mirror of
				https://github.com/sqlmapproject/sqlmap.git
				synced 2025-11-04 09:57:38 +03:00 
			
		
		
		
	
		
			
				
	
	
		
			95 lines
		
	
	
		
			2.5 KiB
		
	
	
	
		
			Python
		
	
	
	
	
	
			
		
		
	
	
			95 lines
		
	
	
		
			2.5 KiB
		
	
	
	
		
			Python
		
	
	
	
	
	
#!/usr/bin/env python
 | 
						|
 | 
						|
"""
 | 
						|
Copyright (c) 2006-2020 sqlmap developers (http://sqlmap.org/)
 | 
						|
See the file 'LICENSE' for copying permission
 | 
						|
"""
 | 
						|
 | 
						|
from lib.core.common import Backend
 | 
						|
from lib.core.common import Format
 | 
						|
from lib.core.data import conf
 | 
						|
from lib.core.data import kb
 | 
						|
from lib.core.data import logger
 | 
						|
from lib.core.enums import DBMS
 | 
						|
from lib.core.session import setDbms
 | 
						|
from lib.core.settings import CUBRID_ALIASES
 | 
						|
from lib.request import inject
 | 
						|
from plugins.generic.fingerprint import Fingerprint as GenericFingerprint
 | 
						|
 | 
						|
class Fingerprint(GenericFingerprint):
 | 
						|
    def __init__(self):
 | 
						|
        GenericFingerprint.__init__(self, DBMS.CUBRID)
 | 
						|
 | 
						|
    def getFingerprint(self):
 | 
						|
        value = ""
 | 
						|
        wsOsFp = Format.getOs("web server", kb.headersFp)
 | 
						|
 | 
						|
        if wsOsFp:
 | 
						|
            value += "%s\n" % wsOsFp
 | 
						|
 | 
						|
        if kb.data.banner:
 | 
						|
            dbmsOsFp = Format.getOs("back-end DBMS", kb.bannerFp)
 | 
						|
 | 
						|
            if dbmsOsFp:
 | 
						|
                value += "%s\n" % dbmsOsFp
 | 
						|
 | 
						|
        value += "back-end DBMS: "
 | 
						|
 | 
						|
        if not conf.extensiveFp:
 | 
						|
            value += DBMS.CUBRID
 | 
						|
            return value
 | 
						|
 | 
						|
        actVer = Format.getDbms()
 | 
						|
        blank = " " * 15
 | 
						|
        value += "active fingerprint: %s" % actVer
 | 
						|
 | 
						|
        if kb.bannerFp:
 | 
						|
            banVer = kb.bannerFp.get("dbmsVersion")
 | 
						|
 | 
						|
            if banVer:
 | 
						|
                banVer = Format.getDbms([banVer])
 | 
						|
                value += "\n%sbanner parsing fingerprint: %s" % (blank, banVer)
 | 
						|
 | 
						|
        htmlErrorFp = Format.getErrorParsedDBMSes()
 | 
						|
 | 
						|
        if htmlErrorFp:
 | 
						|
            value += "\n%shtml error message fingerprint: %s" % (blank, htmlErrorFp)
 | 
						|
 | 
						|
        return value
 | 
						|
 | 
						|
    def checkDbms(self):
 | 
						|
        if not conf.extensiveFp and Backend.isDbmsWithin(CUBRID_ALIASES):
 | 
						|
            setDbms(DBMS.CUBRID)
 | 
						|
 | 
						|
            self.getBanner()
 | 
						|
 | 
						|
            return True
 | 
						|
 | 
						|
        infoMsg = "testing %s" % DBMS.CUBRID
 | 
						|
        logger.info(infoMsg)
 | 
						|
 | 
						|
        result = inject.checkBooleanExpression("{} SUBSETEQ (CAST ({} AS SET))")
 | 
						|
 | 
						|
        if result:
 | 
						|
            infoMsg = "confirming %s" % DBMS.CUBRID
 | 
						|
            logger.info(infoMsg)
 | 
						|
 | 
						|
            result = inject.checkBooleanExpression("DRAND()<2")
 | 
						|
 | 
						|
            if not result:
 | 
						|
                warnMsg = "the back-end DBMS is not %s" % DBMS.CUBRID
 | 
						|
                logger.warn(warnMsg)
 | 
						|
 | 
						|
                return False
 | 
						|
 | 
						|
            setDbms(DBMS.CUBRID)
 | 
						|
 | 
						|
            self.getBanner()
 | 
						|
 | 
						|
            return True
 | 
						|
        else:
 | 
						|
            warnMsg = "the back-end DBMS is not %s" % DBMS.CUBRID
 | 
						|
            logger.warn(warnMsg)
 | 
						|
 | 
						|
            return False
 |