diff --git a/README.md b/README.md index c55e80e..4194ba4 100644 --- a/README.md +++ b/README.md @@ -2,6 +2,9 @@ **CLI-only text pastebin service.** +[Issue tracker](https://git.uphillsecurity.com/cf7/linedump/issues) | `Libera Chat #linedump` + + - Status: Beta - expect minor changes - Instance: [linedump.com](https://linedump.com/) - Inspired by: @@ -30,7 +33,80 @@ ## Usage -Check [linedump.com](https://linedump.com) for now - coming soon. +```text + █ Upload curl: + +curl -X POST -d "Cheers" https://linedump.com/ # string +curl -X POST https://linedump.com --data-binary @- < file.txt # file +ip -br a | curl -X POST https://linedump.com --data-binary @- # command output + + + █ Upload wget: + +echo "Cheers" | wget --post-data=@- -O- https://linedump.com/ # string +wget --post-file=file.txt -O- https://linedump.com/ # file +ip -br a | wget --post-data=@- -O- https://linedump.com/ # command output + + + █ Upload Powershell: + +Invoke-RestMethod -Uri "https://linedump.com/" -Method Post -Body "Cheers" # string +Invoke-RestMethod -Uri "https://linedump.com/" -Method Post -InFile "file.txt" # file +ipconfig | Invoke-RestMethod -Uri "https://linedump.com/" -Method Post -Body { $_ } # command output + + + █ Download: + +curl https://linedump.com/{path} + +wget -O- https://linedump.com/{path} + +Invoke-RestMethod -Uri "https://linedump.com/{path}" + + + +██ Encryption Examples with curl ██ + + + █ Upload text: + +echo 'Cheers' | openssl enc -aes-256-cbc -salt -pbkdf2 -base64 -pass pass:yourkey | curl -X POST -d @- https://linedump.com/ + + + █ Upload file: + +openssl enc -aes-256-cbc -pbkdf2 -salt -pass pass:yourkey -base64 < file.txt | curl -sS -X POST https://linedump.com --data-binary @- + + + █ Upload command output: + +ip -br a | openssl enc -aes-256-cbc -pbkdf2 -salt -pass pass:yourkey -base64 | curl -sS -X POST https://linedump.com --data-binary @- + + + █ Download: + +curl -s https://linedump.com/{path} | base64 -d | openssl enc -d -aes-256-cbc -pbkdf2 -pass pass:yourkey + + + +██ Adv Examples ██ + + + █ Multiple commands: + +{ cmd() { printf "\n# %s\n" "$*"; "$@"; }; \ + cmd hostname; \ + cmd ip -br a; \ + } 2>&1 | curl -X POST https://linedump.com --data-binary @- + + + █ Continous command: + +(timeout --signal=INT --kill-after=5s 10s \ + ping 127.1; \ + echo "--- Terminated ---") | \ + curl -X POST --data-binary @- https://linedump.com +``` --- @@ -42,7 +118,7 @@ Use with reverse-proxy and HTTPS! | Variable | Description | Default | Required | |----------|-------------|---------|----------| -| `DOMAIN` | Domain name used in the application responses and examples | `linedump.com` | No | +| `BASEURL` | Base URL used in the application responses and examples | `http://127.0.0.1:8000` | No | | `DESCRIPTION` | Application description displayed in the root endpoint | `CLI-only pastebin powered by linedump.com` | No | | `MAX_FILE_SIZE_MB` | Maximum file size limit in megabytes | `50` | No | | `RATE_LIMIT` | Rate limit for uploads (format: "requests/timeframe") | `50/hour` | No | @@ -56,6 +132,12 @@ For security concerns or reports, please contact via `hello a t uphillsecurity d --- +## Notes + +- [Github Mirror available](https://github.com/CaffeineFueled1/linedump) + +--- + ## License **Apache License** diff --git a/main.py b/main.py index 6c0814c..9917f52 100644 --- a/main.py +++ b/main.py @@ -10,11 +10,9 @@ import os from pathlib import Path import hashlib from typing import Optional -from collections import defaultdict -import threading -DOMAIN = os.getenv('DOMAIN', 'linedump.com') +BASEURL = os.getenv('BASEURL', 'http://127.0.0.1:8000') DESCRIPTION = os.getenv('DESCRIPTION', 'CLI-only pastebin powered by linedump.com') MAX_FILE_SIZE_MB = int(os.getenv('MAX_FILE_SIZE_MB', '50')) RATE_LIMIT = os.getenv('RATE_LIMIT', '50/hour') @@ -30,10 +28,6 @@ UPLOAD_DIR = Path("uploads") UPLOAD_DIR.mkdir(exist_ok=True) MAX_FILE_SIZE = MAX_FILE_SIZE_MB * 1024 * 1024 # Convert MB to bytes -MAX_FILES_PER_IP = 100 - -file_counter = defaultdict(int) -lock = threading.Lock() def generate_random_path(length: int = None) -> str: if length is None: @@ -48,11 +42,6 @@ def get_client_ip(request: Request) -> str: return request.client.host -def check_file_limit(request: Request) -> bool: - client_ip = get_client_ip(request) - with lock: - return file_counter[client_ip] < MAX_FILES_PER_IP - def validate_content(content: