SkullCyberArmy Bypass Shell

Uname : Linux server1.cgrithy.com 3.10.0-1160.95.1.el7.x86_64 #1 SMP Mon Jul 24 13:59:37 UTC 2023 x86_64
Soft : Apache
Ip : 203.161.60.200
Port : 443

File Name : jwt_issuer.py

import random
import string
from datetime import datetime, timedelta
from defence360agent.subsys.panels.base import InvalidTokenException
from defence360agent.contracts.config import UIRole, UserType

UIRoleToUserType = {
    UIRole.ADMIN: UserType.ROOT,
    UIRole.CLIENT: UserType.NON_ROOT,
}

JWT_SECRET = "".join(
    random.choice(string.ascii_uppercase + string.digits) for _ in range(64)
)
TOKEN_EXPIRATION_TTL = timedelta(hours=1)

class JWTIssuer:
    @classmethod
    def get_token(cls, user_name: str, user_type: UIRole) -> str:
        """
        Generates a token with several encoded fields:
            user name,
            user type,
            expiration timestamp
        """

import jwt

return jwt.encode(
            {
                "user_type": user_type,
                "username": user_name,
                "exp": (datetime.now() + TOKEN_EXPIRATION_TTL).timestamp(),
            },
            JWT_SECRET,
        )

@classmethod
    def parse_token(cls, token: str):
        import jwt

# if handle these exceptions at global level,
        # jwt shoud be imported there,
        # increasing memory consumation
        try:
            decoded = jwt.decode(token, JWT_SECRET, algorithms=["HS256"])
        except jwt.PyJWTError:
            raise InvalidTokenException("INVALID_TOKEN")

return {
            "user_name": decoded["username"],
            "user_type": UIRoleToUserType[decoded["user_type"]],
        }

Name	Type	Size	Permission	Last Modified	Actions
.	dir	-	0755	2023-09-13 09:02:44
..	dir	-	0755	2023-09-13 09:02:44
__pycache__	dir	-	0755	2023-09-13 09:02:44
server	dir	-	0755	2023-09-13 09:02:44
__init__.py	application/x-empty	0 B	0644	2023-08-30 02:51:01
health.py	text/plain	3.34 KB	0644	2023-08-30 02:51:01
inactivity.py	text/plain	1.55 KB	0644	2023-08-30 02:51:01
integration_conf.py	text/x-script.python	883 B	0644	2023-08-30 02:51:01
jwt_issuer.py	text/x-script.python	1.45 KB	0644	2023-08-30 02:51:01
newsfeed.py	text/plain	4.24 KB	0644	2023-08-30 02:51:01
pam_auth.py	text/x-script.python	824 B	0644	2023-08-30 02:51:01