Package plugins :: Package attack :: Package db :: Module dbDriver :: Class dbDriver

Class dbDriver

This represents a database driver. This class is an "interface" between w3af and sqlmap.

Author: Andres Riancho ( andres.riancho@gmail.com )

Instance Methods

[hide private]

__init__(self, urlOpener, cmpFunction, vuln)

_findFalseValue(self, vuln)
Find a value that returns a false response for the sql injection.

auxDump(self, tbl, db=None, col=None)

auxGetColumns(self, tbl, db=None)

auxGetTables(self, db=None)

Inherited from dbDriverFunctions.dbDriverFunctions: bisectionAlgorithm, getPage, getValue, goodSamaritanContribution, info, isRunningGoodSamaritan, log, parseFp, prepareUnionUse, queryPage, startGoodSamaritan, stopGoodSamaritan, unionCheck, unionUse, urlReplace, warn

Inherited from core.controllers.basePlugin.basePlugin.basePlugin: __eq__, end, getDesc, getLongDesc, getName, getOptions, getPluginDeps, getType, printUniq, setOptions, setUrlOpener

Inherited from core.controllers.basePlugin.basePlugin.basePlugin (private): _analyzeResult, _sendMutant

Method Details

[hide private]

init(self, urlOpener, cmpFunction, vuln)
(Constructor)

Overrides: dbDriverFunctions.dbDriverFunctions.__init__

_findFalseValue(self, vuln)


Find a value that returns a false response for the sql injection. 
For example:
    http://a/a.php?id=1
and
    http://a/a.php?id=1 OR 1=1
both return the same response, so the false value i'm looking for is any value that returns
something different than http://a/a.php?id=1 , for example, '2' .

Class dbDriver

__init__(self, urlOpener, cmpFunction, vuln) (Constructor)

_findFalseValue(self, vuln)

init(self, urlOpener, cmpFunction, vuln)
(Constructor)