ronin-sql 0.2.4 → 1.0.0

data/lib/ronin/sql/error/message.rb

@@ -1,62 +0,0 @@
-#
-# Ronin SQL - A Ronin library providing support for SQL related security
-# tasks.
-#
-# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
-#
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#
-
-module Ronin
-  module SQL
-    module Error
-      class Message
-
-        # The URL which is vulnerable
-        attr_reader :url
-
-        # The vulnerable query param
-        attr_accessor :param
-
-        # SQL error type
-        attr_reader :type
-
-        # SQL Dialect
-        attr_reader :dialect
-
-        # SQL error message
-        attr_reader :message
-
-        #
-        # Creates a new SQL Error object with the specified _type_, 
-        # _dialect_ and _message_.
-        #
-        def initialize(type,dialect,message)
-          @type = type
-          @dialect = dialect
-          @message = message
-        end
-
-        #
-        # Returns the message in String form.
-        #
-        def to_s
-          @message.to_s
-        end
-
-      end
-    end
-  end
-end

data/lib/ronin/sql/error/pattern.rb

@@ -1,104 +0,0 @@
-#
-# Ronin SQL - A Ronin library providing support for SQL related security
-# tasks.
-#
-# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
-#
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#
-
-require 'ronin/sql/error/message'
-
-module Ronin
-  module SQL
-    module Error
-      class Pattern
-
-        # Name of the pattern
-        attr_reader :name
-
-        # Name of the SQL dialect
-        attr_accessor :dialect
-
-        # Patterns to use for matching SQL errors
-        attr_reader :patterns
-
-        #
-        # Creates a new Pattern object with the specified _name_. If a
-        # _block_ is given, it will be passed the newly created Pattern
-        # object.
-        #
-        def initialize(name,&block)
-          @dialect = :common
-          @name = name.to_sym
-          @patterns = []
-
-          block.call(self) if block
-        end
-
-        #
-        # Add the specified _pattern_ to be used to recognize SQL error
-        # messages.
-        #
-        def recognize(pattern)
-          @patterns << pattern
-          return self
-        end
-
-        #
-        # Returns the first match between the error pattern and the
-        # specified _data_. If no matches were found +nil+ will be
-        # returned.
-        #
-        def match(data)
-          data = data.to_s
-
-          @patterns.each do |pattern|
-            match = data.match(pattern)
-
-            return Message.new(@name,@dialect,match[0]) if match
-          end
-
-          return nil
-        end
-
-        #
-        # Returns the match index within the specified _data_ where a SQL
-        # error Pattern occurs. If no SQL error Pattern can be found within
-        # _data_, +nil+ will be returned.
-        #
-        def =~(data)
-          data = data.to_s
-
-          @patterns.each do |pattern|
-            if (index = (pattern =~ data))
-              return index
-            end
-          end
-
-          return nil
-        end
-
-        #
-        # Returns the name of the error pattern.
-        #
-        def to_s
-          @name.to_s
-        end
-
-      end
-    end
-  end
-end

data/lib/ronin/sql/error/patterns.rb

@@ -1,99 +0,0 @@
-#
-# Ronin SQL - A Ronin library providing support for SQL related security
-# tasks.
-#
-# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
-#
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#
-
-require 'ronin/sql/error/pattern'
-
-module Ronin
-  module SQL
-    module Error
-      Error.pattern :ms_sql do |p|
-        p.dialect = :ms
-        p.recognize /Microsoft SQL Native Client/
-        p.recognize /Microsoft OLE DB Provider for SQL Server/
-        p.recognize /Microsoft OLE DB Provider for ODBC Drivers.*\[Microsoft\]\[ODBC SQL Server Driver\]/
-      end
-
-      Error.pattern :ms_access do |p|
-        p.dialect = :ms
-        p.recognize /Microsoft OLE DB Provider for ODBC Drivers.*\[Microsoft\]\[ODBC Access Driver\]/
-        p.recognize /\[Microsoft\]\[ODBC Microsoft Access Driver\] Syntax error/
-      end
-
-      Error.pattern :ms_jetdb do |p|
-        p.dialect = :ms
-        p.recognize /Microsoft JET Database Engine/
-      end
-
-      Error.pattern :ms_adodb do |p|
-        p.dialect = :ms
-        p.recognize /ADODB.Command.*error/
-      end
-
-      Error.pattern :asp_net do |p|
-        p.dialect = :common
-        p.recognize /Server Error.*System\.Data\.OleDb\.OleDbException/
-      end
-
-      Error.pattern :mysql do |p|
-        p.dialect = :mysql
-        p.recognize /Warning.*supplied argument is not a valid MySQL result/
-        p.recognize /Warning.*mysql_.*\(\)/
-        p.recognize /You have an error in your SQL syntax.*(on|at) line/
-      end
-
-      Error.pattern :php do |p|
-        p.dialect = :common
-        p.recognize /Warning.*failed to open stream/
-        p.recognize /Fatal Error.*(on|at) line/
-      end
-
-      Error.pattern :oracle do |p|
-        p.dialect = :oracle
-        p.recognize /ORA-[0-9][0-9][0-9][0-9]/
-      end
-
-      Error.pattern :jdbc do |p|
-        p.dialect = :common
-        p.recognize /Invalid SQL statement or JDBC/
-      end
-
-      Error.pattern :java_servlet do |p|
-        p.dialect = :common
-        p.recognize /javax\.servlet\.ServletException/
-      end
-
-      Error.pattern :apache_tomcat do |p|
-        p.dialect = :common
-        p.recognize /org\.apache\.jasper\.JasperException/
-      end
-
-      Error.pattern :vb_runtime do |p|
-        p.dialect = :common
-        p.recognize /Microsoft VBScript runtime/
-      end
-
-      Error.pattern :vb_asp do |p|
-        p.dialect = :common
-        p.recognize /Type mismatch/
-      end
-    end
-  end
-end

