0x1949 Team - FAZEMRX - MANAGER
Edit File: util.cpython-310.pyc
o MH�d%~ � @ sF d Z ddlmZ ddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlZddlZddlmZ ddlmZmZ dZdZg d�Zg d�Zd d gZd d � Zd d� Zdd� Z dd� Z dd� Z dhdd�Z dd� Z dd� Z!d d � Z"d d � Z#did!d"�Z$d#d$� Z%d%d&� Z&d'd(� Z'did)d*�Z(d+d,� Z)ej*d fd-d.�Z+d/d0� Z,d1d2� Z-d3d4� Z.d5d6� Z/e �0� fd7d8�Z1e �0� fd9d:�Z2d;d<� Z3d=d>� Z4d?d@� Z5dAdB� Z6dCdD� Z7dEdF� Z8dGdH� Z9dIdJ� Z:djdKdL�Z;dkdMdN�Z<dOdP� Z=dldQdR�Z>dSdT� Z?dUdV� Z@dWdX� ZAdYdZ� ZBd[d\� ZCd]d^� ZDd_d`� ZEdadb� ZFdmddde�ZGdfdg� ZHdS )nz"util.py: utility functions for ufw� )�print_functionN)�reduce)�mkstemp�mktempF)�tcp�udp�ipv6�esp�ah�igmp�gre)r r r r r r r c C s� d}zt �| � W n ty � w z t �| d� d}W n ty% Y nw zt �| d� |dkr6d}W |S d}W |S tyD Y |S w )z8Get the protocol for a specified port from /etc/services� r r �any)�socket� getservbyname� Exception)�port�proto� r �*/usr/lib/python3/dist-packages/ufw/util.py�get_services_proto. s. � � � ��r c C s� d}d}| � d�}t|�dkr|d }d}||fS t|�dkr9|d }|d }|tv r5td| �}t|��||fS td�}t|��) z Parse port or port and protocolr �/� r r � z Invalid port with protocol '%s'zBad port)�split�len�portless_protocols�_� ValueError)�p_strr r �tmp�err_msgr r r �parse_port_protoH s � �r" c C s� t js td� dS t| �dkst�d| �sdS | �d�}z t �t j|d � W n t y1 Y dS w t|�dkr:dS t|�dkrIt |d d �sIdS d S ) z Verifies if valid IPv6 addressz"python does not have IPv6 support.F�+ z^[a-fA-F0-9:\./]+$r r r r T) r �has_ipv6�warnr �re�matchr � inet_pton�AF_INET6r �_valid_cidr_netmask��addr�netr r r �valid_address6\ s" � r. c C s� t | �dks t�d| �sdS | �d�}zt�tj|d � t|d d�s'W dS W n ty2 Y dS w t |�dkr;dS t |�dkrJt |d d�sJdS dS ) z Verifies if valid IPv4 address� z ^[0-9\./]+$Fr r r r T) r r& r' r r r( �AF_INET�_valid_dotted_quadsr � valid_netmaskr+ r r r �valid_address4v s" � � r3 c C s t | |�p t| |�S )z(Verifies if valid cidr or dotted netmask)r* r1 )�nm�v6r r r r2 � s r2 r c C s< |dkrt | �S |dkrt| �S |dkr t| �pt | �S t�)zValidate IP addresses�6�4r )r. r3 r )r, �versionr r r � valid_address� s r9 c C s^ g }d}d}t j}|rd}t j}d| v r7| �d�}|r%|d dkr%|d= n|s6|d dks3|d dkr6|d= n|�| � |s`t|�d kr`t|d |�r`z t|d |�|d< W n ty_ Y nw |d }t � |t � ||��}||d krvd }t|�d kr�|d|d 7 }|s�t |�}||kr�d ||f }t |� |}d }t ||�s�d | }t |� t�||fS )z�Convert address to standard form. Use no netmask for IP addresses. If netmask is specified and not all 1's, for IPv4 use cidr if possible, otherwise dotted netmask and for IPv6, use cidr. Fr7 r6 r r �128�32z255.255.255.255r r TzUsing '%s' for address '%s'zInvalid address '%s')r r0 r) r �appendr r1 �_dotted_netmask_to_cidrr � inet_ntopr( �_address4_to_network�debugr9 r ) �origr5 r- �changedr8 �s_typer, �network�dbg_msgr r r �normalize_address� sN � � rF c C � t | d�S )z"Opens the specified file read-only�r)�open)�fnr r r �open_file_read� � rK c C s> t | �}zt� \}}W n ty |�� � w || ||d�S )z=Opens the specified file read-only and a tempfile read-write.)rA �orignamer �tmpname)rK r r �close)rJ rA r rN r r r � open_files� s �rP c C s� |dkrdS | st tjd��tr | tj�� kr t�|� dS d}tjd dkr1t �| t |d��}nt �| |�}|dkrAt tj d��dS ) z~Write to the file descriptor and error out of 0 bytes written. Intended to be used with open_files() and close_files().r NzNot a valid file descriptor���r � �asciiz"Could not write to file descriptor) �OSError�errno�ENOENT� msg_output�sys�stdout�fileno�write� version_info�os�bytes�EIO)�fd�out�rcr r r � write_to_file� s �rc Tc C sX | d � � t� | d � |r#t�| d | d � t�| d | d � t�| d � dS )zuCloses the specified files (as returned by open_files), and update original file with the temporary file. rA r rM rN N)rO r] �shutil�copystat�copy�unlink)�fns�updater r r � close_files s rj c C sn t | � z tj| tjtjdd�}W n ty) } z dt|�gW Y d}~S d}~ww |�� d }|jt|�gS )z!Try to execute the given command.T)rY �stderr�universal_newlines� Nr ) r@ � subprocess�Popen�PIPE�STDOUTrT �str� communicate� returncode)�command�sp�exra r r r �cmd s ��� rx c C sp zt j| t jd�}t j||jd�}W n ty* } z dt|�gW Y d}~S d}~ww |�� d }|jt|�gS )z#Try to pipe command1 into command2.)rY )�stdinrm Nr )rn ro rp rY rT rr rs rt )�command1�command2�sp1�sp2rw ra r r r �cmd_pipe$ s �� r~ c C s� z| j }W n ty | }Y nw z|�dd�}W n ty$ |}Y nw tr3t�tj�r3|�|� n|�t |�� | � � dS )zQImplement our own print statement that will output utf-8 when appropriate.�utf-8�ignoreN) �bufferr �encoderW �inspect�isclass�io�StringIOr[ r^ �flush)�output�s�writerra r r r �_print2 s � � r� c C s> z t tjd| � W n ty Y nw |r t�d� dS dS )z Print error message and exitz ERROR: %s r N)r� rX rk �IOError�exit)ra �do_exitr r r �errorG s ��r� c C s, z t tjd| � W dS ty Y dS w )zPrint warning messagez WARN: %s N)r� rX rk r� �ra r r r r% R s �r% c C sT t r |tjkr t }z|rt|d| � W dS t|d| � W dS ty) Y dS w )z Print messagez%s z%sN)rW rX rY r� r� )ra r� �newliner r r �msgZ s �r� c C s4 t rz ttjd| � W dS ty Y dS w dS )zPrint debug messagez DEBUG: %s N)� DEBUGGINGr� rX rk r� r� r r r r@ h s ��r@ c C s t |fdd�| �d��S )z� A word-wrap function that preserves existing line breaks and most spaces in the text. Expects that existing line breaks are posix newlines ( ). c S s< d| dt | �| �d� d t |�dd�d � |k |f S )Nz%s%s%sz � r r )r �rfindr )�line�word�widthr r r �<lambda>w s ����zword_wrap.<locals>.<lambda>� )r r )�textr� r r r � word_wrapq s �r� c C rG )z Word wrap to a specific width�K )r� )r� r r r � wrap_text� rL r� c s dd� � | j � fdd�d� dS )a$ Sorts list of strings into numeric order, with text case-insensitive. Modifies list in place. Eg: [ '80', 'a222', 'a32', 'a2', 'b1', '443', 'telnet', '3', 'http', 'ZZZ'] sorts to: ['3', '80', '443', 'a2', 'a32', 'a222', 'b1', 'http', 'telnet', 'ZZZ'] c S s | � � rt| �S | �� S �N)�isdigit�int�lower)�tr r r r� � s z human_sort.<locals>.<lambda>c s � fdd�t �d| �D �S )Nc s g | ]}� |��qS r r )�.0�c��normr r � <listcomp>� s z0human_sort.<locals>.<lambda>.<locals>.