mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2024-11-25 19:13:48 +03:00
341 lines
9.0 KiB
Python
341 lines
9.0 KiB
Python
#!/usr/bin/env python
|
|
|
|
"""
|
|
Copyright (c) 2006-2014 sqlmap developers (http://sqlmap.org/)
|
|
See the file 'doc/COPYING' for copying permission
|
|
"""
|
|
|
|
class PRIORITY:
|
|
LOWEST = -100
|
|
LOWER = -50
|
|
LOW = -10
|
|
NORMAL = 0
|
|
HIGH = 10
|
|
HIGHER = 50
|
|
HIGHEST = 100
|
|
|
|
class SORT_ORDER:
|
|
FIRST = 0
|
|
SECOND = 1
|
|
THIRD = 2
|
|
FOURTH = 3
|
|
FIFTH = 4
|
|
LAST = 100
|
|
|
|
class DBMS:
|
|
ACCESS = "Microsoft Access"
|
|
DB2 = "IBM DB2"
|
|
FIREBIRD = "Firebird"
|
|
MAXDB = "SAP MaxDB"
|
|
MSSQL = "Microsoft SQL Server"
|
|
MYSQL = "MySQL"
|
|
ORACLE = "Oracle"
|
|
PGSQL = "PostgreSQL"
|
|
SQLITE = "SQLite"
|
|
SYBASE = "Sybase"
|
|
HSQLDB = "HSQLDB"
|
|
|
|
class DBMS_DIRECTORY_NAME:
|
|
ACCESS = "access"
|
|
DB2 = "db2"
|
|
FIREBIRD = "firebird"
|
|
MAXDB = "maxdb"
|
|
MSSQL = "mssqlserver"
|
|
MYSQL = "mysql"
|
|
ORACLE = "oracle"
|
|
PGSQL = "postgresql"
|
|
SQLITE = "sqlite"
|
|
SYBASE = "sybase"
|
|
HSQLDB = "hsqldb"
|
|
|
|
class CUSTOM_LOGGING:
|
|
PAYLOAD = 9
|
|
TRAFFIC_OUT = 8
|
|
TRAFFIC_IN = 7
|
|
|
|
class OS:
|
|
LINUX = "Linux"
|
|
WINDOWS = "Windows"
|
|
|
|
class PLACE:
|
|
GET = "GET"
|
|
POST = "POST"
|
|
URI = "URI"
|
|
COOKIE = "Cookie"
|
|
USER_AGENT = "User-Agent"
|
|
REFERER = "Referer"
|
|
HOST = "Host"
|
|
CUSTOM_POST = "(custom) POST"
|
|
CUSTOM_HEADER = "(custom) HEADER"
|
|
|
|
class POST_HINT:
|
|
SOAP = "SOAP"
|
|
JSON = "JSON"
|
|
JSON_LIKE = "JSON-like"
|
|
MULTIPART = "MULTIPART"
|
|
XML = "XML (generic)"
|
|
|
|
class HTTPMETHOD:
|
|
GET = "GET"
|
|
POST = "POST"
|
|
HEAD = "HEAD"
|
|
PUT = "PUT"
|
|
DELETE = "DETELE"
|
|
TRACE = "TRACE"
|
|
OPTIONS = "OPTIONS"
|
|
CONNECT = "CONNECT"
|
|
PATCH = "PATCH"
|
|
|
|
class NULLCONNECTION:
|
|
HEAD = "HEAD"
|
|
RANGE = "Range"
|
|
SKIP_READ = "skip-read"
|
|
|
|
class REFLECTIVE_COUNTER:
|
|
MISS = "MISS"
|
|
HIT = "HIT"
|
|
|
|
class CHARSET_TYPE:
|
|
BINARY = 1
|
|
DIGITS = 2
|
|
HEXADECIMAL = 3
|
|
ALPHA = 4
|
|
ALPHANUM = 5
|
|
|
|
class HEURISTIC_TEST:
|
|
CASTED = 1
|
|
NEGATIVE = 2
|
|
POSITIVE = 3
|
|
|
|
class HASH:
|
|
MYSQL = r'(?i)\A\*[0-9a-f]{40}\Z'
|
|
