Shell Bypass 403 GE-C666C

Ghost Exploiter Team Official

Directory >> /var/www/html/back/vendor/psy/psysh/src/Command/

File / Folder	Size	Action
.	-
ListCommand	--	ren
TimeitCommand	--	ren
BufferCommand.php	2.261KB	edt ren
ClearCommand.php	1.112KB	edt ren
CodeArgumentParser.php	1.479KB	edt ren
Command.php	7.896KB	edt ren
DocCommand.php	12.808KB	edt ren
DumpCommand.php	2.442KB	edt ren
EditCommand.php	5.747KB	edt ren
ExitCommand.php	1.137KB	edt ren
HelpCommand.php	3.31KB	edt ren
HistoryCommand.php	8.209KB	edt ren
ListCommand.php	10.187KB	edt ren
ParseCommand.php	3.649KB	edt ren
PsyVersionCommand.php	0.941KB	edt ren
ReflectingCommand.php	11.817KB	edt ren
ShowCommand.php	9.518KB	edt ren
SudoCommand.php	3.188KB	edt ren
ThrowUpCommand.php	3.422KB	edt ren
TimeitCommand.php	5.064KB	edt ren
TraceCommand.php	2.645KB	edt ren
WhereamiCommand.php	3.802KB	edt ren
WtfCommand.php	3.654KB	edt ren
YoloCommand.php	2.232KB	edt ren

<?php

/*
 * This file is part of Psy Shell.
 *
 * (c) 2012-2025 Justin Hileman
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

namespace Psy\Command;

use PhpParser\NodeTraverser;
use PhpParser\PrettyPrinter\Standard as Printer;
use Psy\CodeCleaner;
use Psy\CodeCleaner\NoReturnValue;
use Psy\CodeCleanerAware;
use Psy\Context;
use Psy\ContextAware;
use Psy\Exception\ErrorException;
use Psy\Exception\RuntimeException;
use Psy\Exception\UnexpectedTargetException;
use Psy\Reflection\ReflectionConstant;
use Psy\Sudo\SudoVisitor;
use Psy\Util\Mirror;
use Psy\Util\Str;
use Symfony\Component\Console\Formatter\OutputFormatter;
use Symfony\Component\Console\Output\ConsoleOutput;
use Symfony\Component\Console\Output\OutputInterface;

/**
 * An abstract command with helpers for inspecting the current context.
 */
abstract class ReflectingCommand extends Command implements ContextAware, CodeCleanerAware
{
    const CLASS_OR_FUNC = '/^[\\\\\w]+$/';
    const CLASS_MEMBER = '/^([\\\\\w]+)::(\w+)$/';
    const CLASS_STATIC = '/^([\\\\\w]+)::\$(\w+)$/';
    const INSTANCE_MEMBER = '/^(\$\w+)(::|->)(\w+)$/';

protected Context $context;
    protected CodeCleaner $cleaner;
    private CodeArgumentParser $parser;
    private NodeTraverser $traverser;
    private Printer $printer;

/**
     * {@inheritdoc}
     */
    public function __construct($name = null)
    {
        $this->parser = new CodeArgumentParser();

// @todo Pass visitor directly to once we drop support for PHP-Parser 4.x
        $this->traverser = new NodeTraverser();
        $this->traverser->addVisitor(new SudoVisitor());

$this->printer = new Printer();

parent::__construct($name);
    }

/**
     * ContextAware interface.
     *
     * @param Context $context
     */
    public function setContext(Context $context)
    {
        $this->context = $context;
    }

/**
     * CodeCleanerAware interface.
     */
    public function setCodeCleaner(CodeCleaner $cleaner)
    {
        $this->cleaner = $cleaner;
    }

