shell bypass 403
��Yf}9 �
@ s� d Z d d l Z d d l Z d d l Z y d d l Z d Z Wn e k
rZ d Z Yn Xd d g Z Gd d � d e � Z d Z
d Z d
Z d Z
e e
Z d Z Gd
d � d � Z e r� Gd d � d e � Z e j d � e d k r�d d l Z e e j d � Z e e j � � e j e j d � e j e j d � e j � e j � \ Z Z xj e d e d � D]U Z e j! e � \ Z" Z# Z$ e d e � x e# D] Z% e d e% � q�We d � qtWe j& � d S)z@A POP3 client class.
Based on the J. Myers POP3 draft, Jan. 96
� NTF�POP3� error_protoc @ s e Z d Z d S)r N)�__name__�
__module__� __qualname__� r r �+/opt/alt/python35/lib64/python3.5/poplib.pyr s �n i� s
s
i c @ s� e Z d Z d Z d Z e e j d d � Z d d � Z d d � Z
d d
� Z d d � Z d
d � Z
d d � Z d d � Z d d � Z d d � Z d d � Z d d � Z d d � Z d d � Z d d d! � Z d" d# � Z d$ d% � Z d& d' � Z d( d) � Z d* d+ � Z d, d- � Z d. d/ � Z e j d0 � Z d1 d2 � Z! d3 d4 � Z" d d5 d6 � Z# d7 d8 � Z$ d9 d: � Z% d d; d< � Z& d S)=r aP This class supports both the minimal and optional command sets.
Arguments can be strings or integers (where appropriate)
(e.g.: retr(1) and retr('1') both work equally well.
Minimal Command Set:
USER name user(name)
PASS string pass_(string)
STAT stat()
LIST [msg] list(msg = None)
RETR msg retr(msg)
DELE msg dele(msg)
NOOP noop()
RSET rset()
QUIT quit()
Optional Commands (some servers support these):
RPOP name rpop(name)
APOP name digest apop(name, digest)
TOP msg n top(msg, n)
UIDL [msg] uidl(msg = None)
CAPA capa()
STLS stls()
UTF8 utf8()
Raises one exception: 'error_proto'.
Instantiate with:
POP3(hostname, port=110)
NB: the POP protocol locks the mailbox from user
authorization until QUIT, so be sure to get in, suck
the messages, and quit, each time you access the
mailbox.
POP is a line-based protocol, which means large mail
messages consume lots of python cycles reading them
line-by-line.
If it's available on your mail server, use IMAP4
instead, it doesn't suffer from the two problems
above.
zUTF-8c C s^ | | _ | | _ d | _ | j | � | _ | j j d � | _ d | _ | j � | _ d S)NF�rbr )
�host�port�_tls_established�_create_socket�sock�makefile�file�
_debugging�_getresp�welcome)�selfr r �timeoutr r r �__init__a s z
POP3.__init__c C s t j | j | j f | � S)N)�socketZcreate_connectionr r )r r r r r r k s zPOP3._create_socketc C s: | j d k r" t d t | � � | j j | t � d S)N� z*put*)r �print�reprr Zsendall�CRLF)r �liner r r �_putlinen s z
POP3._putlinec C s? | j r t d t | � � t | | j � } | j | � d S)Nz*cmd*)r r r �bytes�encodingr )r r r r r �_putcmdu s z POP3._putcmdc C s� | j j t d � } t | � t k r4 t d � � | j d k rV t d t | � � | sh t d � � t | � } | d d � t k r� | d d � | f S| d d � t k r� | d d � | f S| d d � | f S)
Nr z
line too longz*get*z-ERR EOF� ���r# ���r$ )
r �readline�_MAXLINE�lenr r r r r �CR)r r �octetsr r r �_getline s z
POP3._getlinec C sS | j � \ } } | j d k r4 t d t | � � | j d � sO t | � � | S)Nr z*resp*� +)r* r r r �
startswithr )r �resp�or r r r � s z
POP3._getrespc C s� | j � } g } d } | j � \ } } xb | d k r� | j d � rb | d } | d d � } | | } | j | � | j � \ } } q- W| | | f S)Nr � .s ..r )r r* r, �append)r r- �listr) r r. r r r � _getlongresp� s
zPOP3._getlongrespc C s | j | � | j � S)N)r! r )r r r r r � _shortcmd� s
zPOP3._shortcmdc C s | j | � | j � S)N)r! r2 )r r r r r �_longcmd� s
z
POP3._longcmdc C s | j S)N)r )r r r r �
getwelcome� s zPOP3.getwelcomec C s
| | _ d S)N)r )r �levelr r r �set_debuglevel� s zPOP3.set_debuglevelc C s | j d | � S)zVSend user name, return response
(should indicate password required).
