MORPH
SIGN IN SIGN UP
sqlmapproject / sqlmap UNCLAIMED

Automatic SQL injection and database takeover tool

36950 0 0 Python
Normal View History Raw
Last preparations for DREI
2019-05-08 12:47:52 +02:00
#!/usr/bin/env python
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
"""
Bumping copyright year
2024-01-03 23:11:52 +01:00
Copyright (c) 2006-2024 sqlmap developers (https://sqlmap.org/)
Replacing doc/COPYING to LICENSE
2017-10-11 14:50:46 +02:00
See the file 'LICENSE' for copying permission
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
"""
Implementing undocumented way how to retrieve w+ temporary directory name on MsSQL (suggested by Vlado Velichkovski)
2013-01-30 14:38:21 +01:00
import ntpath
getting rid of obsolete getCompiledRegex (in newer versions of Python regexes are already cached)
2012-04-03 14:34:15 +00:00
import re
refactoring (class names should always be Capital cased)
2011-01-28 16:36:09 +00:00
from lib.core.common import Backend
minor update
2012-02-25 10:43:10 +00:00
from lib.core.common import hashDBWrite
Refactoring of funcionality for finding out if stacking is available
2013-02-13 09:57:16 +01:00
from lib.core.common import isStackingAvailable
code refactoring regarding path normalization
2010-02-04 14:50:54 +00:00
from lib.core.common import normalizePath
code refactoring - added functions posixToNtSlashes and ntToPosixSlashes
2010-02-04 14:37:00 +00:00
from lib.core.common import ntToPosixSlashes
from lib.core.common import posixToNtSlashes
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
from lib.core.common import readInput
no need to repeat the debug message each time this function is called
2013-02-14 13:18:15 +00:00
from lib.core.common import singleTimeDebugMessage
Fix for an Issue #220
2012-10-25 09:42:43 +02:00
from lib.core.common import unArrayizeValue
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
from lib.core.data import conf
from lib.core.data import kb
from lib.core.data import logger
Major code refactoring: moved and split plugins (mysql, pgsql, mssql, oracle) more granularly and organized. Todo for firebird, sqlite, access.
2010-03-22 22:57:57 +00:00
from lib.core.data import queries
further refactoring (all enumerations are now put into enums.py)
2010-11-08 09:20:02 +00:00
from lib.core.enums import DBMS
minor update
2012-02-25 10:43:10 +00:00
from lib.core.enums import HASHDB_KEYS
Minor code refactoring relating set/get back-end DBMS operating system and minor bug fix to properly enforce OS value with --os switch
2011-04-23 16:25:09 +00:00
from lib.core.enums import OS
Doing some more style updating (capitalization of exception classes; using _ is enough for private members - __ is used in Python specific methods)
2012-12-06 14:14:19 +01:00
from lib.core.exception import SqlmapNoneDataException
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
from lib.request import inject
Pleasing the pylint gods
2019-05-29 16:42:04 +02:00
class Miscellaneous(object):
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
"""
This class defines miscellaneous functionalities for plugins.
"""
Major code refactoring: moved and split plugins (mysql, pgsql, mssql, oracle) more granularly and organized. Todo for firebird, sqlite, access.