MYSQL_OLD = r'(?i)\A(?![0-9]+\Z)[0-9a-f]{16}\Z'
|
|
POSTGRES = r'(?i)\Amd5[0-9a-f]{32}\Z'
|
|
MSSQL = r'(?i)\A0x0100[0-9a-f]{8}[0-9a-f]{40}\Z'
|
|
MSSQL_OLD = r'(?i)\A0x0100[0-9a-f]{8}[0-9a-f]{80}\Z'
|
|
MSSQL_NEW = r'(?i)\A0x0200[0-9a-f]{8}[0-9a-f]{128}\Z'
|
|
ORACLE = r'(?i)\As:[0-9a-f]{60}\Z'
|
|
ORACLE_OLD = r'(?i)\A[01-9a-f]{16}\Z'
|
|
MD5_GENERIC = r'(?i)\A[0-9a-f]{32}\Z'
|
|
SHA1_GENERIC = r'(?i)\A[0-9a-f]{40}\Z'
|
|
SHA224_GENERIC = r'(?i)\A[0-9a-f]{28}\Z'
|
|
SHA384_GENERIC = r'(?i)\A[0-9a-f]{48}\Z'
|
|
SHA512_GENERIC = r'(?i)\A[0-9a-f]{64}\Z'
|
|
CRYPT_GENERIC = r'(?i)\A(?!\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\Z)(?![0-9]+\Z)[./0-9A-Za-z]{13}\Z'
|
|
WORDPRESS = r'(?i)\A\$P\$[./0-9A-Za-z]{31}\Z'
|
|
|
|
# Reference: http://www.zytrax.com/tech/web/mobile_ids.html
|
|
class MOBILES:
|
|
BLACKBERRY = ("BlackBerry 9900", "Mozilla/5.0 (BlackBerry; U; BlackBerry 9900; en) AppleWebKit/534.11+ (KHTML, like Gecko) Version/7.1.0.346 Mobile Safari/534.11+")
|
|
GALAXY = ("Samsung Galaxy S", "Mozilla/5.0 (Linux; U; Android 2.2; en-US; SGH-T959D Build/FROYO) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1")
|
|
HP = ("HP iPAQ 6365", "Mozilla/4.0 (compatible; MSIE 4.01; Windows CE; PPC; 240x320; HP iPAQ h6300)")
|
|
HTC = ("HTC Sensation", "Mozilla/5.0 (Linux; U; Android 4.0.3; de-ch; HTC Sensation Build/IML74K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30")
|
|
IPHONE = ("Apple iPhone 4s", "Mozilla/5.0 (iPhone; CPU iPhone OS 5_1 like Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 Mobile/9B179 Safari/7534.48.3")
|
|
NEXUS = ("Google Nexus 7", "Mozilla/5.0 (Linux; Android 4.1.1; Nexus 7 Build/JRO03D) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.166 Safari/535.19")
|
|
NOKIA = ("Nokia N97", "Mozilla/5.0 (SymbianOS/9.4; Series60/5.0 NokiaN97-1/10.0.012; Profile/MIDP-2.1 Configuration/CLDC-1.1; en-us) AppleWebKit/525 (KHTML, like Gecko) WicKed/7.1.12344")
|
|
|
|
class PROXY_TYPE:
|
|
HTTP = "HTTP"
|
|
HTTPS = "HTTPS"
|
|
SOCKS4 = "SOCKS4"
|
|
SOCKS5 = "SOCKS5"
|
|
|
|
class REGISTRY_OPERATION:
|
|
READ = "read"
|
|
ADD = "add"
|
|
DELETE = "delete"
|
|
|
|
class DUMP_FORMAT:
|
|
CSV = "CSV"
|
|
HTML = "HTML"
|
|
SQLITE = "SQLITE"
|
|
|
|
class HTTP_HEADER:
|
|
ACCEPT = "Accept"
|
|
ACCEPT_CHARSET = "Accept-Charset"
