py�get_mechanismsr sU � � �J��;�;� �l� ;�<�E�E�G� ,�� �<�<�;� &� � � �c�'�l� +�,� �� c � � e Zd ZdZy)� SASLErrorz SASL base exception. N��__name__� __module__� __qualname__�__doc__� r r r r � � �r r c � � e Zd ZdZy)�SASLNoAcceptableMechanismzB The server did not present an acceptable SASL mechanism. Nr r r r r! r! % r r r! c �$ � e Zd ZdZdd�Zdefd�Zy)� SASLAuthErrorz% SASL Authentication failed. Nc � � || _ y �N�� condition)�selfr' s r �__init__zSASLAuthError.__init__0 s � �"��r �returnc � � d| j z S )Nz SASLAuthError with condition %rr& �r( s r �__str__zSASLAuthError.__str__3 s � �0�4�>�>�A�Ar r% )r r r r r) r r- r r r r# r# + s � ��#�B�� Br r# c � � e Zd ZdZy)�SASLIncorrectEncodingErrora SASL base64 encoding was incorrect. RFC 3920 specifies that any characters not in the base64 alphabet and padding characters present elsewhere than at the end of the string MUST be rejected. See also L{fromBase64}. This exception is raised whenever the encoded string does not adhere to these additional restrictions or when the decoding itself fails. The recommended behaviour for so-called receiving entities (like servers in client-to-server connections, see RFC 3920 for terminology) is to fail the SASL negotiation with a C{'incorrect-encoding'} condition. For initiating entities, one should assume the receiving entity to be either buggy or malevolent. The stream should be terminated and reconnecting is not advised. Nr r r r r/ r/ 7 s � �r r/ z"^[0-9A-Za-z+/]*[0-9A-Za-z+/=]{,2}$c � � t j | � � t � � t | � S # t $ r}t t |� � �d}~ww xY w)a� Decode base64 encoded string. This helper performs regular decoding of a base64 encoded string, but also rejects any characters that are not in the base64 alphabet and padding occurring elsewhere from the last or last two characters, as specified in section 14.9 of RFC 3920. This safeguards against various attack vectors among which the creation of a covert channel that "leaks" information. N)� base64Pattern�matchr/ r � Exceptionr )�s�es r � fromBase64r6 N sL � � ���1� �%�(�*�*�1���|��� � 1�(��Q��0�0��1�s � , � A�A � Ac �J � e Zd ZdZedfZdZd� Zd� Zd d�Z d d�Z d� Z d � Z d � Z y) �SASLInitiatingInitializera� Stream initializer that performs SASL authentication. The supported mechanisms by this initializer are C{DIGEST-MD5}, C{PLAIN} and C{ANONYMOUS}. The C{ANONYMOUS} SASL mechanism is used when the JID, set on the authenticator, does not have a localpart (username), requesting an anonymous session where the username is generated by the server. Otherwise, C{DIGEST-MD5} and C{PLAIN} are attempted, in that order. r Nc �� � | j j j }| j j j }t | j � }|j �ld|v r3t j d|j d|j |� | _ yd|v r't j d|j |� | _ yt � �d|v rt j � | _ yt � �)aP Select and setup authentication mechanism. Uses the authenticator's C{jid} and C{password} attribute for the authentication credentials. If no supported SASL mechanisms are advertized by the receiving party, a failing deferred is returned with a L{SASLNoAcceptableMechanism} exception. Nz DIGEST-MD5�xmpp�PLAIN� ANONYMOUS) r � authenticator�jid�passwordr �userr � DigestMD5�hostr �Plainr! � Anonymous)r( r> r? r s r � setMechanismz&SASLInitiatingInitializer.setMechanismp s� � � �n�n�*�*�.