@ -168,481 +168,453 @@ def main():
try :
# 应用脏补丁和解析交叉引用
dirtyPatches ( )
resolveCrossReferences ( )
dirtyPatches ( ) # 应用一些临时的修复或补丁
resolveCrossReferences ( ) # 解析并处理代码中的交叉引用
# 检查运行环境并设置程序路径
checkEnvironment ( )
setPaths ( modulePath ( ) )
banner ( )
checkEnvironment ( ) # 检查当前运行环境是否满足要求
setPaths ( modulePath ( ) ) # 设置程序的路径
banner ( ) # 显示程序的横幅信息
# 解析命令行参数并更新全局配置
args = cmdLineParser ( )
cmdLineOptions . update ( args . __dict__ if hasattr ( args , " __dict__ " ) else args )
initOptions ( cmdLineOptions )
args = cmdLineParser ( ) # 解析命令行参数
cmdLineOptions . update ( args . __dict__ if hasattr ( args , " __dict__ " ) else args ) # 更新全局命令行选项
initOptions ( cmdLineOptions ) # 初始化全局配置选项
# 如果有管道输入，则设置批量模式
if checkPipedInput ( ) :
conf . batch = True
if checkPipedInput ( ) : # 检查是否有管道输入
conf . batch = True # 如果有管道输入，
# 如果配置了API，
if conf . get ( " api " ) :
if conf . get ( " api " ) : # 检查是否配置了API
# 延迟导入（重量级导入）
from lib . utils . api import StdDbOut
from lib . utils . api import setRestAPILog
from lib . utils . api import StdDbOut # 导入StdDbOut类，
from lib . utils . api import setRestAPILog # 导入setRestAPILog函数，
# 重定向标准输出和错误到IPC数据库
sys . stdout = StdDbOut ( conf . taskid , messagetype = " stdout " )
sys . stderr = StdDbOut ( conf . taskid , messagetype = " stderr " )
sys . stdout = StdDbOut ( conf . taskid , messagetype = " stdout " ) # 重定向标准输出到IPC数据库
sys . stderr = StdDbOut ( conf . taskid , messagetype = " stderr " ) # 重定向标准错误到IPC数据库
setRestAPILog ( )
setRestAPILog ( ) # 设置API日志
# 设置显示时间并显示法律声明和启动信息
conf . showTime = True
dataToStdout ( " [!] legal disclaimer: %s \n \n " % LEGAL_DISCLAIMER , forceOutput = True )
dataToStdout ( " [*] starting @ %s \n \n " % time . strftime ( " %X / % Y- % m- %d / " ) , forceOutput = True )
conf . showTime = True # 设置显示时间
dataToStdout ( " [!] legal disclaimer: %s \n \n " % LEGAL_DISCLAIMER , forceOutput = True ) # 显示法律声明
dataToStdout ( " [*] starting @ %s \n \n " % time . strftime ( " %X / % Y- % m- %d / " ) , forceOutput = True ) # 显示启动信息
# 初始化程序
init ( )
init ( ) # 调用初始化函数，完成程序的初始化工作
# 如果没有设置更新所有选项，则执行后续操作
if not conf . updateAll :
if not conf . updateAll : # 检查是否设置了更新所有选项
# 延迟导入（更快的启动）
if conf . smokeTest :
if conf . smokeTest : # 检查是否设置了烟雾测试
# 运行烟雾测试
from lib . core . testing import smokeTest
os . _exitcode = 1 - ( smokeTest ( ) or 0 )
elif conf . vulnTest :
from lib . core . testing import smokeTest # 导入烟雾测试函数
os . _exitcode = 1 - ( smokeTest ( ) or 0 ) # 运行烟雾测试并设置退出码
elif conf . vulnTest : # 检查是否设置了漏洞测试
# 运行漏洞测试
from lib . core . testing import vulnTest
os . _exitcode = 1 - ( vulnTest ( ) or 0 )
from lib . core . testing import vulnTest # 导入漏洞测试函数
os . _exitcode = 1 - ( vulnTest ( ) or 0 ) # 运行漏洞测试并设置退出码
else :
# 启动sqlmap控制器
from lib . controller . controller import start
if conf . profile :
from lib . controller . controller import start # 导入启动控制器函数
if conf . profile : # 检查是否设置了性能分析
# 如果设置了性能分析，则进行性能分析
from lib . core . profiling import profile
globals ( ) [ " start " ] = start
profile ( )
from lib . core . profiling import profile # 导入性能分析函数
globals ( ) [ " start " ] = start # 将start函数添加到全局命名空间
profile ( ) # 运行性能分析
else :
try :
# 如果设置了爬取深度和批量文件，则开始爬取
if conf . crawlDepth and conf . bulkFile :
targets = getFileItems ( conf . bulkFile )
if conf . crawlDepth and conf . bulkFile : # 检查是否设置了爬取深度和批量文件
targets = getFileItems ( conf . bulkFile ) # 从批量文件中获取目标列表
for i in xrange ( len ( targets ) ) :
target = None
for i in xrange ( len ( targets ) ) : # 遍历目标列表
target = None # 初始化目标变量
try :
kb . targets = OrderedSet ( )
target = targets [ i ]
kb . targets = OrderedSet ( ) # 初始化目标集合