2010-03-22 22:57:57 +00:00
def __init__(self):
pass
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
def getRemoteTempPath(self):
Implementing undocumented way how to retrieve w+ temporary directory name on MsSQL (suggested by Vlado Velichkovski)
2013-01-30 14:38:21 +01:00
if not conf.tmpPath and Backend.isDbms(DBMS.MSSQL):
added two debug messages for clarity
2013-02-13 12:46:45 +00:00
debugMsg = "identifying Microsoft SQL Server error log directory "
debugMsg += "that sqlmap will use to store temporary files with "
debugMsg += "commands' output"
typo fix
2013-02-13 13:07:47 +00:00
logger.debug(debugMsg)
added two debug messages for clarity
2013-02-13 12:46:45 +00:00
Implementing undocumented way how to retrieve w+ temporary directory name on MsSQL (suggested by Vlado Velichkovski)
2013-01-30 14:38:21 +01:00
_ = unArrayizeValue(inject.getValue("SELECT SERVERPROPERTY('ErrorLogFileName')", safeCharEncode=False))
added two debug messages for clarity
2013-02-13 12:46:45 +00:00
Implementing undocumented way how to retrieve w+ temporary directory name on MsSQL (suggested by Vlado Velichkovski)
2013-01-30 14:38:21 +01:00
if _:
conf.tmpPath = ntpath.dirname(_)
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
if not conf.tmpPath:
Minor code refactoring relating set/get back-end DBMS operating system and minor bug fix to properly enforce OS value with --os switch
2011-04-23 16:25:09 +00:00
if Backend.isOs(OS.WINDOWS):
Use %TEMP% environment variable as temporary directory (--tmp-path overwrites this btw) folder with direct connection (-d). Via SQL injection, env variables do not work apparently
2012-02-20 11:06:55 +00:00
if conf.direct:
conf.tmpPath = "%TEMP%"
minor update
2012-02-03 15:28:11 +00:00
else:
Use %TEMP% environment variable as temporary directory (--tmp-path overwrites this btw) folder with direct connection (-d). Via SQL injection, env variables do not work apparently
2012-02-20 11:06:55 +00:00
self.checkDbmsOs(detailed=True)
if Backend.getOsVersion() in ("2000", "NT"):
conf.tmpPath = "C:/WINNT/Temp"
The default temporary directory as to stay as is, do not touch this code snippet anymore please
2012-03-14 22:39:46 +00:00
elif Backend.isOs("XP"):
Application Data is not a temporary directory writable by everybody
2012-03-14 23:44:29 +00:00
conf.tmpPath = "C:/Documents and Settings/All Users/Application Data/Temp"
Use %TEMP% environment variable as temporary directory (--tmp-path overwrites this btw) folder with direct connection (-d). Via SQL injection, env variables do not work apparently
2012-02-20 11:06:55 +00:00
else:
The default temporary directory as to stay as is, do not touch this code snippet anymore please
2012-03-14 22:39:46 +00:00
conf.tmpPath = "C:/Windows/Temp"
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
else:
conf.tmpPath = "/tmp"
getting rid of obsolete getCompiledRegex (in newer versions of Python regexes are already cached)
2012-04-03 14:34:15 +00:00
if re.search(r"\A[\w]:[\/\\]+", conf.tmpPath, re.I):
Minor code refactoring relating set/get back-end DBMS operating system and minor bug fix to properly enforce OS value with --os switch
2011-04-23 16:25:09 +00:00
Backend.setOs(OS.WINDOWS)
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
code refactoring regarding path normalization
2010-02-04 14:50:54 +00:00
conf.tmpPath = normalizePath(conf.tmpPath)
Finally fixed and adapted all code around to the new isWindowsDriveLetterPath() function
2010-04-23 16:34:20 +00:00
conf.tmpPath = ntToPosixSlashes(conf.tmpPath)
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
Minor style patch
2016-01-04 12:08:56 +01:00
singleTimeDebugMessage("going to use '%s' as temporary files directory" % conf.tmpPath)
added two debug messages for clarity
2013-02-13 12:46:45 +00:00
minor update
2012-02-25 10:43:10 +00:00
hashDBWrite(HASHDB_KEYS.CONF_TMP_PATH, conf.tmpPath)
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
doing a dummy test for --os-shell in case of xp_cmdshell
2012-03-09 14:21:41 +00:00
return conf.tmpPath
Major code refactoring: moved and split plugins (mysql, pgsql, mssql, oracle) more granularly and organized. Todo for firebird, sqlite, access.
2010-03-22 22:57:57 +00:00
def getVersionFromBanner(self):
if "dbmsVersion" in kb.bannerFp:
return
infoMsg = "detecting back-end DBMS version from its banner"
logger.info(infoMsg)
Fixes #4549
2021-01-19 12:25:03 +01:00
query = queries[Backend.getIdentifiedDbms()].banner.query
Major code refactoring: moved and split plugins (mysql, pgsql, mssql, oracle) more granularly and organized. Todo for firebird, sqlite, access.
