sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-23 10:03:47 +03:00
Code Issues Packages Projects Releases Wiki Activity
8aefd0bbf7
sqlmap/lib/core/optiondict.py

170 lines
8.3 KiB
Python
Raw Normal View History

After the storm, a restore..
2008-10-15 19:38:22 +04:00
#!/usr/bin/env python
"""
propsets..
2008-10-15 19:56:32 +04:00
$Id$
After the storm, a restore..
2008-10-15 19:38:22 +04:00
large commit with copyright header modifications
2010-10-14 18:41:14 +04:00
Copyright (c) 2006-2010 sqlmap developers (http://sqlmap.sourceforge.net/)
sorry, cosmetics
2010-10-15 03:18:29 +04:00
See the file 'doc/COPYING' for copying permission
After the storm, a restore..
2008-10-15 19:38:22 +04:00
"""
optDict = {
Code refactoring and minor bug fixes.
2010-05-27 20:45:09 +04:00
# Format:
# Family: { "parameter name": "parameter datatype" },
# Or:
# Family: { "parameter name": ("parameter datatype", "category name used for common outputs feature") },
sqlmap 0.6.3-rc4: Minor enhancement to be able to specify the number of seconds before timeout the connection, default is set to 10 seconds. Minor improvement to retry the HTTP request up to three times in case an exception is raised during the connection to the target url. Minor bug fix to correctly catch connection exceptions and notify to the user also if they occur within a thread. Minor code restyling. Updated documentation.
2008-12-04 20:40:03 +03:00
"Target": {
Major enhancement to directly connect to the dbms without passing via a sql injection: adapted code accordingly - see #158. This feature relies on python third-party libraries to be able to connect to the database. For the moment it has been implemented for MySQL (with python-mysqldb module) and PostgreSQL (with python-psycopg2 module). Minor layout adjustments.
2010-03-27 02:23:25 +03:00
"direct": "string",
After the storm, a restore..
2008-10-15 19:38:22 +04:00
"url": "string",
Adapted the code to support a list of targets from a text file (Burp log file) or from a directory (WebScarab conversations folder) with command line option -l.
2008-11-20 20:56:09 +03:00
"list": "string",
Minor code refactoring
2010-01-14 23:42:45 +03:00
"requestFile": "string",
code commit regarding Feature #119
2010-01-12 16:11:26 +03:00
"googleDork": "string",
Minor code refactoring
2010-01-14 23:42:45 +03:00
"configFile": "string"
sqlmap 0.6.3-rc4: Minor enhancement to be able to specify the number of seconds before timeout the connection, default is set to 10 seconds. Minor improvement to retry the HTTP request up to three times in case an exception is raised during the connection to the target url. Minor bug fix to correctly catch connection exceptions and notify to the user also if they occur within a thread. Minor code restyling. Updated documentation.
2008-12-04 20:40:03 +03:00
},
"Request": {
After the storm, a restore..
2008-10-15 19:38:22 +04:00
"method": "string",
"data": "string",
"cookie": "string",
Minor code refactoring
2010-01-14 23:42:45 +03:00
"cookieUrlencode": "boolean",
sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.
2010-01-02 05:02:12 +03:00
"dropSetCookie": "boolean",
After the storm, a restore..
2008-10-15 19:38:22 +04:00
"agent": "string",
"userAgentsFile": "string",
Split character for tamper scripts (--tamper option) is now comma, not semi-colon. Minor enhancement
2010-10-17 01:52:16 +04:00
"referer": "string",
sqlmap 0.6.3-rc4: minor enhancement to be able to specify extra HTTP headers by providing option --headers. By default Accept, Accept-Language and Accept-Charset headers are set. Added support to get the injection payload prefix and postfix from user. Minor bug fix to exclude image files when parsing (-l) proxies log files. Minor code adjustments. Updated documentation.
2008-12-09 00:24:24 +03:00
"headers": "string",
After the storm, a restore..
2008-10-15 19:38:22 +04:00
"aType": "string",
"aCred": "string",
implementation of Feature #17
2010-01-07 15:59:09 +03:00
"aCert": "string",
After the storm, a restore..