target = targets [ i ] # 获取当前目标
if not re . search ( r " (?i) \ Ahttp[s]*:// " , target ) :
target = " http:// %s " % target
if not re . search ( r " (?i) \ Ahttp[s]*:// " , target ) : # 检查目标是否包含协议
target = " http:// %s " % target # 如果没有协议，
infoMsg = " starting crawler for target URL ' %s ' ( %d / %d ) " % ( target , i + 1 , len ( targets ) )
logger . info ( infoMsg )
infoMsg = " starting crawler for target URL ' %s ' ( %d / %d ) " % ( target , i + 1 , len ( targets ) ) # 生成日志信息
logger . info ( infoMsg ) # 记录日志信息
crawl ( target )
except Exception as ex :
if target and not isinstance ( ex , SqlmapUserQuitException ) :
errMsg = " problem occurred while crawling ' %s ' ( ' %s ' ) " % ( target , getSafeExString ( ex ) )
logger . error ( errMsg )
crawl ( target ) # 开始爬取目标
except Exception as ex : # 捕获异常
if target and not isinstance ( ex , SqlmapUserQuitException ) : # 检查异常类型
errMsg = " problem occurred while crawling ' %s ' ( ' %s ' ) " % ( target , getSafeExString ( ex ) ) # 生成错误信息
logger . error ( errMsg ) # 记录错误信息
else :
raise
raise # 重新抛出异常
else :
if kb . targets :
start ( )
if kb . targets : # 检查目标集合是否非空
start ( ) # 启动控制器
else :
start ( )
except Exception as ex :
os . _exitcode = 1
start ( ) # 如果没有设置爬取深度和批量文件，则直接启动控制器
except Exception as ex : # 捕获异常
os . _exitcode = 1 # 设置退出码为1
# 如果无法启动新线程，则记录错误信息并退出
if " can ' t start new thread " in getSafeExString ( ex ) :
errMsg = " unable to start new threads. Please check OS (u)limits "
logger . critical ( errMsg )
raise SystemExit
if " can ' t start new thread " in getSafeExString ( ex ) : # 检查异常信息是否包含无法启动新线程
errMsg = " unable to start new threads. Please check OS (u)limits " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
else :
raise
raise # 重新抛出异常
# 捕获并处理各种异常，记录错误信息并退出
except SqlmapUserQuitException :
if not conf . batch :
errMsg = " user quit "
logger . error ( errMsg )
except SqlmapUserQuitException : # 捕获用户主动退出的异常
if not conf . batch : # 检查是否处于批量模式
errMsg = " user quit " # 生成错误信息
logger . error ( errMsg ) # 记录错误信息
except ( SqlmapSilentQuitException , bdb . BdbQuit ) :
pass
except ( SqlmapSilentQuitException , bdb . BdbQuit ) : # 捕获静默退出或调试器退出的异常
pass # 不处理，直接跳过
except SqlmapShellQuitException :
cmdLineOptions . sqlmapShell = False
except SqlmapShellQuitException : # 捕获SQLMap Shell退出的异常
cmdLineOptions . sqlmapShell = False # 设置SQLMap Shell选项为False
except SqlmapBaseException as ex :
errMsg = getSafeExString ( ex )
logger . critical ( errMsg )
except SqlmapBaseException as ex : # 捕获SQLMap基础异常
errMsg = getSafeExString ( ex ) # 获取安全的异常信息
logger . critical ( errMsg ) # 记录严重错误信息
os . _exitcode = 1
os . _exitcode = 1 # 设置退出码为1
raise SystemExit
raise SystemExit # 退出程序
except KeyboardInterrupt :
except KeyboardInterrupt : # 捕获键盘中断异常（ ）
try :
print ( )
except IOError :
pass
print ( ) # 打印空行
except IOError : # 捕获IO错误
pass # 不处理，直接跳过
except EOFError :
print ( )
except EOFError : # 捕获文件结束异常（ ）
print ( ) # 打印空行
errMsg = " exit "
logger . error ( errMsg )
errMsg = " exit " # 生成错误信息
logger . error ( errMsg ) # 记录错误信息
except SystemExit as ex :
os . _exitcode = ex . code or 0
except SystemExit as ex : # 捕获系统退出异常
os . _exitcode = ex . code or 0 # 设置退出码为异常代码或0
except :
print ( )
errMsg = unhandledExceptionMessage ( )
excMsg = traceback . format_exc ( )
valid = checkSums ( )
except : # 捕获所有其他异常
print ( ) # 打印空行
errMsg = unhandledExceptionMessage ( ) # 获取未处理异常的信息
excMsg = traceback . format_exc ( ) # 获取异常的详细堆栈信息
valid = checkSums ( ) # 检查校验和
os . _exitcode = 255
os . _exitcode = 255 # 设置退出码为255
# 如果异常信息中包含内存耗尽相关的消息，则记录内存耗尽错误并退出
if any ( _ in excMsg for _ in ( " MemoryError " , " Cannot allocate memory " ) ) :