2010-03-22 22:57:57 +00:00
Major enhancement to directly connect to the dbms without passing via a sql injection: adapted code accordingly - see #158. This feature relies on python third-party libraries to be able to connect to the database. For the moment it has been implemented for MySQL (with python-mysqldb module) and PostgreSQL (with python-psycopg2 module). Minor layout adjustments.
2010-03-26 23:23:25 +00:00
if conf.direct:
query = "SELECT %s" % query
Fixes #4549
2021-01-19 12:25:03 +01:00
kb.bannerFp["dbmsVersion"] = unArrayizeValue(inject.getValue(query)) or ""
match = re.search(r"\d[\d.-]*", kb.bannerFp["dbmsVersion"])
if match:
kb.bannerFp["dbmsVersion"] = match.group(0)
Major code refactoring: moved and split plugins (mysql, pgsql, mssql, oracle) more granularly and organized. Todo for firebird, sqlite, access.
2010-03-22 22:57:57 +00:00
var renaming
2012-07-11 13:39:33 +01:00
def delRemoteFile(self, filename):
Fix for an Issue #88
2012-07-13 14:25:39 +02:00
if not filename:
return
Merged back from personal branch to trunk (svn merge -r846:940 ...) Changes: * Major enhancement to the Microsoft SQL Server stored procedure heap-based buffer overflow exploit (--os-bof) to automatically bypass DEP memory protection. * Added support for MySQL and PostgreSQL to execute Metasploit shellcode via UDF 'sys_bineval' (in-memory, anti-forensics technique) as an option instead of uploading the standalone payload stager executable. * Added options for MySQL, PostgreSQL and Microsoft SQL Server to read/add/delete Windows registry keys. * Added options for MySQL and PostgreSQL to inject custom user-defined functions. * Added support for --first and --last so the user now has even more granularity in what to enumerate in the query output. * Minor enhancement to save the session by default in 'output/hostname/session' file if -s option is not specified. * Minor improvement to automatically remove sqlmap created temporary files from the DBMS underlying file system. * Minor bugs fixed. * Major code refactoring.
2009-09-25 23:03:45 +00:00
self.checkDbmsOs()
Minor code refactoring relating set/get back-end DBMS operating system and minor bug fix to properly enforce OS value with --os switch
2011-04-23 16:25:09 +00:00
if Backend.isOs(OS.WINDOWS):
var renaming
2012-07-11 13:39:33 +01:00
filename = posixToNtSlashes(filename)
cmd = "del /F /Q %s" % filename
Merged back from personal branch to trunk (svn merge -r846:940 ...) Changes: * Major enhancement to the Microsoft SQL Server stored procedure heap-based buffer overflow exploit (--os-bof) to automatically bypass DEP memory protection. * Added support for MySQL and PostgreSQL to execute Metasploit shellcode via UDF 'sys_bineval' (in-memory, anti-forensics technique) as an option instead of uploading the standalone payload stager executable. * Added options for MySQL, PostgreSQL and Microsoft SQL Server to read/add/delete Windows registry keys. * Added options for MySQL and PostgreSQL to inject custom user-defined functions. * Added support for --first and --last so the user now has even more granularity in what to enumerate in the query output. * Minor enhancement to save the session by default in 'output/hostname/session' file if -s option is not specified. * Minor improvement to automatically remove sqlmap created temporary files from the DBMS underlying file system. * Minor bugs fixed. * Major code refactoring.
2009-09-25 23:03:45 +00:00
else:
var renaming
2012-07-11 13:39:33 +01:00
cmd = "rm -f %s" % filename
Merged back from personal branch to trunk (svn merge -r846:940 ...) Changes: * Major enhancement to the Microsoft SQL Server stored procedure heap-based buffer overflow exploit (--os-bof) to automatically bypass DEP memory protection. * Added support for MySQL and PostgreSQL to execute Metasploit shellcode via UDF 'sys_bineval' (in-memory, anti-forensics technique) as an option instead of uploading the standalone payload stager executable. * Added options for MySQL, PostgreSQL and Microsoft SQL Server to read/add/delete Windows registry keys. * Added options for MySQL and PostgreSQL to inject custom user-defined functions. * Added support for --first and --last so the user now has even more granularity in what to enumerate in the query output. * Minor enhancement to save the session by default in 'output/hostname/session' file if -s option is not specified. * Minor improvement to automatically remove sqlmap created temporary files from the DBMS underlying file system. * Minor bugs fixed. * Major code refactoring.