<listcomp>z([0-9]+))r& r )�kr� r r r� � s )�keyN)�sort)�lstr r� r � human_sort� s r� c C s| zt | �}W n ty td��w tj�dt|�d�}tj�|�s(td| ��t |�� � d � dd�d � � d }t |�S )zdFinds parent process id for pid based on /proc/<pid>/stat. See 'man 5 proc' for details. zpid must be an integer�/proc�stat�Couldn't find '%s'r �)r ) r� r r r] �path�joinrr �isfiler� rI � readlines�rsplitr )�mypid�pid�name�ppidr r r �get_ppid� s � $r� c C s� zt | �}W n$ ty td�}t|� Y dS ty* td�t| � }t|��w | dks3|dkr5dS tj� dt|�d�}tj� |�sOtd�| }t|��zt |�� � d � � d }W n tyn td �| }t|��w td | � |d kr{d S t|�S ) z1Determine if current process is running under sshz%Couldn't find pid (is /proc mounted?)Fz!Couldn't find parent pid for '%s'r r� r� r� r z"Could not find executable for '%s'zunder_ssh: exe is '%s'z(sshd)T)r� r� r r% r rr r r] r� r� r� rI r� r r@ � under_ssh)r� r� �warn_msgr! r� �exer r r r� � s4 � � r� c C s8 d}|rd}t �d| �rt| �dk st| �|krdS dS )zVerifies cidr netmasks� � �^[0-9]+$r FT)r& r' r� )r4 r5 �numr r r r* � s $r* c C sd |rdS t �d| �r0t �d| �}t|�dkrdS |D ]}|r*t|�dk s*t|�dkr- dS qdS dS )z.Verifies dotted quad ip addresses and netmasksFz^[0-9]+\.[0-9\.]+$z\.� r � T)r& r' r r r� )r4 r5 �quads�qr r r r1 � s ��r1 c C s� d}|rt �t| |�s t �d}ztt�dt�| ��d �}W n ty4 tt�dt�| ��d �}Y nw d}t d�D ]}||? d@ dkrHd}q;|rNd} n|d7 }q;|dkra|dkrat d| �}t ||�sht �|S ) z@Convert netmask to cidr. IPv6 dotted netmasks are not supported.r r �>LFr� r TrQ ) r r1 �long�struct�unpackr � inet_aton� NameErrorr� �rangerr r* )r4 r5 �cidr�mbits�bits� found_one�nr r r r= � s0 � r= c C s� d}|rt �t| |�s t �ztd�}W n ty d}Y nw td�D ]}|t| �k r3|dd| > O }q#t�t� d|��}t ||�sDt �|S )z<Convert cidr to netmask. IPv6 dotted netmasks not supported.r r r� r r/ r� ) r r* r� r� r� r� r � inet_ntoar� �packr1 )r� r5 r4 r� r� r r r �_cidr_to_dotted_netmask$ s$ � � r� c C s d| vr t d� | S | �d�}t|�dks t|d d�s t�|d }|d }|}t|d�r2t|d�}z tt� dt � |��d �}tt� dt � |��d �}W n# t yq t t� dt � |��d �}t t� dt � |��d �}Y nw ||@ }t �t�d|��}d||f S ) z8Convert an IPv4 address and netmask to a network addressr z8_address4_to_network: skipping address without a netmaskr r Fr r� �%s/%s)r@ r r r1 r r* r� r� r� r� r r� r� r� r� r� ) r, r �host�orig_nmr4 � host_bits�nm_bits� network_bitsrD r r r r? A s* � r? c C s� dd� }d| vrt d� | S | �d�}t|�dks t|d d�s"t�|d }|d }t�d t�tj |��}zt d�}W n t yF d}Y nw t d �D ]"}||| d �}t d �D ]} |dt || �@ d | |d > O }qXqKzt d�} W n t y d} Y nw t d �D ]}|t |�k r�| dd | > O } q�|| @ } g } t d �D ]}| �t || d �|d |d d � d�� q�t�tj t�d | d | d | d | d | d | d | d | d � �} d| |f S )z8Convert an IPv6 address and netmask to a network addressc s$ d� � fdd�t|d dd�D ��S )zDecimal to binaryr c s g | ] }t � |? d @ ��qS )r )rr )r� �y�r� r r r� h � z9_address6_to_network.<locals>.dec2bin.<locals>.<listcomp>r rQ )r� r� )r� �countr r� r �dec2binf s $z%_address6_to_network.