data/lib/ronin/sql/extensions.rb

@@ -1,22 +0,0 @@
-#
-# Ronin SQL - A Ronin library providing support for SQL related security
-# tasks.
-#
-# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
-#
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#
-
-require 'ronin/sql/extensions/uri'

data/lib/ronin/sql/extensions/uri.rb

@@ -1,22 +0,0 @@
-#
-# Ronin SQL - A Ronin library providing support for SQL related security
-# tasks.
-#
-# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
-#
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#
-
-require 'ronin/sql/extensions/uri/http'

data/lib/ronin/sql/extensions/uri/http.rb

@@ -1,107 +0,0 @@
-#
-# Ronin SQL - A Ronin library providing support for SQL related security
-# tasks.
-#
-# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
-#
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#
-
-require 'ronin/sql/injection'
-require 'ronin/scanners/scanner'
-require 'ronin/extensions/uri/http'
-
-module URI
-  class HTTP < Generic
-
-    include Ronin::Scanners::Scanner
-
-    #
-    # Tests the +query_params+ of the HTTP URL with the given _options_ for
-    # SQL errors.
-    #
-    # _options_ may contain the following keys:
-    # <tt>:sql</tt>:: The SQL injection to use. Defaults to <tt>"'"</tt>.
-    #
-    def sql_errors(options={})
-      errors = {}
-
-      return each_query_param do |param,value|
-        mesg = Ronin::SQL::Injection.new(self,param).error(options)
-
-        errors[param] = mesg if mesg
-      end
-
-      return errors
-    end
-
-    def sql_error(options={})
-      sql_errors(options).values.first
-    end
-
-    #
-    # Returns +true+ if any of the +query_params+ of the HTTP URI return
-    # SQL errors using the given _options_, returns +false+ otherwise.
-    #
-    # _options_ may contain the following keys:
-    # <tt>:sql</tt>:: The SQL injection to use. Defaults to <tt>"'"</tt>.
-    #
-    def has_sql_errors?(options={})
-      !(sql_errors(options).empty?)
-    end
-
-    #
-    # Tests the +query_params+ of the HTTP URL with the given _options_ for
-    # blind SQL injections.
-    #
-    scanner(:sqli) do |url,results,options|
-      url.each_query_param do |param,value|
-        integer_tests = [
-          {:escape => value},
-          {:escape => value, :close_parenthesis => true}
-        ]
-
-        string_tests = [
-          {:escape => value, :close_string => true},
-          {:escape => value, :close_string => true, :close_parenthesis => true}
-        ]
-
-        if (value && value =~ /^[0-9]+$/)
-          # if the param value is numeric, we should try escaping a
-          # numeric value first.
-          tests = integer_tests + string_tests
-        else
-          # if the param value is a string, we should try escaping a
-          # string value first.
-          tests = string_tests + integer_tests
-        end
-
-        tests.each do |test|
-          inj = Ronin::SQL::Injection.new(url,param,options.merge(test))
-
-          if inj.vulnerable?(options)
-            results.call(inj)
-            break
-          end
-        end
-      end
-    end
-
-    alias sql_injections sqli_scan
-    alias sql_injection first_sqli
-    alias has_sql_injections? has_sqli?
-
-  end
-end

