festival.edmaven.com:80

Linux b747.shapiroconsult.com 3.10.0-1160.119.1.vz7.224.4 #1 SMP Mon Sep 30 15:36:27 MSK 2024 x86_64
Apache
173.231.212.80

File Name : regex.py

"""Regular Expression scanner"""
from __future__ import print_function, unicode_literals, absolute_import
import re
import sre_constants
import json
import time
import sys
import os
import requests
from shellscan.update import REPO_FRESHNESS, REPO

def regex_scan(content):
    """Scan content with the SIG_RE object, return first match if possible"""
    match = SIG_RE.search(content)
    if match is not None:
        return match.groups()[0]

def compile_sigs():
    """Compile regular expressions from json"""
    if os.getuid() != 0:
        # if we are root, we will trust that regex.json is not old
        # due to update_json_if_old() running in processing.py
        try:
            mtime = os.path.getmtime('/opt/shellscan/sigs/regex.json')
            local_old = abs(time.time() - mtime) > REPO_FRESHNESS
        except OSError:
            local_old = True
        if local_old:
            try:
                str_sigs = requests.get(
                    '{}/{}'.format(REPO, 'regex.json'),
                    timeout=10.0
                ).json()
                return re.compile('({0})'.format('|'.join(str_sigs)))
            except (
                sre_constants.error,
                requests.exceptions.RequestException,
                ValueError
            ) as exc:
                print(
                    "Error reading regex.json from repo: "
                    "{0.message} - Trying older local "
                    "regex.json if available.".format(exc)
                )
    try:
        with open('/opt/shellscan/sigs/regex.json') as handle:
            str_sigs = json.load(handle)
            return re.compile('({0})'.format('|'.join(str_sigs)))
    except (ValueError, IOError, sre_constants.error) as exc:
        sys.exit('local regex.json is unreadable: {0.message}'.format(exc))

SIG_RE = compile_sigs()

Name	Type	Size	Owner/Group	Permission	Last Modified	Actions
.	dir	-	root/root	0755	2019-01-18 05:08:25
..	dir	-	root/root	0755	2019-01-18 05:08:24
__init__.py	text/plain	26 B	root/root	0644	2019-01-16 04:39:17
__init__.pyc	application/octet-stream	184 B	root/root	0644	2019-01-18 05:08:24
aho_corasick.py	text/plain	3.43 KB	root/root	0644	2019-01-16 04:39:17
aho_corasick.pyc	application/octet-stream	3.2 KB	root/root	0644	2019-01-18 05:08:24
regex.py	text/plain	1.81 KB	root/root	0644	2019-01-16 04:39:17
regex.pyc	application/octet-stream	2.05 KB	root/root	0644	2019-01-18 05:08:25