<locals>.dec2binr z8_address6_to_network: skipping address without a netmaskr r Tr z>8H� � rm r� rR r� � � � r� )r@ r r r2 r r� r� r r( r) r� r� r� r� r< r> r� )r, r� r � orig_host�netmask�unpackedr� �ir� �jr� r- r� rD r r r �_address6_to_networkd sT � � &� � � ,�� r� c C s^ |� d�}t|�dkst|d |�st�|d }|d }|dks$|dkr&dS | }d|v rD|� d�}t|�dks>t|d |�s@t�|d }|dksL|dkrNdS |r[t|�rXt|�sZt�n t|�rct|�set�t||�rq|sqt||�}|r�td||f �� d�d }td||f �� d�d }||kS t d||f �� d�d }t d||f �� d�d }||kS ) z&Determine if address x is in network yr r r r z0.0.0.0z::Tr� ) r r r2 r r. r3 r* r� r� r? ) � tested_add� tested_netr5 r r� r� �address� orig_networkrD r r r � in_network� s\ � ���������r� c C sH d} dD ]}t j�|d�} t j�| �r nd} q| dkr"ttjd��| S )Nr )z/sbinz/binz /usr/sbinz/usr/binz/usr/local/sbinz/usr/local/bin�iptableszCould not find iptables)r] r� r� �existsrT rU rV )r� �dr r r �_find_system_iptables� s r� c C sT | du rt � } t| dg�\}}|dkrttjd| ��t�d|�}t�dd|d �S ) zReturn iptables versionNz-Vr zError running '%s'z\sz^vr r )r� rx rT rU rV r& r �sub)r� rb ra r r r r �get_iptables_version� s r� c C s� dd� }|rt �� dkrttjd��| du rt� } g }d}| �d�r$d}|td d d �7 }t| d |g�\}}|dkr?ttj |��|| |g d ��rL|� d � || |g d��rY|� d� t| d|g� t| d|g�\}}|dkrsttj |��|S )z[Return capabilities set for netfilter to support new features. Callers must be root.c S s* | d|g}t || �\}}|dkrdS dS )Nz-Ar TF)rx )r� �chain�rule�argsrb ra r r r �test_cap� s z,get_netfilter_capabilities.<locals>.test_capr z Must be rootNz ufw-caps-test� ip6tableszufw6-caps-testr )�prefix�dirz-N)�-m� conntrack� --ctstate�NEWr� �recentz--setz recent-set) r� r� r r r� r z--updatez --seconds�30z --hitcountr6 z recent-updatez-Fz-X) r] �getuidrT rU �EPERMr� �endswithr rx rV r< )r� � do_checksr� �capsr� rb ra r r r �get_netfilter_capabilities� s, r c C s t | �}t� }|�� D ]}|�d�s|�d�sq |�� }|d }|d �d�d }t� }d�|d �d�dd� �|d< |d |d < |d �d �d |d < |d dkrZ|d |d< n |d �d �d |d< ||vrut� ||< g || |< n ||| vr�g || |< || | �|� q |S )z:Get and parse netstat the output from get_netstat_output()r r r r �:rQ N�laddrrR �uidr� r r� �-r� )�get_netstat_output�dict� splitlines� startswithr r� r< )r5 �netstat_outputr� r� r r r �itemr r r �parse_netstat_output' s, r c s$ d}|r[d}t j�|�sttjd| ��t|��� D ]5}|�� � | � d krOd� � fdd�t dt � d �d �D ��}� d � � d krOd |t � d � � d �f }q|dkrZttjd��n0t�tjtj�}zt�t�|�� dt�d| dd� ��dd� �}W n ty� ttjd��w t||�d S )z Get IP address for interfacer �/proc/net/if_inet6�'%s' does not existr� r c � g | ] }� d ||d � �qS �r r� r �r� r� �r r r r� [ � z"get_ip_from_if.<locals>.<listcomp>r r� r �80r� r� �No such devicei� �256sN� � � )r] r� r� rT rU rV rI r� r r� r� r r� r� r� �ENODEVr r0 � SOCK_DGRAMr� �fcntl�ioctlrZ r� r� r rF )�ifnamer5 r, �procr� r� r r r �get_ip_from_ifM s8 �� �� � �r( c sZ d}d}t | �r d}d}n t| �sttjd��tj�|�s%ttj d| ��d}|rzt |�� � D ]H}|� � � � d � � }d �� fd d �td t� d �d �D ��}� d �� dkrdd|t� d �� d�f }| |ksrd|v rwt| |d�rw|} |S q/|S t |�� � D ]*}d |vr�q�|� d �d � � }zt|d�}W n ty� Y q�w || kr�|} |S q�|S )z Get interface for IP addressFz /proc/net/devTr r r r r� r c r r r r r r r r� � r z"get_if_from_ip.<locals>.