After the storm, a restore..

lib/request/basic.py

@@ -0,0 +1,81 @@
+#!/usr/bin/env python
+
+"""
+$Id: basic.py 247 2008-07-19 23:07:26Z inquisb $
+
+This file is part of the sqlmap project, http://sqlmap.sourceforge.net.
+
+Copyright (c) 2006-2008 Bernardo Damele A. G. <bernardo.damele@gmail.com>
+                        and Daniele Bellucci <daniele.bellucci@gmail.com>
+
+sqlmap is free software; you can redistribute it and/or modify it under
+the terms of the GNU General Public License as published by the Free
+Software Foundation version 2 of the License.
+
+sqlmap is distributed in the hope that it will be useful, but WITHOUT ANY
+WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
+FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
+details.
+
+You should have received a copy of the GNU General Public License along
+with sqlmap; if not, write to the Free Software Foundation, Inc., 51
+Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+"""
+
+
+
+import re
+
+from lib.core.data import conf
+from lib.core.data import kb
+from lib.core.data import paths
+from lib.parse.html import htmlParser
+
+
+def forgeHeaders(cookie, ua):
+    """
+    Prepare HTTP Cookie and HTTP User-Agent headers to use when performing
+    the HTTP requests
+    """
+
+    headers = {}
+
+    for header, value in conf.httpHeaders:
+        if cookie and header == "Cookie":
+            headers[header] = cookie
+        elif ua and header == "User-Agent":
+            headers[header] = ua
+        else:
+            headers[header] = value
+
+    return headers
+
+
+def parsePage(page):
+    """
+    @param page: the page to parse to feed the knowledge base htmlFp
+    (back-end DBMS fingerprint based upon DBMS error messages return
+    through the web application) list and absFilePaths (absolute file
+    paths) set.
+
+    @todo: in the future parse the page content scrolling an XML file to
+    identify the dynamic language used and, most, the absolute path,
+    like for DBMS error messages (ERRORS_XML), see above.
+    """
+
+    if not page:
+        return
+
+    htmlParsed = htmlParser(page, paths.ERRORS_XML)
+
+    if htmlParsed and htmlParsed not in kb.htmlFp:
+        kb.htmlFp.append(htmlParsed)
+
+    # Detect injectable page absolute system path
+    # NOTE: this regular expression works if the remote web application
+    # is written in PHP and debug/error messages are enabled.
+    absFilePaths = re.findall(" in <b>(.*?)</b> on line", page, re.I)
+
+    for absFilePath in absFilePaths:
+        if absFilePath not in kb.absFilePaths:
+            kb.absFilePaths.add(absFilePath)