Linux websever 5.15.0-153-generic #163-Ubuntu SMP Thu Aug 7 16:37:18 UTC 2025 x86_64
Apache/2.4.52 (Ubuntu)
: 192.168.3.70 | : 192.168.1.99
Cant Read [ /etc/named.conf ]
8.1.2-1ubuntu2.23
urlab
www.github.com/MadExploits
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
README
+ Create Folder
+ Create File
/
usr /
lib /
python3 /
dist-packages /
ufw /
__pycache__ /
[ HOME SHELL ]
Name
Size
Permission
Action
__init__.cpython-310.pyc
139
B
-rw-r--r--
applications.cpython-310.pyc
4.15
KB
-rw-r--r--
backend.cpython-310.pyc
16.21
KB
-rw-r--r--
backend_iptables.cpython-310.p...
27.58
KB
-rw-r--r--
common.cpython-310.pyc
14.12
KB
-rw-r--r--
frontend.cpython-310.pyc
19.39
KB
-rw-r--r--
parser.cpython-310.pyc
15.93
KB
-rw-r--r--
util.cpython-310.pyc
22.92
KB
-rw-r--r--
Delete
Unzip
Zip
${this.title}
Close
Code Editor : util.cpython-310.pyc
o �Fa�} � @ sF d Z ddlmZ ddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlZddlZddlmZ ddlmZmZ dZdZg d�Zg d�Zd d gZd d � Zd d� Zdd� Z dd� Z dd� Z dhdd�Z dd� Z dd� Z!d d � Z"d d � Z#did!d"�Z$d#d$� Z%d%d&� Z&d'd(� Z'did)d*�Z(d+d,� Z)ej*d fd-d.�Z+d/d0� Z,d1d2� Z-d3d4� Z.d5d6� Z/e �0� fd7d8�Z1e �0� fd9d:�Z2d;d<� Z3d=d>� Z4d?d@� Z5dAdB� Z6dCdD� Z7dEdF� Z8dGdH� Z9dIdJ� Z:djdKdL�Z;dkdMdN�Z<dOdP� Z=dldQdR�Z>dSdT� Z?dUdV� Z@dWdX� ZAdYdZ� ZBd[d\� ZCd]d^� ZDd_d`� ZEdadb� ZFdmddde�ZGdfdg� ZHdS )nz"util.py: utility functions for ufw� )�print_functionN)�reduce)�mkstemp�mktempF)�tcp�udp�ipv6�esp�ah�igmp�gre)r r r r r r r c C s� d}zt �| � W n ty � w z t �| d� d}W n ty% Y nw zt �| d� |dkr6d}W |S d}W |S tyD Y |S w )z8Get the protocol for a specified port from /etc/services� r r �any)�socketZ getservbyname� Exception)�port�proto� r �*/usr/lib/python3/dist-packages/ufw/util.py�get_services_proto. s. � � � ��r c C s� d}d}| � d�}t|�dkr|d }d}||fS t|�dkr9|d }|d }|tv r5td| �}t|��||fS td�}t|��) z Parse port or port and protocolr �/� r r � z Invalid port with protocol '%s'zBad port)�split�len�portless_protocols�_� ValueError)Zp_strr r �tmp�err_msgr r r �parse_port_protoH s � �r c C s� t js td� dS t| �dkst�d| �sdS | �d�}z t �t j|d � W n t y1 Y dS w t|�dkr:dS t|�dkrIt |d d �sIdS d S ) z Verifies if valid IPv6 addressz"python does not have IPv6 support.F�+ z^[a-fA-F0-9:\./]+$r r r r T) r Zhas_ipv6�warnr �re�matchr � inet_pton�AF_INET6r �_valid_cidr_netmask��addr�netr r r �valid_address6\ s" � r+ c C s� t | �dks t�d| �sdS | �d�}zt�tj|d � t|d d�s'W dS W n ty2 Y dS w t |�dkr;dS t |�dkrJt |d d�sJdS dS ) z Verifies if valid IPv4 address� z ^[0-9\./]+$Fr r r r T) r r# r$ r r r% �AF_INET�_valid_dotted_quadsr � valid_netmaskr( r r r �valid_address4v s" � � r0 c C s t | |�p t| |�S )z(Verifies if valid cidr or dotted netmask)r' r. )�nm�v6r r r r/ � s r/ r c C s< |dkrt | �S |dkrt| �S |dkr t| �pt | �S t�)zValidate IP addresses�6�4r )r+ r0 r )r) �versionr r r � valid_address� s r6 c C s^ g }d}d}t j}|rd}t j}d| v r7| �d�}|r%|d dkr%|d= n|s6|d dks3|d dkr6|d= n|�| � |s`t|�d kr`t|d |�r`z t|d |�|d< W n ty_ Y nw |d }t � |t � ||��}||d krvd }t|�d kr�|d|d 7 }|s�t |�}||kr�d ||f }t |� |}d }t ||�s�d | }t |� t�||fS )z�Convert address to standard form. Use no netmask for IP addresses. If netmask is specified and not all 1's, for IPv4 use cidr if possible, otherwise dotted netmask and for IPv6, use cidr. Fr4 r3 r r Z128Z32z255.255.255.255r r TzUsing '%s' for address '%s'zInvalid address '%s')r r- r& r �appendr r. �_dotted_netmask_to_cidrr � inet_ntopr% �_address4_to_network�debugr6 r ) �origr2 r* Zchangedr5 Zs_typer) �networkZdbg_msgr r r �normalize_address� sN � � r> c C � t | d�S )z"Opens the specified file read-only�r)�open)�fnr r r �open_file_read� � rC c C s> t | �}zt� \}}W n ty |�� � w || ||d�S )z=Opens the specified file read-only and a tempfile read-write.)r< �orignamer �tmpname)rC r r �close)rB r< r rF r r r � open_files� s �rH c C s� |dkrdS | st tjd��tr | tj�� kr t�|� dS d}tjd dkr1t �| t |d��}nt �| |�}|dkrAt tj d��dS ) z~Write to the file descriptor and error out of 0 bytes written. Intended to be used with open_files() and close_files().r NzNot a valid file descriptor���r � �asciiz"Could not write to file descriptor) �OSError�errno�ENOENT� msg_output�sys�stdout�fileno�write� version_info�os�bytesZEIO)�fd�out�rcr r r � write_to_file� s �rZ Tc C sX | d � � t� | d � |r#t�| d | d � t�| d | d � t�| d � dS )zuCloses the specified files (as returned by open_files), and update original file with the temporary file. r< r rE rF N)rG rU �shutil�copystat�copy�unlink)Zfns�updater r r � close_files s r` c C sn t | � z tj| tjtjdd�}W n ty) } z dt|�gW Y d}~S d}~ww |�� d }|jt|�gS )z!Try to execute the given command.T)rQ �stderrZuniversal_newlines� Nr ) r; � subprocess�Popen�PIPEZSTDOUTrL �str� communicate� returncode)Zcommand�sp�exrX r r r �cmd s ��� rk c C sp zt j| t jd�}t j||jd�}W n ty* } z dt|�gW Y d}~S d}~ww |�� d }|jt|�gS )z#Try to pipe command1 into command2.)rQ )�stdinrb Nr )rc rd re rQ rL rf rg rh )Zcommand1Zcommand2Zsp1Zsp2rj rX r r r �cmd_pipe$ s �� rm c C s� z| j }W n ty | }Y nw z|�dd�}W n ty$ |}Y nw tr3t�tj�r3|�|� n|�t |�� | � � dS )zQImplement our own print statement that will output utf-8 when appropriate.