Cypher - HackTheBox

1
package com.cypher.neo4j.apoc;
2

3
import java.io.BufferedReader;
4
import java.io.InputStreamReader;
5
import java.util.Arrays;
6
import java.util.concurrent.TimeUnit;
7
import java.util.stream.Stream;
8
import org.neo4j.procedure.Description;
9
import org.neo4j.procedure.Mode;
10
import org.neo4j.procedure.Name;
11
import org.neo4j.procedure.Procedure;
12

13
public class CustomFunctions {
14
    public CustomFunctions() {
15
    }
16

17
    @Procedure(
18
        name = "custom.getUrlStatusCode",
19
        mode = Mode.READ
20
    )
21
    @Description("Returns the HTTP status code for the given URL as a string")
22
    public Stream<StringOutput> getUrlStatusCode(@Name("url") String url) throws Exception {
23
        if (!url.toLowerCase().startsWith("http://") && !url.toLowerCase().startsWith("https://")) {
24
            url = "https://" + url;
25
        }
26

27
        String[] command = new String[]{"/bin/sh", "-c", "curl -s -o /dev/null --connect-timeout 1 -w %{http_code} " + url};
28
        System.out.println("Command: " + Arrays.toString(command));
29
        Process process = Runtime.getRuntime().exec(command);
30
        BufferedReader inputReader = new BufferedReader(new InputStreamReader(process.getInputStream()));
31
        BufferedReader errorReader = new BufferedReader(new InputStreamReader(process.getErrorStream()));
32
        StringBuilder errorOutput = new StringBuilder();
33

34
        String line;
35
        while((line = errorReader.readLine()) != null) {
36
            errorOutput.append(line).append("\n");
37
        }
38

39
        String statusCode = inputReader.readLine();
40
        System.out.println("Status code: " + statusCode);
41
        boolean exited = process.waitFor(10L, TimeUnit.SECONDS);
42
        if (!exited) {
43
            process.destroyForcibly();
44
            statusCode = "0";
45
            System.err.println("Process timed out after 10 seconds");
46
        } else {
47
            int exitCode = process.exitValue();
48
            if (exitCode != 0) {
49
                statusCode = "0";
50
                System.err.println("Process exited with code " + exitCode);
51
            }
52
        }
53

54
        if (errorOutput.length() > 0) {
55
            System.err.println("Error output:\n" + errorOutput.toString());
56
        }
57

58
        return Stream.of(new StringOutput(statusCode));
59
    }
60

61
    public static class StringOutput {
62
        public String statusCode;
63

64
        public StringOutput(String statusCode) {
65
            this.statusCode = statusCode;
66
        }
67
    }
68
}