/**
     * Get the target for a value.
     *
     * @throws \InvalidArgumentException when the value specified can't be resolved
     *
     * @param string $valueName Function, class, variable, constant, method or property name
     *
     * @return array (class or instance name, member name, kind)
     */
    protected function getTarget(string $valueName): array
    {
        $valueName = \trim($valueName);
        $matches = [];
        switch (true) {
            case \preg_match(self::CLASS_OR_FUNC, $valueName, $matches):
                return [$this->resolveName($matches[0], true), null, 0];

case \preg_match(self::CLASS_MEMBER, $valueName, $matches):
                return [$this->resolveName($matches[1]), $matches[2], Mirror::CONSTANT | Mirror::METHOD];

case \preg_match(self::CLASS_STATIC, $valueName, $matches):
                return [$this->resolveName($matches[1]), $matches[2], Mirror::STATIC_PROPERTY | Mirror::PROPERTY];

case \preg_match(self::INSTANCE_MEMBER, $valueName, $matches):
                if ($matches[2] === '->') {
                    $kind = Mirror::METHOD | Mirror::PROPERTY;
                } else {
                    $kind = Mirror::CONSTANT | Mirror::METHOD;
                }

return [$this->resolveObject($matches[1]), $matches[3], $kind];

default:
                return [$this->resolveObject($valueName), null, 0];
        }
    }

/**
     * Resolve a class or function name (with the current shell namespace).
     *
     * @throws ErrorException when `self` or `static` is used in a non-class scope
     *
     * @param string $name
     * @param bool   $includeFunctions (default: false)
     */
    protected function resolveName(string $name, bool $includeFunctions = false): string
    {
        $shell = $this->getShell();

// While not *technically* 100% accurate, let's treat `self` and `static` as equivalent.
        if (\in_array(\strtolower($name), ['self', 'static'])) {
            if ($boundClass = $shell->getBoundClass()) {
                return $boundClass;
            }

if ($boundObject = $shell->getBoundObject()) {
                return \get_class($boundObject);
            }

$msg = \sprintf('Cannot use "%s" when no class scope is active', \strtolower($name));
            throw new ErrorException($msg, 0, \E_USER_ERROR, "eval()'d code", 1);
        }

if (\substr($name, 0, 1) === '\\') {
            return $name;
        }

// Use CodeCleaner to resolve the name through use statements and namespace
        if (Str::isValidClassName($name)) {
            $resolved = $this->cleaner->resolveClassName($name);

// If we got a different name back, use it
            if ($resolved !== $name) {
                return $resolved;
            }

// Fall back to the old resolveCode approach for edge cases
            try {
                $resolved = $this->resolveCode($name.'::class');
                if ($resolved !== $name) {
                    return $resolved;
                }
            } catch (RuntimeException $e) {
                // Fall through to namespace check
            }
        }

if ($namespace = $shell->getNamespace()) {
            $fullName = $namespace.'\\'.$name;

if (\class_exists($fullName) || \interface_exists($fullName) || ($includeFunctions && \function_exists($fullName))) {
                return $fullName;
            }
        }

return $name;
    }

/**
     * Get a Reflector and documentation for a function, class or instance, constant, method or property.
     *
     * @param string               $valueName Function, class, variable, constant, method or property name
     * @param OutputInterface|null $output    Optional output for displaying cleaner messages
     *
     * @return array (value, Reflector)
     */
    protected function getTargetAndReflector(string $valueName, ?OutputInterface $output = null): array
    {
        list($value, $member, $kind) = $this->getTarget($valueName);

// Display any implicit use statements that were added during name resolution
        if ($output !== null) {
            $this->writeCleanerMessages($output);
        }

return [$value, Mirror::get($value, $member, $kind)];
    }

/**
     * Resolve code to a value in the current scope.
     *
     * @throws RuntimeException when the code does not return a value in the current scope
     *
     * @param string $code
     *
     * @return mixed Variable value
     */
    protected function resolveCode(string $code)
    {
        try {
            // Add an implicit `sudo` to target resolution.
            $nodes = $this->traverser->traverse($this->parser->parse($code));
            $sudoCode = $this->printer->prettyPrint($nodes);
            $value = $this->getShell()->execute($sudoCode, true);
        } catch (\Throwable $e) {
            // Swallow all exceptions?
        }

if (!isset($value) || $value instanceof NoReturnValue) {
            throw new RuntimeException('Unknown target: '.$code);
        }

