forked from moloch--/RootTheBox
-
Notifications
You must be signed in to change notification settings - Fork 0
/
WallOfSheep.py
144 lines (111 loc) · 4.07 KB
/
WallOfSheep.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
# -*- coding: utf-8 -*-
"""
Created on Mar 21, 2012
@author: moloch
Copyright 2012 Root the Box
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
"""
from sqlalchemy import Column, ForeignKey, desc
from sqlalchemy.types import Integer, Unicode
from models import dbsession
from models.BaseModels import DatabaseObject
from models.User import User
class WallOfSheep(DatabaseObject):
"""
Stores a record of cracked passwords, and publicly displays
them for all to see.
"""
preimage = Column(Unicode(32), nullable=False)
value = Column(Integer, nullable=False)
victim_id = Column(Integer, ForeignKey("user.id"), nullable=False)
cracker_id = Column(Integer, ForeignKey("user.id"), nullable=False)
@classmethod
def all(cls):
"""Returns all team objects"""
return dbsession.query(cls).all()
@classmethod
def all_order_created(cls):
"""Returns all team objects"""
return dbsession.query(cls).order_by(desc(cls.created)).all()
@classmethod
def all_order_value(cls):
"""Returns all team objects"""
return dbsession.query(cls).order_by(desc(cls.value)).all()
@classmethod
def by_id(cls, _id):
"""Returns a the object with id of _id"""
return dbsession.query(cls).filter_by(id=_id).first()
@classmethod
def by_victim_id(cls, _id):
"""Returns all entries for a _id"""
return dbsession.query(cls).filter_by(victim_id=_id).all()
@classmethod
def by_cracker_id(cls, _id):
"""Returns all entries for cracker_id"""
return dbsession.query(cls).filter_by(cracker_id=_id).all()
@classmethod
def count_cracked_by(cls, _id):
return dbsession.query(cls).filter_by(cracker_id=_id).count()
@classmethod
def leaderboard(cls, order_by="passwords"):
"""
Creates an ordered list of tuples, for each user and the
number of password they've cracked
"""
orders = {"passwords": 1, "cash": 2}
leaders = []
for user in User.all_users():
if 0 < cls.count_cracked_by(user.id):
leaders.append(
(
user,
cls.count_cracked_by(user.id),
sum(cls.by_cracker_id(user.id)),
)
)
if order_by not in orders:
order_by = "passwords"
leaders.sort(key=lambda stats: stats[orders[order_by]], reverse=True)
return leaders
@property
def victim(self):
"""Returns display name of user"""
return User.by_id(self.victim_id)
@property
def cracker(self):
"""Returns display name of cracker"""
return User.by_id(self.cracker_id)
def __cmp__(self, other):
"""Used for sorting"""
return len(self) - len(other)
def __eq__(self, other):
return self.__cmp__(other) == 0
def __ne__(self, other):
return self.__cmp__(other) != 0
def __gt__(self, other):
return self.__cmp__(other) > 0
def __lt__(self, other):
return self.__cmp__(other) < 0
def __ge__(self, other):
return self.__cmp__(other) >= 0
def __le__(self, other):
return self.__cmp__(other) <= 0
def __repr__(self):
return "<WallOfSheep - preimage: %s, victim_id: %d>" % (
self.preimage,
self.victim_id,
)
def __len__(self):
return len(self.preimage)
def __radd__(self, other):
return self.value + other
def __add__(self, other):
return self.value + other.value