2008-10-15 19:38:22 +04:00
"proxy": "string",
added option --proxy-cred for setting proxy credentials (Feature #195)
2010-08-19 02:45:00 +04:00
"pCred": "string",
Minor adjustments
2010-03-03 19:19:17 +03:00
"ignoreProxy": "boolean",
sqlmap 0.6.3-rc1: * Minor enhancement to be able to specify the number of seconds to wait between each HTTP request. * Minor bug fix to handle session.error and session.timeout in HTTP requests. * Updated documentation.
2008-11-09 19:57:47 +03:00
"delay": "float",
added --scope feature regarding Feature #105
2010-01-09 23:44:50 +03:00
"timeout": "float",
"retries": "integer",
implementation of Feature #176 (Safe URL: avoid being kicked out after N unsuccessful requests)
2010-04-16 16:44:47 +04:00
"scope": "string",
"safUrl": "string",
"saFreq": "integer"
After the storm, a restore..
2008-10-15 19:38:22 +04:00
},
Split character for tamper scripts (--tamper option) is now comma, not semi-colon. Minor enhancement
2010-10-17 01:52:16 +04:00
"Optimization": {
"optimize": "boolean",
Renamed --common-prediction switch to --predict-output
2010-10-17 03:50:13 +04:00
"predictOutput": "boolean",
Split character for tamper scripts (--tamper option) is now comma, not semi-colon. Minor enhancement
2010-10-17 01:52:16 +04:00
"keepAlive": "boolean",
"nullConnection": "boolean",
"threads": "integer"
},
After the storm, a restore..
2008-10-15 19:38:22 +04:00
"Injection": {
sqlmap 0.6.3-rc4: Minor enhancement to be able to specify the number of seconds before timeout the connection, default is set to 10 seconds. Minor improvement to retry the HTTP request up to three times in case an exception is raised during the connection to the target url. Minor bug fix to correctly catch connection exceptions and notify to the user also if they occur within a thread. Minor code restyling. Updated documentation.
2008-12-04 20:40:03 +03:00
"testParameter": "string",
After the storm, a restore..
2008-10-15 19:38:22 +04:00
"dbms": "string",
Updated to sqlmap 0.7 release candidate 1
2009-04-22 15:48:07 +04:00
"os": "string",
sqlmap 0.6.3-rc4: minor enhancement to be able to specify extra HTTP headers by providing option --headers. By default Accept, Accept-Language and Accept-Charset headers are set. Added support to get the injection payload prefix and postfix from user. Minor bug fix to exclude image files when parsing (-l) proxies log files. Minor code adjustments. Updated documentation.
2008-12-09 00:24:24 +03:00
"prefix": "string",
"postfix": "string",
More replacements for refactoring. Minor layout adjustments. Alignment of conffile/optiondict/cmdline parameters.
2010-11-08 15:36:48 +03:00
"tamper": "string"
},
"Detection": {
Minor enhancemet to support also --regexp, --excl-str and --excl-reg options rather than only --string when comparing HTTP responses page content
2008-12-05 18:34:13 +03:00
"string": "string",
"regexp": "string",
"eString": "string",
changes regarding Data (GET/POST/Cookie) encoding (Bug #129)
2010-01-14 21:05:03 +03:00
"eRegexp": "string",
fix for a Bug #200
2010-09-14 14:35:01 +04:00
"thold": "float",
Split character for tamper scripts (--tamper option) is now comma, not semi-colon. Minor enhancement
2010-10-17 01:52:16 +04:00
"textOnly": "boolean",
More replacements for refactoring. Minor layout adjustments. Alignment of conffile/optiondict/cmdline parameters.
2010-11-08 15:36:48 +03:00
"longestCommon": "boolean"
After the storm, a restore..
2008-10-15 19:38:22 +04:00
},
sqlmap 0.6.3-rc4: Minor enhancement to be able to specify the number of seconds before timeout the connection, default is set to 10 seconds. Minor improvement to retry the HTTP request up to three times in case an exception is raised during the connection to the target url. Minor bug fix to correctly catch connection exceptions and notify to the user also if they occur within a thread. Minor code restyling. Updated documentation.
