PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-01-21 05:39:16 +00:00
Code Issues Projects Releases Wiki Activity

Now, if the back-end dbms type has been identified by the detection engine, skips the fingerprint phase.

Browse Source 
Major code refactoring and commenting to detection engine.
Ask user whether or not to proceed to test remaining parameters after an injection point has been identified.
Restore beep at SQL injection find.
Avoid reuse of same variable in DBMS handler code.
Minor adjustment of payloads XML file.
This commit is contained in:
Bernardo Damele
2010-11-30 22:40:25 +00:00
parent fcdebbd55f
commit c8f943f5e4
17 changed files with 210 additions and 118 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
lib/controller/controller.py
View File

@@ -109,7 +109,8 @@ def __formatInjection(inj):
for stype, sdata in inj.data.items():
stype = PAYLOAD.SQLINJECTION[stype] if isinstance(stype, int) else stype
data += " Type: %s\n" % stype
data += " Payload: %s\n\n" % sdata[0]
data += " Title: %s\n" % sdata[0]
data += " Payload: %s\n\n" % sdata[1]
return data
@@ -126,13 +127,16 @@ def __showInjections():
def __saveToSessionFile():
for inj in kb.injections:
if inj.place is None or inj.parameter is None:
continue
setInjection(inj)
place = inj.place
parameter = inj.parameter
for stype, sdata in inj.data.items():
payload = sdata[0]
payload = sdata[1]
if stype == 1:
kb.booleanTest = payload
@@ -313,6 +317,8 @@ def start():
parameters.remove(place)
parameters.insert(0, place)
proceed = True
for place in parameters:
# Test User-Agent header only if --level >= 4
condition = (place == "User-Agent" and conf.level < 4)
@@ -325,6 +331,9 @@ def start():
if not conf.paramDict.has_key(place):
continue
if not proceed:
break
paramDict = conf.paramDict[place]
for parameter, value in paramDict.items():
testSqlInj = True
@@ -361,15 +370,22 @@ def start():
injection = checkSqlInjection(place, parameter, value)
if injection:
if injection is not None and injection.place is not None:
kb.injections.append(injection)
msg = "%s parameter '%s' " % (injection.place, injection.parameter)
msg += "is vulnerable. Do you want to keep testing the others? [y/N] "
test = readInput(msg, default="N")
if test[0] in ("n", "N"):
proceed = False
break
else:
warnMsg = "%s parameter '%s' is not " % (place, parameter)
warnMsg += "injectable"
logger.warn(warnMsg)
if (len(kb.injections) == 0 or len(kb.injections) == 1 and kb.injections[0].parameter is None) \
and not kb.injection.place and not kb.injection.parameter:
if len(kb.injections) == 0 or (len(kb.injections) == 1 and kb.injections[0].place is None):
errMsg = "all parameters are not injectable, try "
errMsg += "a higher --level"
raise sqlmapNotVulnerableException, errMsg