zUSER %s)r3 )r �userr r r r8 � s z POP3.userc C s | j d | � S)z�Send password, return response
(response includes message count, mailbox size).
NB: mailbox is locked by server from here to 'quit()'
zPASS %s)r3 )r Zpswdr r r �pass_� s z
POP3.pass_c C sa | j d � } | j � } | j r7 t d t | � � t | d � } t | d � } | | f S)z]Get mailbox status.
Result is tuple of 2 ints (message count, mailbox size)
ZSTATz*stat*r r" )r3 �splitr r r �int)r ZretvalZretsZ numMessagesZ sizeMessagesr r r �stat� s z POP3.statNc C s* | d k r | j d | � S| j d � S)a Request listing, return result.
Result without a message number argument is in form
['response', ['mesg_num octets', ...], octets].
Result when a message number argument is given is a
single response: the "scan listing" for that message.
NzLIST %sZLIST)r3 r4 )r �whichr r r r1 � s z POP3.listc C s | j d | � S)zoRetrieve whole message number 'which'.
Result is in form ['response', ['line', ...], octets].
zRETR %s)r4 )r r= r r r �retr� s z POP3.retrc C s | j d | � S)zFDelete message number 'which'.
Result is 'response'.
zDELE %s)r3 )r r= r r r �dele� s z POP3.delec C s
| j d � S)zXDoes nothing.
One supposes the response indicates the server is alive.
ZNOOP)r3 )r r r r �noop s z POP3.noopc C s
| j d � S)z(Unmark all messages marked for deletion.ZRSET)r3 )r r r r �rset s z POP3.rsetc C s | j d � } | j � | S)zDSignoff: commit changes on server, unlock mailbox, close connection.ZQUIT)r3 �close)r r- r r r �quit s
z POP3.quitc C s� z, | j } d | _ | d k r+ | j � Wd | j } d | _ | d k r� zm y | j t j � WnR t k
r� } z2 | j t j k r� t | d d � d k r� � WYd d } ~ Xn XWd | j � XXd S)z8Close the connection without assuming anything about it.NZwinerrorr i&' )
r rB r Zshutdownr Z SHUT_RDWR�OSError�errnoZENOTCONN�getattr)r r r �excr r r rB s z
POP3.closec C s | j d | � S)zNot sure what this does.zRPOP %s)r3 )r r8 r r r �rpop2 s z POP3.rpops \+OK.[^<]*(<.*>)c C s� t | | j � } | j j | j � } | s9 t d � � d d l } | j d � | } | j | � j � } | j
d | | f � S)a Authorisation
- only possible if server has supplied a timestamp in initial greeting.
Args:
user - mailbox user;
password - mailbox password.
NB: mailbox is locked by server from here to 'quit()'
z!-ERR APOP not supported by serverr Nr z
APOP %s %s) r r � timestamp�matchr r �hashlib�groupZmd5Z hexdigestr3 )r r8 ZpasswordZsecret�mrK Zdigestr r r �apop9 s z POP3.apopc C s | j d | | f � S)z�Retrieve message header of message number 'which'
and first 'howmuch' lines of message body.
Result is in form ['response', ['line', ...], octets].
z TOP %s %s)r4 )r r= Zhowmuchr r r �topN s zPOP3.topc C s* | d k r | j d | � S| j d � S)z�Return message digest (unique id) list.