�utf-8�ignoreN) �bufferr �encoderO �inspectZisclass�io�StringIOrS rV �flush)�output�s�writerrX r r r �_print2 s � � ry c C s> z t tjd| � W n ty Y nw |r t�d� dS dS )z Print error message and exitz ERROR: %s r N)ry rP ra �IOError�exit)rX Zdo_exitr r r �errorG s ��r| c C s, z t tjd| � W dS ty Y dS w )zPrint warning messagez WARN: %s N)ry rP ra rz �rX r r r r" R s �r" c C sT t r |tjkr t }z|rt|d| � W dS t|d| � W dS ty) Y dS w )z Print messagez%s z%sN)rO rP rQ ry rz )rX rv �newliner r r �msgZ s �r c C s4 t rz ttjd| � W dS ty Y dS w dS )zPrint debug messagez DEBUG: %s N)� DEBUGGINGry rP ra rz r} r r r r; h s ��r; c C s t |fdd�| �d��S )z� A word-wrap function that preserves existing line breaks and most spaces in the text. Expects that existing line breaks are posix newlines ( ). c S s< d| dt | �| �d� d t |�dd�d � |k |f S )Nz%s%s%sz � r r )r �rfindr )�lineZword�widthr r r �<lambda>w s ����zword_wrap.<locals>.<lambda>� )r r )�textr� r r r � word_wrapq s �r� c C r? )z Word wrap to a specific width�K )r� )r� r r r � wrap_text� rD r� c s dd� � | j � fdd�d� dS )a$ Sorts list of strings into numeric order, with text case-insensitive. Modifies list in place. Eg: [ '80', 'a222', 'a32', 'a2', 'b1', '443', 'telnet', '3', 'http', 'ZZZ'] sorts to: ['3', '80', '443', 'a2', 'a32', 'a222', 'b1', 'http', 'telnet', 'ZZZ'] c S s | � � rt| �S | �� S �N)�isdigit�int�lower)�tr r r r� � s z human_sort.<locals>.<lambda>c s � fdd�t �d| �D �S )Nc s g | ]}� |��qS r r )�.0�c�Znormr r � <listcomp>� s z0human_sort.<locals>.<lambda>.<locals>.<listcomp>z([0-9]+))r# r )�kr� r r r� � s )�keyN)�sort)�lstr r� r � human_sort� s r� c C sz zt | �}W n ty td��w tj�dt|�d�}tj�|�s(td| ��t |�� � d � d�d � � d }t |�S )zdFinds parent process id for pid based on /proc/<pid>/stat. See 'man 5 proc' for details. zpid must be an integer�/proc�stat�Couldn't find '%s'r �)r ) r� r r rU �path�joinrf �isfilerz rA � readlinesr )Zmypid�pid�name�ppidr r r �get_ppid� s � "r� c C s� zt | �}W n$ ty td�}t|� Y dS ty* td�t| � }t|��w | dks3|dkr5dS tj� dt|�d�}tj� |�sOtd�| }t|��zt |�� � d � � d }W n tyn td �| }t|��w td | � |d kr{d S t|�S ) z1Determine if current process is running under sshz%Couldn't find pid (is /proc mounted?)Fz!Couldn't find parent pid for '%s'r r� r� r� r z"Could not find executable for '%s'zunder_ssh: exe is '%s'z(sshd)T)r� rz r r" r rf r rU r� r� r� rA r� r r; � under_ssh)r� r� �warn_msgr r� �exer r r r� � s4 � � r� c C s8 d}|rd}t �d| �rt| �dk st| �|krdS dS )zVerifies cidr netmasks� � �^[0-9]+$r FT)r# r$ r� )r1 r2 �numr r r r' � s $r' c C sd |rdS t �d| �r0t �d| �}t|�dkrdS |D ]}|r*t|�dk s*t|�dkr- dS qdS dS )z.Verifies dotted quad ip addresses and netmasksFz^[0-9]+\.[0-9\.]+$z\.