2013-02-14 15:32:17 +04:00
|
|
|
#!/usr/bin/env python
|
2008-10-15 19:38:22 +04:00
|
|
|
|
|
|
|
"""
|
2016-01-06 02:06:12 +03:00
|
|
|
Copyright (c) 2006-2016 sqlmap developers (http://sqlmap.org/)
|
2010-10-15 03:18:29 +04:00
|
|
|
See the file 'doc/COPYING' for copying permission
|
2008-10-15 19:38:22 +04:00
|
|
|
"""
|
|
|
|
|
|
|
|
optDict = {
|
2010-05-27 20:45:09 +04:00
|
|
|
# Format:
|
|
|
|
# Family: { "parameter name": "parameter datatype" },
|
|
|
|
# Or:
|
|
|
|
# Family: { "parameter name": ("parameter datatype", "category name used for common outputs feature") },
|
2008-12-04 20:40:03 +03:00
|
|
|
"Target": {
|
2010-03-27 02:23:25 +03:00
|
|
|
"direct": "string",
|
2008-10-15 19:38:22 +04:00
|
|
|
"url": "string",
|
2011-05-11 00:48:34 +04:00
|
|
|
"logFile": "string",
|
2011-06-08 20:08:20 +04:00
|
|
|
"bulkFile": "string",
|
2010-01-14 23:42:45 +03:00
|
|
|
"requestFile": "string",
|
2012-11-08 22:16:37 +04:00
|
|
|
"sessionFile": "string",
|
2010-01-12 16:11:26 +03:00
|
|
|
"googleDork": "string",
|
2013-01-10 18:02:28 +04:00
|
|
|
"configFile": "string",
|
2014-07-03 00:27:51 +04:00
|
|
|
"sitemapUrl": "string",
|
2008-12-04 20:40:03 +03:00
|
|
|
},
|
|
|
|
|
|
|
|
"Request": {
|
2014-11-21 11:41:39 +03:00
|
|
|
"method": "string",
|
2008-10-15 19:38:22 +04:00
|
|
|
"data": "string",
|
2014-04-06 18:48:46 +04:00
|
|
|
"paramDel": "string",
|
2008-10-15 19:38:22 +04:00
|
|
|
"cookie": "string",
|
2014-04-06 18:50:58 +04:00
|
|
|
"cookieDel": "string",
|
2012-07-24 17:34:50 +04:00
|
|
|
"loadCookies": "string",
|
2010-01-02 05:02:12 +03:00
|
|
|
"dropSetCookie": "boolean",
|
2008-10-15 19:38:22 +04:00
|
|
|
"agent": "string",
|
2011-02-02 17:51:12 +03:00
|
|
|
"randomAgent": "boolean",
|
2011-12-20 16:52:41 +04:00
|
|
|
"host": "string",
|
2010-10-17 01:52:16 +04:00
|
|
|
"referer": "string",
|
2008-12-09 00:24:24 +03:00
|
|
|
"headers": "string",
|
2013-08-09 16:13:48 +04:00
|
|
|
"authType": "string",
|
|
|
|
"authCred": "string",
|
2015-09-27 16:59:17 +03:00
|
|
|
"authFile": "string",
|
2008-10-15 19:38:22 +04:00
|
|
|
"proxy": "string",
|
2013-08-09 16:13:48 +04:00
|
|
|
"proxyCred": "string",
|
|
|
|
"proxyFile": "string",
|
2010-03-03 19:19:17 +03:00
|
|
|
"ignoreProxy": "boolean",
|
2013-04-30 16:11:56 +04:00
|
|
|
"tor": "boolean",
|
|
|
|
"torPort": "integer",
|
|
|
|
"torType": "string",
|
|
|
|
"checkTor": "boolean",
|
2008-11-09 19:57:47 +03:00
|
|
|
"delay": "float",
|
2010-01-09 23:44:50 +03:00
|
|
|
"timeout": "float",
|
|
|
|
"retries": "integer",
|
2013-04-02 19:34:56 +04:00
|
|
|
"rParam": "string",
|
2015-04-21 01:02:47 +03:00
|
|
|
"safeUrl": "string",
|
|
|
|
"safePost": "string",
|
2015-04-22 17:28:54 +03:00
|
|
|
"safeReqFile": "string",
|
2015-04-21 01:02:47 +03:00
|
|
|
"safeFreq": "integer",
|
2012-05-25 03:30:33 +04:00
|
|
|
"skipUrlEncode": "boolean",
|
2014-11-17 13:50:05 +03:00
