|
| 1 | +#!/usr/bin/env python |
| 2 | + |
| 3 | +""" |
| 4 | +Copyright (c) 2006-2026 sqlmap developers (https://sqlmap.org) |
| 5 | +See the file 'LICENSE' for copying permission |
| 6 | +""" |
| 7 | + |
| 8 | +import os |
| 9 | +import sys |
| 10 | +import unittest |
| 11 | + |
| 12 | +sys.path.insert(0, os.path.dirname(os.path.abspath(__file__))) |
| 13 | +from _testutils import bootstrap |
| 14 | +bootstrap() |
| 15 | + |
| 16 | +from lib.core.data import kb |
| 17 | +from lib.core.enums import DBMS |
| 18 | +from lib.core.enums import FORK |
| 19 | +from lib.parse.html import htmlParser |
| 20 | + |
| 21 | + |
| 22 | +class TestHtmlParserForks(unittest.TestCase): |
| 23 | + def setUp(self): |
| 24 | + kb.forkNote = None |
| 25 | + kb.cache.parsedDbms.clear() |
| 26 | + |
| 27 | + # NOTE: these forks all speak the PostgreSQL wire protocol and inherit its error wording, so |
| 28 | + # the brand name itself never appears next to 'ERROR:' - only a leaked driver package or an |
| 29 | + # engine-internal source reference tells them apart from stock PostgreSQL |
| 30 | + def test_cockroachdb_error_fingerprint(self): |
| 31 | + for page in ( |
| 32 | + "ERROR: relation \"crdb_internal.tables\" does not exist", |
| 33 | + "DETAIL: stack trace: github.com/cockroachdb/cockroach/pkg/sql/conn_executor.go:733", |
| 34 | + ): |
| 35 | + kb.forkNote = None |
| 36 | + kb.cache.parsedDbms.clear() |
| 37 | + self.assertEqual(htmlParser(page), DBMS.PGSQL) |
| 38 | + self.assertEqual(kb.forkNote, FORK.COCKROACHDB) |
| 39 | + |
| 40 | + def test_yugabytedb_error_fingerprint(self): |
| 41 | + for page in ( |
| 42 | + "com.yugabyte.util.PSQLException: ERROR: syntax error at or near \"'\"", |
| 43 | + "ERROR: Query error: [Query error (yb/tserver/read_query.cc:265): MISMATCHED_SCHEMA]", |
| 44 | + ): |
| 45 | + kb.forkNote = None |
| 46 | + kb.cache.parsedDbms.clear() |
| 47 | + self.assertEqual(htmlParser(page), DBMS.PGSQL) |
| 48 | + self.assertEqual(kb.forkNote, FORK.YUGABYTEDB) |
| 49 | + |
| 50 | + def test_opengauss_error_fingerprint(self): |
| 51 | + page = "org.opengauss.util.PSQLException: ERROR: syntax error at or near \"'\"" |
| 52 | + dbms = htmlParser(page) |
| 53 | + self.assertEqual(dbms, DBMS.PGSQL) |
| 54 | + self.assertEqual(kb.forkNote, FORK.OPENGAUSS) |
| 55 | + |
| 56 | + def test_duckdb_error_fingerprint(self): |
| 57 | + # Messages below are verbatim from DuckDB 1.1.3/1.5.5 (the module was renamed |
| 58 | + #'duckdb.duckdb' -> '_duckdb') |
| 59 | + for page in ( |
| 60 | + "_duckdb.ParserException: Parser Error: unterminated quoted string at or near \"'''\"", |
| 61 | + "duckdb.duckdb.CatalogException: Catalog Error: Table with name t does not exist!", |
| 62 | + "_duckdb.BinderException: Binder Error: Referenced column \"x\" not found in FROM clause!", |
| 63 | + "at org.duckdb.DuckDBPreparedStatement.execute(DuckDBPreparedStatement.java:180)", |
| 64 | + ): |
| 65 | + kb.forkNote = None |
| 66 | + kb.cache.parsedDbms.clear() |
| 67 | + self.assertEqual(htmlParser(page), DBMS.PGSQL) |
| 68 | + self.assertEqual(kb.forkNote, FORK.DUCKDB) |
| 69 | + |
| 70 | + def test_trino_error_fingerprint(self): |
| 71 | + # the generic Presto 'mismatched input' entry also matches, so this pins the ordering |
| 72 | + # that keeps the Trino fork note from being swallowed by it |
| 73 | + page = "io.trino.jdbc.TrinoSQLException: line 1:15: mismatched input 'FROM'. Expecting: <expression>" |
| 74 | + dbms = htmlParser(page) |
| 75 | + self.assertEqual(dbms, DBMS.PRESTO) |
| 76 | + self.assertEqual(kb.forkNote, FORK.TRINO) |
| 77 | + |
| 78 | + def test_doris_error_fingerprint(self): |
| 79 | + # Doris speaks the MySQL wire protocol, so the client-side exception is MySQL's own - |
| 80 | + # only the leaked FE package name tells the fork apart |
| 81 | + page = "com.mysql.jdbc.exceptions.MySQLSyntaxErrorException at org.apache.doris.qe.ConnectProcessor" |
| 82 | + dbms = htmlParser(page) |
| 83 | + self.assertEqual(dbms, DBMS.MYSQL) |
| 84 | + self.assertEqual(kb.forkNote, FORK.DORIS) |
| 85 | + |
| 86 | + def test_starrocks_error_fingerprint(self): |
| 87 | + for page in ( |
| 88 | + "com.mysql.jdbc.exceptions.MySQLSyntaxErrorException at com.starrocks.qe.ConnectProcessor", |
| 89 | + "(1064, 'Getting syntax error from line 1, column 7 to line 1, column 62. Detail message: x.')", |
| 90 | + ): |
| 91 | + kb.forkNote = None |
| 92 | + kb.cache.parsedDbms.clear() |
| 93 | + self.assertEqual(htmlParser(page), DBMS.MYSQL) |
| 94 | + self.assertEqual(kb.forkNote, FORK.STARROCKS) |
| 95 | + |
| 96 | + |
| 97 | +if __name__ == "__main__": |
| 98 | + unittest.main() |
0 commit comments