mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2024-11-22 09:36:35 +03:00
200 lines
8.7 KiB
Python
200 lines
8.7 KiB
Python
#!/usr/bin/env python
|
|
|
|
"""
|
|
Copyright (c) 2006-2023 sqlmap developers (https://sqlmap.org/)
|
|
See the file 'LICENSE' for copying permission
|
|
"""
|
|
|
|
from lib.core.common import Backend
|
|
from lib.core.data import conf
|
|
from lib.core.data import kb
|
|
from lib.core.dicts import DBMS_DICT
|
|
from lib.core.enums import DBMS
|
|
from lib.core.exception import SqlmapConnectionException
|
|
from lib.core.settings import ACCESS_ALIASES
|
|
from lib.core.settings import ALTIBASE_ALIASES
|
|
from lib.core.settings import CACHE_ALIASES
|
|
from lib.core.settings import CLICKHOUSE_ALIASES
|
|
from lib.core.settings import CRATEDB_ALIASES
|
|
from lib.core.settings import CUBRID_ALIASES
|
|
from lib.core.settings import DB2_ALIASES
|
|
from lib.core.settings import DERBY_ALIASES
|
|
from lib.core.settings import EXTREMEDB_ALIASES
|
|
from lib.core.settings import FIREBIRD_ALIASES
|
|
from lib.core.settings import FRONTBASE_ALIASES
|
|
from lib.core.settings import H2_ALIASES
|
|
from lib.core.settings import HSQLDB_ALIASES
|
|
from lib.core.settings import INFORMIX_ALIASES
|
|
from lib.core.settings import MAXDB_ALIASES
|
|
from lib.core.settings import MCKOI_ALIASES
|
|
from lib.core.settings import MIMERSQL_ALIASES
|
|
from lib.core.settings import MONETDB_ALIASES
|
|
from lib.core.settings import MSSQL_ALIASES
|
|
from lib.core.settings import MYSQL_ALIASES
|
|
from lib.core.settings import ORACLE_ALIASES
|
|
from lib.core.settings import PGSQL_ALIASES
|
|
from lib.core.settings import PRESTO_ALIASES
|
|
from lib.core.settings import RAIMA_ALIASES
|
|
from lib.core.settings import SQLITE_ALIASES
|
|
from lib.core.settings import SYBASE_ALIASES
|
|
from lib.core.settings import VERTICA_ALIASES
|
|
from lib.core.settings import VIRTUOSO_ALIASES
|
|
from lib.utils.sqlalchemy import SQLAlchemy
|
|
|
|
from plugins.dbms.access.connector import Connector as AccessConn
|
|
from plugins.dbms.access import AccessMap
|
|
from plugins.dbms.altibase.connector import Connector as AltibaseConn
|
|
from plugins.dbms.altibase import AltibaseMap
|
|
from plugins.dbms.cache.connector import Connector as CacheConn
|
|
from plugins.dbms.cache import CacheMap
|
|
from plugins.dbms.clickhouse.connector import Connector as ClickhouseConn
|
|
from plugins.dbms.clickhouse import ClickhouseMap
|
|
from plugins.dbms.cratedb.connector import Connector as CrateDBConn
|
|
from plugins.dbms.cratedb import CrateDBMap
|
|
from plugins.dbms.cubrid.connector import Connector as CubridConn
|
|
from plugins.dbms.cubrid import CubridMap
|
|
from plugins.dbms.db2.connector import Connector as DB2Conn
|
|
from plugins.dbms.db2 import DB2Map
|
|
from plugins.dbms.derby.connector import Connector as DerbyConn
|
|
from plugins.dbms.derby import DerbyMap
|
|
