souleyez 2.43.29__py3-none-any.whl → 3.0.0__py3-none-any.whl

souleyez/plugins/sqlmap.py

@@ -31,13 +31,13 @@ HELP = {
         "- Capture output to a job log and convert confirmed issues into Findings — include proof-of-concept details and remediation guidance.\n"
         "- Always follow rules of engagement and consider getting explicit written permission for DB-level testing.\n"
     ),
-    "usage": "souleyez jobs enqueue sqlmap <target_url> --args \"--batch\"",
+    "usage": 'souleyez jobs enqueue sqlmap <target_url> --args "--batch"',
     "examples": [
-        "souleyez jobs enqueue sqlmap \"http://example.com/page.php?id=1\" --args \"--batch\"",
-        "souleyez jobs enqueue sqlmap \"http://example.com/page.php?id=1\" --args \"--batch --dbs\"",
-        "souleyez jobs enqueue sqlmap \"http://example.com/login\" --args \"--batch --forms\"",
-        "souleyez jobs enqueue sqlmap \"http://example.com/page.php?id=1\" --args \"--batch --level=5 --risk=3\"",
-        "souleyez jobs enqueue sqlmap \"http://example.com/page.php\" --args \"--batch --data='username=admin&password=pass' -p username\"",
+        'souleyez jobs enqueue sqlmap "http://example.com/page.php?id=1" --args "--batch"',
+        'souleyez jobs enqueue sqlmap "http://example.com/page.php?id=1" --args "--batch --dbs"',
+        'souleyez jobs enqueue sqlmap "http://example.com/login" --args "--batch --forms"',
+        'souleyez jobs enqueue sqlmap "http://example.com/page.php?id=1" --args "--batch --level=5 --risk=3"',
+        'souleyez jobs enqueue sqlmap "http://example.com/page.php" --args "--batch --data=\'username=admin&password=pass\' -p username"',
     ],
     "flags": [
         ["--batch", "Never ask for user input, use default behavior"],
@@ -64,197 +64,378 @@ HELP = {
             {
                 "name": "Quick Test",
                 "args": ["--batch", "--level=1", "--risk=1"],
-                "desc": "Quick SQL injection test (safe, low risk)"
+                "desc": "Quick SQL injection test (safe, low risk)",
             },
             {
                 "name": "Standard Test",
                 "args": ["--batch", "--level=2", "--risk=1"],
-                "desc": "Standard detection (includes cookies/headers)"
+                "desc": "Standard detection (includes cookies/headers)",
             },
             {
                 "name": "Extensive Test",
                 "args": ["--batch", "--crawl=2", "--risk=2", "--level=3"],
-                "desc": "Deep detection (includes cookies/headers and crawl 2 levels)"
-            }
+                "desc": "Deep detection (includes cookies/headers and crawl 2 levels)",
+            },
         ],
         "form_crawl": [
             {
                 "name": "Forms Quick",
                 "args": ["--batch", "--forms", "--level=1"],
-                "desc": "Test forms only (no crawl)"
+                "desc": "Test forms only (no crawl)",
             },
             {
                 "name": "Forms + Crawl",
                 "args": ["--batch", "--forms", "--crawl=2"],
-                "desc": "Test forms and crawl 2 levels"
-            }
+                "desc": "Test forms and crawl 2 levels",
+            },
         ],
         "enumeration": [
             {
                 "name": "Current User Info",
                 "args": ["--batch", "--current-user", "--current-db", "--hostname"],
-                "desc": "Get current user, database, and hostname"
+                "desc": "Get current user, database, and hostname",
             },
             {
                 "name": "Discover Databases",
-                "args": ["--batch", "--dbs", "--forms", "--level=3", "--crawl=2", "--risk=2"],
-                "desc": "Enumerate databases with deep crawl"
+                "args": [
+                    "--batch",
+                    "--dbs",
+                    "--forms",
+                    "--level=3",
+                    "--crawl=2",
+                    "--risk=2",
+                ],
+                "desc": "Enumerate databases with deep crawl",
             },
             {
                 "name": "Enumerate Tables",
                 "args": ["--batch", "-D", "<DB_NAME>", "--tables", "--crawl=2"],
-                "desc": "List tables in database (replace <DB_NAME>)"
+                "desc": "List tables in database (replace <DB_NAME>)",
             },
             {
                 "name": "Enumerate Columns",
