mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2024-11-22 09:36:35 +03:00
089c16a1b8
Removed some useless tests. Moved <error> from queries.xml to payloads.xml as it makes more sense. Beeps at sql inj found only if --beep is provided. Minor fix in order to be able to pickle advancedDict() objects. Minor code refactoring. Removed useless folders.
76 lines
2.1 KiB
Python
76 lines
2.1 KiB
Python
#!/usr/bin/env python
|
|
|
|
"""
|
|
$Id$
|
|
|
|
Copyright (c) 2006-2010 sqlmap developers (http://sqlmap.sourceforge.net/)
|
|
See the file 'doc/COPYING' for copying permission
|
|
"""
|
|
|
|
from xml.etree import ElementTree as et
|
|
|
|
from lib.core.data import conf
|
|
from lib.core.data import paths
|
|
from lib.core.datatype import advancedDict
|
|
|
|
def cleanupVals(values, tag):
|
|
if isinstance(values, basestring):
|
|
return values
|
|
|
|
count = 0
|
|
|
|
for value in values:
|
|
if value.isdigit():
|
|
value = int(value)
|
|
else:
|
|
value = str(value)
|
|
|
|
values[count] = value
|
|
count += 1
|
|
|
|
if len(values) == 1 and tag not in ("clause", "where"):
|
|
values = values[0]
|
|
|
|
return values
|
|
|
|
def parseXmlNode(node):
|
|
for element in node.getiterator('boundary'):
|
|
boundary = advancedDict()
|
|
|
|
for child in element.getchildren():
|
|
if child.text:
|
|
values = cleanupVals(child.text.split(','), child.tag)
|
|
boundary[child.tag] = values
|
|
else:
|
|
boundary[child.tag] = None
|
|
|
|
conf.boundaries.append(boundary)
|
|
|
|
for element in node.getiterator('test'):
|
|
test = advancedDict()
|
|
|
|
for child in element.getchildren():
|
|
if child.text and child.text.strip():
|
|
values = cleanupVals(child.text.split(',') if child.tag != "epayload" else child.text, child.tag)
|
|
test[child.tag] = values
|
|
else:
|
|
if len(child.getchildren()) == 0:
|
|
test[child.tag] = None
|
|
continue
|
|
else:
|
|
test[child.tag] = advancedDict()
|
|
|
|
for gchild in child.getchildren():
|
|
if gchild.tag in test[child.tag]:
|
|
prevtext = test[child.tag][gchild.tag]
|
|
test[child.tag][gchild.tag] = [prevtext, gchild.text]
|
|
else:
|
|
test[child.tag][gchild.tag] = gchild.text
|
|
|
|
conf.tests.append(test)
|
|
|
|
def loadPayloads():
|
|
doc = et.parse(paths.PAYLOADS_XML)
|
|
root = doc.getroot()
|
|
parseXmlNode(root)
|