str) -> bool: """Basic validation for content size and encoding""" if len(content) > MAX_FILE_SIZE: @@ -73,9 +62,6 @@ def validate_content(content: str) -> bool: @limiter.limit(RATE_LIMIT) async def upload_text(request: Request): - if not check_file_limit(request): - raise HTTPException(status_code=429, detail="File limit exceeded") - body = await request.body() content = body.decode('utf-8', errors='ignore') @@ -94,13 +80,8 @@ async def upload_text(request: Request): try: with open(file_path, 'w', encoding='utf-8') as f: f.write(content) - - client_ip = get_client_ip(request) - with lock: - file_counter[client_ip] += 1 - - base_url = f"https://{request.headers.get('host', request.url.netloc)}" - return f"{base_url}/{random_path}\n" + + return f"{BASEURL}/{random_path}\n" except Exception as e: raise HTTPException(status_code=500, detail="Failed to save file") @@ -124,7 +105,7 @@ async def get_file(file_path: str): @app.get("/", response_class=PlainTextResponse) async def root(): - return f"""C|_| {DOMAIN} + return f"""LD {BASEURL} ████ General ████ @@ -141,32 +122,32 @@ async def root(): █ Upload curl: -curl -X POST -d "Cheers" https://{DOMAIN}/ # string -curl -X POST https://{DOMAIN} --data-binary @- < file.txt # file -ip -br a | curl -X POST https://{DOMAIN} --data-binary @- # command output +curl -X POST -d "Cheers" {BASEURL}/ # string +curl -X POST {BASEURL} --data-binary @- < file.txt # file +ip -br a | curl -X POST {BASEURL} --data-binary @- # command output █ Upload wget: -echo "Cheers" | wget --post-data=@- -O- https://{DOMAIN}/ # string -wget --post-file=file.txt -O- https://{DOMAIN}/ # file -ip -br a | wget --post-data=@- -O- https://{DOMAIN}/ # command output +echo "Cheers" | wget --post-data=@- -O- {BASEURL}/ # string +wget --post-file=file.txt -O- {BASEURL}/ # file +ip -br a | wget --post-data=@- -O- {BASEURL}/ # command output █ Upload Powershell: -Invoke-RestMethod -Uri "https://{DOMAIN}/" -Method Post -Body "Cheers" # string -Invoke-RestMethod -Uri "https://{DOMAIN}/" -Method Post -InFile "file.txt" # file -ipconfig | Invoke-RestMethod -Uri "https://{DOMAIN}/" -Method Post -Body {{ $_ }} # command output +Invoke-RestMethod -Uri "{BASEURL}/" -Method Post -Body "Cheers" # string +Invoke-RestMethod -Uri "{BASEURL}/" -Method Post -InFile "file.txt" # file +ipconfig | Invoke-RestMethod -Uri "{BASEURL}/" -Method Post -Body {{ $_ }} # command output █ Download: -curl https://{DOMAIN}/{{path}} +curl {BASEURL}/{{path}} -wget -O- https://{DOMAIN}/{{path}} +wget -O- {BASEURL}/{{path}} -Invoke-RestMethod -Uri "https://{DOMAIN}/{{path}}" +Invoke-RestMethod -Uri "{BASEURL}/{{path}}" @@ -176,23 +157,26 @@ Invoke-RestMethod -Uri "https://{DOMAIN}/{{path}}" █ Upload text: echo 'Cheers' \ - | openssl enc -aes-256-cbc -pbkdf2 -base64 -pass pass:yourkey \ - | curl -X POST -d @- https://{DOMAIN}/ + | openssl enc -aes-256-cbc -pbkdf2 -salt -base64 -pass pass:yourkey \ + | curl -X POST -d @- {BASEURL}/ + █ Upload file: -openssl enc -aes-256-cbc -pbkdf2 -salt -pass pass:yourkey -base64 < YOURFILE.txt \ - | curl -sS -X POST https://{DOMAIN} --data-binary @- +openssl enc -aes-256-cbc -pbkdf2 -salt -pass pass:yourkey -base64 < file.txt \ + | curl -sS -X POST {BASEURL} --data-binary @- + █ Upload command output: ip -br a \ | openssl enc -aes-256-cbc -pbkdf2 -salt -pass pass:yourkey -base64 \ - | curl -sS -X POST https://{DOMAIN} --data-binary @- + | curl -sS -X POST {BASEURL} --data-binary @- + █ Download: -curl -s https://{DOMAIN}/PASTE_THE_ID \ +curl -s {BASEURL}/{{path}} \ | base64 -d \ | openssl enc -d -aes-256-cbc -pbkdf2 -pass pass:yourkey @@ -201,18 +185,35 @@ curl -s https://{DOMAIN}/PASTE_THE_ID \ ██ Adv Examples ██ - █ Multiple Commands + █ Multiple commands: {{ cmd() {{ printf "\\n# %s\\n" "$*"; "$@"; }}; \\ cmd hostname; \\ cmd ip -br a; \\ - }} 2>&1 | curl -X POST https://{DOMAIN} --data-binary @- + }} 2>&1 | curl -X POST {BASEURL} --data-binary @- + + + █ Continous command: + +(timeout --signal=INT --kill-after=5s 10s \\ + ping 127.1; \\ + echo "--- Terminated ---") | \\ + curl -X POST --data-binary @- {BASEURL} + ████ Further Information ████ -More information will follow. Work in Progress. +Powered by linedump + +Source: + https://git.uphillsecurity.com/cf7/linedump + +License: + Apache-2.0 + https://git.uphillsecurity.com/cf7/linedump/src/branch/main/LICENSE + """ if __name__ == "__main__":