-                "args": ["--batch", "-D", "<DB_NAME>", "-T", "<TABLE>", "--columns", "--crawl=2"],
-                "desc": "List columns in table (replace <DB_NAME> and <TABLE>)"
+                "args": [
+                    "--batch",
+                    "-D",
+                    "<DB_NAME>",
+                    "-T",
+                    "<TABLE>",
+                    "--columns",
+                    "--crawl=2",
+                ],
+                "desc": "List columns in table (replace <DB_NAME> and <TABLE>)",
             },
             {
                 "name": "Check Privileges",
                 "args": ["--batch", "--privileges"],
-                "desc": "Check DB user privileges"
+                "desc": "Check DB user privileges",
             },
             {
                 "name": "Is DBA",
                 "args": ["--batch", "--is-dba"],
-                "desc": "Check if current user is DBA"
-            }
+                "desc": "Check if current user is DBA",
+            },
         ],
         "data_extraction": [
             {
                 "name": "Extract Table Data",
-                "args": ["--batch", "-D", "<DB_NAME>", "-T", "<TABLE>", "--dump", "--crawl=2"],
-                "desc": "Dump entire table (replace <DB_NAME> and <TABLE>)"
+                "args": [
+                    "--batch",
+                    "-D",
+                    "<DB_NAME>",
+                    "-T",
+                    "<TABLE>",
+                    "--dump",
+                    "--crawl=2",
+                ],
+                "desc": "Dump entire table (replace <DB_NAME> and <TABLE>)",
             },
             {
                 "name": "Extract Column Data",
-                "args": ["--batch", "-D", "<DB_NAME>", "-T", "<TABLE>", "-C", "<COLUMNS>", "--dump", "--crawl=2"],
-                "desc": "Dump specific columns (e.g., username,password)"
+                "args": [
+                    "--batch",
+                    "-D",
+                    "<DB_NAME>",
+                    "-T",
+                    "<TABLE>",
+                    "-C",
+                    "<COLUMNS>",
+                    "--dump",
+                    "--crawl=2",
+                ],
+                "desc": "Dump specific columns (e.g., username,password)",
             },
             {
                 "name": "Dump Users & Passwords",
                 "args": ["--batch", "--users", "--passwords"],
-                "desc": "Dump all DB users and password hashes"
-            }
+                "desc": "Dump all DB users and password hashes",
+            },
         ],
         "exploitation": [
             {
                 "name": "OS Shell",
                 "args": ["--batch", "--os-shell"],
-                "desc": "Get interactive OS shell via SQLi"
+                "desc": "Get interactive OS shell via SQLi",
             },
             {
                 "name": "OS Command",
                 "args": ["--batch", "--os-cmd=whoami"],
-                "desc": "Execute single OS command (replace whoami)"
+                "desc": "Execute single OS command (replace whoami)",
             },
             {
                 "name": "Read File",
                 "args": ["--batch", "--file-read=/etc/passwd"],
-                "desc": "Read server files via SQLi (replace path)"
+                "desc": "Read server files via SQLi (replace path)",
             },
             {
                 "name": "Write File",
-                "args": ["--batch", "--file-write=<local_file>", "--file-dest=<remote_path>"],
-                "desc": "Upload files to server (replace paths)"
-            }
+                "args": [
+                    "--batch",
+                    "--file-write=<local_file>",
+                    "--file-dest=<remote_path>",
+                ],
+                "desc": "Upload files to server (replace paths)",
+            },
         ],
         "waf_bypass": [
             {
                 "name": "WAF Bypass - Space",
                 "args": ["--batch", "--tamper=space2comment"],
-                "desc": "Bypass space-based WAF detection"
+                "desc": "Bypass space-based WAF detection",
             },
             {
                 "name": "WAF Bypass - Generic",
                 "args": ["--batch", "--tamper=between,randomcase"],
-                "desc": "Generic WAF evasion techniques"
+                "desc": "Generic WAF evasion techniques",
             },
             {
                 "name": "WAF Bypass - Full",