2009-09-25 23:03:45 +00:00
Avoid waiting 30 seconds when cleaning up the dbms and file system from sqlmap data
2010-10-29 13:09:53 +00:00
self.execCmd(cmd, silent=True)
Merged back from personal branch to trunk (svn merge -r846:940 ...) Changes: * Major enhancement to the Microsoft SQL Server stored procedure heap-based buffer overflow exploit (--os-bof) to automatically bypass DEP memory protection. * Added support for MySQL and PostgreSQL to execute Metasploit shellcode via UDF 'sys_bineval' (in-memory, anti-forensics technique) as an option instead of uploading the standalone payload stager executable. * Added options for MySQL, PostgreSQL and Microsoft SQL Server to read/add/delete Windows registry keys. * Added options for MySQL and PostgreSQL to inject custom user-defined functions. * Added support for --first and --last so the user now has even more granularity in what to enumerate in the query output. * Minor enhancement to save the session by default in 'output/hostname/session' file if -s option is not specified. * Minor improvement to automatically remove sqlmap created temporary files from the DBMS underlying file system. * Minor bugs fixed. * Major code refactoring.
2009-09-25 23:03:45 +00:00
sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.
2010-01-02 02:02:12 +00:00
def createSupportTbl(self, tblName, tblField, tblType):
Avoid waiting 30 seconds when cleaning up the dbms and file system from sqlmap data
2010-10-29 13:09:53 +00:00
inject.goStacked("DROP TABLE %s" % tblName, silent=True)
minor bug fix introduced in 2267dd8f47fe27869d389a6f61654ad504a9dd74
2013-02-14 12:39:17 +00:00
if Backend.isDbms(DBMS.MSSQL) and tblName == self.cmdTblName:
inject.goStacked("CREATE TABLE %s(id INT PRIMARY KEY IDENTITY, %s %s)" % (tblName, tblField, tblType))
else:
inject.goStacked("CREATE TABLE %s(%s %s)" % (tblName, tblField, tblType))
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
clean up the file system from sqlmap created web files
2012-07-11 14:07:20 +01:00
def cleanup(self, onlyFileTbl=False, udfDict=None, web=False):
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
"""
clean up the file system from sqlmap created web files
2012-07-11 14:07:20 +01:00
Cleanup file system and database from sqlmap create files, tables
and functions
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
"""
minor fix to avoid cleanup() if web backdoor upload failed
2012-07-16 17:58:30 +01:00
if web and self.webBackdoorFilePath:
clean up the file system from sqlmap created web files
2012-07-11 14:07:20 +01:00
logger.info("cleaning up the web files uploaded")
self.delRemoteFile(self.webStagerFilePath)
self.delRemoteFile(self.webBackdoorFilePath)
Falling back to web backdoor if UDF fails
2019-10-17 15:16:21 +02:00
if (not isStackingAvailable() or kb.udfFail) and not conf.direct:
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
return
Finalizing #3545
2019-03-22 13:49:52 +01:00
if any((conf.osCmd, conf.osShell)) and Backend.isDbms(DBMS.PGSQL) and kb.copyExecTest:
return
Minor code refactoring relating set/get back-end DBMS operating system and minor bug fix to properly enforce OS value with --os switch
2011-04-23 16:25:09 +00:00
if Backend.isOs(OS.WINDOWS):
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
libtype = "dynamic-link library"
Minor code refactoring relating set/get back-end DBMS operating system and minor bug fix to properly enforce OS value with --os switch
2011-04-23 16:25:09 +00:00
elif Backend.isOs(OS.LINUX):
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
libtype = "shared object"
else:
libtype = "shared library"
sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.
2010-01-02 02:02:12 +00:00
if onlyFileTbl:
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
logger.debug("cleaning up the database management system")
else:
logger.info("cleaning up the database management system")
sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.
