Viewing file:  tar.py (2.4 KB) -rw-r--r--
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
import os
from weevely.core.loggers import log
from weevely.core.module import Module
from weevely.core.vectors import ModuleExec
from weevely.core.vectors import PhpFile
class Tar(Module):
"""Compress or expand tar archives."""
aliases = ["tar"]
def init(self):
self.register_info({"author": ["Emilio Pinna"], "license": "GPLv3"})
self.register_vectors(
[
PhpFile(
payload_path=os.path.join(self.folder, "php_tar.tpl"),
name="php_tar",
)
]
)
self.register_arguments(
[
{"name": "rtar", "help": "Remote Tar file"},
{
"name": "rfiles",
"help": "Remote files to compress. If decompressing, set destination folder.",
"nargs": "+",
},
{
"name": "-x",
"dest": "decompress",
"action": "store_true",
"default": False,
"help": "Extract/decompress",
},
{"name": "-o", "dest": "overwrite", "action": "store_true", "default": False, "help": "Overwrite"},
{
"name": "-z",
"action": "store_true",
"default": False,
"help": "Simulate tar -xz for gzip compressed archives",
},
{
"name": "-j",
"action": "store_true",
"default": False,
"help": "Simulate tar -xj for bzip2 compressed archives",
},
]
)
def run(self, **kwargs):
if self.args.get("z"):
ModuleExec("file_gzip", ["--keep", "--decompress", self.args["rtar"]]).run()
self.args["rtar"] = ".".join(self.args["rtar"].split(".")[:-1])
elif self.args.get("j"):
ModuleExec("file_bzip2", ["--keep", "--decompress", self.args["rtar"]]).run()
self.args["rtar"] = ".".join(self.args["rtar"].split(".")[:-1])
# The correct execution returns something only on errors
result_err = self.vectors.get_result(
name="php_tar",
format_args=self.args,
)
if result_err:
log.warn(result_err)
return None
return True
|