data/spec/code/sql/common_dialect_spec.rb

@@ -1,205 +0,0 @@
-require 'ronin/code/sql/common_dialect'
-
-require 'spec_helper'
-
-describe Code::SQL::CommonDialect do
-  before(:all) do
-    @dialect = Code::SQL::CommonDialect.new
-  end
-
-  it "should provide the 'yes' primitive" do
-    token = @dialect.yes
-
-    token.class.should == Code::SQL::Token
-    token.to_s.should == 'yes'
-  end
-
-  it "should provide the 'no' primitive" do
-    token = @dialect.no
-
-    token.class.should == Code::SQL::Token
-    token.to_s.should == 'no'
-  end
-
-  it "should provide the 'on' primitive" do
-    token = @dialect.on
-
-    token.class.should == Code::SQL::Token
-    token.to_s.should == 'on'
-  end
-
-  it "should provide the 'off' primitive" do
-    token = @dialect.off
-
-    token.class.should == Code::SQL::Token
-    token.to_s.should == 'off'
-  end
-
-  it "should provide the 'null' primitive" do
-    token = @dialect.null
-
-    token.class.should == Code::SQL::Token
-    token.to_s.should == 'null'
-  end
-
-  it "should provide the 'int' data-type" do
-    token = @dialect.int
-
-    token.class.should == Code::SQL::Token
-    token.to_s.should == 'INT'
-  end
-
-  it "should provide the 'varchar' data-type" do
-    token = @dialect.varchar
-
-    token.class.should == Code::SQL::Token
-    token.to_s.should == 'VARCHAR'
-  end
-
-  it "should provide the 'varchar' data-type with specific length" do
-    token = @dialect.varchar(15)
-
-    token.class.should == Code::SQL::Token
-    token.to_s.should == 'VARCHAR(15)'
-  end
-
-  it "should provide the 'text' data-type" do
-    token = @dialect.text
-
-    token.class.should == Code::SQL::Token
-    token.to_s.should == 'TEXT'
-  end
-
-  it "should provide the 'record' data-type" do
-    token = @dialect.record
-
-    token.class.should == Code::SQL::Token
-    token.to_s.should == 'RECORD'
-  end
-
-  it "should provide the 'avg' function" do
-    func = @dialect.avg(:salary)
-
-    func.name.should == :avg
-    func.fields.should == [:salary]
-  end
-
-  it "should provide the 'count' function" do
-    func = @dialect.count(:id)
-
-    func.name.should == :count
-    func.fields.should == [:id]
-  end
-
-  it "should provide the 'group_concat' function" do
-    func = @dialect.group_concat(:id)
-
-    func.name.should == :group_concat
-    func.fields.should == [:id]
-  end
-
-  it "should provide the 'min' function" do
-    func = @dialect.min(:salary)
-
-    func.name.should == :min
-    func.fields.should == [:salary]
-  end
-
-  it "should provide the 'max' function" do
-    func = @dialect.max(:salary)
-
-    func.name.should == :max
-    func.fields.should == [:salary]
-  end
-
-  it "should provide the 'sum' function" do
-    func = @dialect.sum(:salary)
-
-    func.name.should == :sum
-    func.fields.should == [:salary]
-  end
-
-  it "should provide the 'total' function" do
-    func = @dialect.total(:salary)
-
-    func.name.should == :total
-    func.fields.should == [:salary]
-  end
-
-  it "should provide the 'create table' statement" do
-    stmt = @dialect.create_table(:users)
-
-    stmt.class.should == Code::SQL::CreateTable
-    stmt.table.should == :users
-  end
-
-  it "should provide the 'create index' statement" do
-    stmt = @dialect.create_index(:users_index)
-
-    stmt.class.should == Code::SQL::CreateIndex
-    stmt.index.should == :users_index
-  end
-
-  it "should provide the 'create view' statement" do
-    stmt = @dialect.create_view(:users_view)
-
-    stmt.class.should == Code::SQL::CreateView
-    stmt.view.should == :users_view
-  end
-
-  it "should provide the 'alter table' statement" do
-    stmt = @dialect.alter_table(:users)
-
-    stmt.class.should == Code::SQL::AlterTable
-    stmt.table.should == :users
-  end
-
-  it "should provide the 'insert' statement" do
-    stmt = @dialect.insert(:users)
-
-    stmt.class.should == Code::SQL::Insert
-    stmt.table.should == :users
-  end
-
-  it "should provide the 'select' statement" do
-    stmt = @dialect.select(:from => :users)
-
-    stmt.class.should == Code::SQL::Select
-    stmt.from.table.should == :users
-  end
-
-  it "should provide the 'update' statement" do
-    stmt = @dialect.update(:users)
-
-    stmt.class.should == Code::SQL::Update
-    stmt.table.should == :users
-  end
-
-  it "should provide the 'delete' statement" do
-    stmt = @dialect.delete(:users)
-
-    stmt.class.should == Code::SQL::Delete
-    stmt.table.should == :users
-  end
-
-  it "should provide the 'drop table' statement" do
-    stmt = @dialect.drop_table(:users)
-
-    stmt.class.should == Code::SQL::DropTable
-    stmt.table.should == :users
-  end
-
-  it "should provide the 'drop index' statement" do
-    stmt = @dialect.drop_index(:users_index)
-
-    stmt.class.should == Code::SQL::DropIndex
-    stmt.index.should == :users_index
-  end
-
-  it "should provide the 'drop view' statement" do
-    stmt = @dialect.drop_view(:users_view)
-
-    stmt.class.should == Code::SQL::DropView
-    stmt.view.should == :users_view
-  end
-end