-                "args": ["--batch", "--tamper=space2comment,between,randomcase,charencode"],
-                "desc": "Aggressive WAF bypass (multiple tampers)"
-            }
-        ]
+                "args": [
+                    "--batch",
+                    "--tamper=space2comment,between,randomcase,charencode",
+                ],
+                "desc": "Aggressive WAF bypass (multiple tampers)",
+            },
+        ],
     },
     "presets": [
         # Flattened list for backward compatibility - matches preset_categories order
         # Basic Detection
-        {"name": "Quick Test", "args": ["--batch", "--level=1", "--risk=1"], "desc": "Quick SQL injection test (safe, low risk)"},
-        {"name": "Standard Test", "args": ["--batch", "--level=2", "--risk=1"], "desc": "Standard detection (includes cookies/headers)"},
-        {"name": "Extensive Test", "args": ["--batch", "--crawl=2", "--risk=2", "--level=3"], "desc": "Deep detection (includes cookies/headers and crawl 2 levels)"},
+        {
+            "name": "Quick Test",
+            "args": ["--batch", "--level=1", "--risk=1"],
+            "desc": "Quick SQL injection test (safe, low risk)",
+        },
+        {
+            "name": "Standard Test",
+            "args": ["--batch", "--level=2", "--risk=1"],
+            "desc": "Standard detection (includes cookies/headers)",
+        },
+        {
+            "name": "Extensive Test",
+            "args": ["--batch", "--crawl=2", "--risk=2", "--level=3"],
+            "desc": "Deep detection (includes cookies/headers and crawl 2 levels)",
+        },
         # Form Crawl
-        {"name": "Forms Quick", "args": ["--batch", "--forms", "--level=1"], "desc": "Test forms only (no crawl)"},
-        {"name": "Forms + Crawl", "args": ["--batch", "--forms", "--crawl=2"], "desc": "Test forms and crawl 2 levels"},
+        {
+            "name": "Forms Quick",
+            "args": ["--batch", "--forms", "--level=1"],
+            "desc": "Test forms only (no crawl)",
+        },
+        {
+            "name": "Forms + Crawl",
+            "args": ["--batch", "--forms", "--crawl=2"],
+            "desc": "Test forms and crawl 2 levels",
+        },
         # Enumeration
-        {"name": "Current User Info", "args": ["--batch", "--current-user", "--current-db", "--hostname"], "desc": "Get current user, database, and hostname"},
-        {"name": "Discover Databases", "args": ["--batch", "--dbs", "--forms", "--level=3", "--crawl=2", "--risk=2"], "desc": "Enumerate databases with deep crawl"},
-        {"name": "Enumerate Tables", "args": ["--batch", "-D", "<DB_NAME>", "--tables", "--crawl=2"], "desc": "List tables in database (replace <DB_NAME>)"},
-        {"name": "Enumerate Columns", "args": ["--batch", "-D", "<DB_NAME>", "-T", "<TABLE>", "--columns", "--crawl=2"], "desc": "List columns in table (replace <DB_NAME> and <TABLE>)"},
-        {"name": "Check Privileges", "args": ["--batch", "--privileges"], "desc": "Check DB user privileges"},
-        {"name": "Is DBA", "args": ["--batch", "--is-dba"], "desc": "Check if current user is DBA"},
+        {
+            "name": "Current User Info",
+            "args": ["--batch", "--current-user", "--current-db", "--hostname"],
+            "desc": "Get current user, database, and hostname",
+        },
+        {
+            "name": "Discover Databases",
+            "args": [
+                "--batch",
+                "--dbs",
+                "--forms",
+                "--level=3",
+                "--crawl=2",
+                "--risk=2",
+            ],
+            "desc": "Enumerate databases with deep crawl",
+        },
+        {
+            "name": "Enumerate Tables",
+            "args": ["--batch", "-D", "<DB_NAME>", "--tables", "--crawl=2"],
+            "desc": "List tables in database (replace <DB_NAME>)",
+        },
+        {
+            "name": "Enumerate Columns",
+            "args": [
+                "--batch",
+                "-D",
+                "<DB_NAME>",
+                "-T",
+                "<TABLE>",
+                "--columns",
+                "--crawl=2",
+            ],
+            "desc": "List columns in table (replace <DB_NAME> and <TABLE>)",
+        },
+        {
+            "name": "Check Privileges",
+            "args": ["--batch", "--privileges"],
+            "desc": "Check DB user privileges",
+        },
+        {
+            "name": "Is DBA",
+            "args": ["--batch", "--is-dba"],