� r � T)r# r$ r r r� )r1 r2 Zquads�qr r r r. � s ��r. c C s� d}|rt �t| |�s t �d}ztt�dt�| ��d �}W n ty4 tt�dt�| ��d �}Y nw d}t d�D ]}||? d@ dkrHd}q;|rNd} n|d7 }q;|dkra|dkrat d| �}t ||�sht �|S ) z@Convert netmask to cidr. IPv6 dotted netmasks are not supported.r r �>LFr� r TrI ) r r. �long�struct�unpackr � inet_aton� NameErrorr� �rangerf r' )r1 r2 �cidrZmbits�bitsZ found_one�nr r r r8 � s0 � r8 c C s� d}|rt �t| |�s t �ztd�}W n ty d}Y nw td�D ]}|t| �k r3|dd| > O }q#t�t� d|��}t ||�sDt �|S )z<Convert cidr to netmask. IPv6 dotted netmasks not supported.r r r� r r, r� ) r r' r� r� r� r� r � inet_ntoar� �packr. )r� r2 r1 r� r� r r r �_cidr_to_dotted_netmask" s$ � � r� c C s d| vr t d� | S | �d�}t|�dks t|d d�s t�|d }|d }|}t|d�r2t|d�}z tt� dt � |��d �}tt� dt � |��d �}W n# t yq t t� dt � |��d �}t t� dt � |��d �}Y nw ||@ }t �t�d|��}d||f S ) z8Convert an IPv4 address and netmask to a network addressr z8_address4_to_network: skipping address without a netmaskr r Fr r� �%s/%s)r; r r r. r r' r� r� r� r� r r� r� r� r� r� ) r) r ZhostZorig_nmr1 � host_bits�nm_bitsZ network_bitsr= r r r r: ? s* � r: c C s� dd� }d| vrt d� | S | �d�}t|�dks t|d d�s"t�|d }|d }t�d t�tj |��}zt d�}W n t yF d}Y nw t d �D ]"}||| d �}t d �D ]} |dt || �@ d | |d > O }qXqKzt d�} W n t y d} Y nw t d �D ]}|t |�k r�| dd | > O } q�|| @ } g } t d �D ]}| �t || d �|d |d d � d�� q�t�tj t�d | d | d | d | d | d | d | d | d � �} d| |f S )z8Convert an IPv6 address and netmask to a network addressc s$ d� � fdd�t|d dd�D ��S )zDecimal to binaryr c s g | ] }t � |? d @ ��qS )r )rf )r� �y�r� r r r� f � z9_address6_to_network.<locals>.dec2bin.<locals>.<listcomp>r rI )r� r� )r� �countr r� r �dec2bind s $z%_address6_to_network.<locals>.dec2binr z8_address6_to_network: skipping address without a netmaskr r Tr z>8H� � rb r� rJ r� � � � r� )r; r r r/ r r� r� r r% r& r� r� r� r� r7 r9 r� )r) r� r � orig_host�netmaskZunpackedr� �ir� �jr� r* r� r= r r r �_address6_to_networkb sT � � &� � � ,�� r� c C s^ |� d�}t|�dkst|d |�st�|d }|d }|dks$|dkr&dS | }d|v rD|� d�}t|�dks>t|d |�s@t�|d }|dksL|dkrNdS |r[t|�rXt|�sZt�n t|�rct|�set�t||�rq|sqt||�}|r�td||f �� d�d }td||f �� d�d }||kS t d||f �� d�d }t d||f �� d�d }||kS ) z&Determine if address x is in network yr r r r z0.0.0.0z::Tr� ) r r r/ r r+ r0 r' r� r� r: ) Z tested_addZ tested_netr2 r r� r� ZaddressZ orig_networkr= r r r � in_network� s\ � ���������r� c C sH d} dD ]}t j�|d�} t j�| �r nd} q| dkr"ttjd��| S )Nr )z/sbinz/binz /usr/sbinz/usr/binz/usr/local/sbinz/usr/local/binZiptableszCould not find iptables)rU r� r� �existsrL rM rN )r� �dr r r �_find_system_iptables� s r� c C sT | du rt � } t| dg�\}}|dkrttjd| ��t�d|�}t�dd|d �S ) zReturn iptables versionNz-Vr zError running '%s'z\sz^vr r )r� rk rL rM rN r# r �sub)r� rY rX r r r r �get_iptables_version� s r� c C s� dd� }|rt �� dkrttjd��| du rt� } g }d}| �d�r$d}|td d d �7 }t| d |g�\}}|dkr?ttj |��|| |g d ��rL|� d � || |g d��rY|� d� t| d|g� t| d|g�\}}|dkrsttj |��|S )z[Return capabilities set for netfilter to support new features. Callers must be root.c S s* | d|g}t || �\}}|dkrdS dS )Nz-Ar TF)rk )r� �chainZrule�argsrY rX r r r �test_cap� s z,get_netfilter_capabilities.