sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-06-21 21:43:07 +03:00
Code Issues Packages Projects Releases Wiki Activity

more fixes :)

Browse Source
This commit is contained in:
Miroslav Stampar 2010-02-04 10:10:41 +00:00
parent e4699f389d
commit 87239476af
1 changed files with 21 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
lib/takeover/web.py
View File

@ -79,8 +79,9 @@ class Web:
def webFileUpload(self, fileToUpload, destFileName, directory): def webFileUpload(self, fileToUpload, destFileName, directory):
inputFile = open(fileToUpload, "r") inputFile = open(fileToUpload, "r")
self.__webFileStreamUpload(inputFile, destFileName, directory) retVal = self.__webFileStreamUpload(inputFile, destFileName, directory)
inputFile.close() inputFile.close()
return retVal
def __webFileStreamUpload(self, stream, destFileName, directory): def __webFileStreamUpload(self, stream, destFileName, directory):
if self.webApi == "php": if self.webApi == "php":
@ -95,6 +96,9 @@ class Web:
warnMsg = "unable to upload the backdoor through " warnMsg = "unable to upload the backdoor through "
warnMsg += "the uploader agent on '%s'" % directory warnMsg += "the uploader agent on '%s'" % directory
logger.warn(warnMsg) logger.warn(warnMsg)
return False
else:
return True
elif self.webApi == "asp": elif self.webApi == "asp":
backdoorRemotePath = "%s/%s" % (directory, destFileName) backdoorRemotePath = "%s/%s" % (directory, destFileName)
@ -107,9 +111,12 @@ class Web:
warnMsg = "unable to upload the backdoor through " warnMsg = "unable to upload the backdoor through "
warnMsg += "the uploader agent on '%s'" % directory warnMsg += "the uploader agent on '%s'" % directory
logger.warn(warnMsg) logger.warn(warnMsg)
return False
else:
return True
elif self.webApi == "jsp": elif self.webApi == "jsp":
pass return False
def webInit(self): def webInit(self):
""" """
@ -195,13 +202,17 @@ class Web:
infoMsg += "on '%s'" % directory infoMsg += "on '%s'" % directory
logger.info(infoMsg) logger.info(infoMsg)
self.__webFileStreamUpload(backdoorStream, backdoorName, directory) if self.__webFileStreamUpload(backdoorStream, backdoorName, directory):
self.webBackdoorUrl = "%s/%s" % (self.webBaseUrl, backdoorName) self.webBackdoorUrl = "%s/%s" % (self.webBaseUrl, backdoorName)
self.webDirectory = directory self.webDirectory = directory
infoMsg = "the backdoor has probably been successfully " infoMsg = "the backdoor has probably been successfully "
infoMsg += "uploaded on '%s', go with your browser " % directory infoMsg += "uploaded on '%s', go with your browser " % directory
infoMsg += "to '%s' and enjoy it!" % self.webBackdoorUrl infoMsg += "to '%s' and enjoy it!" % self.webBackdoorUrl
logger.info(infoMsg) logger.info(infoMsg)
else:
infoMsg = "the backdoor hasn't been successfully "
infoMsg += "uploaded on '%s'" % directory
logger.warn(infoMsg)
break break