+            "desc": "Check if current user is DBA",
+        },
         # Data Extraction
-        {"name": "Extract Table Data", "args": ["--batch", "-D", "<DB_NAME>", "-T", "<TABLE>", "--dump", "--crawl=2"], "desc": "Dump entire table (replace <DB_NAME> and <TABLE>)"},
-        {"name": "Extract Column Data", "args": ["--batch", "-D", "<DB_NAME>", "-T", "<TABLE>", "-C", "<COLUMNS>", "--dump", "--crawl=2"], "desc": "Dump specific columns (e.g., username,password)"},
-        {"name": "Dump Users & Passwords", "args": ["--batch", "--users", "--passwords"], "desc": "Dump all DB users and password hashes"},
+        {
+            "name": "Extract Table Data",
+            "args": [
+                "--batch",
+                "-D",
+                "<DB_NAME>",
+                "-T",
+                "<TABLE>",
+                "--dump",
+                "--crawl=2",
+            ],
+            "desc": "Dump entire table (replace <DB_NAME> and <TABLE>)",
+        },
+        {
+            "name": "Extract Column Data",
+            "args": [
+                "--batch",
+                "-D",
+                "<DB_NAME>",
+                "-T",
+                "<TABLE>",
+                "-C",
+                "<COLUMNS>",
+                "--dump",
+                "--crawl=2",
+            ],
+            "desc": "Dump specific columns (e.g., username,password)",
+        },
+        {
+            "name": "Dump Users & Passwords",
+            "args": ["--batch", "--users", "--passwords"],
+            "desc": "Dump all DB users and password hashes",
+        },
         # Exploitation
-        {"name": "OS Shell", "args": ["--batch", "--os-shell"], "desc": "Get interactive OS shell via SQLi"},
-        {"name": "OS Command", "args": ["--batch", "--os-cmd=whoami"], "desc": "Execute single OS command (replace whoami)"},
-        {"name": "Read File", "args": ["--batch", "--file-read=/etc/passwd"], "desc": "Read server files via SQLi (replace path)"},
-        {"name": "Write File", "args": ["--batch", "--file-write=<local_file>", "--file-dest=<remote_path>"], "desc": "Upload files to server (replace paths)"},
+        {
+            "name": "OS Shell",
+            "args": ["--batch", "--os-shell"],
+            "desc": "Get interactive OS shell via SQLi",
+        },
+        {
+            "name": "OS Command",
+            "args": ["--batch", "--os-cmd=whoami"],
+            "desc": "Execute single OS command (replace whoami)",
+        },
+        {
+            "name": "Read File",
+            "args": ["--batch", "--file-read=/etc/passwd"],
+            "desc": "Read server files via SQLi (replace path)",
+        },
+        {
+            "name": "Write File",
+            "args": [
+                "--batch",
+                "--file-write=<local_file>",
+                "--file-dest=<remote_path>",
+            ],
+            "desc": "Upload files to server (replace paths)",
+        },
         # WAF Bypass
-        {"name": "WAF Bypass - Space", "args": ["--batch", "--tamper=space2comment"], "desc": "Bypass space-based WAF detection"},
-        {"name": "WAF Bypass - Generic", "args": ["--batch", "--tamper=between,randomcase"], "desc": "Generic WAF evasion techniques"},
-        {"name": "WAF Bypass - Full", "args": ["--batch", "--tamper=space2comment,between,randomcase,charencode"], "desc": "Aggressive WAF bypass (multiple tampers)"}
+        {
+            "name": "WAF Bypass - Space",
+            "args": ["--batch", "--tamper=space2comment"],
+            "desc": "Bypass space-based WAF detection",
+        },
+        {
+            "name": "WAF Bypass - Generic",
+            "args": ["--batch", "--tamper=between,randomcase"],
+            "desc": "Generic WAF evasion techniques",
+        },
+        {
+            "name": "WAF Bypass - Full",
+            "args": ["--batch", "--tamper=space2comment,between,randomcase,charencode"],
+            "desc": "Aggressive WAF bypass (multiple tampers)",
+        },
     ],
     "help_sections": [
         {
             "title": "What is SQLMap?",
             "color": "cyan",
             "content": [
-                {"title": "Overview", "desc": "SQLMap is the industry-standard automated SQL injection detection and exploitation tool that identifies injectable parameters and extracts database contents."},
-                {"title": "Use Cases", "desc": "SQL injection testing and validation", "tips": [
-                    "Detect and confirm SQL injection vulnerabilities",