|
|
|
"csrfToken": "string",
|
|
|
|
"csrfUrl": "string",
|
2013-04-30 15:56:38 +04:00
|
|
|
"forceSSL": "boolean",
|
2013-04-30 16:32:11 +04:00
|
|
|
"hpp": "boolean",
|
2013-04-30 15:59:44 +04:00
|
|
|
"evalCode": "string",
|
2008-10-15 19:38:22 +04:00
|
|
|
},
|
|
|
|
|
2010-10-17 01:52:16 +04:00
|
|
|
"Optimization": {
|
|
|
|
"optimize": "boolean",
|
2010-10-17 03:50:13 +04:00
|
|
|
"predictOutput": "boolean",
|
2010-10-17 01:52:16 +04:00
|
|
|
"keepAlive": "boolean",
|
|
|
|
"nullConnection": "boolean",
|
2013-01-10 18:02:28 +04:00
|
|
|
"threads": "integer",
|
2010-10-17 01:52:16 +04:00
|
|
|
},
|
|
|
|
|
2008-10-15 19:38:22 +04:00
|
|
|
"Injection": {
|
2008-12-04 20:40:03 +03:00
|
|
|
"testParameter": "string",
|
2013-04-04 16:21:57 +04:00
|
|
|
"skip": "string",
|
2015-05-18 21:57:15 +03:00
|
|
|
"skipStatic": "boolean",
|
2008-10-15 19:38:22 +04:00
|
|
|
"dbms": "string",
|
2013-04-30 16:05:50 +04:00
|
|
|
"dbmsCred": "string",
|
2009-04-22 15:48:07 +04:00
|
|
|
"os": "string",
|
2012-04-26 00:29:07 +04:00
|
|
|
"invalidBignum": "boolean",
|
2012-07-16 13:07:47 +04:00
|
|
|
"invalidLogical": "boolean",
|
2014-01-24 00:56:06 +04:00
|
|
|
"invalidString": "boolean",
|
2012-07-16 13:07:47 +04:00
|
|
|
"noCast": "boolean",
|
2013-01-18 18:40:37 +04:00
|
|
|
"noEscape": "boolean",
|
2008-12-09 00:24:24 +03:00
|
|
|
"prefix": "string",
|
2010-11-18 01:00:09 +03:00
|
|
|
"suffix": "string",
|
2013-01-10 18:02:28 +04:00
|
|
|
"tamper": "string",
|
2010-11-08 15:36:48 +03:00
|
|
|
},
|
|
|
|
|
|
|
|
"Detection": {
|
2010-11-28 21:10:54 +03:00
|
|
|
"level": "integer",
|
|
|
|
"risk": "integer",
|
2008-12-05 18:34:13 +03:00
|
|
|
"string": "string",
|
2012-12-01 02:00:03 +04:00
|
|
|
"notString": "string",
|
2008-12-05 18:34:13 +03:00
|
|
|
"regexp": "string",
|
2012-01-05 14:24:27 +04:00
|
|
|
"code": "integer",
|
2011-06-11 03:18:43 +04:00
|
|
|
"textOnly": "boolean",
|
2013-01-10 18:02:28 +04:00
|
|
|
"titles": "boolean",
|
2008-10-15 19:38:22 +04:00
|
|
|
},
|
|
|
|
|
2008-12-04 20:40:03 +03:00
|
|
|
"Techniques": {
|
2011-04-07 14:00:47 +04:00
|
|
|
"tech": "string",
|
2010-01-10 00:08:47 +03:00
|
|
|
"timeSec": "integer",
|
2010-12-13 02:59:55 +03:00
|
|
|
"uCols": "string",
|
2012-05-27 22:41:06 +04:00
|
|
|
"uChar": "string",
|
2013-03-21 14:28:44 +04:00
|
|
|
"uFrom": "string",
|
2012-07-26 16:07:05 +04:00
|
|
|
"dnsName": "string",
|
2013-01-10 18:02:28 +04:00
|
|
|
"secondOrder": "string",
|
2008-12-04 20:40:03 +03:00
|
|
|
},
|
2008-11-12 03:36:50 +03:00
|
|
|
|
2008-10-15 19:38:22 +04:00
|
|
|
"Fingerprint": {
|
2013-01-10 18:02:28 +04:00
|
|
|
"extensiveFp": "boolean",
|
2008-10-15 19:38:22 +04:00
|
|
|
},
|
|
|
|
|
|
|
|
"Enumeration": {
|
2012-10-05 12:24:09 +04:00
|
|
|
"getAll": "boolean",
|
2010-05-27 20:45:09 +04:00
|
|
|
"getBanner": ("boolean", "Banners"),
|
|
|
|
"getCurrentUser": ("boolean", "Users"),
