Initial commit
This commit is contained in:
@@ -0,0 +1,40 @@
|
||||
#!/usr/bin/env python3
|
||||
from flask import Flask, request, redirect, render_template
|
||||
import os
|
||||
|
||||
|
||||
app = Flask(__name__)
|
||||
app.config["MAX_CONTENT_LENGTH"] = 1024
|
||||
|
||||
|
||||
@app.route("/upload", methods=["POST"])
|
||||
def aplot():
|
||||
try:
|
||||
file = request.files["file"]
|
||||
filename = file.filename
|
||||
path = os.path.join("uploads/", filename)
|
||||
assert filename and ".." not in filename and "flag" not in filename
|
||||
assert not os.path.exists(path)
|
||||
file.save(os.path.join("uploads/", filename))
|
||||
return f'Download <a href="/download?filename={filename}">here</a>'
|
||||
except:
|
||||
return ">:("
|
||||
|
||||
|
||||
@app.route("/download", methods=["GET"])
|
||||
def donlot():
|
||||
try:
|
||||
filename = request.args.get("filename")
|
||||
assert filename and ".." not in filename
|
||||
return open(os.path.join("uploads/", filename)).read()
|
||||
except:
|
||||
return ">:("
|
||||
|
||||
|
||||
@app.route("/", methods=["POST", "GET"])
|
||||
def index():
|
||||
return render_template("index.html")
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
app.run(host="0.0.0.0", port=80, debug=False)
|
||||
@@ -0,0 +1 @@
|
||||
Flask
|
||||
@@ -0,0 +1,5 @@
|
||||
#!/bin/bash
|
||||
|
||||
/usr/sbin/sshd -D &
|
||||
chmod +x ./main.py
|
||||
./main.py
|
||||
@@ -0,0 +1,15 @@
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>Stupid Storage Service</title>
|
||||
</head>
|
||||
<body>
|
||||
<form action="/upload" method="post" enctype="multipart/form-data">
|
||||
<input type="file" name="file">
|
||||
<input type="submit">
|
||||
</form>
|
||||
<a href=""></a>
|
||||
</body>
|
||||
</html>
|
||||
Reference in New Issue
Block a user