mirror of
				https://github.com/sqlmapproject/sqlmap.git
				synced 2025-11-01 00:17:25 +03:00 
			
		
		
		
	
		
			
				
	
	
		
			116 lines
		
	
	
		
			3.1 KiB
		
	
	
	
		
			Python
		
	
	
	
	
	
			
		
		
	
	
			116 lines
		
	
	
		
			3.1 KiB
		
	
	
	
		
			Python
		
	
	
	
	
	
| #!/usr/bin/env python
 | |
| 
 | |
| """
 | |
| $Id$
 | |
| 
 | |
| Copyright (c) 2006-2012 sqlmap developers (http://www.sqlmap.org/)
 | |
| See the file 'doc/COPYING' for copying permission
 | |
| """
 | |
| 
 | |
| from lib.core.common import Backend
 | |
| from lib.core.common import Format
 | |
| from lib.core.data import conf
 | |
| from lib.core.data import kb
 | |
| from lib.core.data import logger
 | |
| from lib.core.enums import DBMS
 | |
| from lib.core.enums import OS
 | |
| from lib.core.session import setDbms
 | |
| from lib.core.settings import SYBASE_ALIASES
 | |
| from lib.request import inject
 | |
| from plugins.generic.fingerprint import Fingerprint as GenericFingerprint
 | |
| 
 | |
| class Fingerprint(GenericFingerprint):
 | |
|     def __init__(self):
 | |
|         GenericFingerprint.__init__(self, DBMS.SYBASE)
 | |
| 
 | |
|     def getFingerprint(self):
 | |
|         value = ""
 | |
|         wsOsFp = Format.getOs("web server", kb.headersFp)
 | |
| 
 | |
|         if wsOsFp:
 | |
|             value += "%s\n" % wsOsFp
 | |
| 
 | |
|         if kb.data.banner:
 | |
|             dbmsOsFp = Format.getOs("back-end DBMS", kb.bannerFp)
 | |
| 
 | |
|             if dbmsOsFp:
 | |
|                 value += "%s\n" % dbmsOsFp
 | |
| 
 | |
|         value += "back-end DBMS: "
 | |
| 
 | |
|         if not conf.extensiveFp:
 | |
|             value += DBMS.SYBASE
 | |
|             return value
 | |
| 
 | |
|         actVer = Format.getDbms()
 | |
|         blank = " " * 15
 | |
|         value += "active fingerprint: %s" % actVer
 | |
| 
 | |
|         if kb.bannerFp:
 | |
|             banVer = kb.bannerFp["dbmsVersion"]
 | |
|             banVer = Format.getDbms([banVer])
 | |
|             value += "\n%sbanner parsing fingerprint: %s" % (blank, banVer)
 | |
| 
 | |
|         htmlErrorFp = Format.getErrorParsedDBMSes()
 | |
| 
 | |
|         if htmlErrorFp:
 | |
|             value += "\n%shtml error message fingerprint: %s" % (blank, htmlErrorFp)
 | |
| 
 | |
|         return value
 | |
| 
 | |
|     def checkDbms(self):
 | |
|         if not conf.extensiveFp and (Backend.isDbmsWithin(SYBASE_ALIASES) \
 | |
|            or conf.dbms in SYBASE_ALIASES) and Backend.getVersion() and \
 | |
|            Backend.getVersion().isdigit():
 | |
|             setDbms("%s %s" % (DBMS.SYBASE, Backend.getVersion()))
 | |
| 
 | |
|             self.getBanner()
 | |
| 
 | |
|             Backend.setOs(OS.WINDOWS)
 | |
| 
 | |
|             return True
 | |
| 
 | |
|         infoMsg = "testing %s" % DBMS.SYBASE
 | |
|         logger.info(infoMsg)
 | |
| 
 | |
|         if conf.direct:
 | |
|             result = True
 | |
|         else:
 | |
|             result = inject.checkBooleanExpression("tempdb_id()=tempdb_id()")
 | |
| 
 | |
|         if result:
 | |
|             infoMsg = "confirming %s" % DBMS.SYBASE
 | |
|             logger.info(infoMsg)
 | |
| 
 | |
|             result = inject.checkBooleanExpression("suser_id()=suser_id()")
 | |
| 
 | |
|             if not result:
 | |
|                 warnMsg = "the back-end DBMS is not %s" % DBMS.SYBASE
 | |
|                 logger.warn(warnMsg)
 | |
| 
 | |
|                 return False
 | |
| 
 | |
|             setDbms(DBMS.SYBASE)
 | |
| 
 | |
|             self.getBanner()
 | |
| 
 | |
|             if not conf.extensiveFp:
 | |
|                 return True
 | |
| 
 | |
|             infoMsg = "actively fingerprinting %s" % DBMS.SYBASE
 | |
|             logger.info(infoMsg)
 | |
| 
 | |
|             for version in xrange(12, 16):
 | |
|                 result = inject.checkBooleanExpression("@@VERSION_NUMBER/1000=%d" % version)
 | |
| 
 | |
|                 if result:
 | |
|                     Backend.setVersion(str(version))
 | |
|                     break
 | |
| 
 | |
|             return True
 | |
|         else:
 | |
|             warnMsg = "the back-end DBMS is not %s" % DBMS.SYBASE
 | |
|             logger.warn(warnMsg)
 | |
| 
 | |
|             return False
 |