|
|
|
|
"getCurrentDb": ("boolean", "Databases"),
|
2012-07-12 03:01:57 +04:00
|
|
|
"getHostname": "boolean",
|
2008-12-18 23:41:11 +03:00
|
|
|
"isDba": "boolean",
|
2010-05-27 20:45:09 +04:00
|
|
|
"getUsers": ("boolean", "Users"),
|
2010-05-30 18:53:13 +04:00
|
|
|
"getPasswordHashes": ("boolean", "Passwords"),
|
2010-05-27 20:45:09 +04:00
|
|
|
"getPrivileges": ("boolean", "Privileges"),
|
|
|
|
"getRoles": ("boolean", "Roles"),
|
|
|
|
"getDbs": ("boolean", "Databases"),
|
|
|
|
"getTables": ("boolean", "Tables"),
|
|
|
|
"getColumns": ("boolean", "Columns"),
|
2011-04-29 03:59:00 +04:00
|
|
|
"getSchema": "boolean",
|
2011-04-30 04:22:22 +04:00
|
|
|
"getCount": "boolean",
|
2008-10-15 19:38:22 +04:00
|
|
|
"dumpTable": "boolean",
|
|
|
|
"dumpAll": "boolean",
|
2010-05-07 17:40:57 +04:00
|
|
|
"search": "boolean",
|
2013-07-29 20:25:27 +04:00
|
|
|
"getComments": "boolean",
|
2008-10-15 19:38:22 +04:00
|
|
|
"db": "string",
|
|
|
|
"tbl": "string",
|
|
|
|
"col": "string",
|
2014-01-13 13:05:49 +04:00
|
|
|
"excludeCol": "string",
|
2014-02-11 19:20:45 +04:00
|
|
|
"dumpWhere": "string",
|
2010-10-17 01:52:16 +04:00
|
|
|
"user": "string",
|
2008-10-15 19:38:22 +04:00
|
|
|
"excludeSysDbs": "boolean",
|
|
|
|
"limitStart": "integer",
|
|
|
|
"limitStop": "integer",
|
2009-09-26 03:03:45 +04:00
|
|
|
"firstChar": "integer",
|
|
|
|
"lastChar": "integer",
|
2008-10-15 19:38:22 +04:00
|
|
|
"query": "string",
|
2012-07-10 03:27:08 +04:00
|
|
|
"sqlShell": "boolean",
|
2013-01-10 18:02:28 +04:00
|
|
|
"sqlFile": "string",
|
2010-11-09 19:59:36 +03:00
|
|
|
},
|
|
|
|
|
|
|
|
"Brute": {
|
2010-11-11 10:57:44 +03:00
|
|
|
"commonTables": "boolean",
|
2013-01-10 18:02:28 +04:00
|
|
|
"commonColumns": "boolean",
|
2009-09-26 03:03:45 +04:00
|
|
|
},
|
|
|
|
|
|
|
|
"User-defined function": {
|
|
|
|
"udfInject": "boolean",
|
2013-01-10 18:02:28 +04:00
|
|
|
"shLib": "string",
|
2008-10-15 19:38:22 +04:00
|
|
|
},
|
|
|
|
|
|
|
|
"File system": {
|
|
|
|
"rFile": "string",
|
|
|
|
"wFile": "string",
|
2013-01-10 18:02:28 +04:00
|
|
|
"dFile": "string",
|
2008-10-15 19:38:22 +04:00
|
|
|
},
|
|
|
|
|
|
|
|
"Takeover": {
|
2009-04-22 15:48:07 +04:00
|
|
|
"osCmd": "string",
|
2008-10-15 19:38:22 +04:00
|
|
|
"osShell": "boolean",
|
2009-04-22 15:48:07 +04:00
|
|
|
"osPwn": "boolean",
|
|
|
|
"osSmb": "boolean",
|
|
|
|
"osBof": "boolean",
|
|
|
|
"privEsc": "boolean",
|
|
|
|
"msfPath": "string",
|
2013-01-10 18:02:28 +04:00
|
|
|
"tmpPath": "string",
|
2009-09-26 03:03:45 +04:00
|
|
|
},
|
|
|
|
|
|
|
|
"Windows": {
|
|
|
|
"regRead": "boolean",
|
|
|
|
"regAdd": "boolean",
|
|
|
|
"regDel": "boolean",
|
|
|
|
"regKey": "string",
|
|
|
|
"regVal": "string",
|
|
|
|
"regData": "string",
|
2013-01-10 18:02:28 +04:00
|
|
|
"regType": "string",
|
2008-10-15 19:38:22 +04:00
|
|
|
},
|
|
|
|
|
2010-11-16 17:11:32 +03:00