|
|
ACCEPT_ENCODING = "Accept-Encoding"
|
|
ACCEPT_LANGUAGE = "Accept-Language"
|
|
AUTHORIZATION = "Authorization"
|
|
CACHE_CONTROL = "Cache-Control"
|
|
CONNECTION = "Connection"
|
|
CONTENT_ENCODING = "Content-Encoding"
|
|
CONTENT_LENGTH = "Content-Length"
|
|
CONTENT_RANGE = "Content-Range"
|
|
CONTENT_TYPE = "Content-Type"
|
|
COOKIE = "Cookie"
|
|
SET_COOKIE = "Set-Cookie"
|
|
HOST = "Host"
|
|
PRAGMA = "Pragma"
|
|
PROXY_AUTHORIZATION = "Proxy-Authorization"
|
|
PROXY_CONNECTION = "Proxy-Connection"
|
|
RANGE = "Range"
|
|
REFERER = "Referer"
|
|
SERVER = "Server"
|
|
USER_AGENT = "User-Agent"
|
|
TRANSFER_ENCODING = "Transfer-Encoding"
|
|
URI = "URI"
|
|
VIA = "Via"
|
|
|
|
class EXPECTED:
|
|
BOOL = "bool"
|
|
INT = "int"
|
|
|
|
class OPTION_TYPE:
|
|
BOOLEAN = "boolean"
|
|
INTEGER = "integer"
|
|
FLOAT = "float"
|
|
STRING = "string"
|
|
|
|
class HASHDB_KEYS:
|
|
DBMS = "DBMS"
|
|
CONF_TMP_PATH = "CONF_TMP_PATH"
|
|
KB_ABS_FILE_PATHS = "KB_ABS_FILE_PATHS"
|
|
KB_BRUTE_COLUMNS = "KB_BRUTE_COLUMNS"
|
|
KB_BRUTE_TABLES = "KB_BRUTE_TABLES"
|
|
KB_CHARS = "KB_CHARS"
|
|
KB_DYNAMIC_MARKINGS = "KB_DYNAMIC_MARKINGS"
|
|
KB_INJECTIONS = "KB_INJECTIONS"
|
|
KB_XP_CMDSHELL_AVAILABLE = "KB_XP_CMDSHELL_AVAILABLE"
|
|
OS = "OS"
|
|
|
|
class REDIRECTION:
|
|
YES = "Y"
|
|
NO = "N"
|
|
|
|
class PAYLOAD:
|
|
SQLINJECTION = {
|
|
1: "boolean-based blind",
|
|
2: "error-based",
|
|
3: "UNION query",
|
|
4: "stacked queries",
|
|
5: "AND/OR time-based blind",
|
|
6: "inline query",
|
|
}
|
|
|
|
PARAMETER = {
|
|
1: "Unescaped numeric",
|
|
2: "Single quoted string",
|
|
3: "LIKE single quoted string",
|
|
4: "Double quoted string",
|
|
5: "LIKE double quoted string",
|
|
}
|
|
|
|
RISK = {
|
|
0: "No risk",
|
|
1: "Low risk",
|
|
2: "Medium risk",
|
|
3: "High risk",
|
|
}
|
|
|
|
CLAUSE = {
|
|
0: "Always",
|
|
1: "WHERE",
|
|
2: "GROUP BY",
|
|
3: "ORDER BY",
|
|
4: "LIMIT",
|
|
5: "OFFSET",
|
|
6: "TOP",
|
|
7: "Table name",
|
|
8: "Column name",
|
|
}
|
|
|
|
class METHOD:
|
|
COMPARISON = "comparison"
|
|
GREP = "grep"
|
|
TIME = "time"
|
|
UNION = "union"
|
|
|
|
class TECHNIQUE:
|
|
BOOLEAN = 1
|
|
ERROR = 2
|
|
UNION = 3
|
|
STACKED = 4
|
|
TIME = 5
|
|
QUERY = 6
|
|
|
|
class WHERE:
|
|
ORIGINAL = 1
|
|
NEGATIVE = 2
|
