)
-VERSION = "1.3.7.3"
+VERSION = "1.3.7.4"
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)
diff --git a/lib/utils/httpd.py b/lib/utils/httpd.py
new file mode 100644
index 000000000..6aeaffba0
--- /dev/null
+++ b/lib/utils/httpd.py
@@ -0,0 +1,141 @@
+#!/usr/bin/env python
+
+"""
+Copyright (c) 2006-2019 sqlmap developers (http://sqlmap.org/)
+See the file 'LICENSE' for copying permission
+"""
+
+from __future__ import print_function
+
+import mimetypes
+import gzip
+import os
+import re
+import sys
+import threading
+import time
+import traceback
+
+sys.path.append(os.path.abspath(os.path.join(os.path.dirname(__file__), "..", "..")))
+
+from lib.core.enums import HTTP_HEADER
+from lib.core.settings import UNICODE_ENCODING
+from lib.core.settings import VERSION_STRING
+from thirdparty import six
+from thirdparty.six.moves import BaseHTTPServer as _BaseHTTPServer
+from thirdparty.six.moves import http_client as _http_client
+from thirdparty.six.moves import socketserver as _socketserver
+from thirdparty.six.moves import urllib as _urllib
+
+HTTP_ADDRESS = "0.0.0.0"
+HTTP_PORT = 8951
+DEBUG = True
+HTML_DIR = os.path.abspath(os.path.join(os.path.dirname(__file__), "..", "..", "data", "html"))
+DISABLED_CONTENT_EXTENSIONS = (".py", ".pyc", ".md", ".txt", ".bak", ".conf", ".zip", "~")
+
+class ThreadingServer(_socketserver.ThreadingMixIn, _BaseHTTPServer.HTTPServer):
+ def finish_request(self, *args, **kwargs):
+ try:
+ _BaseHTTPServer.HTTPServer.finish_request(self, *args, **kwargs)
+ except Exception:
+ if DEBUG:
+ traceback.print_exc()
+
+class ReqHandler(_BaseHTTPServer.BaseHTTPRequestHandler):
+ def do_GET(self):
+ path, query = self.path.split('?', 1) if '?' in self.path else (self.path, "")
+ params = {}
+ content = None
+
+ if query:
+ params.update(_urllib.parse.parse_qs(query))
+
+ for key in params:
+ if params[key]:
+ params[key] = params[key][-1]
+
+ self.url, self.params = path, params
+
+ if path == '/':
+ path = "index.html"
+
+ path = path.strip('/')
+
+ path = path.replace('/', os.path.sep)
+ path = os.path.abspath(os.path.join(HTML_DIR, path)).strip()
+
+ if not os.path.isfile(path) and os.path.isfile("%s.html" % path):
+ path = "%s.html" % path
+
+ if ".." not in os.path.relpath(path, HTML_DIR) and os.path.isfile(path) and not path.endswith(DISABLED_CONTENT_EXTENSIONS):
+ content = open(path, "rb").read()
+ self.send_response(_http_client.OK)
+ self.send_header(HTTP_HEADER.CONNECTION, "close")
+ self.send_header(HTTP_HEADER.CONTENT_TYPE, mimetypes.guess_type(path)[0] or "application/octet-stream")
+ else:
+ content = ("404 Not FoundNot Found
The requested URL %s was not found on this server.
" % self.path.split('?')[0]).encode(UNICODE_ENCODING)
+ self.send_response(_http_client.NOT_FOUND)
+ self.send_header(HTTP_HEADER.CONNECTION, "close")
+
+ if content is not None:
+ for match in re.finditer(b"<\!(\w+)\!>", content):
+ name = match.group(1)
+ _ = getattr(self, "_%s" % name.lower(), None)
+ if _:
+ content = self._format(content, **{ name: _() })
+
+ if "gzip" in self.headers.get(HTTP_HEADER.ACCEPT_ENCODING):
+ self.send_header(HTTP_HEADER.CONTENT_ENCODING, "gzip")
+ _ = six.BytesIO()
+ compress = gzip.GzipFile("", "w+b", 9, _)
+ compress._stream = _
+ compress.write(content)
+ compress.flush()
+ compress.close()
+ content = compress._stream.getvalue()
+
+ self.send_header(HTTP_HEADER.CONTENT_LENGTH, str(len(content)))
+
+ self.end_headers()
+
+ if content:
+ self.wfile.write(content)
+
+ self.wfile.flush()
+
+ def _format(self, content, **params):
+ if content:
+ for key, value in params.items():
+ content = content.replace("" % key, value)
+
+ return content
+
+ def version_string(self):
+ return VERSION_STRING
+
+ def log_message(self, format, *args):
+ return
+
+ def finish(self):
+ try:
+ _BaseHTTPServer.BaseHTTPRequestHandler.finish(self)
+ except Exception:
+ if DEBUG:
+ traceback.print_exc()
+
+def start_httpd():
+ server = ThreadingServer((HTTP_ADDRESS, HTTP_PORT), ReqHandler)
+ thread = threading.Thread(target=server.serve_forever)
+ thread.daemon = True
+ thread.start()
+
+ print("[i] running HTTP server at '%s:%d'" % (HTTP_ADDRESS, HTTP_PORT))
+
+if __name__ == "__main__":
+ try:
+ start_httpd()
+
+ while True:
+ time.sleep(1)
+ except KeyboardInterrupt:
+ pass