PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-10 09:49:06 +00:00
Code Issues Projects Releases Wiki Activity

added IDS payload testing

Browse Source
This commit is contained in:
Miroslav Stampar
2010-10-25 15:37:43 +00:00
parent bdb9c37a7e
commit 378653a1ec
4 changed files with 52 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
lib/utils/detection.py
View File

@@ -12,10 +12,12 @@ import sre_constants
from lib.core.common import getCompiledRegex
from lib.core.common import readXmlFile
from lib.core.convert import urldecode
from lib.core.data import conf
from lib.core.data import paths
from lib.core.data import logger
rules = None
def __adjustGrammar(string):
@@ -27,7 +29,7 @@ def __adjustGrammar(string):
return string
def checkPayload(string):
def checkPayload(payload):
"""
This method checks if the generated payload is detectable by the
PHPIDS filter rules
@@ -35,20 +37,22 @@ def checkPayload(string):
global rules
payload = urldecode(payload)
if not rules:
xmlrules = readXmlFile(paths.DETECTION_RULES_XML)
rules = []
for xmlrule in xmlrules.getElementsByTagName("filter"):
try:
rule = "(?i)%s" % xmlrule.getElementsByTagName('rule')[0].childNodes[0].nodeValue
desc = __adjustGrammar(xmlrule.getElementsByTagName('description')[0].childNodes[0].nodeValue)
rules.append((rule, desc))
except sre_constants.error: # Some issues with some regex expressions in Python 2.5
pass
for rule, desc in rules:
regObj = getCompiledRegex(rule)
rule = "(?i)%s" % xmlrule.getElementsByTagName('rule')[0].childNodes[0].nodeValue
desc = __adjustGrammar(xmlrule.getElementsByTagName('description')[0].childNodes[0].nodeValue)
rules.append((rule, desc))
if regObj.search(string):
logger.warn("highly probable IDS/IPS detection: '%s'" % desc)
if payload:
for rule, desc in rules:
try:
regObj = getCompiledRegex(rule)
if regObj.search(payload):
logger.warn("highly probable IDS/IPS detection: '%s: %s'" % (desc, payload))
except: # Some issues with some regex expressions in Python 2.5
pass