|
|
|
"General": {
|
2011-02-27 15:17:41 +03:00
|
|
|
#"xmlFile": "string",
|
2011-05-18 02:55:22 +04:00
|
|
|
"trafficFile": "string",
|
|
|
|
"batch": "boolean",
|
|
|
|
"charset": "string",
|
2011-07-06 09:44:47 +04:00
|
|
|
"crawlDepth": "integer",
|
2015-04-06 23:07:22 +03:00
|
|
|
"crawlExclude": "string",
|
2011-11-30 21:39:41 +04:00
|
|
|
"csvDel": "string",
|
2012-11-28 13:58:18 +04:00
|
|
|
"dumpFormat": "string",
|
2011-05-18 02:55:22 +04:00
|
|
|
"eta": "boolean",
|
2010-11-16 17:11:32 +03:00
|
|
|
"flushSession": "boolean",
|
|
|
|
"forms": "boolean",
|
2011-05-18 02:55:22 +04:00
|
|
|
"freshQueries": "boolean",
|
2012-02-21 15:44:48 +04:00
|
|
|
"hexConvert": "boolean",
|
2014-04-06 18:54:46 +04:00
|
|
|
"outputDir": "string",
|
2011-07-06 09:44:47 +04:00
|
|
|
"parseErrors": "boolean",
|
2013-04-18 19:12:32 +04:00
|
|
|
"pivotColumn": "string",
|
2015-08-14 23:49:32 +03:00
|
|
|
"saveConfig": "string",
|
2013-04-30 16:32:11 +04:00
|
|
|
"scope": "string",
|
|
|
|
"testFilter": "string",
|
2015-10-01 12:57:33 +03:00
|
|
|
"testSkip": "string",
|
2011-07-06 09:44:47 +04:00
|
|
|
"updateAll": "boolean",
|
2010-11-16 17:11:32 +03:00
|
|
|
},
|
|
|
|
|
2008-10-15 19:38:22 +04:00
|
|
|
"Miscellaneous": {
|
2012-12-11 15:48:58 +04:00
|
|
|
"alert": "string",
|
2012-11-21 13:16:13 +04:00
|
|
|
"answers": "string",
|
2012-12-11 15:02:06 +04:00
|
|
|
"beep": "boolean",
|
2010-01-02 05:02:12 +03:00
|
|
|
"cleanup": "boolean",
|
2011-06-27 12:21:33 +04:00
|
|
|
"dependencies": "boolean",
|
2012-08-16 00:31:25 +04:00
|
|
|
"disableColoring": "boolean",
|
2010-11-16 17:09:09 +03:00
|
|
|
"googlePage": "integer",
|
2011-04-29 23:27:23 +04:00
|
|
|
"mobile": "boolean",
|
2015-07-10 17:10:24 +03:00
|
|
|
"offline": "boolean",
|
2011-03-23 14:57:57 +03:00
|
|
|
"pageRank": "boolean",
|
2012-12-20 20:53:43 +04:00
|
|
|
"purgeOutput": "boolean",
|
2011-07-10 19:16:58 +04:00
|
|
|
"smart": "boolean",
|
2011-03-29 15:42:55 +04:00
|
|
|
"wizard": "boolean",
|
2013-01-10 18:02:28 +04:00
|
|
|
"verbose": "integer",
|
2008-10-15 19:38:22 +04:00
|
|
|
},
|
2012-12-20 21:05:44 +04:00
|
|
|
"Hidden": {
|
2013-02-28 23:20:08 +04:00
|
|
|
"dummy": "boolean",
|
2015-12-03 14:16:00 +03:00
|
|
|
"disablePrecon": "boolean",
|
2013-06-04 01:32:57 +04:00
|
|
|
"binaryFields": "string",
|
2012-12-20 21:05:44 +04:00
|
|
|
"profile": "boolean",
|
|
|
|
"cpuThrottle": "integer",
|
|
|
|
"forceDns": "boolean",
|
2013-02-21 14:14:57 +04:00
|
|
|
"identifyWaf": "boolean",
|
2015-09-21 15:57:44 +03:00
|
|
|
"skipWaf": "boolean",
|
2014-04-30 01:26:45 +04:00
|
|
|
"ignore401": "boolean",
|
2012-12-20 21:05:44 +04:00
|
|
|
"smokeTest": "boolean",
|
|
|
|
"liveTest": "boolean",
|
|
|
|
"stopFail": "boolean",
|
2013-01-10 18:02:28 +04:00
|
|
|
"runCase": "string",
|
2012-12-20 21:05:44 +04:00
|
|
|
}
|
2008-10-15 19:38:22 +04:00
|
|
|
}
|