"""

try:

_ = sys.executable if weAreFrozen() else __file__

except NameError:

_ = inspect.getsourcefile(modulePath)

try:

os.path.isdir(modulePath())

except UnicodeEncodeError:

errMsg = "your system does not properly handle non-ASCII paths. "

errMsg += "Please move the sqlmap's directory to the other location"

logger.critical(errMsg)

raise SystemExit

if distutils.version.LooseVersion(VERSION) < distutils.version.LooseVersion("1.0"):

errMsg = "your runtime environment (e.g. PYTHONPATH) is "

errMsg += "broken. Please make sure that you are not running "

errMsg += "newer versions of sqlmap with runtime scripts for older "

errMsg += "versions"

logger.critical(errMsg)

raise SystemExit

# Patch for pip (import) environment

if "sqlmap.sqlmap" in sys.modules:

for _ in ("cmdLineOptions", "conf", "kb"):

globals()[_] = getattr(sys.modules["lib.core.data"], _)

for _ in ("SqlmapBaseException", "SqlmapShellQuitException", "SqlmapSilentQuitException", "SqlmapUserQuitException"):

"""

try:

dirtyPatches()

resolveCrossReferences()

checkEnvironment()

setPaths(modulePath())

banner()

# Store original command line options for possible later restoration

args = cmdLineParser()

cmdLineOptions.update(args.__dict__ if hasattr(args, "__dict__") else args)

initOptions(cmdLineOptions)

if checkPipedInput():

conf.batch = True

if conf.get("api"):

# heavy imports

from lib.utils.api import StdDbOut

from lib.utils.api import setRestAPILog

# Overwrite system standard output and standard error to write

# to an IPC database

sys.stdout = StdDbOut(conf.taskid, messagetype="stdout")

sys.stderr = StdDbOut(conf.taskid, messagetype="stderr")

setRestAPILog()

conf.showTime = True

dataToStdout("[!] legal disclaimer: %s\n\n" % LEGAL_DISCLAIMER, forceOutput=True)

dataToStdout("[*] starting @ %s\n\n" % time.strftime("%X /%Y-%m-%d/"), forceOutput=True)

init()

if not conf.updateAll:

# Postponed imports (faster start)

if conf.smokeTest:

from lib.core.testing import smokeTest

os._exitcode = 1 - (smokeTest() or 0)

elif conf.vulnTest:

from lib.core.testing import vulnTest

os._exitcode = 1 - (vulnTest() or 0)

elif conf.bedTest:

from lib.core.testing import bedTest

os._exitcode = 1 - (bedTest() or 0)

elif conf.fuzzTest:

from lib.core.testing import fuzzTest

fuzzTest()

else:

from lib.controller.controller import start

if conf.profile and six.PY2:

from lib.core.profiling import profile

globals()["start"] = start

profile()

else:

try:

if conf.crawlDepth and conf.bulkFile:

targets = getFileItems(conf.bulkFile)

for i in xrange(len(targets)):

try:

kb.targets.clear()

target = targets[i]

if not re.search(r"(?i)\Ahttp[s]*://", target):

target = "http://%s" % target

infoMsg = "starting crawler for target URL '%s' (%d/%d)" % (target, i + 1, len(targets))

logger.info(infoMsg)

crawl(target)

except Exception as ex:

if not isinstance(ex, SqlmapUserQuitException):

errMsg = "problem occurred while crawling '%s' ('%s')" % (target, getSafeExString(ex))

logger.error(errMsg)

else:

raise

else:

if kb.targets:

start()

else:

start()

except Exception as ex:

os._exitcode = 1

if "can't start new thread" in getSafeExString(ex):

errMsg = "unable to start new threads. Please check OS (u)limits"

logger.critical(errMsg)

raise SystemExit

else:

raise

except SqlmapUserQuitException:

if not conf.batch:

errMsg = "user quit"

logger.error(errMsg)

except (SqlmapSilentQuitException, bdb.BdbQuit):

pass

except SqlmapShellQuitException:

cmdLineOptions.sqlmapShell = False

except SqlmapBaseException as ex:

errMsg = getSafeExString(ex)

logger.critical(errMsg)

os._exitcode = 1

raise SystemExit

except KeyboardInterrupt:

print()

except EOFError:

print()

errMsg = "exit"

logger.error(errMsg)

except SystemExit as ex:

os._exitcode = ex.code or 0

except:

print()

errMsg = unhandledExceptionMessage()

excMsg = traceback.format_exc()

valid = checkIntegrity()

os._exitcode = 255

if any(_ in excMsg for _ in ("MemoryError", "Cannot allocate memory")):

errMsg = "memory exhaustion detected"

logger.critical(errMsg)

raise SystemExit

elif any(_ in excMsg for _ in ("No space left", "Disk quota exceeded", "Disk full while accessing")):

errMsg = "no space left on output device"

logger.critical(errMsg)

