mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2024-11-22 17:46:37 +03:00
84 lines
2.5 KiB
Python
84 lines
2.5 KiB
Python
#!/usr/bin/env python
|
|
|
|
"""
|
|
$Id$
|
|
|
|
This file is part of the sqlmap project, http://sqlmap.sourceforge.net.
|
|
|
|
Copyright (c) 2007-2009 Bernardo Damele A. G. <bernardo.damele@gmail.com>
|
|
Copyright (c) 2006 Daniele Bellucci <daniele.bellucci@gmail.com>
|
|
|
|
sqlmap is free software; you can redistribute it and/or modify it under
|
|
the terms of the GNU General Public License as published by the Free
|
|
Software Foundation version 2 of the License.
|
|
|
|
sqlmap is distributed in the hope that it will be useful, but WITHOUT ANY
|
|
WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
|
|
FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
|
|
details.
|
|
|
|
You should have received a copy of the GNU General Public License along
|
|
with sqlmap; if not, write to the Free Software Foundation, Inc., 51
|
|
Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
"""
|
|
|
|
|
|
|
|
import os
|
|
import re
|
|
|
|
from lib.core.data import conf
|
|
from lib.core.data import kb
|
|
from lib.parse.headers import headersParser
|
|
from lib.parse.html import htmlParser
|
|
|
|
|
|
def forgeHeaders(cookie, ua):
|
|
"""
|
|
Prepare HTTP Cookie and HTTP User-Agent headers to use when performing
|
|
the HTTP requests
|
|
"""
|
|
|
|
headers = {}
|
|
|
|
for header, value in conf.httpHeaders:
|
|
if cookie and header == "Cookie":
|
|
headers[header] = cookie
|
|
elif ua and header == "User-Agent":
|
|
headers[header] = ua
|
|
else:
|
|
headers[header] = value
|
|
|
|
return headers
|
|
|
|
|
|
def parseResponse(page, headers):
|
|
"""
|
|
@param page: the page to parse to feed the knowledge base htmlFp
|
|
(back-end DBMS fingerprint based upon DBMS error messages return
|
|
through the web application) list and absFilePaths (absolute file
|
|
paths) set.
|
|
|
|
@todo: in the future parse the page content scrolling an XML file to
|
|
identify the dynamic language used and, most, the absolute path,
|
|
like for DBMS error messages (ERRORS_XML), see above.
|
|
"""
|
|
|
|
if headers:
|
|
headersParser(headers)
|
|
|
|
if page:
|
|
htmlParser(page)
|
|
|
|
# Detect injectable page absolute system path
|
|
# NOTE: this regular expression works if the remote web application
|
|
# is written in PHP and debug/error messages are enabled.
|
|
absFilePathsRegExp = ( " in <b>(.*?)</b> on line", "([\w]\:[\/\\\\]+)" )
|
|
|
|
for absFilePathRegExp in absFilePathsRegExp:
|
|
absFilePaths = re.findall(absFilePathRegExp, page, re.I)
|
|
|
|
for absFilePath in absFilePaths:
|
|
if absFilePath not in kb.absFilePaths:
|
|
kb.absFilePaths.add(os.path.dirname(absFilePath))
|