2010-01-02 02:02:12 +00:00
logger.debug("removing support tables")
Avoid waiting 30 seconds when cleaning up the dbms and file system from sqlmap data
2010-10-29 13:09:53 +00:00
inject.goStacked("DROP TABLE %s" % self.fileTblName, silent=True)
Minor fix for --cleanup on MSSQL
2011-04-10 13:48:29 +00:00
inject.goStacked("DROP TABLE %shex" % self.fileTblName, silent=True)
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.
2010-01-02 02:02:12 +00:00
if not onlyFileTbl:
Avoid waiting 30 seconds when cleaning up the dbms and file system from sqlmap data
2010-10-29 13:09:53 +00:00
inject.goStacked("DROP TABLE %s" % self.cmdTblName, silent=True)
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
More code refactoring of Backend class methods used
2011-04-30 14:54:29 +00:00
if Backend.isDbms(DBMS.MSSQL):
Some renaming (pylint stuff)
2019-06-03 10:41:51 +02:00
udfDict = {"master..new_xp_cmdshell": {}}
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
Merged back from personal branch to trunk (svn merge -r846:940 ...) Changes: * Major enhancement to the Microsoft SQL Server stored procedure heap-based buffer overflow exploit (--os-bof) to automatically bypass DEP memory protection. * Added support for MySQL and PostgreSQL to execute Metasploit shellcode via UDF 'sys_bineval' (in-memory, anti-forensics technique) as an option instead of uploading the standalone payload stager executable. * Added options for MySQL, PostgreSQL and Microsoft SQL Server to read/add/delete Windows registry keys. * Added options for MySQL and PostgreSQL to inject custom user-defined functions. * Added support for --first and --last so the user now has even more granularity in what to enumerate in the query output. * Minor enhancement to save the session by default in 'output/hostname/session' file if -s option is not specified. * Minor improvement to automatically remove sqlmap created temporary files from the DBMS underlying file system. * Minor bugs fixed. * Major code refactoring.
2009-09-25 23:03:45 +00:00
if udfDict is None:
Fixes #4751
2021-07-28 00:34:10 +02:00
udfDict = getattr(self, "sysUdfs", {})
Merged back from personal branch to trunk (svn merge -r846:940 ...) Changes: * Major enhancement to the Microsoft SQL Server stored procedure heap-based buffer overflow exploit (--os-bof) to automatically bypass DEP memory protection. * Added support for MySQL and PostgreSQL to execute Metasploit shellcode via UDF 'sys_bineval' (in-memory, anti-forensics technique) as an option instead of uploading the standalone payload stager executable. * Added options for MySQL, PostgreSQL and Microsoft SQL Server to read/add/delete Windows registry keys. * Added options for MySQL and PostgreSQL to inject custom user-defined functions. * Added support for --first and --last so the user now has even more granularity in what to enumerate in the query output. * Minor enhancement to save the session by default in 'output/hostname/session' file if -s option is not specified. * Minor improvement to automatically remove sqlmap created temporary files from the DBMS underlying file system. * Minor bugs fixed. * Major code refactoring.
2009-09-25 23:03:45 +00:00
for udf, inpRet in udfDict.items():
sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.
2010-01-02 02:02:12 +00:00
message = "do you want to remove UDF '%s'? [Y/n] " % udf
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
Some code refactoring
2017-04-18 15:48:05 +02:00
if readInput(message, default='Y', boolean=True):
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
dropStr = "DROP FUNCTION %s" % udf
More code refactoring of Backend class methods used
2011-04-30 14:54:29 +00:00
if Backend.isDbms(DBMS.PGSQL):
Minor code restyling
2011-04-30 13:20:05 +00:00
inp = ", ".join(i for i in inpRet["input"])
Merged back from personal branch to trunk (svn merge -r846:940 ...) Changes: * Major enhancement to the Microsoft SQL Server stored procedure heap-based buffer overflow exploit (--os-bof) to automatically bypass DEP memory protection. * Added support for MySQL and PostgreSQL to execute Metasploit shellcode via UDF 'sys_bineval' (in-memory, anti-forensics technique) as an option instead of uploading the standalone payload stager executable. * Added options for MySQL, PostgreSQL and Microsoft SQL Server to read/add/delete Windows registry keys. * Added options for MySQL and PostgreSQL to inject custom user-defined functions. * Added support for --first and --last so the user now has even more granularity in what to enumerate in the query output. * Minor enhancement to save the session by default in 'output/hostname/session' file if -s option is not specified. * Minor improvement to automatically remove sqlmap created temporary files from the DBMS underlying file system. * Minor bugs fixed. * Major code refactoring.