<listcomp>r r� r r r� r� r )r. r3 r� rU r" r] r� r� rT rV rI r� r �stripr� r� r r� r� r� r( )r, r5 r' �matchedr� r& �tmp_addr�ipr r r �get_if_from_ipm sR �� � ��r- c C s t �d�} | �� t�d�}t� }| D ]n}|�|�sqt j�d|d�}t � |t j t j B �s.qd}z t � t j�d|d��}W n t yF Y nw zt �|�}W n t yW Y qw |D ]&}zt �t j�||��d }W n t ys Y qZw d|t j�|�f ||< qZq|S )z Get inodes of files in /procr� r� r` r r� r r� )r] �listdirr� r& �compiler r' r� r� �access�F_OK�R_OK�readlinkr r� �basename) � proc_files�pat�inodesr� �fd_path�exe_path�dirsr� �inoder r r �_get_proc_inodes� s< � � ��r< c C s ddddddddd d d d � }d dddd�}t j�d| �}t �|t jt jB �s(t�g }d}t|��� }|D ]L}|� � }|s?d}q4|t ||d d� } | � d�rRd} n | � d�r\| d kr\q4||d � d�\} } ||d } ||d } |� | t | d�| | | f� q4|S ) z=Read /proc/net/(tcp|udp)[6] file and return a list of tuples � ESTABLISHED�SYN_SENT�SYN_RECV� FIN_WAIT1� FIN_WAIT2� TIME_WAIT�CLOSE� CLOSE_WAIT�LAST_ACK�LISTEN�CLOSING) r r rR r� r� r� r� r� � � � r rR r� rH )� local_addr�stater r; z /proc/netFTrL r� r �NAr rK r r r; ) r] r� r� r0 r1 r2 r rI r� r r� r r< )�protocol� tcp_states�proc_net_fieldsrJ r� � skipped_first�linesr� �fieldsrL r r r r; r r r �_read_proc_net_protocol� sL � � rT c s� d}t � �dkr@d�tddd�D ]}�d�� fdd�t|d |d�D ��7 �qtd��fd d�tdt ��d �D ��d �d }|S g �� fd d�tddd�D �D ] }��tt|d ��� qOtd���d�d }|S )zDConvert an address from /proc/net/(tcp|udp)* to a normalized addressr r� r r� c � g | ] }� |d |� �qS �r r �r� r� ��paddrr r r� � r� z(convert_proc_address.<locals>.<listcomp>���r c s g | ] }� ||d � � � �qS )r� )r� rW r r r r� � r r� Tc rU rV r rW rX r r r� � r� r� �.F)r r� r� rF r< rr r� )rY � convertedr� r )rY r r �convert_proc_address� s$ * ��� � r] c C s� t � }ddg}| r|ddg7 }|D ] }zt|�||< W q ty. td| �}t|� Y qw t� }t|�� �}|�� d}|D ]0}|| D ])\}} } } } t |�} d}t | �|v r_|t | � }|d|d | | f | | | |f 7 }qFq@|S ) z5netstat-style output, without IPv6 address truncationr r �tcp6�udp6z!Could not get statistics for '%s'r r z %-5s %-46s %-11s %-5s %-11s %s z%s:%s) r rT r r r% r< �list�keysr� r] r� )r5 � proc_net_datar �pr� r7 � protocolsr� r r r r; rL r, r� r r r r s8 � �� r c C sV |du r| S | � d�r"t| �dk r|}|S tj�|| dd� �}|S tj�|| �}|S )zAdd prefix to dirNr r r )r r r] r� r� )r� r� �newdirr r r � _findpath& s ��rf c C s4 t jd dk r t�| d�S t�| jddd���d�S )z,Take a string and convert it to a hex stringr rR �hexr r� )�errorsrS )rX r\ �codecsr� �binascii�hexlify�decode)r� r r r � hex_encode4 s rm c C s0 t jd dk r| jdd��d�S t�| ��d�S )z,Take a hex string and convert it to a stringr rR rg )�encodingr )rX r\ rl rj � unhexlify)�hr r r � hex_decode= s rq � /run/ufw.lockc C s$ d}|st | d�}t�|tj� |S )zCreate a blocking lockfileN�w)rI r$ �lockf�LOCK_EX)�lockfile�dryrun�lockr r r � create_lockD s ry c C s> | du rdS zt �| t j� | �� W dS ty Y dS w )z(Free lockfile created with create_lock()N)r$ rt �LOCK_UNrO r )rx r r r � release_lockM s �r{ )r )Tr� )NT)F)rr F)I�__doc__� __future__r rj ri rU r$ r� r� r] r& rd r r� rn rX � functoolsr �tempfiler r r� rW �supported_protocolsr �ipv4_only_protocolsr r" r. r3 r2 r9 rF rK rP rc rj rx r~ r� r� r% rY r� r@ r� r� r� �getpidr� r� r* r1 r= r� r? r� r� r� r� r r r( r- r< rT r] r rf rm rq ry r{ r r r r �<module> s� 7 ' . #:4 9 & /%/#