2013-02-14 15:32:17 +04:00
|
|
|
#!/usr/bin/env python
|
2010-12-24 15:13:48 +03:00
|
|
|
|
|
|
|
"""
|
2016-01-06 02:06:12 +03:00
|
|
|
Copyright (c) 2006-2016 sqlmap developers (http://sqlmap.org/)
|
2010-12-24 15:13:48 +03:00
|
|
|
See the file 'doc/COPYING' for copying permission
|
|
|
|
"""
|
|
|
|
|
2011-01-16 13:52:42 +03:00
|
|
|
import difflib
|
2016-04-08 15:41:34 +03:00
|
|
|
import random
|
2010-12-24 15:13:48 +03:00
|
|
|
import threading
|
2011-06-17 16:50:28 +04:00
|
|
|
import time
|
2011-10-20 01:35:01 +04:00
|
|
|
import traceback
|
2010-12-24 15:13:48 +03:00
|
|
|
|
2015-09-08 12:10:47 +03:00
|
|
|
from thread import error as ThreadError
|
2011-07-03 02:48:56 +04:00
|
|
|
|
2011-11-22 14:41:56 +04:00
|
|
|
from lib.core.data import conf
|
2010-12-24 15:13:48 +03:00
|
|
|
from lib.core.data import kb
|
2011-05-30 03:17:50 +04:00
|
|
|
from lib.core.data import logger
|
2011-07-08 10:02:31 +04:00
|
|
|
from lib.core.datatype import AttribDict
|
2011-06-28 01:48:26 +04:00
|
|
|
from lib.core.enums import PAYLOAD
|
2012-12-06 17:14:19 +04:00
|
|
|
from lib.core.exception import SqlmapConnectionException
|
|
|
|
from lib.core.exception import SqlmapThreadException
|
|
|
|
from lib.core.exception import SqlmapValueException
|
2011-06-07 13:50:00 +04:00
|
|
|
from lib.core.settings import MAX_NUMBER_OF_THREADS
|
2011-06-17 16:50:28 +04:00
|
|
|
from lib.core.settings import PYVERSION
|
2011-05-30 03:17:50 +04:00
|
|
|
|
2011-07-08 10:02:31 +04:00
|
|
|
shared = AttribDict()
|
2010-12-24 15:13:48 +03:00
|
|
|
|
2011-07-04 23:58:41 +04:00
|
|
|
class _ThreadData(threading.local):
|
2010-12-24 15:13:48 +03:00
|
|
|
"""
|
|
|
|
Represents thread independent data
|
|
|
|
"""
|
|
|
|
|
|
|
|
def __init__(self):
|
2011-11-23 18:26:40 +04:00
|
|
|
self.reset()
|
|
|
|
|
|
|
|
def reset(self):
|
|
|
|
"""
|
|
|
|
Resets thread data model
|
|
|
|
"""
|
2011-05-30 03:17:50 +04:00
|
|
|
|
2011-04-30 17:20:05 +04:00
|
|
|
self.disableStdOut = False
|
2011-09-26 17:36:08 +04:00
|
|
|
self.hashDBCursor = None
|
2011-11-23 18:26:40 +04:00
|
|
|
self.inTransaction = False
|
2013-01-18 19:49:35 +04:00
|
|
|
self.lastComparisonPage = None
|
2013-01-18 20:00:11 +04:00
|
|
|
self.lastComparisonHeaders = None
|
2011-04-30 17:20:05 +04:00
|
|
|
self.lastErrorPage = None
|
|
|
|
self.lastHTTPError = None
|
|
|
|
self.lastRedirectMsg = None
|
|
|
|
self.lastQueryDuration = 0
|
2015-08-15 00:29:31 +03:00
|
|
|
self.lastPage = None
|
2011-09-28 12:13:46 +04:00
|
|
|
self.lastRequestMsg = None
|
2011-04-30 17:20:05 +04:00
|
|
|
self.lastRequestUID = 0
|
2013-04-30 20:08:26 +04:00
|
|
|
self.lastRedirectURL = None
|
2016-04-08 15:41:34 +03:00
|
|
|
self.random = random.WichmannHill()
|
2011-10-12 02:40:00 +04:00
|
|
|
self.resumed = False
|
2011-05-11 16:54:33 +04:00
|
|
|
self.retriesCount = 0
|
2011-04-30 17:20:05 +04:00
|
|
|
self.seqMatcher = difflib.SequenceMatcher(None)
|
2011-05-30 03:17:50 +04:00
|
|
|
self.shared = shared
|
2011-04-30 17:20:05 +04:00
|
|
|
self.valueStack = []
|
2010-12-24 15:13:48 +03:00
|
|
|
|
2011-07-04 23:58:41 +04:00
|
|
|
ThreadData = _ThreadData()
|
|
|
|
|
2010-12-24 15:13:48 +03:00
|
|
|
def getCurrentThreadUID():
|
|
|
|
return hash(threading.currentThread())
|
|
|
|
|
2011-06-07 13:50:00 +04:00
