sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-23 01:56:36 +03:00
Code Issues Packages Projects Releases Wiki Activity

on our way to make it thread safe.. it is a long way actually (issue #297)

Browse Source
This commit is contained in:
Bernardo Damele 2012-12-14 18:13:21 +00:00
parent 21ecffb750
commit 8dee8355c2
1 changed files with 13 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
lib/utils/restapi.py
View File

@ -42,7 +42,6 @@ from lib.core.settings import RESTAPI_SERVER_PORT
# Local global variables # Local global variables
options = {} options = {}
output = ""
adminid = "" adminid = ""
tasks = {} tasks = {}
@ -106,7 +105,7 @@ def task_new():
taskid = hexencode(os.urandom(16)) taskid = hexencode(os.urandom(16))
options[taskid] = AttribDict(cmdLineOptions) options[taskid] = AttribDict(cmdLineOptions)
options[taskid]["oDir"] = tempfile.mkdtemp(prefix="sqlmap-") options[taskid]["oDir"] = tempfile.mkdtemp(prefix="sqlmap-")
tasks[taskid] = options[adminid]["oDir"] tasks[taskid] = {"oDir": options[taskid]["oDir"], "output": ""}
return jsonize({"taskid": taskid}) return jsonize({"taskid": taskid})
@get("/task/<taskid>/destroy") @get("/task/<taskid>/destroy")
@ -114,8 +113,8 @@ def task_destroy(taskid):
""" """
Destroy own task ID Destroy own task ID
""" """
if taskid in tasks: if taskid in tasks and not is_admin(taskid):
tasks.remove(taskid) tasks.pop(taskid)
return jsonize({"success": True}) return jsonize({"success": True})
else: else:
abort(500, "Invalid task ID") abort(500, "Invalid task ID")
@ -153,6 +152,7 @@ def status(taskid):
""" """
Verify the status of the API as well as the core Verify the status of the API as well as the core
""" """
global tasks
if is_admin(taskid): if is_admin(taskid):
busy = kb.get("busyFlag") busy = kb.get("busyFlag")
tasks_num = len(tasks) tasks_num = len(tasks)
@ -167,7 +167,8 @@ def cleanup(taskid):
""" """
global tasks global tasks
if is_admin(taskid): if is_admin(taskid):
for task, taskdir in tasks.items(): for task, taskdata in tasks.items():
taskdir = taskdata["oDir"]
if task == adminid: if task == adminid:
continue continue
os.removedirs(taskdir) os.removedirs(taskdir)
@ -247,14 +248,15 @@ def scan_output(taskid):
""" """
Read the standard output of sqlmap core execution Read the standard output of sqlmap core execution
""" """
global tasks
if taskid not in tasks: if taskid not in tasks:
abort(500, "Invalid task ID") abort(500, "Invalid task ID")
global output sys.stdout.seek(len(tasks[taskid]["output"]))
sys.stdout.seek(len(output)) tasks[taskid]["output"] = sys.stdout.read()
output = sys.stdout.read()
sys.stdout.truncate(0) sys.stdout.truncate(0)
return jsonize({"output": output}) return jsonize({"output": tasks[taskid]["output"]})
# Function to handle scans' logs # Function to handle scans' logs
@get("/log/<taskid>/info") @get("/log/<taskid>/info")
@ -296,12 +298,12 @@ def restAPIsetup(host="0.0.0.0", port=RESTAPI_SERVER_PORT):
adminid = hexencode(os.urandom(16)) adminid = hexencode(os.urandom(16))
options[adminid] = AttribDict(cmdLineOptions) options[adminid] = AttribDict(cmdLineOptions)
options[adminid]["oDir"] = tempfile.mkdtemp(prefix="sqlmap-") options[adminid]["oDir"] = tempfile.mkdtemp(prefix="sqlmap-")
tasks[adminid] = options[adminid]["oDir"] tasks[adminid] = {"oDir": options[adminid]["oDir"], "output": ""}
logger.info("Running REST-JSON API server at '%s:%d'.." % (host, port)) logger.info("Running REST-JSON API server at '%s:%d'.." % (host, port))
logger.info("The admin task ID is: %s" % adminid) logger.info("The admin task ID is: %s" % adminid)
def restAPIrun(host="0.0.0.0", port=RESTAPI_SERVER_PORT): def restAPIrun(host="0.0.0.0", port=RESTAPI_SERVER_PORT):
run(host=host, port=port) run(host=host, port=port, quiet=False, debug=False)
def client(host, port): def client(host, port):
addr = "http://%s:%d" % (host, port) addr = "http://%s:%d" % (host, port)