�.���>�>�/�/�8�8��#�D�N�N�3� � �8�8� ��z�)�!0�!:�!:��C�H�H�d�C�H�H�h�"��� �J�&�!0�!6�!6�t�S�X�X�x�!P���/�1�1��j�(�!0�!:�!:�!<���/�1�1r c � � | j � t j � | _ | j j d| j � | j j d| j � | j j d| j � | j | j j � � | j S )z5 Start SASL authentication exchange. � /challenge�/success�/failure) rE r �Deferred� _deferredr � addObserver� onChallenge�addOnetimeObserver� onSuccess� onFailure�sendAuthr �getInitialResponser, s r �startz SASLInitiatingInitializer.start� s� � � ���� � � �)��� ���"�"�<��1A�1A�B� ���)�)�*�d�n�n�E� ���)�)�*�d�n�n�E� � � �d�n�n�7�7�9�:��~�~� r c � � t j t df� }| j j |d< |�-|j t |� j d� xs d� | j j |� y)z� Initiate authentication protocol exchange. If an initial client response is given in C{data}, it will be sent along. @param data: initial client response. @type data: C{str} or L{None}. �authr N�ascii�=) r �Elementr r r � addContentr �decoder �send)r( �datarU s r rQ z"SASLInitiatingInitializer.sendAuth� sc � � �~�~�|�V� 4�5�� �N�N� /� /��[�� � � �O�O�I�d�O� 2� 2�7� ;� B�s� C� �����D�!r c �� � t j t df� }|r)|j t |� j d� � | j j |� y)zt Send response to a challenge. @param data: client response. @type data: L{bytes}. �responserV N)r rX r rY r rZ r r[ )r( r\ r^ s r � sendResponsez&SASLInitiatingInitializer.sendResponse� sI � � �>�>�<��"<�=�� � � � � �$�� 6� 6�w� ?� @� �����H�%r c �� � t t |� � }| j | j j |� � y# t $ r | j j � Y yw xY w)z� Parse challenge and send response from the mechanism. @param element: the challenge protocol element. @type element: L{domish.Element}. N)r6 r r_ r � getResponser/ rK �errback)r( r � challenges r rM z%SASLInitiatingInitializer.onChallenge� sV � � E�"�3�w�<�0�I� � � �d�n�n� 8� 8�� C� D�� *� %� �N�N� "� "� $� %�s �A �#A'�&A'c �V � | j j d| j � | j j d| j � | j j � | j j � | j j t j � y)z� Clean up observers, reset the XML stream and send a new header. @param success: the success protocol element. For now unused, but could hold additional data. @type success: L{domish.Element} rG rI N) r �removeObserverrM rP �reset� sendHeaderrK �callback�Reset)r( �successs r rO z#SASLInitiatingInitializer.onSuccess� sl � � ���%�%�l�D�4D�4D�E� ���%�%�j�$�.�.�A� ��� � � � ���!�!�#� ��� � � ���0r c �< � | j j d| j � | j j d| j � |j � j }| j j t |� � y# t $ r d}Y �2w xY w)z� Clean up observers, parse the failure and errback the deferred. @param failure: the failure protocol element. Holds details on the error condition. @type failure: L{domish.Element} rG rH N) r re rM rO �firstChildElementr �AttributeErrorrK rb r# )r( �failurer' s r rP z#SASLInitiatingInitializer.onFailure� s~ � � ���%�%�l�D�4D�4D�E� ���%�%�j�$�.�.�A� � �1�1�3�8�8�I� ��� � �}�Y� 7�8�� � � �I� �s �B � B�Br% )r )r r r r r �featurerK rE rS rQ r_ rM rO rP r r r r8 r8 b s< � �� �\�*�G��I�2�: �"�" &� E� 1� 9r r8 )r �re�base64r r �twisted.internetr � twisted.words.protocols.jabberr r �twisted.words.xishr r r r3 r r! r# r/ �compiler1 r6 � BaseFeatureInitiatingInitializerr8 r r r �<module>rw s� ��� � '� "� E� %�1� � �� � � � � � B�I� B��� �( �� � �?�@� �1�(C9� � J� J� C9r
© 2026 UnknownSec