-                    "Fingerprint database engines (MySQL, PostgreSQL, etc.)",
-                    "Extract database schemas and data",
-                    "Test fix effectiveness after remediation"
-                ]}
-            ]
+                {
+                    "title": "Overview",
+                    "desc": "SQLMap is the industry-standard automated SQL injection detection and exploitation tool that identifies injectable parameters and extracts database contents.",
+                },
+                {
+                    "title": "Use Cases",
+                    "desc": "SQL injection testing and validation",
+                    "tips": [
+                        "Detect and confirm SQL injection vulnerabilities",
+                        "Fingerprint database engines (MySQL, PostgreSQL, etc.)",
+                        "Extract database schemas and data",
+                        "Test fix effectiveness after remediation",
+                    ],
+                },
+            ],
         },
         {
             "title": "How to Use",
             "color": "green",
             "content": [
-                {"title": "Basic Workflow", "desc": "1. Start with detection mode (--batch --level=1)\n     2. Fingerprint database (--dbs, --current-db)\n     3. Enumerate schema (--tables, --columns)\n     4. Extract data with limits (--dump --limit 100)"},
-                {"title": "Key Options", "desc": "Essential SQLMap parameters", "tips": [
-                    "--batch: Non-interactive mode (required)",
-                    "--dbs: List all databases",
-                    "--forms: Auto-detect and test forms",
-                    "--level/--risk: Control test intensity (1-5/1-3)"
-                ]}
-            ]
+                {
+                    "title": "Basic Workflow",
+                    "desc": "1. Start with detection mode (--batch --level=1)\n     2. Fingerprint database (--dbs, --current-db)\n     3. Enumerate schema (--tables, --columns)\n     4. Extract data with limits (--dump --limit 100)",
+                },
+                {
+                    "title": "Key Options",
+                    "desc": "Essential SQLMap parameters",
+                    "tips": [
+                        "--batch: Non-interactive mode (required)",
+                        "--dbs: List all databases",
+                        "--forms: Auto-detect and test forms",
+                        "--level/--risk: Control test intensity (1-5/1-3)",
+                    ],
+                },
+            ],
         },
         {
             "title": "Tips & Best Practices",
             "color": "yellow",
             "content": [
-                ("Best Practices:", [
-                    "Always use --batch for non-interactive mode",
-                    "Start with low --risk and --level, increase if needed",
-                    "Use --limit to avoid extracting entire databases",
-                    "Save proof-of-concept to job log for findings",
-                    "ONLY run with explicit written authorization"
-                ]),
-                ("Common Issues:", [
-                    "No injection found: Try higher --level or --risk",
-                    "Too slow: Reduce --level or use specific techniques",
-                    "WAF blocking: Use --tamper scripts for evasion",
-                    "False positives: Manually verify all findings"
-                ])
-            ]
-        }
-    ]
+                (
+                    "Best Practices:",
+                    [
+                        "Always use --batch for non-interactive mode",
+                        "Start with low --risk and --level, increase if needed",
+                        "Use --limit to avoid extracting entire databases",
+                        "Save proof-of-concept to job log for findings",
+                        "ONLY run with explicit written authorization",
+                    ],
+                ),
+                (
+                    "Common Issues:",
+                    [
+                        "No injection found: Try higher --level or --risk",
+                        "Too slow: Reduce --level or use specific techniques",
+                        "WAF blocking: Use --tamper scripts for evasion",
+                        "False positives: Manually verify all findings",
+                    ],
+                ),
+            ],
+        },
+    ],
 }
 
