diff --git a/lib/core/dump.py b/lib/core/dump.py index 3c65bf2d2..187206f8d 100644 --- a/lib/core/dump.py +++ b/lib/core/dump.py @@ -7,6 +7,9 @@ See the file 'LICENSE' for copying permission import hashlib import os + +import csv + import re import shutil import tempfile @@ -710,6 +713,40 @@ class Dump(object): def sqlQuery(self, query, queryRes): self.string(query, queryRes, content_type=CONTENT_TYPE.SQL_QUERY) + #code to extract columns from the request + deb="SELECT" + fin="FROM" + temp1=(query.upper()).find(deb) + + temp2=(query.upper()).find(fin) + + T=len(deb)-temp1+1 + temp_res=query[T:temp2] + temp_res=(temp_res.strip()).split(',') + + #****************************************** + #dictionarie for every value in queryRes + dt_save=[] + for i in range (len(queryRes)): + s=queryRes[i] + d={} + for j in range(len(temp_res)): + d.update({temp_res[j]:s[j]}) + dt_save.append(d) + + #******************************************* + file_csv="data_save.csv" + if(len(queryRes)!=0): + with open(file_csv,mode='w',newline='') as file_csv: + writer=csv.DictWriter(file_csv,fieldnames=temp_res) + writer.writeheader() + for part in dt_save: + writer.writerow(part) + print("data saved in csv format under "+"'"+os.path.realpath("data_save.csv")+"'") + else: + print("data don't exist to create CSV file") + + def rFile(self, fileData): self.lister("files saved to", fileData, sort=False, content_type=CONTENT_TYPE.FILE_READ) diff --git a/ok.py b/ok.py new file mode 100644 index 000000000..16f0e53a6 --- /dev/null +++ b/ok.py @@ -0,0 +1,142 @@ +import subprocess +from datetime import datetime +import sys +import os +import csv +import re +from urllib.parse import urlparse + +#**************************************************************************************** +# this function verify if the argument given is an URL +def est_url(url): + try: + result=urlparse(url) + return all([result.scheme, result.netloc]) + except Exception as e: + return False + +# this function verify if the argument given is a request +def est_requete(req): + exp_reg= expression_reguliere = re.compile( + r'\b(SELECT|UPDATE|DELETE|INSERT INTO|CREATE|ALTER|DROP|GRANT|REVOKE)\b', + re.IGNORECASE) + return re.search(exp_reg,req) is not None + +#***************************************************************************************** + +# read the arguements +arg=sys.argv + +#***************************************************************************************** + #verify if the arguments given are correct or not + +if (('-u' in arg)and('--sql-query' in arg)): + if (est_url(arg[2])): + if (est_requete(arg[-1])): + commande_sqlmap = ['python','sqlmap.py']+arg[1:] + else: + print("verify your request") + exit() + else: + print("verify your URL") + exit() +else: + print("Verify that you input correctly -u or --sql-query") + exit() + +#***************************************************************************************** + +#***************************************************************************************** + #extract the name of columns from the request +deb="SELECT" +fin="FROM" + +#find the start point of the ""deb"" variable in the request +temp1=(arg[-1].upper()).find(deb) + +#find the start point of the ""fin"" variable in the request +temp2=(arg[-1].upper()).find(fin) + +#select the request from the arguments given bu the user in command line +temp_res=arg[-1] + +#start selection of the columns names after the ""deb"" variable +T=len(deb)-temp1+1 +temp_res=temp_res[T:temp2] + +#split the String that contains columns name +temp_res=(temp_res.strip()).split(',') + +#****************************************************************************************** + +#****************************************************************************************** + #process the request + +res=subprocess.check_output(commande_sqlmap) + +#res=subprocess.run(commande_sqlmap,capture_output=True, text=True) + +#view the result of processing the resquest +res = res.decode('utf-8') +print(res) + + +# Select actuel time +heure_actuelle = datetime.now() +heure_formattee = heure_actuelle.strftime("%H:%M:%S") + +# ""m_deb"" variable is a string that represents the start point of showing the result of the request +m_deb="["+str(heure_formattee)+"]"+" [INFO] fetching SQL SELECT statement query output:" + +# ""m_fin"" variable is a string that represents the end point point of showing the result of the request +m_fin="["+str(heure_formattee)+"]"+" [INFO] fetched data logged to text files under" + +#""debut_message"" contains the position of the ""m_deb"" variable in the result +debut_message = res.find(m_deb) + +#""fin_message"" contains the position of the ""m_fin"" variable in the result +fin_message = res.find(m_fin) + +#select a part of the result that is between ""m_deb"" variable and ""m_fin"" variable +message = res[debut_message:fin_message].strip() + + +lignes = message.splitlines() + +# ""donnees_sauvegarder"" variable is a list of dictionaries +donnees_sauvegarder = [] + +# loop on the ""lignes"" variable +for ligne in lignes: + # verify if this line contain [*] + if ligne.startswith("[*]"): + # extract data after '[*]' + v_temp=(ligne[4:].strip()).split(',') + d_temp={} + for i in range(len(temp_res)): + # add for every column from ""temp_res"" variable a value from ""v_temp"" variable + d_temp.update({temp_res[i]:v_temp[i]}) + + # add the dictionarie in the list + donnees_sauvegarder.append(d_temp) + +#***************************************************************************************************** + + # create a file named ""data_save.csv"" in same repositories with this script file + +file_csv="data_save.csv" + +if(len(donnees_sauvegarder)!=0):# if the process of the request send data + with open(file_csv,mode='w',newline='') as file_csv: + # write the header of this CSV file + writer=csv.DictWriter(file_csv,fieldnames=temp_res) + writer.writeheader() + # loop on the list of dictionaries named ""donnees_sauvegarder"" to wite its content on the CSV file + for part in donnees_sauvegarder: + writer.writerow(part) + # if the data is successfully saved in the CSV file this message show the place of the file + print("data saved in csv format under "+"'"+os.path.realpath("data_save.csv")+"'") +else: + print("data don't exist to create CSV file") + +#******************************************************************************************************** diff --git a/plugins/generic/custom.py b/plugins/generic/custom.py index cb1195947..2063fd766 100644 --- a/plugins/generic/custom.py +++ b/plugins/generic/custom.py @@ -87,11 +87,13 @@ class Custom(object): inject.goStacked(query) output = NULL - + except SqlmapNoneDataException as ex: logger.warning(ex) + return output + def sqlShell(self): infoMsg = "calling %s shell. To quit type " % Backend.getIdentifiedDbms()