diff options
| -rwxr-xr-x | irker/bin/irk.py | 43 | ||||
| -rwxr-xr-x | irker/bin/test-0.sh | 7 | ||||
| -rwxr-xr-x | irker/bin/test-evil.sh | 10 | ||||
| -rwxr-xr-x | irker/bin/test.sh | 10 |
4 files changed, 70 insertions, 0 deletions
diff --git a/irker/bin/irk.py b/irker/bin/irk.py new file mode 100755 index 0000000..01045af --- /dev/null +++ b/irker/bin/irk.py @@ -0,0 +1,43 @@ +#!/usr/bin/python3 + +# Copyright (C) 2013-2021 Daniel Baumann <daniel@debian.org> +# +# SPDX-License-Identifier: GPL-3.0+ +# +# This program is free software: you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program. If not, see <http://www.gnu.org/licenses/>. + +from cgi import FieldStorage +from datetime import datetime +from os import getenv +from subprocess import Popen, PIPE +from sys import exit + +def main(): + form = FieldStorage() + + if form.getvalue("target") and form.getvalue("message"): + Target = form.getvalue("target").split()[0] + Message = form.getvalue("message").split()[0] + + print('Content-Type: text/html\n') + + Date = datetime.now().strftime("%Y-%m-%d %H:%M:%S") + + print('Target: ' + Target) + print('Message: ' + Message) + + exit(0) + +if __name__ == '__main__': + main() diff --git a/irker/bin/test-0.sh b/irker/bin/test-0.sh new file mode 100755 index 0000000..cf67db8 --- /dev/null +++ b/irker/bin/test-0.sh @@ -0,0 +1,7 @@ +#!/bin/sh + +curl -i \ + --header "Content-Type: application/json" \ + --request POST \ + --data '' \ + https://irker.open-infrastructure.net/test.py diff --git a/irker/bin/test-evil.sh b/irker/bin/test-evil.sh new file mode 100755 index 0000000..9120238 --- /dev/null +++ b/irker/bin/test-evil.sh @@ -0,0 +1,10 @@ +#!/bin/sh + +curl -i \ + --header "Content-Type: application/json" \ + --request POST \ + --data '{ + "target":"foo; touch /bar", + "message":"xyz xyz" + }' \ + https://irker.open-infrastructure.net/test.py diff --git a/irker/bin/test.sh b/irker/bin/test.sh new file mode 100755 index 0000000..faeb8fe --- /dev/null +++ b/irker/bin/test.sh @@ -0,0 +1,10 @@ +#!/bin/sh + +curl -i \ + --header "Content-Type: application/json" \ + --request POST \ + --data '{ + "target":"abc", + "message":"xyz xyz" + }' \ + https://irker.open-infrastructure.net/test.py |