|
|
|
def readInput(message, default=None):
|
2012-02-16 13:54:29 +04:00
|
|
|
# It will be overwritten by original from lib.core.common
|
2011-06-07 13:50:00 +04:00
|
|
|
pass
|
|
|
|
|
2010-12-24 15:13:48 +03:00
|
|
|
def getCurrentThreadData():
|
|
|
|
"""
|
2011-07-04 23:58:41 +04:00
|
|
|
Returns current thread's local data
|
2010-12-24 15:13:48 +03:00
|
|
|
"""
|
|
|
|
|
2011-07-04 23:58:41 +04:00
|
|
|
global ThreadData
|
|
|
|
|
|
|
|
return ThreadData
|
2011-05-30 03:17:50 +04:00
|
|
|
|
2011-11-22 14:09:35 +04:00
|
|
|
def getCurrentThreadName():
|
|
|
|
"""
|
|
|
|
Returns current's thread name
|
|
|
|
"""
|
|
|
|
|
|
|
|
return threading.current_thread().getName()
|
|
|
|
|
2011-06-07 13:50:00 +04:00
|
|
|
def exceptionHandledFunction(threadFunction):
|
|
|
|
try:
|
|
|
|
threadFunction()
|
|
|
|
except KeyboardInterrupt:
|
|
|
|
kb.threadContinue = False
|
|
|
|
kb.threadException = True
|
|
|
|
raise
|
2015-09-08 12:10:47 +03:00
|
|
|
except Exception, ex:
|
2011-06-07 14:32:18 +04:00
|
|
|
# thread is just going to be silently killed
|
2015-09-08 12:10:47 +03:00
|
|
|
logger.error("thread %s: %s" % (threading.currentThread().getName(), ex.message))
|
2011-06-07 13:50:00 +04:00
|
|
|
|
2012-04-03 13:18:30 +04:00
|
|
|
def setDaemon(thread):
|
|
|
|
# Reference: http://stackoverflow.com/questions/190010/daemon-threads-explanation
|
|
|
|
if PYVERSION >= "2.6":
|
|
|
|
thread.daemon = True
|
|
|
|
else:
|
|
|
|
thread.setDaemon(True)
|
|
|
|
|
2011-07-03 02:48:56 +04:00
|
|
|
def runThreads(numThreads, threadFunction, cleanupFunction=None, forwardException=True, threadChoice=False, startThreadMsg=True):
|
2011-05-30 03:17:50 +04:00
|
|
|
threads = []
|
|
|
|
|
2011-06-07 13:50:00 +04:00
|
|
|
kb.multiThreadMode = True
|
2011-05-30 03:17:50 +04:00
|
|
|
kb.threadContinue = True
|
|
|
|
kb.threadException = False
|
|
|
|
|
2014-10-10 14:09:08 +04:00
|
|
|
if threadChoice and numThreads == 1 and not (kb.injection.data and not any(_ not in (PAYLOAD.TECHNIQUE.TIME, PAYLOAD.TECHNIQUE.STACKED) for _ in kb.injection.data)):
|
2011-06-07 13:50:00 +04:00
|
|
|
while True:
|
|
|
|
message = "please enter number of threads? [Enter for %d (current)] " % numThreads
|
|
|
|
choice = readInput(message, default=str(numThreads))
|
2014-12-21 07:15:42 +03:00
|
|
|
if choice:
|
|
|
|
skipThreadCheck = False
|
|
|
|
if choice.endswith('!'):
|
|
|
|
choice = choice[:-1]
|
|
|
|
skipThreadCheck = True
|
|
|
|
if choice.isdigit():
|
|
|
|
if int(choice) > MAX_NUMBER_OF_THREADS and not skipThreadCheck:
|
|
|
|
errMsg = "maximum number of used threads is %d avoiding potential connection issues" % MAX_NUMBER_OF_THREADS
|
|
|
|
logger.critical(errMsg)
|
|
|
|
else:
|
|
|
|
conf.threads = numThreads = int(choice)
|
|
|
|
break
|
2011-06-07 13:50:00 +04:00
|
|
|
|
|
|
|
if numThreads == 1:
|
2014-10-10 14:09:08 +04:00
|
|
|
warnMsg = "running in a single-thread mode. This could take a while"
|
2011-06-07 13:50:00 +04:00
|
|
|
logger.warn(warnMsg)
|
|
|
|
|
2011-08-18 02:31:33 +04:00
|
|
|
try:
|
|
|
|
if numThreads > 1:
|
|
|
|
if startThreadMsg:
|
|
|
|
infoMsg = "starting %d threads" % numThreads
|
|
|
|
logger.info(infoMsg)
|
|
|
|
else:
|
|
|
|
threadFunction()
|
|
|
|
return
|
2011-05-30 03:17:50 +04:00
|
|