2008-12-04 20:40:03 +03:00
"Techniques": {
Forgot
2010-10-25 20:34:43 +04:00
"errorTest": "boolean",
Added support to test for stacked queries support and improved check for time based blind sql injection. Minor bug fix in --save option
2008-12-17 00:30:24 +03:00
"stackedTest": "boolean",
Initial implementation of support for stacked queries. Added method to test for Time based blind SQL injection query stacking on the affected parameter a SLEEP() or similar DBMS specific function. Adapted libraries, plugins and XML with the above changes. Minor layout adjustments.
2008-11-12 03:36:50 +03:00
"timeTest": "boolean",
Minor layout adjustments
2010-01-10 00:08:47 +03:00
"timeSec": "integer",
Initial implementation of support for stacked queries. Added method to test for Time based blind SQL injection query stacking on the affected parameter a SLEEP() or similar DBMS specific function. Adapted libraries, plugins and XML with the above changes. Minor layout adjustments.
2008-11-12 03:36:50 +03:00
"unionTest": "boolean",
Forgot
2010-10-25 20:34:43 +04:00
"uTech": "string"
sqlmap 0.6.3-rc4: Minor enhancement to be able to specify the number of seconds before timeout the connection, default is set to 10 seconds. Minor improvement to retry the HTTP request up to three times in case an exception is raised during the connection to the target url. Minor bug fix to correctly catch connection exceptions and notify to the user also if they occur within a thread. Minor code restyling. Updated documentation.
2008-12-04 20:40:03 +03:00
},
Initial implementation of support for stacked queries. Added method to test for Time based blind SQL injection query stacking on the affected parameter a SLEEP() or similar DBMS specific function. Adapted libraries, plugins and XML with the above changes. Minor layout adjustments.
2008-11-12 03:36:50 +03:00
After the storm, a restore..
2008-10-15 19:38:22 +04:00
"Fingerprint": {
Merged back from personal branch to trunk (svn merge -r846:940 ...) Changes: * Major enhancement to the Microsoft SQL Server stored procedure heap-based buffer overflow exploit (--os-bof) to automatically bypass DEP memory protection. * Added support for MySQL and PostgreSQL to execute Metasploit shellcode via UDF 'sys_bineval' (in-memory, anti-forensics technique) as an option instead of uploading the standalone payload stager executable. * Added options for MySQL, PostgreSQL and Microsoft SQL Server to read/add/delete Windows registry keys. * Added options for MySQL and PostgreSQL to inject custom user-defined functions. * Added support for --first and --last so the user now has even more granularity in what to enumerate in the query output. * Minor enhancement to save the session by default in 'output/hostname/session' file if -s option is not specified. * Minor improvement to automatically remove sqlmap created temporary files from the DBMS underlying file system. * Minor bugs fixed. * Major code refactoring.
2009-09-26 03:03:45 +04:00
"extensiveFp": "boolean"
After the storm, a restore..
2008-10-15 19:38:22 +04:00
},
"Enumeration": {
Code refactoring and minor bug fixes.
2010-05-27 20:45:09 +04:00
"getBanner": ("boolean", "Banners"),
"getCurrentUser": ("boolean", "Users"),
"getCurrentDb": ("boolean", "Databases"),
Minor enhancement to support an option (--is-dba) to show if the current user is a database management system administrator.
2008-12-18 23:41:11 +03:00
"isDba": "boolean",
Code refactoring and minor bug fixes.
2010-05-27 20:45:09 +04:00
"getUsers": ("boolean", "Users"),
Minor fixes
2010-05-30 18:53:13 +04:00
"getPasswordHashes": ("boolean", "Passwords"),
Code refactoring and minor bug fixes.
2010-05-27 20:45:09 +04:00
"getPrivileges": ("boolean", "Privileges"),
"getRoles": ("boolean", "Roles"),
"getDbs": ("boolean", "Databases"),
"getTables": ("boolean", "Tables"),
"getColumns": ("boolean", "Columns"),
After the storm, a restore..