return $value;
    }

/**
     * Resolve code to an object in the current scope.
     *
     * @throws UnexpectedTargetException when the code resolves to a non-object value
     *
     * @param string $code
     *
     * @return object Variable instance
     */
    private function resolveObject(string $code)
    {
        $value = $this->resolveCode($code);

if (!\is_object($value)) {
            throw new UnexpectedTargetException($value, 'Unable to inspect a non-object');
        }

return $value;
    }

/**
     * Get a variable from the current shell scope.
     *
     * @param string $name
     *
     * @return mixed
     */
    protected function getScopeVariable(string $name)
    {
        return $this->context->get($name);
    }

/**
     * Get all scope variables from the current shell scope.
     *
     * @return array
     */
    protected function getScopeVariables(): array
    {
        return $this->context->getAll();
    }

/**
     * Given a Reflector instance, set command-scope variables in the shell
     * execution context. This is used to inject magic $__class, $__method and
     * $__file variables (as well as a handful of others).
     *
     * @param \Reflector $reflector
     */
    protected function setCommandScopeVariables(\Reflector $reflector)
    {
        $vars = [];

switch (\get_class($reflector)) {
            case \ReflectionClass::class:
            case \ReflectionObject::class:
                $vars['__class'] = $reflector->name;
                if ($reflector->inNamespace()) {
                    $vars['__namespace'] = $reflector->getNamespaceName();
                }
                break;

case \ReflectionMethod::class:
                $vars['__method'] = \sprintf('%s::%s', $reflector->class, $reflector->name);
                $vars['__class'] = $reflector->class;
                $classReflector = $reflector->getDeclaringClass();
                if ($classReflector->inNamespace()) {
                    $vars['__namespace'] = $classReflector->getNamespaceName();
                }
                break;

case \ReflectionFunction::class:
                $vars['__function'] = $reflector->name;
                if ($reflector->inNamespace()) {
                    $vars['__namespace'] = $reflector->getNamespaceName();
                }
                break;

case \ReflectionGenerator::class:
                $funcReflector = $reflector->getFunction();
                $vars['__function'] = $funcReflector->name;
                if ($funcReflector->inNamespace()) {
                    $vars['__namespace'] = $funcReflector->getNamespaceName();
                }
                if ($fileName = $reflector->getExecutingFile()) {
                    $vars['__file'] = $fileName;
                    $vars['__line'] = $reflector->getExecutingLine();
                    $vars['__dir'] = \dirname($fileName);
                }
                break;

case \ReflectionProperty::class:
            case \ReflectionClassConstant::class:
                $classReflector = $reflector->getDeclaringClass();
                $vars['__class'] = $classReflector->name;
                if ($classReflector->inNamespace()) {
                    $vars['__namespace'] = $classReflector->getNamespaceName();
                }
                // no line for these, but this'll do
                if ($fileName = $reflector->getDeclaringClass()->getFileName()) {
                    $vars['__file'] = $fileName;
                    $vars['__dir'] = \dirname($fileName);
                }
                break;

case ReflectionConstant::class:
                if ($reflector->inNamespace()) {
                    $vars['__namespace'] = $reflector->getNamespaceName();
                }
                break;
        }

if ($reflector instanceof \ReflectionClass || $reflector instanceof \ReflectionFunctionAbstract) {
            if ($fileName = $reflector->getFileName()) {
                $vars['__file'] = $fileName;
                $vars['__line'] = $reflector->getStartLine();
                $vars['__dir'] = \dirname($fileName);
            }
        }

$this->context->setCommandScopeVariables($vars);
    }

/**
     * Write log messages (e.g. implicit use statements) from CodeCleaner passes.
     */
    protected function writeCleanerMessages(OutputInterface $output)
    {
        // Write to stderr if this is a ConsoleOutput
        if ($output instanceof ConsoleOutput) {
            $output = $output->getErrorOutput();
        }

foreach ($this->cleaner->getMessages() as $message) {
            $output->writeln(\sprintf('<whisper>%s</whisper>', OutputFormatter::escape($message)));
        }
    }
}