|
|
2011-08-18 02:31:33 +04:00
|
|
|
# Start the threads
|
2011-10-22 02:34:27 +04:00
|
|
|
for numThread in xrange(numThreads):
|
2011-08-18 02:31:33 +04:00
|
|
|
thread = threading.Thread(target=exceptionHandledFunction, name=str(numThread), args=[threadFunction])
|
2011-06-17 16:50:28 +04:00
|
|
|
|
2012-04-03 13:18:30 +04:00
|
|
|
setDaemon(thread)
|
2011-06-17 16:50:28 +04:00
|
|
|
|
2011-08-18 02:31:33 +04:00
|
|
|
try:
|
|
|
|
thread.start()
|
2015-09-08 12:10:47 +03:00
|
|
|
except ThreadError, ex:
|
|
|
|
errMsg = "error occurred while starting new thread ('%s')" % ex.message
|
2011-08-18 02:31:33 +04:00
|
|
|
logger.critical(errMsg)
|
|
|
|
break
|
2011-07-03 02:48:56 +04:00
|
|
|
|
2011-08-18 02:31:33 +04:00
|
|
|
threads.append(thread)
|
2011-05-30 03:17:50 +04:00
|
|
|
|
2011-08-18 02:31:33 +04:00
|
|
|
# And wait for them to all finish
|
2011-05-30 03:17:50 +04:00
|
|
|
alive = True
|
|
|
|
while alive:
|
|
|
|
alive = False
|
|
|
|
for thread in threads:
|
|
|
|
if thread.isAlive():
|
|
|
|
alive = True
|
2011-10-10 18:47:48 +04:00
|
|
|
time.sleep(0.1)
|
2011-05-30 03:17:50 +04:00
|
|
|
|
|
|
|
except KeyboardInterrupt:
|
2011-07-03 02:48:56 +04:00
|
|
|
print
|
2011-05-30 03:17:50 +04:00
|
|
|
kb.threadContinue = False
|
|
|
|
kb.threadException = True
|
|
|
|
|
2011-12-26 18:31:59 +04:00
|
|
|
if numThreads > 1:
|
|
|
|
logger.info("waiting for threads to finish (Ctrl+C was pressed)")
|
2011-05-30 03:17:50 +04:00
|
|
|
try:
|
|
|
|
while (threading.activeCount() > 1):
|
|
|
|
pass
|
|
|
|
|
|
|
|
except KeyboardInterrupt:
|
2013-01-04 02:20:55 +04:00
|
|
|
raise SqlmapThreadException("user aborted (Ctrl+C was pressed multiple times)")
|
2011-05-30 03:17:50 +04:00
|
|
|
|
2011-05-30 03:56:41 +04:00
|
|
|
if forwardException:
|
|
|
|
raise
|
|
|
|
|
2015-09-08 12:10:47 +03:00
|
|
|
except (SqlmapConnectionException, SqlmapValueException), ex:
|
2012-01-13 19:56:50 +04:00
|
|
|
print
|
|
|
|
kb.threadException = True
|
2015-09-08 12:10:47 +03:00
|
|
|
logger.error("thread %s: %s" % (threading.currentThread().getName(), ex.message))
|
2012-01-13 19:56:50 +04:00
|
|
|
|
|
|
|
except:
|
|
|
|
from lib.core.common import unhandledExceptionMessage
|
|
|
|
|
2011-07-03 02:48:56 +04:00
|
|
|
print
|
|
|
|
kb.threadException = True
|
2012-01-13 19:56:50 +04:00
|
|
|
errMsg = unhandledExceptionMessage()
|
2012-01-13 19:58:47 +04:00
|
|
|
logger.error("thread %s: %s" % (threading.currentThread().getName(), errMsg))
|
2012-01-13 19:56:50 +04:00
|
|
|
traceback.print_exc()
|
2011-07-03 02:48:56 +04:00
|
|
|
|
2011-05-30 03:17:50 +04:00
|
|
|
finally:
|
2011-06-07 13:50:00 +04:00
|
|
|
kb.multiThreadMode = False
|
|
|
|
kb.bruteMode = False
|
2011-05-30 03:17:50 +04:00
|
|
|
kb.threadContinue = True
|
|
|
|
kb.threadException = False
|
|
|
|
|
2011-12-28 20:27:17 +04:00
|
|
|
for lock in kb.locks.values():
|
|
|
|
if lock.locked_lock():
|
2016-03-22 15:24:54 +03:00
|
|
|
try:
|
|
|
|
lock.release()
|
|
|
|
except thread.error:
|
|
|
|
pass
|
2011-12-28 20:27:17 +04:00
|
|
|
|
2012-08-21 12:28:25 +04:00
|
|
|
if conf.get("hashDB"):
|
2011-11-23 07:03:31 +04:00
|
|
|
conf.hashDB.flush(True)
|
2011-11-22 14:41:56 +04:00
|
|
|
|
2011-05-30 03:17:50 +04:00
|
|
|
if cleanupFunction:
|
|
|
|
cleanupFunction()
|