用python写的agent

发布时间：2019-09-18 07:24:51编辑：auto阅读（1478）

    解决apache+python无法执行一些root命令的问题

    用root启动python服务器端，远程可以执行任何root命令

    #/usr/bin/python
    #Filename:agent.py
    #siyu@2012-6-29

    #example:
    #curl hostname:PORT_NUMBER/?PASSWORD?COMMAND?OPTION
    #

    import time
    import BaseHTTPServer
    import urlparse
    import os

    PASSWORD = 'hello1234'

    HOST_NAME = 'sqa.broom.cm4' # !!!REMEMBER TO CHANGE THIS!!!
    PORT_NUMBER = 8082 # Maybe set this to 9000.

    def testcommand(c):
            commandzoo = ('ls','fdisk')
            if c not in commandzoo:
                    return 1
            return 0

    class MyHandler(BaseHTTPServer.BaseHTTPRequestHandler):
            def do_HEAD(s):
                    s.send_response(200)
                    s.send_header("Content-type", "text/html")
                    s.end_headers()
            def do_GET(s):
                    """Respond to a GET request."""
                    s.send_response(200)
                    s.send_header("Content-type", "text/html")
                    s.end_headers()
                    #s.wfile.write("<html><head><title>ngis agent</title></head>")
                    print s.path
                    string = s.path
                    string = string.split('?')
                    passwd = string[1]
                    command = string[2]
                    option = string[3]
                    if passwd == PASSWORD:
                            if testcommand(command) == 1:
                                    s.wfile.write("command not found")
                            else:
                                    x = ""
                                    #x = "/bin/"
                                    x = command
                                    x += " "
                                    x += option
                                    print x
                                    output = os.system(x)
                                    print "result",output
                                    s.wfile.write(output)
                    else:
                            s.wfile.write("password error")
                    #s.wfile.write("<p>You accessed path: %s</p>" % s.path)
                    #s.wfile.write("</body></html>")

    if __name__ == '__main__':
            server_class = BaseHTTPServer.HTTPServer
            httpd = server_class((HOST_NAME, PORT_NUMBER), MyHandler)
            print time.asctime(), "Server Starts - %s:%s" % (HOST_NAME, PORT_NUMBER)
            try:
                    httpd.serve_forever()
            except KeyboardInterrupt:
                    pass
            httpd.server_close()
            print time.asctime(), "Server Stops - %s:%s" % (HOST_NAME, PORT_NUMBER)

关键字：

上一篇： python curses库

下一篇： python自动代理切换