2008-10-15 19:38:22 +04:00
"dumpTable": "boolean",
"dumpAll": "boolean",
Added option --search to work in conjunction with -D (done), -T (soon) or -C (replaces --dump -C) - See #190: * --search -D foobar: searches all database names like the ones provided * --search -T foobar: searches all databases' table names like the ones provided (soon) * --search -C foobar: replaces --dump -C
2010-05-07 17:40:57 +04:00
"search": "boolean",
After the storm, a restore..
2008-10-15 19:38:22 +04:00
"db": "string",
"tbl": "string",
"col": "string",
Split character for tamper scripts (--tamper option) is now comma, not semi-colon. Minor enhancement
2010-10-17 01:52:16 +04:00
"user": "string",
After the storm, a restore..
2008-10-15 19:38:22 +04:00
"excludeSysDbs": "boolean",
"limitStart": "integer",
"limitStop": "integer",
Merged back from personal branch to trunk (svn merge -r846:940 ...) Changes: * Major enhancement to the Microsoft SQL Server stored procedure heap-based buffer overflow exploit (--os-bof) to automatically bypass DEP memory protection. * Added support for MySQL and PostgreSQL to execute Metasploit shellcode via UDF 'sys_bineval' (in-memory, anti-forensics technique) as an option instead of uploading the standalone payload stager executable. * Added options for MySQL, PostgreSQL and Microsoft SQL Server to read/add/delete Windows registry keys. * Added options for MySQL and PostgreSQL to inject custom user-defined functions. * Added support for --first and --last so the user now has even more granularity in what to enumerate in the query output. * Minor enhancement to save the session by default in 'output/hostname/session' file if -s option is not specified. * Minor improvement to automatically remove sqlmap created temporary files from the DBMS underlying file system. * Minor bugs fixed. * Major code refactoring.
2009-09-26 03:03:45 +04:00
"firstChar": "integer",
"lastChar": "integer",
After the storm, a restore..
2008-10-15 19:38:22 +04:00
"query": "string",
Split character for tamper scripts (--tamper option) is now comma, not semi-colon. Minor enhancement
2010-10-17 01:52:16 +04:00
"sqlShell": "boolean",
minor update
2010-11-09 19:59:36 +03:00
},
"Brute": {
re-renaming of brute force switches. this way is better.
2010-11-11 10:57:44 +03:00
"commonTables": "boolean",
"commonColumns": "boolean",
Merged back from personal branch to trunk (svn merge -r846:940 ...) Changes: * Major enhancement to the Microsoft SQL Server stored procedure heap-based buffer overflow exploit (--os-bof) to automatically bypass DEP memory protection. * Added support for MySQL and PostgreSQL to execute Metasploit shellcode via UDF 'sys_bineval' (in-memory, anti-forensics technique) as an option instead of uploading the standalone payload stager executable. * Added options for MySQL, PostgreSQL and Microsoft SQL Server to read/add/delete Windows registry keys. * Added options for MySQL and PostgreSQL to inject custom user-defined functions. * Added support for --first and --last so the user now has even more granularity in what to enumerate in the query output. * Minor enhancement to save the session by default in 'output/hostname/session' file if -s option is not specified. * Minor improvement to automatically remove sqlmap created temporary files from the DBMS underlying file system. * Minor bugs fixed. * Major code refactoring.
2009-09-26 03:03:45 +04:00
},
"User-defined function": {
"udfInject": "boolean",
"shLib": "string"
After the storm, a restore..
