XMAN Replicator

Path: /opt/imunify360/venv/lib/python3.11/site-packages/defence360agent/internals/

Name	Size	Rights	Date	Actions
[.]	<DIR>	drwxr-xr-x	2026-06-08 20:24	🔄 🗑️ 🗑️📁 ⬇️ 🔒
[..]	<DIR>	drwxr-xr-x	2026-06-08 20:24	🔄 🗑️ 🗑️📁 ⬇️ 🔒
__init__.py	0 B	-rw-r--r--	2026-05-26 21:20	✏️ 🔄 🗑️ ⬇️ 🔒
[__pycache__]	<DIR>	drwxr-xr-x	2026-06-08 20:24	🔄 🗑️ 🗑️📁 ⬇️ 🔒
auth_protocol.py	1,206 B	-rw-r--r--	2026-05-26 21:20	✏️ 🔄 🗑️ ⬇️ 🔒
cln.py	13,849 B	-rw-r--r--	2026-05-26 21:20	✏️ 🔄 🗑️ ⬇️ 🔒
deadlock_detecting_lock.py	755 B	-rw-r--r--	2026-05-26 21:20	✏️ 🔄 🗑️ ⬇️ 🔒
feature_flags.py	4,989 B	-rw-r--r--	2026-05-26 21:20	✏️ 🔄 🗑️ ⬇️ 🔒
global_scope.py	462 B	-rw-r--r--	2026-05-26 21:20	✏️ 🔄 🗑️ ⬇️ 🔒
iaid.py	14,662 B	-rw-r--r--	2026-05-26 21:20	✏️ 🔄 🗑️ ⬇️ 🔒
lazy_load.py	195 B	-rw-r--r--	2026-05-26 21:20	✏️ 🔄 🗑️ ⬇️ 🔒
logger.py	15,165 B	-rw-r--r--	2026-05-26 21:20	✏️ 🔄 🗑️ ⬇️ 🔒
logging_protocol.py	1,093 B	-rw-r--r--	2026-05-26 21:20	✏️ 🔄 🗑️ ⬇️ 🔒
message_status_publisher.py	5,814 B	-rw-r--r--	2026-05-26 21:20	✏️ 🔄 🗑️ ⬇️ 🔒
persistent_message.py	3,093 B	-rw-r--r--	2026-05-26 21:20	✏️ 🔄 🗑️ ⬇️ 🔒
the_sink.py	11,510 B	-rw-r--r--	2026-05-26 21:20	✏️ 🔄 🗑️ ⬇️ 🔒

Edit: auth_protocol.py

import asyncio
import socket
import logging
import struct

logger = logging.getLogger(__name__)

class UnixSocketAuthProtocol(asyncio.Protocol):
    """
    This protocol uses SO_PEERCRED attribute of unix socket
    to get authentication data (pid, uid, gid)
    After connect, this values are stored in object's
    _pid, _uid, _gid attributes
    """

# ucred struct format (3 integers)
    # struct ucred
    # {
    #   pid_t pid;            /* PID of sending process.  */
    #   uid_t uid;            /* UID of sending process.  */
    #   gid_t gid;            /* GID of sending process.  */
    # };
    #
    STRUCT_FORMAT = "3i"

def connection_made(self, transport):
        self._transport = transport
        conn = self._transport.get_extra_info("socket")
        creds = conn.getsockopt(
            socket.SOL_SOCKET,
            socket.SO_PEERCRED,
            struct.calcsize(self.STRUCT_FORMAT),
        )
        self._pid, self._uid, self._gid = struct.unpack(
            self.STRUCT_FORMAT, creds
        )
        logger.debug(
            "New socket connection from pid=%s, uid=%s, gid=%s",
            self._pid,
            self._uid,
            self._gid,
        )

🛸 XMAN Replicator

Edit: auth_protocol.py

PHP Console

SQL Console