dxs/onionr
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Removed Windows specific code

Browse source
This commit is contained in:
Kevin Froman 2020-08-12 17:21:11 -05:00
parent ce63c4cd3b
commit 272d7d7f74
11 changed files with 37 additions and 70 deletions
Download patch file Download diff file Expand all files Collapse all files

16
src/bigbrother/ministry/ofexec.py
View file

@ -26,19 +26,9 @@ from onionrexceptions import ArbitraryCodeExec
def block_system(cmd):
"""Prevent os.system except for whitelisted commands+contexts."""
allowed = 'taskkill /PID '
is_ok = False
if platform.system() == 'Windows':
if cmd.startswith(allowed):
for c in cmd.split(allowed)[1]:
if not c.isalnum() or c not in ('/', 'F', ' '):
break
else:
is_ok = True
if not is_ok:
logger.warn('POSSIBLE EXPLOIT DETECTED, SEE LOGS', terminal=True)
logger.warn(f'POSSIBLE EXPLOIT: shell command not in whitelist: {cmd}')
raise ArbitraryCodeExec('os.system command not in whitelist')
logger.warn('POSSIBLE EXPLOIT DETECTED, SEE LOGS', terminal=True)
logger.warn(f'POSSIBLE EXPLOIT: shell command not in whitelist: {cmd}')
raise ArbitraryCodeExec('os.system command not in whitelist')
def block_exec(event, info):