2008-10-15 19:38:22 +04:00
},
"File system": {
"rFile": "string",
"wFile": "string",
Merged back from personal branch to trunk (svn merge -r846:940 ...) Changes: * Major enhancement to the Microsoft SQL Server stored procedure heap-based buffer overflow exploit (--os-bof) to automatically bypass DEP memory protection. * Added support for MySQL and PostgreSQL to execute Metasploit shellcode via UDF 'sys_bineval' (in-memory, anti-forensics technique) as an option instead of uploading the standalone payload stager executable. * Added options for MySQL, PostgreSQL and Microsoft SQL Server to read/add/delete Windows registry keys. * Added options for MySQL and PostgreSQL to inject custom user-defined functions. * Added support for --first and --last so the user now has even more granularity in what to enumerate in the query output. * Minor enhancement to save the session by default in 'output/hostname/session' file if -s option is not specified. * Minor improvement to automatically remove sqlmap created temporary files from the DBMS underlying file system. * Minor bugs fixed. * Major code refactoring.
2009-09-26 03:03:45 +04:00
"dFile": "string"
After the storm, a restore..
2008-10-15 19:38:22 +04:00
},
"Takeover": {
Updated to sqlmap 0.7 release candidate 1
2009-04-22 15:48:07 +04:00
"osCmd": "string",
After the storm, a restore..
2008-10-15 19:38:22 +04:00
"osShell": "boolean",
Updated to sqlmap 0.7 release candidate 1
2009-04-22 15:48:07 +04:00
"osPwn": "boolean",
"osSmb": "boolean",
"osBof": "boolean",
"privEsc": "boolean",
"msfPath": "string",
Merged back from personal branch to trunk (svn merge -r846:940 ...) Changes: * Major enhancement to the Microsoft SQL Server stored procedure heap-based buffer overflow exploit (--os-bof) to automatically bypass DEP memory protection. * Added support for MySQL and PostgreSQL to execute Metasploit shellcode via UDF 'sys_bineval' (in-memory, anti-forensics technique) as an option instead of uploading the standalone payload stager executable. * Added options for MySQL, PostgreSQL and Microsoft SQL Server to read/add/delete Windows registry keys. * Added options for MySQL and PostgreSQL to inject custom user-defined functions. * Added support for --first and --last so the user now has even more granularity in what to enumerate in the query output. * Minor enhancement to save the session by default in 'output/hostname/session' file if -s option is not specified. * Minor improvement to automatically remove sqlmap created temporary files from the DBMS underlying file system. * Minor bugs fixed. * Major code refactoring.
2009-09-26 03:03:45 +04:00
"tmpPath": "string"
},
"Windows": {
"regRead": "boolean",
"regAdd": "boolean",
"regDel": "boolean",
"regKey": "string",
"regVal": "string",
"regData": "string",
"regType": "string"
After the storm, a restore..
2008-10-15 19:38:22 +04:00
},
"Miscellaneous": {
Code refactoring and minor bug fixes.
2010-05-27 20:45:09 +04:00
"xmlFile": "string",
sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.
2010-01-02 05:02:12 +03:00
"sessionFile": "string",
More replacements for refactoring. Minor layout adjustments. Alignment of conffile/optiondict/cmdline parameters.
2010-11-08 15:36:48 +03:00
"trafficFile": "string",
added new option --flush-session
2010-03-04 16:01:18 +03:00
"flushSession": "boolean",
Split character for tamper scripts (--tamper option) is now comma, not semi-colon. Minor enhancement
2010-10-17 01:52:16 +04:00
"forms": "boolean",
After the storm, a restore..
2008-10-15 19:38:22 +04:00
"eta": "boolean",
sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.
2010-01-02 05:02:12 +03:00
"googlePage": "integer",
After the storm, a restore..
2008-10-15 19:38:22 +04:00
"updateAll": "boolean",
"batch": "boolean",
sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.
2010-01-02 05:02:12 +03:00
"cleanup": "boolean",
update for Feature #61
2010-09-24 17:19:35 +04:00
"replicate": "boolean",
More replacements for refactoring. Minor layout adjustments. Alignment of conffile/optiondict/cmdline parameters.
2010-11-08 15:36:48 +03:00
"checkPayload": "boolean",
"beep": "boolean",
sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.
2010-01-02 05:02:12 +03:00
"verbose": "integer"
After the storm, a restore..
2008-10-15 19:38:22 +04:00
},
}
Reference in New Issue Copy Permalink