2008-10-15 19:38:22 +04:00
|
|
|
#!/usr/bin/env python
|
|
|
|
|
|
|
|
"""
|
2008-10-15 19:56:32 +04:00
|
|
|
$Id$
|
2008-10-15 19:38:22 +04:00
|
|
|
|
2010-10-14 18:41:14 +04:00
|
|
|
Copyright (c) 2006-2010 sqlmap developers (http://sqlmap.sourceforge.net/)
|
2010-10-15 03:18:29 +04:00
|
|
|
See the file 'doc/COPYING' for copying permission
|
2008-10-15 19:38:22 +04:00
|
|
|
"""
|
|
|
|
|
2010-02-23 11:54:33 +03:00
|
|
|
try:
|
|
|
|
import hashlib
|
|
|
|
except:
|
|
|
|
import md5
|
|
|
|
import sha
|
2010-04-12 13:35:20 +04:00
|
|
|
|
|
|
|
import pickle
|
2010-02-23 11:54:33 +03:00
|
|
|
import sys
|
2008-10-15 19:38:22 +04:00
|
|
|
import struct
|
|
|
|
import urllib
|
|
|
|
|
2010-03-27 02:23:25 +03:00
|
|
|
from lib.core.data import conf
|
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
def base64decode(value):
|
|
|
|
return value.decode("base64")
|
2008-10-15 19:38:22 +04:00
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
def base64encode(value):
|
|
|
|
return value.encode("base64")[:-1].replace("\n", "")
|
2010-04-12 13:35:20 +04:00
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
def base64pickle(value):
|
|
|
|
return base64encode(pickle.dumps(value))
|
2010-04-12 13:35:20 +04:00
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
def base64unpickle(value):
|
|
|
|
return pickle.loads(base64decode(value))
|
2008-10-15 19:38:22 +04:00
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
def hexdecode(value):
|
|
|
|
value = value.lower()
|
2008-10-15 19:38:22 +04:00
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
if value.startswith("0x"):
|
|
|
|
value = value[2:]
|
2008-10-15 19:38:22 +04:00
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
return value.decode("hex")
|
2010-11-03 13:08:27 +03:00
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
def hexencode(value):
|
|
|
|
return value.encode("hex")
|
2008-10-15 19:38:22 +04:00
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
def md5hash(value):
|
2010-02-23 11:54:33 +03:00
|
|
|
if sys.modules.has_key('hashlib'):
|
2011-01-15 15:13:45 +03:00
|
|
|
return hashlib.md5(value).hexdigest()
|
2010-02-23 11:54:33 +03:00
|
|
|
else:
|
2011-01-15 15:13:45 +03:00
|
|
|
return md5.new(value).hexdigest()
|
2008-10-15 19:38:22 +04:00
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
def orddecode(value):
|
|
|
|
packedString = struct.pack("!"+"I" * len(value), *value)
|
2008-10-15 19:38:22 +04:00
|
|
|
return "".join([chr(char) for char in struct.unpack("!"+"I"*(len(packedString)/4), packedString)])
|
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
def ordencode(value):
|
|
|
|
return tuple([ord(char) for char in value])
|
2008-10-15 19:38:22 +04:00
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
def sha1hash(value):
|
2010-02-23 11:54:33 +03:00
|
|
|
if sys.modules.has_key('hashlib'):
|
2011-01-15 15:13:45 +03:00
|
|
|
return hashlib.sha1(value).hexdigest()
|
2010-02-23 11:54:33 +03:00
|
|
|
else:
|
2011-01-15 15:13:45 +03:00
|
|
|
return sha.new(value).hexdigest()
|
2008-10-15 19:38:22 +04:00
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
def urldecode(value):
|
2010-01-02 05:02:12 +03:00
|
|
|
result = None
|
2010-10-01 12:03:39 +04:00
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
if value:
|
2011-02-26 01:43:01 +03:00
|
|
|
try:
|
|
|
|
# for cases like T%C3%BCrk%C3%A7e
|
|
|
|
value = str(value)
|
|
|
|
result = utf8decode(urllib.unquote_plus(value))
|
|
|
|
except ValueError:
|
|
|
|
result = urllib.unquote_plus(value)
|
2008-10-15 19:38:22 +04:00
|
|
|
|
2010-01-02 05:02:12 +03:00
|
|
|
return result
|
2008-10-15 19:38:22 +04:00
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
def urlencode(value, safe=":/?%&=", convall=False):
|
2010-06-30 01:07:23 +04:00
|
|
|
if conf.direct or "POSTxml" in conf.paramDict:
|
2011-01-15 15:13:45 +03:00
|
|
|
return value
|
2010-03-27 02:23:25 +03:00
|
|
|
|
2010-01-02 05:02:12 +03:00
|
|
|
result = None
|
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
if value is None:
|
2010-01-02 05:02:12 +03:00
|
|
|
return result
|
2008-10-15 19:38:22 +04:00
|
|
|
|
2010-01-02 05:02:12 +03:00
|
|
|
if convall:
|
2011-01-15 15:13:45 +03:00
|
|
|
result = urllib.quote(utf8encode(value)) # Reference: http://old.nabble.com/Re:-Problem:-neither-urllib2.quote-nor-urllib.quote-encode-the--unicode-strings-arguments-p19823144.html
|
2009-04-22 15:48:07 +04:00
|
|
|
else:
|
2011-01-15 15:13:45 +03:00
|
|
|
result = urllib.quote(utf8encode(value), safe)
|
2010-01-02 05:02:12 +03:00
|
|
|
|
|
|
|
return result
|
2010-05-28 15:32:10 +04:00
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
def utf8encode(value):
|
|
|
|
return value.encode("utf-8")
|
2010-05-28 15:32:10 +04:00
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
def utf8decode(value):
|
|
|
|
return value.decode("utf-8")
|
2010-10-01 12:03:39 +04:00
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
def htmlescape(value):
|
|
|
|
return value.replace('&', '&').replace('<', '<').replace('>', '>').replace('"', '"').replace("'", ''').replace(' ', ' ')
|
2010-10-01 12:03:39 +04:00
|
|
|
|
2011-01-15 15:13:45 +03:00
|
|
|
def htmlunescape(value):
|
|
|
|
return value.replace('&', '&').replace('<', '<').replace('>', '>').replace('"', '"').replace(''', "'").replace(' ', ' ')
|