2013-04-15 12:33:25 +04:00
|
|
|
#!/usr/bin/env python
|
|
|
|
|
|
|
|
"""
|
2015-01-06 17:02:16 +03:00
|
|
|
Copyright (c) 2006-2015 sqlmap developers (http://sqlmap.org/)
|
2013-04-15 12:33:25 +04:00
|
|
|
See the file 'doc/COPYING' for copying permission
|
|
|
|
"""
|
|
|
|
|
|
|
|
import imp
|
2013-05-29 17:49:09 +04:00
|
|
|
import logging
|
2013-04-15 17:36:10 +04:00
|
|
|
import os
|
2014-05-10 03:11:19 +04:00
|
|
|
import re
|
2013-04-15 12:33:25 +04:00
|
|
|
import sys
|
2013-04-15 18:29:08 +04:00
|
|
|
import warnings
|
2013-04-15 12:33:25 +04:00
|
|
|
|
|
|
|
_sqlalchemy = None
|
|
|
|
try:
|
|
|
|
f, pathname, desc = imp.find_module("sqlalchemy", sys.path[1:])
|
2013-08-20 20:54:32 +04:00
|
|
|
_ = imp.load_module("sqlalchemy", f, pathname, desc)
|
|
|
|
if hasattr(_, "dialects"):
|
|
|
|
_sqlalchemy = _
|
|
|
|
warnings.simplefilter(action="ignore", category=_sqlalchemy.exc.SAWarning)
|
2013-04-15 12:33:25 +04:00
|
|
|
except ImportError:
|
|
|
|
pass
|
|
|
|
|
2013-05-28 13:24:34 +04:00
|
|
|
try:
|
|
|
|
import MySQLdb # used by SQLAlchemy in case of MySQL
|
|
|
|
warnings.filterwarnings("error", category=MySQLdb.Warning)
|
|
|
|
except ImportError:
|
|
|
|
pass
|
|
|
|
|
2013-04-15 12:33:25 +04:00
|
|
|
from lib.core.data import conf
|
|
|
|
from lib.core.data import logger
|
|
|
|
from lib.core.exception import SqlmapConnectionException
|
2013-04-15 17:36:10 +04:00
|
|
|
from lib.core.exception import SqlmapFilePathException
|
2013-04-15 12:33:25 +04:00
|
|
|
from plugins.generic.connector import Connector as GenericConnector
|
|
|
|
|
|
|
|
class SQLAlchemy(GenericConnector):
|
2013-04-15 16:20:21 +04:00
|
|
|
def __init__(self, dialect=None):
|
2013-04-15 12:33:25 +04:00
|
|
|
GenericConnector.__init__(self)
|
2013-04-15 16:20:21 +04:00
|
|
|
self.dialect = dialect
|
|
|
|
|
2013-04-15 12:33:25 +04:00
|
|
|
def connect(self):
|
2013-04-15 16:20:21 +04:00
|
|
|
if _sqlalchemy:
|
|
|
|
self.initConnection()
|
|
|
|
|
|
|
|
try:
|
|
|
|
if not self.port and self.db:
|
2013-04-15 17:36:10 +04:00
|
|
|
if not os.path.exists(self.db):
|
2013-04-15 20:42:26 +04:00
|
|
|
raise SqlmapFilePathException, "the provided database file '%s' does not exist" % self.db
|
2013-04-15 17:36:10 +04:00
|
|
|
|
|
|
|
_ = conf.direct.split("//", 1)
|
|
|
|
conf.direct = "%s////%s" % (_[0], os.path.abspath(self.db))
|
|
|
|
|
2013-04-15 16:20:21 +04:00
|
|
|
if self.dialect:
|
2014-05-10 03:11:19 +04:00
|
|
|
conf.direct = conf.direct.replace(conf.dbms, self.dialect, 1)
|
2013-04-15 17:36:10 +04:00
|
|
|
|
2013-04-15 16:20:21 +04:00
|
|
|
engine = _sqlalchemy.create_engine(conf.direct, connect_args={'check_same_thread':False} if self.dialect == "sqlite" else {})
|
2013-04-15 18:18:40 +04:00
|
|
|
self.connector = engine.connect()
|
2013-04-15 17:36:10 +04:00
|
|
|
except SqlmapFilePathException:
|
|
|
|
raise
|
2013-04-15 16:20:21 +04:00
|
|
|
except Exception, msg:
|
2013-05-19 03:19:54 +04:00
|
|
|
raise SqlmapConnectionException("SQLAlchemy connection issue ('%s')" % msg[0])
|
2013-04-15 16:20:21 +04:00
|
|
|
|
2013-04-15 16:31:27 +04:00
|
|
|
self.printConnected()
|
2013-04-15 12:33:25 +04:00
|
|
|
|
|
|
|
def fetchall(self):
|
|
|
|
try:
|
2013-04-15 17:23:45 +04:00
|
|
|
retVal = []
|
|
|
|
for row in self.cursor.fetchall():
|
|
|
|
retVal.append(tuple(row))
|
|
|
|
return retVal
|
2013-04-15 12:33:25 +04:00
|
|
|
except _sqlalchemy.exc.ProgrammingError, msg:
|
2013-10-15 11:49:27 +04:00
|
|
|
logger.log(logging.WARN if conf.dbmsHandler else logging.DEBUG, "(remote) %s" % msg.message if hasattr(msg, "message") else msg)
|
2013-04-15 12:33:25 +04:00
|
|
|
return None
|
|
|
|
|
|
|
|
def execute(self, query):
|
|
|
|
try:
|
2013-04-15 18:18:40 +04:00
|
|
|
self.cursor = self.connector.execute(query)
|
2013-04-15 12:33:25 +04:00
|
|
|
except (_sqlalchemy.exc.OperationalError, _sqlalchemy.exc.ProgrammingError), msg:
|
2013-10-15 11:49:27 +04:00
|
|
|
logger.log(logging.WARN if conf.dbmsHandler else logging.DEBUG, "(remote) %s" % msg.message if hasattr(msg, "message") else msg)
|
2013-04-15 12:33:25 +04:00
|
|
|
except _sqlalchemy.exc.InternalError, msg:
|
|
|
|
raise SqlmapConnectionException(msg[1])
|
|
|
|
|
|
|
|
def select(self, query):
|
|
|
|
self.execute(query)
|
|
|
|
return self.fetchall()
|