Your IP : 216.73.216.95


Current Path : /usr/share/modsecurity-crs.bk/util/regexp-assemble/
Upload File :
Current File : //usr/share/modsecurity-crs.bk/util/regexp-assemble/regexp-cmdline.py

#!/usr/bin/env python
#
# Convert a word list to a list of regexps usable by Regexp::Assemble.
#
# Examples:
# cat regexp-932100.txt | ./regexp-cmdline.py unix | ./regexp-assemble.pl 
# cat regexp-932110.txt | ./regexp-cmdline.py windows | ./regexp-assemble.pl 
# cat regexp-932150.txt | ./regexp-cmdline.py unix | ./regexp-assemble.pl 
#
# Refer to rule 932100, 932110, 932150 for documentation.
#

import fileinput, string, sys

# Convert a single line to regexp format, and insert anti-cmdline
# evasions between characters.
def regexp_str(str, evasion):
    # By convention, if the line starts with ' char, copy the rest
    # verbatim.
    if str[0] == "'":
        return str[1:]

    result = ''
    for i, char in enumerate(str):
        if i > 0:
            result += evasion
        result += regexp_char(char, evasion)

    return result

# Ensure that some special characters are escaped
def regexp_char(char, evasion):
    char = str.replace(char, ' ', '\s')
    char = str.replace(char, '.', '\.')
    char = str.replace(char, '-', '\-')
    char = str.replace(char, '+', r'''(?:\s|<|>).*''')
        # Unix: "cat foo", "cat<foo", "cat>foo"
    char = str.replace(char, '@', r'''(?:[\s,;]|\.|/|<|>).*''')
        # Windows: "more foo", "more,foo", "more;foo", "more.com", "more/e",
        # "more<foo", "more>foo"
    return char

# Insert these sequences between characters to prevent evasion.
# This emulates the relevant parts of t:cmdLine.
evasions = {
    'unix': r'''[\\\\'\"]*''',
    'windows': r'''[\"\^]*''',
}

# Parse arguments
if len(sys.argv) <= 1 or not sys.argv[1] in evasions:
    print(sys.argv[0] + ' unix|windows [infile]')
    sys.exit(1)

evasion = evasions[sys.argv[1]]
del sys.argv[1]

# Process lines from input file, or if not specified, standard input
for line in fileinput.input():
    line = line.rstrip('\n')
    line = line.split('#')[0]
    if line != '':
        print(regexp_str(line, evasion))