mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2024-11-26 11:33:47 +03:00
116 lines
4.2 KiB
Python
116 lines
4.2 KiB
Python
#!/usr/bin/env python
|
|
|
|
"""
|
|
$Id$
|
|
|
|
Copyright (c) 2006-2011 sqlmap developers (http://www.sqlmap.org/)
|
|
See the file 'doc/COPYING' for copying permission
|
|
"""
|
|
|
|
import urllib2
|
|
import urlparse
|
|
|
|
from lib.core.data import conf
|
|
from lib.core.data import logger
|
|
from lib.core.common import getHostHeader
|
|
from lib.core.common import getUnicode
|
|
from lib.core.common import logHTTPTraffic
|
|
from lib.core.enums import HTTPHEADER
|
|
from lib.core.exception import sqlmapConnectionException
|
|
from lib.core.threads import getCurrentThreadData
|
|
from lib.request.basic import decodePage
|
|
|
|
class SmartRedirectHandler(urllib2.HTTPRedirectHandler):
|
|
# maximum number of redirections to any single URL
|
|
# this is needed because of the state that cookies introduce
|
|
max_repeats = 4
|
|
|
|
# maximum total number of redirections (regardless of URL) before
|
|
# assuming we're in a loop
|
|
max_redirections = 10
|
|
|
|
def _get_header_redirect(self, headers):
|
|
retVal = None
|
|
|
|
if "location" in headers:
|
|
retVal = headers.getheaders("location")[0].split("?")[0]
|
|
elif "uri" in headers:
|
|
retVal = headers.getheaders("uri")[0].split("?")[0]
|
|
|
|
return retVal
|
|
|
|
def common_http_redirect(self, result, headers, code, content, msg):
|
|
content = decodePage(content, headers.get(HTTPHEADER.CONTENT_ENCODING), headers.get(HTTPHEADER.CONTENT_TYPE))
|
|
|
|
threadData = getCurrentThreadData()
|
|
threadData.lastRedirectMsg = (threadData.lastRequestUID, content)
|
|
|
|
responseMsg = "HTTP response "
|
|
responseMsg += "[#%d] (%d %s):\n" % (threadData.lastRequestUID, code, getUnicode(msg))
|
|
|
|
if headers:
|
|
logHeaders = "\n".join("%s: %s" % (key.capitalize() if isinstance(key, basestring) else key, getUnicode(value)) for (key, value) in headers.items())
|
|
else:
|
|
logHeaders = ""
|
|
|
|
logHTTPTraffic(threadData.lastRequestMsg, "%s%s" % (responseMsg, logHeaders))
|
|
|
|
responseMsg += getUnicode(logHeaders)
|
|
|
|
logger.log(7, responseMsg)
|
|
|
|
if result:
|
|
if self._get_header_redirect(headers):
|
|
result.redurl = self._get_header_redirect(headers)
|
|
|
|
if hasattr(result, 'redurl'):
|
|
if not urlparse.urlsplit(result.redurl).netloc:
|
|
result.redurl = urlparse.urljoin(conf.url, result.redurl)
|
|
|
|
if "set-cookie" in headers:
|
|
result.setcookie = headers["set-cookie"].split("; path")[0]
|
|
|
|
result.redcode = code
|
|
|
|
return result
|
|
|
|
def http_error_301(self, req, fp, code, msg, headers):
|
|
self.infinite_loop_check(req)
|
|
|
|
content = None
|
|
try:
|
|
content = fp.read()
|
|
except Exception, msg:
|
|
dbgMsg = "there was a problem while retrieving "
|
|
dbgMsg += "redirect response content (%s)" % msg
|
|
logger.debug(dbgMsg)
|
|
|
|
if self._get_header_redirect(headers):
|
|
req.headers[HTTPHEADER.HOST] = getHostHeader(self._get_header_redirect(headers))
|
|
|
|
result = urllib2.HTTPRedirectHandler.http_error_301(self, req, fp, code, msg, headers)
|
|
return self.common_http_redirect(result, headers, code, content, msg)
|
|
|
|
def http_error_302(self, req, fp, code, msg, headers):
|
|
self.infinite_loop_check(req)
|
|
|
|
content = None
|
|
try:
|
|
content = fp.read()
|
|
except Exception, msg:
|
|
dbgMsg = "there was a problem while retrieving "
|
|
dbgMsg += "redirect response content (%s)" % msg
|
|
logger.debug(dbgMsg)
|
|
|
|
if self._get_header_redirect(headers):
|
|
req.headers[HTTPHEADER.HOST] = getHostHeader(self._get_header_redirect(headers))
|
|
|
|
result = urllib2.HTTPRedirectHandler.http_error_302(self, req, fp, code, msg, headers)
|
|
return self.common_http_redirect(result, headers, code, content, msg)
|
|
|
|
def infinite_loop_check(self, req):
|
|
if hasattr(req, 'redirect_dict') and (req.redirect_dict.get(req.get_full_url(), 0) >= self.max_repeats or len(req.redirect_dict) >= self.max_redirections):
|
|
errMsg = "infinite redirect loop detected (%s). " % ", ".join(item for item in req.redirect_dict.keys())
|
|
errMsg += "please check all provided parameters and/or provide missing ones."
|
|
raise sqlmapConnectionException, errMsg
|