 
@@ -264,20 +445,22 @@ class SqlmapPlugin(PluginBase):
     category = "exploitation"
     HELP = HELP
 
-    def build_command(self, target: str, args: List[str] = None, label: str = "", log_path: str = None):
+    def build_command(
+        self, target: str, args: List[str] = None, label: str = "", log_path: str = None
+    ):
         """Build sqlmap command for background execution with PID tracking."""
         args = args or []
-        
+
         # Handle plain IP/hostname - add protocol if missing
-        if not target.startswith(('http://', 'https://')):
+        if not target.startswith(("http://", "https://")):
             target = f"http://{target}"
-        
+
         # Validate URL
         try:
             target = validate_url(target)
         except ValidationError as e:
             if log_path:
-                with open(log_path, 'w') as f:
+                with open(log_path, "w") as f:
                     f.write(f"ERROR: Invalid URL: {e}\n")
             return None
 
@@ -290,16 +473,15 @@ class SqlmapPlugin(PluginBase):
             cmd = ["sqlmap", "-u", target] + args
         else:
             cmd = ["sqlmap"] + args
-        
+
         # Replace <target> placeholder if present in args
         cmd = [arg.replace("<target>", target) for arg in cmd]
 
-        return {
-            'cmd': cmd,
-            'timeout': 3600  # 1 hour timeout for deep scans
-        }
+        return {"cmd": cmd, "timeout": 3600}  # 1 hour timeout for deep scans
 
-    def run(self, target: str, args: List[str] = None, label: str = "", log_path: str = None) -> int:
+    def run(
+        self, target: str, args: List[str] = None, label: str = "", log_path: str = None
+    ) -> int:
         """
         Execute sqlmap scan and write output to log_path.
 
@@ -313,17 +495,17 @@ class SqlmapPlugin(PluginBase):
             int: Exit code (0=success, non-zero=error)
         """
         args = args or []
-        
+
         # Handle plain IP/hostname - add protocol if missing
-        if not target.startswith(('http://', 'https://')):
+        if not target.startswith(("http://", "https://")):
             target = f"http://{target}"
-        
+
         # Validate URL
         try:
             target = validate_url(target)
         except ValidationError as e:
             if log_path:
-                with open(log_path, 'w') as f:
+                with open(log_path, "w") as f:
                     f.write(f"ERROR: Invalid URL: {e}\n")
                 return 1
             raise ValueError(f"Invalid URL: {e}")
@@ -340,14 +522,16 @@ class SqlmapPlugin(PluginBase):
         else:
             # -u already in args, don't add target again
             cmd = ["sqlmap"] + args
-        
+
         # Replace <target> placeholder if present in args
         cmd = [arg.replace("<target>", target) for arg in cmd]
 
         if not log_path:
             # Fallback for direct calls (shouldn't happen in background jobs)
             try:
-                proc = subprocess.run(cmd, capture_output=True, timeout=3600, check=False)  # 1 hour
+                proc = subprocess.run(
+                    cmd, capture_output=True, timeout=3600, check=False
+                )  # 1 hour
                 return proc.returncode
             except Exception:
                 return 1
@@ -356,7 +540,9 @@ class SqlmapPlugin(PluginBase):
         try:
             with open(log_path, "a", encoding="utf-8", errors="replace") as fh:
                 fh.write(f"Command: {' '.join(cmd)}\n")
-                fh.write(f"Started: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())}\n\n")
+                fh.write(
+                    f"Started: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())}\n\n"
+                )
                 fh.flush()
 
                 proc = subprocess.run(
@@ -364,10 +550,12 @@ class SqlmapPlugin(PluginBase):
                     stdout=fh,
                     stderr=subprocess.STDOUT,
                     timeout=3600,  # SQLMap can take 1+ hours for deep scans
-                    check=False
+                    check=False,
                 )
 
-                fh.write(f"\nCompleted: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())}\n")
+                fh.write(
+                    f"\nCompleted: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())}\n"
+                )
                 fh.write(f"Exit Code: {proc.returncode}\n")
 
                 return proc.returncode