raise SystemExit

elif any(_ in excMsg for _ in ("The paging file is too small",)):

errMsg = "no space left for paging file"

logger.critical(errMsg)

raise SystemExit

elif all(_ in excMsg for _ in ("Access is denied", "subprocess", "metasploit")):

errMsg = "permission error occurred while running Metasploit"

logger.critical(errMsg)

raise SystemExit

elif all(_ in excMsg for _ in ("Permission denied", "metasploit")):

errMsg = "permission error occurred while using Metasploit"

logger.critical(errMsg)

raise SystemExit

elif "Read-only file system" in excMsg:

errMsg = "output device is mounted as read-only"

logger.critical(errMsg)

raise SystemExit

elif "OperationalError: disk I/O error" in excMsg:

errMsg = "I/O error on output device"

logger.critical(errMsg)

raise SystemExit

elif "Violation of BIDI" in excMsg:

errMsg = "invalid URL (violation of Bidi IDNA rule - RFC 5893)"

logger.critical(errMsg)

raise SystemExit

elif "Invalid IPv6 URL" in excMsg:

errMsg = "invalid URL ('%s')" % excMsg.strip().split('\n')[-1]

logger.critical(errMsg)

raise SystemExit

elif "_mkstemp_inner" in excMsg:

errMsg = "there has been a problem while accessing temporary files"

logger.critical(errMsg)

raise SystemExit

elif any(_ in excMsg for _ in ("tempfile.mkdtemp", "tempfile.mkstemp")):

errMsg = "unable to write to the temporary directory '%s'. " % tempfile.gettempdir()

errMsg += "Please make sure that your disk is not full and "

errMsg += "that you have sufficient write permissions to "

errMsg += "create temporary files and/or directories"

logger.critical(errMsg)

raise SystemExit

elif all(_ in excMsg for _ in ("twophase", "sqlalchemy")):

errMsg = "please update the 'sqlalchemy' package (>= 1.1.11) "

errMsg += "(Reference: https://qiita.com/tkprof/items/7d7b2d00df9c5f16fffe)"

logger.critical(errMsg)

raise SystemExit

elif all(_ in excMsg for _ in ("scramble_caching_sha2", "TypeError")):

errMsg = "please downgrade the 'PyMySQL' package (=< 0.8.1) "

errMsg += "(Reference: https://github.com/PyMySQL/PyMySQL/issues/700)"

logger.critical(errMsg)

raise SystemExit

elif "must be pinned buffer, not bytearray" in excMsg:

errMsg = "error occurred at Python interpreter which "

errMsg += "is fixed in 2.7. Please update accordingly "

errMsg += "(Reference: https://bugs.python.org/issue8104)"

logger.critical(errMsg)

raise SystemExit

elif all(_ in excMsg for _ in ("Resource temporarily unavailable", "os.fork()", "dictionaryAttack")):

errMsg = "there has been a problem while running the multiprocessing hash cracking. "

errMsg += "Please rerun with option '--threads=1'"

logger.critical(errMsg)

raise SystemExit

elif "can't start new thread" in excMsg:

errMsg = "there has been a problem while creating new thread instance. "

errMsg += "Please make sure that you are not running too many processes"

if not IS_WIN:

errMsg += " (or increase the 'ulimit -u' value)"

logger.critical(errMsg)

raise SystemExit

elif "can't allocate read lock" in excMsg:

errMsg = "there has been a problem in regular socket operation "

errMsg += "('%s')" % excMsg.strip().split('\n')[-1]

logger.critical(errMsg)

raise SystemExit

elif all(_ in excMsg for _ in ("pymysql", "configparser")):

errMsg = "wrong initialization of pymsql detected (using Python3 dependencies)"

logger.critical(errMsg)

raise SystemExit

elif all(_ in excMsg for _ in ("ntlm", "socket.error, err", "SyntaxError")):

errMsg = "wrong initialization of python-ntlm detected (using Python2 syntax)"

logger.critical(errMsg)

raise SystemExit

elif all(_ in excMsg for _ in ("drda", "to_bytes")):

errMsg = "wrong initialization of drda detected (using Python3 syntax)"

logger.critical(errMsg)

raise SystemExit

elif all(_ in excMsg for _ in ("window = tkinter.Tk()",)):

errMsg = "there has been a problem in initialization of GUI interface "

errMsg += "('%s')" % excMsg.strip().split('\n')[-1]

logger.critical(errMsg)

raise SystemExit

elif any(_ in excMsg for _ in ("unable to access item 'liveTest'",)):

errMsg = "detected usage of files from different versions of sqlmap"

logger.critical(errMsg)

raise SystemExit

elif kb.get("dumpKeyboardInterrupt"):

raise SystemExit

elif any(_ in excMsg for _ in ("Broken pipe",)):

raise SystemExit

elif valid is False:

errMsg = "code integrity check failed (turning off automatic issue creation). "

errMsg += "You should retrieve the latest development version from official GitHub "