|
REPLACE = 3
|
|
|
|
class WIZARD:
|
|
BASIC = ("getBanner", "getCurrentUser", "getCurrentDb", "isDba")
|
|
INTERMEDIATE = ("getBanner", "getCurrentUser", "getCurrentDb", "isDba", "getUsers", "getDbs", "getTables", "getSchema", "excludeSysDbs")
|
|
ALL = ("getBanner", "getCurrentUser", "getCurrentDb", "isDba", "getHostname", "getUsers", "getPasswordHashes", "getPrivileges", "getRoles", "dumpAll")
|
|
|
|
class ADJUST_TIME_DELAY:
|
|
DISABLE = -1
|
|
NO = 0
|
|
YES = 1
|
|
|
|
class WEB_API:
|
|
PHP = "php"
|
|
ASP = "asp"
|
|
ASPX = "aspx"
|
|
JSP = "jsp"
|
|
|
|
class CONTENT_TYPE:
|
|
TECHNIQUES = 0
|
|
DBMS_FINGERPRINT = 1
|
|
BANNER = 2
|
|
CURRENT_USER = 3
|
|
CURRENT_DB = 4
|
|
HOSTNAME = 5
|
|
IS_DBA = 6
|
|
USERS = 7
|
|
PASSWORDS = 8
|
|
PRIVILEGES = 9
|
|
ROLES = 10
|
|
DBS = 11
|
|
TABLES = 12
|
|
COLUMNS = 13
|
|
SCHEMA = 14
|
|
COUNT = 15
|
|
DUMP_TABLE = 16
|
|
SEARCH = 17
|
|
SQL_QUERY = 18
|
|
COMMON_TABLES = 19
|
|
COMMON_COLUMNS = 20
|
|
FILE_READ = 21
|
|
FILE_WRITE = 22
|
|
OS_CMD = 23
|
|
REG_READ = 24
|
|
|
|
PART_RUN_CONTENT_TYPES = {
|
|
"checkDbms": CONTENT_TYPE.TECHNIQUES,
|
|
"getFingerprint": CONTENT_TYPE.DBMS_FINGERPRINT,
|
|
"getBanner": CONTENT_TYPE.BANNER,
|
|
"getCurrentUser": CONTENT_TYPE.CURRENT_USER,
|
|
"getCurrentDb": CONTENT_TYPE.CURRENT_DB,
|
|
"getHostname": CONTENT_TYPE.HOSTNAME,
|
|
"isDba": CONTENT_TYPE.IS_DBA,
|
|
"getUsers": CONTENT_TYPE.USERS,
|
|
"getPasswordHashes": CONTENT_TYPE.PASSWORDS,
|
|
"getPrivileges": CONTENT_TYPE.PRIVILEGES,
|
|
"getRoles": CONTENT_TYPE.ROLES,
|
|
"getDbs": CONTENT_TYPE.DBS,
|
|
"getTables": CONTENT_TYPE.TABLES,
|
|
"getColumns": CONTENT_TYPE.COLUMNS,
|
|
"getSchema": CONTENT_TYPE.SCHEMA,
|
|
"getCount": CONTENT_TYPE.COUNT,
|
|
"dumpTable": CONTENT_TYPE.DUMP_TABLE,
|
|
"search": CONTENT_TYPE.SEARCH,
|
|
"sqlQuery": CONTENT_TYPE.SQL_QUERY,
|
|
"tableExists": CONTENT_TYPE.COMMON_TABLES,
|
|
"columnExists": CONTENT_TYPE.COMMON_COLUMNS,
|
|
"readFile": CONTENT_TYPE.FILE_READ,
|
|
"writeFile": CONTENT_TYPE.FILE_WRITE,
|
|
"osCmd": CONTENT_TYPE.OS_CMD,
|
|
"regRead": CONTENT_TYPE.REG_READ
|
|
}
|
|
|
|
class CONTENT_STATUS:
|
|
IN_PROGRESS = 0
|
|
COMPLETE = 1
|
|
|
|
class AUTH_TYPE:
|
|
BASIC = "basic"
|
|
DIGEST = "digest"
|
|
NTLM = "ntlm"
|
|
PKI = "pki"
|