2010-03-27 02:23:25 +03:00
|
|
|
#!/usr/bin/env python
|
|
|
|
|
|
|
|
"""
|
2012-07-12 21:38:03 +04:00
|
|
|
Copyright (c) 2006-2012 sqlmap developers (http://sqlmap.org/)
|
2010-10-15 03:18:29 +04:00
|
|
|
See the file 'doc/COPYING' for copying permission
|
2010-03-27 02:23:25 +03:00
|
|
|
"""
|
|
|
|
|
2010-03-30 15:06:30 +04:00
|
|
|
try:
|
|
|
|
import pyodbc
|
|
|
|
except ImportError, _:
|
|
|
|
pass
|
|
|
|
|
2012-10-23 17:34:59 +04:00
|
|
|
import logging
|
|
|
|
|
|
|
|
from lib.core.data import conf
|
2010-03-30 15:06:30 +04:00
|
|
|
from lib.core.data import logger
|
|
|
|
from lib.core.exception import sqlmapConnectionException
|
2010-04-13 12:57:47 +04:00
|
|
|
from lib.core.exception import sqlmapUnsupportedFeatureException
|
|
|
|
from lib.core.settings import IS_WIN
|
2010-03-27 02:23:25 +03:00
|
|
|
from plugins.generic.connector import Connector as GenericConnector
|
|
|
|
|
|
|
|
class Connector(GenericConnector):
|
|
|
|
"""
|
2010-03-30 15:06:30 +04:00
|
|
|
Homepage: http://pyodbc.googlecode.com/
|
|
|
|
User guide: http://code.google.com/p/pyodbc/wiki/GettingStarted
|
|
|
|
API: http://code.google.com/p/pyodbc/w/list
|
|
|
|
Debian package: python-pyodbc
|
|
|
|
License: MIT
|
2010-03-27 02:23:25 +03:00
|
|
|
"""
|
|
|
|
|
|
|
|
def __init__(self):
|
|
|
|
GenericConnector.__init__(self)
|
2010-03-30 15:06:30 +04:00
|
|
|
|
2010-03-31 14:50:47 +04:00
|
|
|
def connect(self):
|
2010-04-13 12:57:47 +04:00
|
|
|
if not IS_WIN:
|
2011-04-30 17:20:05 +04:00
|
|
|
errMsg = "currently, direct connection to Microsoft Access database(s) "
|
2010-04-13 12:57:47 +04:00
|
|
|
errMsg += "is restricted to Windows platforms"
|
|
|
|
raise sqlmapUnsupportedFeatureException, errMsg
|
|
|
|
|
2010-03-30 15:06:30 +04:00
|
|
|
self.initConnection()
|
2010-04-13 12:57:47 +04:00
|
|
|
self.checkFileDb()
|
2010-03-30 15:06:30 +04:00
|
|
|
|
2010-04-13 12:57:47 +04:00
|
|
|
try:
|
|
|
|
self.connector = pyodbc.connect('Driver={Microsoft Access Driver (*.mdb)};Dbq=%s;Uid=Admin;Pwd=;' % self.db)
|
|
|
|
except (pyodbc.Error, pyodbc.OperationalError), msg:
|
|
|
|
raise sqlmapConnectionException, msg[1]
|
2010-03-30 15:06:30 +04:00
|
|
|
|
|
|
|
self.setCursor()
|
|
|
|
self.connected()
|
|
|
|
|
|
|
|
def fetchall(self):
|
2010-04-06 19:12:52 +04:00
|
|
|
try:
|
2010-04-13 12:57:47 +04:00
|
|
|
return self.cursor.fetchall()
|
2010-04-06 19:12:52 +04:00
|
|
|
except pyodbc.ProgrammingError, msg:
|
2012-10-23 17:34:59 +04:00
|
|
|
logger.log(logging.WARN if conf.dbmsHandler else logging.DEBUG, "(remote) %s" % msg[1])
|
2010-04-06 19:12:52 +04:00
|
|
|
return None
|
2010-03-30 15:06:30 +04:00
|
|
|
|
|
|
|
def execute(self, query):
|
|
|
|
try:
|
|
|
|
self.cursor.execute(query)
|
2010-03-30 16:48:51 +04:00
|
|
|
except (pyodbc.OperationalError, pyodbc.ProgrammingError), msg:
|
2012-10-23 17:34:59 +04:00
|
|
|
logger.log(logging.WARN if conf.dbmsHandler else logging.DEBUG, "(remote) %s" % msg[1])
|
2010-03-30 15:06:30 +04:00
|
|
|
except pyodbc.Error, msg:
|
|
|
|
raise sqlmapConnectionException, msg[1]
|
|
|
|
|
|
|
|
self.connector.commit()
|
|
|
|
|
|
|
|
def select(self, query):
|
2010-03-31 14:50:47 +04:00
|
|
|
self.execute(query)
|
|
|
|
return self.fetchall()
|