mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2024-11-22 17:46:37 +03:00
105 lines
3.8 KiB
Python
105 lines
3.8 KiB
Python
#!/usr/bin/env python
|
|
|
|
"""
|
|
Copyright (c) 2006-2015 sqlmap developers (http://sqlmap.org/)
|
|
See the file 'doc/COPYING' for copying permission
|
|
"""
|
|
|
|
import distutils.version
|
|
import httplib
|
|
import socket
|
|
import urllib2
|
|
|
|
from lib.core.common import getSafeExString
|
|
from lib.core.data import kb
|
|
from lib.core.data import logger
|
|
from lib.core.exception import SqlmapConnectionException
|
|
from lib.core.settings import PYVERSION
|
|
|
|
ssl = None
|
|
try:
|
|
import ssl as _ssl
|
|
ssl = _ssl
|
|
except ImportError:
|
|
pass
|
|
|
|
_protocols = filter(None, (getattr(ssl, _, None) for _ in ("PROTOCOL_TLSv1_2", "PROTOCOL_TLSv1_1", "PROTOCOL_TLSv1", "PROTOCOL_SSLv3", "PROTOCOL_SSLv23", "PROTOCOL_SSLv2")))
|
|
|
|
class HTTPSConnection(httplib.HTTPSConnection):
|
|
"""
|
|
Connection class that enables usage of newer SSL protocols.
|
|
|
|
Reference: http://bugs.python.org/msg128686
|
|
"""
|
|
|
|
def __init__(self, *args, **kwargs):
|
|
httplib.HTTPSConnection.__init__(self, *args, **kwargs)
|
|
|
|
def connect(self):
|
|
def create_sock():
|
|
sock = socket.create_connection((self.host, self.port), self.timeout)
|
|
if getattr(self, "_tunnel_host", None):
|
|
self.sock = sock
|
|
self._tunnel()
|
|
return sock
|
|
|
|
success = False
|
|
|
|
# Reference(s): https://docs.python.org/2/library/ssl.html#ssl.SSLContext
|
|
# https://www.mnot.net/blog/2014/12/27/python_2_and_tls_sni
|
|
if kb.tlsSNI.get(self.host) != False and hasattr(ssl, "SSLContext"):
|
|
for protocol in filter(lambda _: _ >= ssl.PROTOCOL_TLSv1, _protocols):
|
|
try:
|
|
sock = create_sock()
|
|
context = ssl.SSLContext(protocol)
|
|
_ = context.wrap_socket(sock, do_handshake_on_connect=True, server_hostname=self.host)
|
|
if _:
|
|
success = True
|
|
self.sock = _
|
|
_protocols.remove(protocol)
|
|
_protocols.insert(0, protocol)
|
|
break
|
|
else:
|
|
sock.close()
|
|
except (ssl.SSLError, socket.error, httplib.BadStatusLine), ex:
|
|
self._tunnel_host = None
|
|
logger.debug("SSL connection error occurred ('%s')" % getSafeExString(ex))
|
|
|
|
if kb.tlsSNI.get(self.host) is None:
|
|
kb.tlsSNI[self.host] = success
|
|
|
|
if not success:
|
|
for protocol in _protocols:
|
|
try:
|
|
sock = create_sock()
|
|
_ = ssl.wrap_socket(sock, self.key_file, self.cert_file, ssl_version=protocol)
|
|
if _:
|
|
success = True
|
|
self.sock = _
|
|
_protocols.remove(protocol)
|
|
_protocols.insert(0, protocol)
|
|
break
|
|
else:
|
|
sock.close()
|
|
except (ssl.SSLError, socket.error, httplib.BadStatusLine), ex:
|
|
self._tunnel_host = None
|
|
logger.debug("SSL connection error occurred ('%s')" % getSafeExString(ex))
|
|
|
|
if not success:
|
|
errMsg = "can't establish SSL connection"
|
|
if distutils.version.LooseVersion(PYVERSION) < distutils.version.LooseVersion("2.7.10"):
|
|
errMsg += " (please retry with Python >= 2.7.10)"
|
|
raise SqlmapConnectionException(errMsg)
|
|
|
|
class HTTPSHandler(urllib2.HTTPSHandler):
|
|
def https_open(self, req):
|
|
return self.do_open(HTTPSConnection if ssl else httplib.HTTPSConnection, req)
|
|
|
|
# Bug fix (http://bugs.python.org/issue17849)
|
|
|
|
def _(self, *args):
|
|
return self._readline()
|
|
|
|
httplib.LineAndFileWrapper._readline = httplib.LineAndFileWrapper.readline
|
|
httplib.LineAndFileWrapper.readline = _
|