FilesExpand file tree

 master

/

banner.py

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

115 lines (90 loc) · 3.47 KB

 master

/

banner.py

Copy path

Top

File metadata and controls

• Code
• Blame

115 lines (90 loc) · 3.47 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

#!/usr/bin/env python

"""

Copyright (c) 2006-2015 sqlmap developers (http://sqlmap.org/)

See the file 'doc/COPYING' for copying permission

"""

import re

from xml.sax.handler import ContentHandler

from lib.core.common import Backend

from lib.core.common import parseXmlFile

from lib.core.common import sanitizeStr

from lib.core.data import kb

from lib.core.data import paths

from lib.core.enums import DBMS

from lib.parse.handler import FingerprintHandler

class MSSQLBannerHandler(ContentHandler):

"""

This class defines methods to parse and extract information from the

given Microsoft SQL Server banner based upon the data in XML file

"""

def __init__(self, banner, info):

ContentHandler.__init__(self)

self._banner = sanitizeStr(banner)

self._inVersion = False

self._inServicePack = False

self._release = None

self._version = ""

self._versionAlt = None

self._servicePack = ""

self._info = info

def _feedInfo(self, key, value):

value = sanitizeStr(value)

if value in (None, "None"):

return

self._info[key] = value

def startElement(self, name, attrs):

if name == "signatures":

self._release = sanitizeStr(attrs.get("release"))

elif name == "version":

self._inVersion = True

elif name == "servicepack":

self._inServicePack = True

def characters(self, data):

if self._inVersion:

self._version += sanitizeStr(data)

elif self._inServicePack:

self._servicePack += sanitizeStr(data)

def endElement(self, name):

if name == "signature":

for version in (self._version, self._versionAlt):

if version and re.search(r" %s[\.\ ]+" % re.escape(version), self._banner):

self._feedInfo("dbmsRelease", self._release)

self._feedInfo("dbmsVersion", self._version)

self._feedInfo("dbmsServicePack", self._servicePack)

break

self._version = ""

self._versionAlt = None

self._servicePack = ""

elif name == "version":

self._inVersion = False

self._version = self._version.replace(" ", "")

match = re.search(r"\A(?P<major>\d+)\.00\.(?P<build>\d+)\Z", self._version)

self._versionAlt = "%s.0.%s.0" % (match.group('major'), match.group('build')) if match else None

elif name == "servicepack":

self._inServicePack = False

self._servicePack = self._servicePack.replace(" ", "")

def bannerParser(banner):

"""

This function calls a class to extract information from the given

DBMS banner based upon the data in XML file

"""

xmlfile = None

if Backend.isDbms(DBMS.MSSQL):

xmlfile = paths.MSSQL_XML

elif Backend.isDbms(DBMS.MYSQL):

xmlfile = paths.MYSQL_XML

elif Backend.isDbms(DBMS.ORACLE):

xmlfile = paths.ORACLE_XML

elif Backend.isDbms(DBMS.PGSQL):

xmlfile = paths.PGSQL_XML

if not xmlfile:

return

if Backend.isDbms(DBMS.MSSQL):

handler = MSSQLBannerHandler(banner, kb.bannerFp)

parseXmlFile(xmlfile, handler)

handler = FingerprintHandler(banner, kb.bannerFp)

parseXmlFile(paths.GENERIC_XML, handler)

else:

handler = FingerprintHandler(banner, kb.bannerFp)

parseXmlFile(xmlfile, handler)

parseXmlFile(paths.GENERIC_XML, handler)