errMsg += "repository at '%s'" % GIT_PAGE

logger.critical(errMsg)

print()

dataToStdout(excMsg)

raise SystemExit

elif any(_ in excMsg for _ in ("tamper/", "waf/")):

logger.critical(errMsg)

print()

dataToStdout(excMsg)

raise SystemExit

elif any(_ in excMsg for _ in ("ImportError", "ModuleNotFoundError", "Can't find file for module")):

errMsg = "invalid runtime environment ('%s')" % excMsg.split("Error: ")[-1].strip()

logger.critical(errMsg)

raise SystemExit

elif all(_ in excMsg for _ in ("SyntaxError: Non-ASCII character", ".py on line", "but no encoding declared")) or any(_ in excMsg for _ in ("source code string cannot contain null bytes", "No module named")):

errMsg = "invalid runtime environment ('%s')" % excMsg.split("Error: ")[-1].strip()

logger.critical(errMsg)

raise SystemExit

elif all(_ in excMsg for _ in ("No such file", "_'")):

errMsg = "corrupted installation detected ('%s'). " % excMsg.strip().split('\n')[-1]

errMsg += "You should retrieve the latest development version from official GitHub "

errMsg += "repository at '%s'" % GIT_PAGE

logger.critical(errMsg)

raise SystemExit

elif "'DictObject' object has no attribute '" in excMsg and all(_ in errMsg for _ in ("(fingerprinted)", "(identified)")):

errMsg = "there has been a problem in enumeration. "

errMsg += "Because of a considerable chance of false-positive case "

errMsg += "you are advised to rerun with switch '--flush-session'"

logger.critical(errMsg)

raise SystemExit

elif "bad marshal data (unknown type code)" in excMsg:

match = re.search(r"\s*(.+)\s+ValueError", excMsg)

errMsg = "one of your .pyc files are corrupted%s" % (" ('%s')" % match.group(1) if match else "")

errMsg += ". Please delete .pyc files on your system to fix the problem"

logger.critical(errMsg)

raise SystemExit

for match in re.finditer(r'File "(.+?)", line', excMsg):

file_ = match.group(1)

try:

file_ = os.path.relpath(file_, os.path.dirname(__file__))

except ValueError:

pass

file_ = file_.replace("\\", '/')

if "../" in file_:

file_ = re.sub(r"(\.\./)+", '/', file_)

else:

file_ = file_.lstrip('/')

file_ = re.sub(r"/{2,}", '/', file_)

excMsg = excMsg.replace(match.group(1), file_)

errMsg = maskSensitiveData(errMsg)

excMsg = maskSensitiveData(excMsg)

if conf.get("api") or not valid:

logger.critical("%s\n%s" % (errMsg, excMsg))

else:

logger.critical(errMsg)

dataToStdout("%s\n" % setColor(excMsg.strip(), level=logging.CRITICAL))

createGithubIssue(errMsg, excMsg)

finally:

kb.threadContinue = False

_ = getDaysFromLastUpdate()

if _ > LAST_UPDATE_NAGGING_DAYS:

warnMsg = "you haven't updated sqlmap for more than %d days!!!" % _

logger.warn(warnMsg)

if conf.get("showTime"):

dataToStdout("\n[*] ending @ %s\n\n" % time.strftime("%X /%Y-%m-%d/"), forceOutput=True)

kb.threadException = True

if kb.get("tempDir"):

for prefix in (MKSTEMP_PREFIX.IPC, MKSTEMP_PREFIX.TESTING, MKSTEMP_PREFIX.COOKIE_JAR, MKSTEMP_PREFIX.BIG_ARRAY):

for filepath in glob.glob(os.path.join(kb.tempDir, "%s*" % prefix)):

try:

os.remove(filepath)

except OSError:

pass

if not filterNone(filepath for filepath in glob.glob(os.path.join(kb.tempDir, '*')) if not any(filepath.endswith(_) for _ in (".lock", ".exe", ".so", '_'))): # ignore junk files

try:

shutil.rmtree(kb.tempDir, ignore_errors=True)

except OSError:

pass

if conf.get("hashDB"):

conf.hashDB.flush(True)

if conf.get("harFile"):

try:

with openFile(conf.harFile, "w+b") as f:

json.dump(conf.httpCollector.obtain(), fp=f, indent=4, separators=(',', ': '))

except SqlmapBaseException as ex:

errMsg = getSafeExString(ex)

logger.critical(errMsg)

if conf.get("api"):

conf.databaseCursor.disconnect()

if conf.get("dumper"):

conf.dumper.flush()

# short delay for thread finalization

_ = time.time()

while threading.activeCount() > 1 and (time.time() - _) > THREAD_FINALIZATION_TIMEOUT:

time.sleep(0.01)

if cmdLineOptions.get("sqlmapShell"):

cmdLineOptions.clear()

conf.clear()

kb.clear()

conf.disableBanner = True