Blame: plugins/dbms/sqlite/fingerprint.py - sqlmapproject/sqlmap

Automatic SQL injection and database takeover tool

36962 0 0 Python

Last preparations for DREI 2019-05-08 12:47:52 +02:00			`#!/usr/bin/env python`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00
			`"""`
Year bump 2026-01-01 19:12:07 +01:00			`Copyright (c) 2006-2026 sqlmap developers (https://sqlmap.org)`
Replacing doc/COPYING to LICENSE 2017-10-11 14:50:46 +02:00			`See the file 'LICENSE' for copying permission`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00			`"""`

refactoring (class names should always be Capital cased) 2011-01-28 16:36:09 +00:00			`from lib.core.common import Backend`
			`from lib.core.common import Format`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00			`from lib.core.data import conf`
			`from lib.core.data import kb`
			`from lib.core.data import logger`
further refactoring (all enumerations are now put into enums.py) 2010-11-08 09:20:02 +00:00			`from lib.core.enums import DBMS`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00			`from lib.core.session import setDbms`
blind dumping of tables in sqlite implemented 2010-12-11 22:13:19 +00:00			`from lib.core.settings import METADB_SUFFIX`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00			`from lib.core.settings import SQLITE_ALIASES`
			`from lib.request import inject`
			`from plugins.generic.fingerprint import Fingerprint as GenericFingerprint`

			`class Fingerprint(GenericFingerprint):`
			`def __init__(self):`
Minor bug fix - restored of so called kb.misc.testedDbms (now kb.misc.fpDbms) to force the DBMS (only) during the fingerprint phase 2011-01-14 11:55:20 +00:00			`GenericFingerprint.__init__(self, DBMS.SQLITE)`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00
			`def getFingerprint(self):`
Minor code restyling 2011-04-30 13:20:05 +00:00			`value = ""`
refactoring (class names should always be Capital cased) 2011-01-28 16:36:09 +00:00			`wsOsFp = Format.getOs("web server", kb.headersFp)`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00
			`if wsOsFp:`
			`value += "%s\n" % wsOsFp`

			`if kb.data.banner:`
refactoring (class names should always be Capital cased) 2011-01-28 16:36:09 +00:00			`dbmsOsFp = Format.getOs("back-end DBMS", kb.bannerFp)`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00
			`if dbmsOsFp:`
			`value += "%s\n" % dbmsOsFp`

			`value += "back-end DBMS: "`

			`if not conf.extensiveFp:`
minor update 2010-11-02 12:08:28 +00:00			`value += DBMS.SQLITE`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00			`return value`

refactoring (class names should always be Capital cased) 2011-01-28 16:36:09 +00:00			`actVer = Format.getDbms()`
Minor code restyling 2011-04-30 13:20:05 +00:00			`blank = " " * 15`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00			`value += "active fingerprint: %s" % actVer`

			`if kb.bannerFp:`
Fixes #3216 2018-08-25 22:57:49 +02:00			`banVer = kb.bannerFp.get("dbmsVersion")`
Fixes #3692 2019-05-22 09:43:10 +02:00
			`if banVer:`
			`banVer = Format.getDbms([banVer])`
			`value += "\n%sbanner parsing fingerprint: %s" % (blank, banVer)`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00
refactoring (class names should always be Capital cased) 2011-01-28 16:36:09 +00:00			`htmlErrorFp = Format.getErrorParsedDBMSes()`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00
			`if htmlErrorFp:`
			`value += "\n%shtml error message fingerprint: %s" % (blank, htmlErrorFp)`

			`return value`

			`def checkDbms(self):`
			`"""`
			`References for fingerprint:`

			`* http://www.sqlite.org/lang_corefunc.html`
			`* http://www.sqlite.org/cvstrac/wiki?p=LoadableExtensions`
			`"""`

No more dumb usage of '--dbms' 2017-03-06 12:53:04 +01:00			`if not conf.extensiveFp and Backend.isDbmsWithin(SQLITE_ALIASES):`
refactoring of hard coded dbms names 2010-11-02 11:59:24 +00:00			`setDbms(DBMS.SQLITE)`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00
			`self.getBanner()`

Minor code refactoring and adjustments - kb.dbms is needed in fingerprint.py, not getIdentifiedDBMS because when checkDbms() method is called, it's within the fingerprint phase and at that stage, getIdentifiedDBMS() would always return kb.misc.fpDbms. 2011-01-14 12:47:07 +00:00			`return True`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00
Minor variable rename 2011-04-30 15:29:59 +00:00			`infoMsg = "testing %s" % DBMS.SQLITE`
			`logger.info(infoMsg)`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00
Minor enhancement to speedup active dbms fingerprint (-f). Code cleanup and refactoring. 2010-12-13 21:33:42 +00:00			`result = inject.checkBooleanExpression("LAST_INSERT_ROWID()=LAST_INSERT_ROWID()")`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00
			`if result:`
Minor variable rename 2011-04-30 15:29:59 +00:00			`infoMsg = "confirming %s" % DBMS.SQLITE`
			`logger.info(infoMsg)`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00
Minor enhancement to speedup active dbms fingerprint (-f). Code cleanup and refactoring. 2010-12-13 21:33:42 +00:00			`result = inject.checkBooleanExpression("SQLITE_VERSION()=SQLITE_VERSION()")`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00
			`if not result:`
Major code refactoring - centralized all kb.dbms* info for both retrieval and set. 2011-01-19 23:06:15 +00:00			`warnMsg = "the back-end DBMS is not %s" % DBMS.SQLITE`
Fixing DeprecationWarning (logger.warn) 2022-06-22 12:04:34 +02:00			`logger.warning(warnMsg)`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00
			`return False`
update 2010-12-10 10:54:17 +00:00			`else:`
Major code refactoring - centralized all kb.dbms* info for both retrieval and set. 2011-01-19 23:06:15 +00:00			`infoMsg = "actively fingerprinting %s" % DBMS.SQLITE`
			`logger.info(infoMsg)`

Minor update of fingerprinting payloads 2025-07-09 20:20:08 +02:00			`result = inject.checkBooleanExpression("RANDOMBLOB(-1) IS NOT NULL")`
Major code refactoring - centralized all kb.dbms* info for both retrieval and set. 2011-01-19 23:06:15 +00:00			`version = '3' if result else '2'`
refactoring (class names should always be Capital cased) 2011-01-28 16:36:09 +00:00			`Backend.setVersion(version)`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00
refactoring of hard coded dbms names 2010-11-02 11:59:24 +00:00			`setDbms(DBMS.SQLITE)`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00
			`self.getBanner()`

			`return True`
			`else:`
Major code refactoring - centralized all kb.dbms* info for both retrieval and set. 2011-01-19 23:06:15 +00:00			`warnMsg = "the back-end DBMS is not %s" % DBMS.SQLITE`
Fixing DeprecationWarning (logger.warn) 2022-06-22 12:04:34 +02:00			`logger.warning(warnMsg)`
Ahead with code refactoring, related to r1502. Fixed svn:keywords propset to all .py files. 2010-03-23 21:26:45 +00:00
			`return False`

			`def forceDbmsEnum(self):`
blind dumping of tables in sqlite implemented 2010-12-11 22:13:19 +00:00			`conf.db = "%s%s" % (DBMS.SQLITE, METADB_SUFFIX)`