Add support for --rw-dirs <rwDirs> cmd line argumant / conf file

option. This allows one to fully automate commands where the default
upload directories cannot be used, as in:

$ sqlmap --batch --rw-dirs='/var/www/html/uploads' --os-cmd="ls;id" \
	-u 'http://nullbyte/kzMb5nVYJw/420search.php?usrtosearch=ramses'
This commit is contained in:
Mr.T_cpdump 2015-09-06 11:55:33 -04:00
parent b3fdbe24c2
commit 5ca0e11acb
3 changed files with 18 additions and 1 deletions

View File

@ -566,6 +566,11 @@ def cmdLineParser():
help="Remote absolute path of temporary files "
"directory")
takeover.add_option("--rw-dirs", dest="rwDirs",
help="Remote absolute path of writable "
"directories for overriding defaults "
"(comma separated if multiple)")
# Windows registry options
windows = OptionGroup(parser, "Windows registry access", "These "
"options can be used to access the back-end "

View File

@ -197,7 +197,13 @@ class Web:
self.webApi = choices[int(choice) - 1]
break
directories = list(arrayizeValue(getManualDirectories()))
# If specified in the conf file/cmd line then use those, else ask/use defaults for them
if conf.rwDirs:
logger.info("Trying to upload to user supplied dirs: %s" % conf.rwDirs)
directories = conf.rwDirs.split(',')
else:
directories = list(arrayizeValue(getManualDirectories()))
directories.extend(getAutoDirectories())
directories = list(oset(directories))

View File

@ -606,6 +606,12 @@ msfPath =
# Valid: absolute file system path
tmpPath =
# Remote absolute path of writable directories
# for overriding defaults (comma separated if
# multiple)
# E.g.: /var/www/html/uploads,/var/www/wordpress/images
rwDirs =
# These options can be used to access the back-end database management
# system Windows registry.