If 'which', result contains unique id for that message
in the form 'response mesgnum uid', otherwise result is
the list ['response', ['mesgnum uid', ...], octets]
NzUIDL %sZUIDL)r3 r4 )r r= r r r �uidlW s z POP3.uidlc C s
| j d � S)zITry to enter UTF-8 mode (see RFC 6856). Returns server response.
ZUTF8)r3 )r r r r �utf8c s z POP3.utf8c C s� d d � } i } yJ | j d � } | d } x* | D]" } | | � \ } } | | | <q5 WWn1 t k
r� } z t d � � WYd d } ~ Xn X| S)a Return server capabilities (RFC 2449) as a dictionary
>>> c=poplib.POP3('localhost')
>>> c.capa()
{'IMPLEMENTATION': ['Cyrus', 'POP3', 'server', 'v2.2.12'],
'TOP': [], 'LOGIN-DELAY': ['0'], 'AUTH-RESP-CODE': [],
'EXPIRE': ['NEVER'], 'USER': [], 'STLS': [], 'PIPELINING': [],
'UIDL': [], 'RESP-CODES': []}
>>>
Really, according to RFC 2449, the cyrus folks should avoid
having the implementation split into multiple arguments...
c S s- | j d � j � } | d | d d � f S)N�asciir r )�decoder: )r Zlstr r r � _parsecapv s z POP3.capa.<locals>._parsecapZCAPAr z!-ERR CAPA not supported by serverN)r4 r ) r rT �capsr- ZrawcapsZcaplineZcapnmZcapargsZ_errr r r �capai s
z POP3.capac C s� t s t d � � | j r' t d � � | j � } d | k rK t d � � | d k rc t j � } | j d � } | j | j d | j �| _ | j j
d � | _ d | _ | S) z{Start a TLS session on the active connection as specified in RFC 2595.
context - a ssl.SSLContext
z-ERR TLS support missingz$-ERR TLS session already establishedZSTLSz!-ERR STLS not supported by serverN�server_hostnamer
T) �HAVE_SSLr r
rV �ssl�_create_stdlib_contextr3 � wrap_socketr r r r )r �contextrU r- r r r �stls� s z POP3.stls)'r r r �__doc__r � POP3_PORTr �_GLOBAL_DEFAULT_TIMEOUTr r r r! r* r r2 r3 r4 r5 r7 r8 r9 r< r1 r> r? r@ rA rC rB rH �re�compilerI rN rO rP rQ rV r] r r r r r 2 s@ +
c @ sU e Z d Z d Z e d d e j d d d � Z d d � Z d d d d d � Z d S) �POP3_SSLa POP3 client class over SSL connection
Instantiate with: POP3_SSL(hostname, port=995, keyfile=None, certfile=None,
context=None)
hostname - the hostname of the pop3 over ssl server
port - port number
keyfile - PEM formatted file that contains your private key
certfile - PEM formatted certificate chain file
context - a ssl.SSLContext
See the methods of the parent class POP3 for more documentation.
Nc C s� | d k r$ | d k r$ t d � � | d k rH | d k rH t d � � | | _ | | _ | d k r~ t j d | d | � } | | _ t j | | | | � d S)Nz4context and keyfile arguments are mutually exclusivez5context and certfile arguments are mutually exclusive�certfile�keyfile)�
ValueErrorre rd rY rZ r\ r r )r r r re rd r r\ r r r r � s zPOP3_SSL.__init__c C s1 t j | | � } | j j | d | j �} | S)NrW )r r r\ r[ r )r r r r r r r � s zPOP3_SSL._create_socketc C s t d � � d S)z�The method unconditionally raises an exception since the
STLS command doesn't make any sense on an already established
SSL/TLS session.
z$-ERR TLS session already establishedN)r )r re rd r\ r r r r] � s z
POP3_SSL.stls)
r r r r^ �
POP3_SSL_PORTr r` r r r] r r r r rc � s
rc �__main__r r" � z Message %d:z z-----------------------)'r^ rE ra r rY rX � ImportError�__all__� Exceptionr r_ rg r( ZLFr r& r rc r0 r �sys�argv�ar r5 r8 r9 r1 r< ZnumMsgsZ totalSize�range�ir> �header�msgr) r rC r r r r �<module> sH
� k,