from plugins.dbms.extremedb.connector import Connector as ExtremeDBConn
|
|
from plugins.dbms.extremedb import ExtremeDBMap
|
|
from plugins.dbms.firebird.connector import Connector as FirebirdConn
|
|
from plugins.dbms.firebird import FirebirdMap
|
|
from plugins.dbms.frontbase.connector import Connector as FrontBaseConn
|
|
from plugins.dbms.frontbase import FrontBaseMap
|
|
from plugins.dbms.h2.connector import Connector as H2Conn
|
|
from plugins.dbms.h2 import H2Map
|
|
from plugins.dbms.hsqldb.connector import Connector as HSQLDBConn
|
|
from plugins.dbms.hsqldb import HSQLDBMap
|
|
from plugins.dbms.informix.connector import Connector as InformixConn
|
|
from plugins.dbms.informix import InformixMap
|
|
from plugins.dbms.maxdb.connector import Connector as MaxDBConn
|
|
from plugins.dbms.maxdb import MaxDBMap
|
|
from plugins.dbms.mckoi.connector import Connector as MckoiConn
|
|
from plugins.dbms.mckoi import MckoiMap
|
|
from plugins.dbms.mimersql.connector import Connector as MimerSQLConn
|
|
from plugins.dbms.mimersql import MimerSQLMap
|
|
from plugins.dbms.monetdb.connector import Connector as MonetDBConn
|
|
from plugins.dbms.monetdb import MonetDBMap
|
|
from plugins.dbms.mssqlserver.connector import Connector as MSSQLServerConn
|
|
from plugins.dbms.mssqlserver import MSSQLServerMap
|
|
from plugins.dbms.mysql.connector import Connector as MySQLConn
|
|
from plugins.dbms.mysql import MySQLMap
|
|
from plugins.dbms.oracle.connector import Connector as OracleConn
|
|
from plugins.dbms.oracle import OracleMap
|
|
from plugins.dbms.postgresql.connector import Connector as PostgreSQLConn
|
|
from plugins.dbms.postgresql import PostgreSQLMap
|
|
from plugins.dbms.presto.connector import Connector as PrestoConn
|
|
from plugins.dbms.presto import PrestoMap
|
|
from plugins.dbms.raima.connector import Connector as RaimaConn
|
|
from plugins.dbms.raima import RaimaMap
|
|
from plugins.dbms.sqlite.connector import Connector as SQLiteConn
|
|
from plugins.dbms.sqlite import SQLiteMap
|
|
from plugins.dbms.sybase.connector import Connector as SybaseConn
|
|
from plugins.dbms.sybase import SybaseMap
|
|
from plugins.dbms.vertica.connector import Connector as VerticaConn
|
|
from plugins.dbms.vertica import VerticaMap
|
|
from plugins.dbms.virtuoso.connector import Connector as VirtuosoConn
|
|
from plugins.dbms.virtuoso import VirtuosoMap
|
|
|
|
def setHandler():
|
|
"""
|
|
Detect which is the target web application back-end database
|
|
management system.
|
|
"""
|
|
|
|
items = [
|
|
(DBMS.MYSQL, MYSQL_ALIASES, MySQLMap, MySQLConn),
|
|
(DBMS.ORACLE, ORACLE_ALIASES, OracleMap, OracleConn),
|
|
(DBMS.PGSQL, PGSQL_ALIASES, PostgreSQLMap, PostgreSQLConn),
|
|
(DBMS.MSSQL, MSSQL_ALIASES, MSSQLServerMap, MSSQLServerConn),
|
|
(DBMS.SQLITE, SQLITE_ALIASES, SQLiteMap, SQLiteConn),
|
|
(DBMS.ACCESS, ACCESS_ALIASES, AccessMap, AccessConn),
|
|
(DBMS.FIREBIRD, FIREBIRD_ALIASES, FirebirdMap, FirebirdConn),
