PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-01-21 13:49:04 +00:00
Code Issues Projects Releases Wiki Activity

Update of the checksum validation mechanism

Browse Source
This commit is contained in:
Miroslav Stampar
2024-03-01 12:02:04 +01:00
parent 5a4602a968
commit 171ebf2ef6
3 changed files with 23 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
lib/core/common.py
View File

@@ -1520,6 +1520,7 @@ def setPaths(rootPath):
paths.MYSQL_XML = os.path.join(paths.SQLMAP_XML_BANNER_PATH, "mysql.xml")
paths.ORACLE_XML = os.path.join(paths.SQLMAP_XML_BANNER_PATH, "oracle.xml")
paths.PGSQL_XML = os.path.join(paths.SQLMAP_XML_BANNER_PATH, "postgresql.xml")
paths.DIGEST_FILE = os.path.join(paths.SQLMAP_ROOT_PATH, "sha256sums.txt")
for path in paths.values():
if any(path.endswith(_) for _ in (".txt", ".xml", ".tx_")):
@@ -5591,3 +5592,22 @@ def chunkSplitPostData(data):
retVal += "0\r\n\r\n"
return retVal
def checkSums():
"""
Validate the content of the digest file (i.e. sha256sums.txt)
"""
retVal = True
for entry in getFileItems(paths.DIGEST_FILE):
match = re.search(r"([0-9a-f]+)\s+([^\s]+)", entry)
if match:
expected, filename = match.groups()
filepath = os.path.join(paths.SQLMAP_ROOT_PATH, filename)
checkFile(filepath)
if not hashlib.sha256(open(filepath, "rb").read()).hexdigest() == expected:
retVal &= False
break
return retVal