added new option --flush-session

lib/core/optiondict.py

@@ -139,6 +139,7 @@ optDict = {
 
             "Miscellaneous": {
                                "sessionFile":       "string",
+                               "flushSession":      "boolean",
                                "eta":               "boolean",
                                "googlePage":        "integer",
                                "updateAll":         "boolean",

lib/core/target.py

@@ -117,42 +117,50 @@ def __setOutputResume():
     logger.info("using '%s' as session file" % conf.sessionFile)
 
     if os.path.exists(conf.sessionFile):
-        readSessionFP = open(conf.sessionFile, "r")
+        if not conf.flushSession:
-        lines = readSessionFP.readlines()
+            readSessionFP = open(conf.sessionFile, "r")
-
+            lines = readSessionFP.readlines()
-        for line in lines:
+    
-            if line.count("][") == 4:
+            for line in lines:
-                line = line.split("][")
+                if line.count("][") == 4:
-
+                    line = line.split("][")
-                if len(line) != 5:
+    
-                    continue
+                    if len(line) != 5:
-
+                        continue
-                url, _, _, expression, value = line
+    
-
+                    url, _, _, expression, value = line
-                if not value:
+    
-                    continue
+                    if not value:
-
+                        continue
-                if url[0] == "[":
+    
-                    url = url[1:]
+                    if url[0] == "[":
-
+                        url = url[1:]
-                if value[-1] == "\n":
+    
-                    value = value[:-1]
+                    if value[-1] == "\n":
-
+                        value = value[:-1]
-                if url != conf.url:
+    
-                    continue
+                    if url != conf.url:
-
+                        continue
-                if url not in kb.resumedQueries.keys():
+    
-                    kb.resumedQueries[url] = {}
+                    if url not in kb.resumedQueries.keys():
-                    kb.resumedQueries[url][expression] = value
+                        kb.resumedQueries[url] = {}
-
+                        kb.resumedQueries[url][expression] = value
-                resumeConfKb(expression, url, value)
+    
-
+                    resumeConfKb(expression, url, value)
-                if expression not in kb.resumedQueries[url].keys():
+    
-                    kb.resumedQueries[url][expression] = value
+                    if expression not in kb.resumedQueries[url].keys():
-                elif len(value) >= len(kb.resumedQueries[url][expression]):
+                        kb.resumedQueries[url][expression] = value
-                    kb.resumedQueries[url][expression] = value
+                    elif len(value) >= len(kb.resumedQueries[url][expression]):
-
+                        kb.resumedQueries[url][expression] = value
-        readSessionFP.close()
+    
+            readSessionFP.close()
+        else:
+            try:
+                os.remove(conf.sessionFile)
+                logger.info("flushing session file")
+            except OSError, msg:
+                errMsg = "unable to flush the session file (%s)" % msg
+                raise sqlmapFilePathException, errMsg
 
     try:
         conf.sessionFP = open(conf.sessionFile, "a")

lib/parse/cmdline.py

@@ -397,6 +397,9 @@ def cmdLineParser():
                                  help="Save and resume all data retrieved "
                                       "on a session file")
                                       
+        miscellaneous.add_option("--flush-session", dest="flushSession", action="store_true",
+                                 help="Flush session file for current target")
+                                      
         miscellaneous.add_option("--eta", dest="eta", action="store_true",
                                  help="Display for each output the "
                                       "estimated time of arrival")

plugins/generic/enumeration.py

@@ -103,7 +103,6 @@ class Enumeration:
 
         infoMsg = "fetching banner"
         logger.info(infoMsg)
-
         if not kb.data.banner:
             if conf.unionUse or conf.unionTest:
                 dumper.string("valid union", unionTest())

sqlmap.conf

@@ -398,6 +398,10 @@ regType =
 # Save and resume all data retrieved on a session file.
 sessionFile = 
 
+
+# Flush session file for current target.
+flushSession = False
+
 # Retrieve each query output length and calculate the estimated time of
 # arrival in real time.
 # Valid: True or False