|
|
(DBMS.MAXDB, MAXDB_ALIASES, MaxDBMap, MaxDBConn),
|
|
(DBMS.SYBASE, SYBASE_ALIASES, SybaseMap, SybaseConn),
|
|
(DBMS.DB2, DB2_ALIASES, DB2Map, DB2Conn),
|
|
(DBMS.HSQLDB, HSQLDB_ALIASES, HSQLDBMap, HSQLDBConn),
|
|
(DBMS.H2, H2_ALIASES, H2Map, H2Conn),
|
|
(DBMS.INFORMIX, INFORMIX_ALIASES, InformixMap, InformixConn),
|
|
(DBMS.MONETDB, MONETDB_ALIASES, MonetDBMap, MonetDBConn),
|
|
(DBMS.DERBY, DERBY_ALIASES, DerbyMap, DerbyConn),
|
|
(DBMS.VERTICA, VERTICA_ALIASES, VerticaMap, VerticaConn),
|
|
(DBMS.MCKOI, MCKOI_ALIASES, MckoiMap, MckoiConn),
|
|
(DBMS.PRESTO, PRESTO_ALIASES, PrestoMap, PrestoConn),
|
|
(DBMS.ALTIBASE, ALTIBASE_ALIASES, AltibaseMap, AltibaseConn),
|
|
(DBMS.MIMERSQL, MIMERSQL_ALIASES, MimerSQLMap, MimerSQLConn),
|
|
(DBMS.CLICKHOUSE, CLICKHOUSE_ALIASES, ClickhouseMap, ClickhouseConn),
|
|
(DBMS.CRATEDB, CRATEDB_ALIASES, CrateDBMap, CrateDBConn),
|
|
(DBMS.CUBRID, CUBRID_ALIASES, CubridMap, CubridConn),
|
|
(DBMS.CACHE, CACHE_ALIASES, CacheMap, CacheConn),
|
|
(DBMS.EXTREMEDB, EXTREMEDB_ALIASES, ExtremeDBMap, ExtremeDBConn),
|
|
(DBMS.FRONTBASE, FRONTBASE_ALIASES, FrontBaseMap, FrontBaseConn),
|
|
(DBMS.RAIMA, RAIMA_ALIASES, RaimaMap, RaimaConn),
|
|
(DBMS.VIRTUOSO, VIRTUOSO_ALIASES, VirtuosoMap, VirtuosoConn),
|
|
]
|
|
|
|
_ = max(_ if (conf.get("dbms") or Backend.getIdentifiedDbms() or kb.heuristicExtendedDbms or "").lower() in _[1] else () for _ in items)
|
|
if _:
|
|
items.remove(_)
|
|
items.insert(0, _)
|
|
|
|
for dbms, aliases, Handler, Connector in items:
|
|
if conf.forceDbms:
|
|
if conf.forceDbms.lower() not in aliases:
|
|
continue
|
|
else:
|
|
kb.dbms = conf.dbms = conf.forceDbms = dbms
|
|
|
|
if kb.dbmsFilter:
|
|
if dbms not in kb.dbmsFilter:
|
|
continue
|
|
|
|
handler = Handler()
|
|
conf.dbmsConnector = Connector()
|
|
|
|
if conf.direct:
|
|
exception = None
|
|
dialect = DBMS_DICT[dbms][3]
|
|
|
|
if dialect:
|
|
try:
|
|
sqlalchemy = SQLAlchemy(dialect=dialect)
|
|
sqlalchemy.connect()
|
|
|
|
if sqlalchemy.connector:
|
|
conf.dbmsConnector = sqlalchemy
|
|
except Exception as ex:
|
|
exception = ex
|
|
|
|
if not dialect or exception:
|
|
try:
|
|
conf.dbmsConnector.connect()
|
|
except Exception as ex:
|
|
if exception:
|
|
raise exception
|
|
else:
|
|
if not isinstance(ex, NameError):
|
|
raise
|
|
else:
|
|
msg = "support for direct connection to '%s' is not available. " % dbms
|
|
msg += "Please rerun with '--dependencies'"
|
|
raise SqlmapConnectionException(msg)
|
|
|
|
if conf.forceDbms == dbms or handler.checkDbms():
|
|
if kb.resolutionDbms:
|
|
conf.dbmsHandler = max(_ for _ in items if _[0] == kb.resolutionDbms)[2]()
|
|
conf.dbmsHandler._dbms = kb.resolutionDbms
|
|
else:
|
|
conf.dbmsHandler = handler
|
|
conf.dbmsHandler._dbms = dbms
|
|
|
|
break
|
|
else:
|
|
conf.dbmsConnector = None
|
|
|
|
# At this point back-end DBMS is correctly fingerprinted, no need
|
|
# to enforce it anymore
|
|
Backend.flushForcedDbms()
|