2009-09-25 23:03:45 +00:00
dropStr += "(%s)" % inp
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.
2010-01-02 02:02:12 +00:00
logger.debug("removing UDF '%s'" % udf)
Avoid waiting 30 seconds when cleaning up the dbms and file system from sqlmap data
2010-10-29 13:09:53 +00:00
inject.goStacked(dropStr, silent=True)
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
logger.info("database management system cleanup finished")
warnMsg = "remember that UDF %s files " % libtype
if conf.osPwn:
warnMsg += "and Metasploit related files in the temporary "
warnMsg += "folder "
warnMsg += "saved on the file system can only be deleted "
sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.
2010-01-02 02:02:12 +00:00
warnMsg += "manually"
Fixing DeprecationWarning (logger.warn)
2022-06-22 12:04:34 +02:00
logger.warning(warnMsg)
Added option --search to work in conjunction with -D (done), -T (soon) or -C (replaces --dump -C) - See #190: * --search -D foobar: searches all database names like the ones provided * --search -T foobar: searches all databases' table names like the ones provided (soon) * --search -C foobar: replaces --dump -C
2010-05-07 13:40:57 +00:00
def likeOrExact(self, what):
message = "do you want sqlmap to consider provided %s(s):\n" % what
default to --search shall stay LIKE
2012-12-18 13:55:26 +00:00
message += "[1] as LIKE %s names (default)\n" % what
message += "[2] as exact %s names" % what
Added option --search to work in conjunction with -D (done), -T (soon) or -C (replaces --dump -C) - See #190: * --search -D foobar: searches all database names like the ones provided * --search -T foobar: searches all databases' table names like the ones provided (soon) * --search -C foobar: replaces --dump -C
2010-05-07 13:40:57 +00:00
default to --search shall stay LIKE
2012-12-18 13:55:26 +00:00
choice = readInput(message, default='1')
Added option --search to work in conjunction with -D (done), -T (soon) or -C (replaces --dump -C) - See #190: * --search -D foobar: searches all database names like the ones provided * --search -T foobar: searches all databases' table names like the ones provided (soon) * --search -C foobar: replaces --dump -C
2010-05-07 13:40:57 +00:00
making a "--exact" switch on demand (choosing exact identifier names by default instead of LIKE)
2012-06-04 09:24:46 +00:00
if not choice or choice == '1':
choice = '1'
Minor revert
2011-07-04 15:23:05 +00:00
condParam = " LIKE '%%%s%%'"
making a "--exact" switch on demand (choosing exact identifier names by default instead of LIKE)
2012-06-04 09:24:46 +00:00
elif choice == '2':
Added option --search to work in conjunction with -D (done), -T (soon) or -C (replaces --dump -C) - See #190: * --search -D foobar: searches all database names like the ones provided * --search -T foobar: searches all databases' table names like the ones provided (soon) * --search -C foobar: replaces --dump -C
2010-05-07 13:40:57 +00:00
condParam = "='%s'"
else:
errMsg = "invalid value"
Replacing old and deprecated raise Exception style (PEP8)
2013-01-03 23:20:55 +01:00
raise SqlmapNoneDataException(errMsg)
Added option --search to work in conjunction with -D (done), -T (soon) or -C (replaces --dump -C) - See #190: * --search -D foobar: searches all database names like the ones provided * --search -T foobar: searches all databases' table names like the ones provided (soon) * --search -C foobar: replaces --dump -C
2010-05-07 13:40:57 +00:00
return choice, condParam
Reference in New Issue Copy Permalink