<locals>.test_capr z Must be rootNz ufw-caps-testZ ip6tableszufw6-caps-testr )�prefix�dirz-N)�-m� conntrack� --ctstate�NEWr� �recentz--setz recent-set) r� r� r� r� r� r� z--updatez --secondsZ30z --hitcountr3 z recent-updatez-Fz-X) rU �getuidrL rM �EPERMr� �endswithr rk rN r7 )r� Z do_checksr� Zcapsr� rY rX r r r �get_netfilter_capabilities� s, r� c C s t | �}t� }|�� D ]}|�d�s|�d�sq |�� }|d }|d �d�d }t� }d�|d �d�dd� �|d< |d |d < |d �d �d |d < |d dkrZ|d |d< n |d �d �d |d< ||vrut� ||< g || |< n ||| vr�g || |< || | �|� q |S )z:Get and parse netstat the output from get_netstat_output()r r r r �:rI N�laddrrJ �uidr� r r� �-r� )�get_netstat_output�dict� splitlines� startswithr r� r7 )r2 Znetstat_outputr� r� r r r �itemr r r �parse_netstat_output% s, r� c s$ d}|r[d}t j�|�sttjd| ��t|��� D ]5}|�� � | � d krOd� � fdd�t dt � d �d �D ��}� d � � d krOd |t � d � � d �f }q|dkrZttjd��n0t�tjtj�}zt�t�|�� dt�d| dd� ��dd� �}W n ty� ttjd��w t||�d S )z Get IP address for interfacer �/proc/net/if_inet6�'%s' does not existr� r� c � g | ] }� d ||d � �qS �r r� r �r� r� �r r r r� Y � z"get_ip_from_if.<locals>.<listcomp>r r� r �80r� r� �No such devicei� Z256sN� � � )rU r� r� rL rM rN rA r� r r� r� r r� r� rz �ENODEVr r- Z SOCK_DGRAMr� �fcntlZioctlrR r� r� r r> )�ifnamer2 r) �procr� rw r r� r �get_ip_from_ifK s8 �� �� � �r� c sZ d}d}t | �r d}d}n t| �sttjd��tj�|�s%ttj d| ��d}|rzt |�� � D ]H}|� � � � d � � }d �� fd d �td t� d �d �D ��}� d �� dkrdd|t� d �� d�f }| |ksrd|v rwt| |d�rw|} |S q/|S t |�� � D ]*}d |vr�q�|� d �d � � }zt|d�}W n ty� Y q�w || kr�|} |S q�|S )z Get interface for IP addressFz /proc/net/devTr� r� r� r r� r� c r� r� r r� r� r r r� � r� z"get_if_from_ip.<locals>.<listcomp>r r� r r� r� r� r )r+ r0 rz rM r� rU r� r� rL rN rA r� r �stripr� r� r r� r� r� r� )r) r2 r� Zmatchedr� r� Ztmp_addrZipr r� r �get_if_from_ipk sX �� �� � ��r� c C s t �d�} | �� t�d�}t� }| D ]n}|�|�sqt j�d|d�}t � |t j t j B �s.qd}z t � t j�d|d��}W n t yF Y nw zt �|�}W n t yW Y qw |D ]&}zt �t j�||��d }W n t ys Y qZw d|t j�|�f ||< qZq|S )z Get inodes of files in /procr� r� rW r� r� r r� )rU �listdirr� r# �compiler� r$ r� r� �access�F_OK�R_OK�readlinkr r� �basename) Z proc_files�pat�inodesr� Zfd_pathZexe_path�dirsr� �inoder r r �_get_proc_inodes� s< � � ��r c C s ddddddddd d d d � }d dddd�}t j�d| �}t �|t jt jB �s(t�g }d}t|��� }|D ]L}|� � }|s?d}q4|t ||d d� } | � d�rRd} n | � d�r\| d kr\q4||d � d�\} } ||d } ||d } |� | t | d�| | | f� q4|S ) z=Read /proc/net/(tcp|udp)[6] file and return a list of tuples Z ESTABLISHEDZSYN_SENTZSYN_RECVZ FIN_WAIT1Z FIN_WAIT2Z TIME_WAITZCLOSEZ CLOSE_WAITZLAST_ACKZLISTENZCLOSING) r r rJ r� r� r� r� r� � � � r rJ r� r )� local_addr�stater� r z /proc/netFTr r� r ZNAr r r� r� r ) rU r� r� r r r r rA r� r r� r� r7 )ZprotocolZ tcp_statesZproc_net_fieldsrB r� Z skipped_first�linesr� Zfieldsr r� r r� r r r r �_read_proc_net_protocol� sL � � r c s� d}t � �dkr@d�tddd�D ]}�d�� fdd�t|d |d�D ��7 �qtd��fd d�tdt ��d �D ��d �d }|S g �� fd d�tddd�D �D ] }��tt|d ��� qOtd���d�d }|S )zDConvert an address from /proc/net/(tcp|udp)* to a normalized addressr r� r r� c � g | ] }� |d |� �qS �r r �r� r� ��paddrr r r� � r� z(convert_proc_address.<locals>.<listcomp>���r� c s g | ] }� ||d � � � �qS )r� )r� r r� r r r� � r� r� Tc r r r r r r r r� � r� r� �.F)r r� r� r> r7 rf r� )r Z convertedr� r )r r r �convert_proc_address� s$ * ��� � r c C s� t � }ddg}| r|ddg7 }|D ] }zt|�||< W q ty. td| �}t|� Y qw t� }t|�� �}|�� d}|D ]0}|| D ])\}} } } } t |�} d}t | �|v r_|t | � }|d|d | | f | | | |f 7 }qFq@|S ) z5netstat-style output, without IPv6 address truncationr r Ztcp6Zudp6z!Could not get statistics for '%s'r r� z %-5s %-46s %-11s %-5s %-11s %s z%s:%s) r� r r r r" r �list�keysr� r r� )r2 Z proc_net_datar �pr� r Z protocolsrw r� r r� r r r) r� r r r r� s8 � �� r� c C sV |du r| S | � d�r"t| �dk r|}|S tj�|| dd� �}|S tj�|| �}|S )zAdd prefix to dirNr r r )r� r rU r� r� )r� r� Znewdirr r r � _findpath$ s ��r c C s4 t jd dk r t�| d�S t�| jddd���d�S )z,Take a string and convert it to a hex stringr rJ �hexrn ro )�errorsrK )rP rT �codecsrq �binasciiZhexlify�decode)rw r r r � hex_encode2 s r# c C s0 t jd dk r| jdd��d�S t�| ��d�S )z,Take a hex string and convert it to a stringr rJ r )�encodingrn )rP rT r" r! Z unhexlify)�hr r r � hex_decode; s r& � /run/ufw.lockc C s$ d}|st | d�}t�|tj� |S )zCreate a blocking lockfileN�w)rA r� �lockfZLOCK_EX)ZlockfileZdryrun�lockr r r � create_lockB s r+ c C s> | du rdS zt �| t j� | �� W dS ty Y dS w )z(Free lockfile created with create_lock()N)r� r) ZLOCK_UNrG r )r* r r r � release_lockK s �r, )r )Tr� )NT)F)r' F)I�__doc__Z __future__r r! r rM r� rs rr rU r# r[ r r� rc rP � functoolsr Ztempfiler r r� rO Zsupported_protocolsr Zipv4_only_protocolsr r r+ r0 r/ r6 r> rC rH rZ r` rk rm ry r| r" rQ r r; r� r� r� �getpidr� r� r' r. r8 r� r: r� r� r� r� r� r� r� r� r r r r� r r# r& r+ r, r r r r �<module> s� 7 ' . #:4 9 & /%/#
Close