errMsg = " memory exhaustion detected "
logger . critical ( errMsg )
raise SystemExit
if any ( _ in excMsg for _ in ( " MemoryError " , " Cannot allocate memory " ) ) : # 检查异常信息是否包含内存耗尽
errMsg = " memory exhaustion detected " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果异常信息中包含磁盘空间不足相关的消息，则记录磁盘空间错误并退出
elif any ( _ in excMsg for _ in ( " No space left " , " Disk quota exceeded " , " Disk full while accessing " ) ) :
errMsg = " no space left on output device "
logger . critical ( errMsg )
raise SystemExit
elif any ( _ in excMsg for _ in ( " No space left " , " Disk quota exceeded " , " Disk full while accessing " ) ) : # 检查异常信息是否包含磁盘空间不足
errMsg = " no space left on output device " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果异常信息中包含分页文件空间不足的消息，则记录分页文件空间错误并退出
elif any ( _ in excMsg for _ in ( " The paging file is too small " , ) ) :
errMsg = " no space left for paging file "
logger . critical ( errMsg )
raise SystemExit
elif any ( _ in excMsg for _ in ( " The paging file is too small " , ) ) : # 检查异常信息是否包含分页文件空间不足
errMsg = " no space left for paging file " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果异常信息中包含权限拒绝和Metasploit相关的消息，
elif all ( _ in excMsg for _ in ( " Access is denied " , " subprocess " , " metasploit " ) ) :
errMsg = " permission error occurred while running Metasploit "
logger . critical ( errMsg )
raise SystemExit
elif all ( _ in excMsg for _ in ( " Access is denied " , " subprocess " , " metasploit " ) ) : # 检查异常信息是否包含Metasploit权限错误
errMsg = " permission error occurred while running Metasploit " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果异常信息中包含权限拒绝和metasploit相关的消息，
elif all ( _ in excMsg for _ in ( " Permission denied " , " metasploit " ) ) :
errMsg = " permission error occurred while using Metasploit "
logger . critical ( errMsg )
raise SystemExit
elif all ( _ in excMsg for _ in ( " Permission denied " , " metasploit " ) ) : # 检查异常信息是否包含Metasploit权限错误
errMsg = " permission error occurred while using Metasploit " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果异常信息中包含只读文件系统的消息，则记录只读文件系统错误并退出
elif " Read-only file system " in excMsg :
errMsg = " output device is mounted as read-only "
logger . critical ( errMsg )
raise SystemExit
elif " Read-only file system " in excMsg : # 检查异常信息是否包含只读文件系统
errMsg = " output device is mounted as read-only " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果异常信息中包含系统资源不足的消息，则记录资源耗尽错误并退出
elif " Insufficient system resources " in excMsg :
errMsg = " resource exhaustion detected "
logger . critical ( errMsg )
raise SystemExit
elif " Insufficient system resources " in excMsg : # 检查异常信息是否包含系统资源不足
errMsg = " resource exhaustion detected " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果异常信息中包含磁盘I/O错误的消息，
elif " OperationalError: disk I/O error " in excMsg :
errMsg = " I/O error on output device "
logger . critical ( errMsg )
raise SystemExit
elif " OperationalError: disk I/O error " in excMsg : # 检查异常信息是否包含磁盘I/O错误
errMsg = " I/O error on output device " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果异常信息中包含URL违反BIDI规则的消息，
elif " Violation of BIDI " in excMsg :
errMsg = " invalid URL (violation of Bidi IDNA rule - RFC 5893) "
logger . critical ( errMsg )
raise SystemExit
elif " Violation of BIDI " in excMsg : # 检查异常信息是否包含URL违反BIDI规则
errMsg = " invalid URL (violation of Bidi IDNA rule - RFC 5893) " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果异常信息中包含无效IPv6 URL的消息，
elif " Invalid IPv6 URL " in excMsg :
errMsg = " invalid URL ( ' %s ' ) " % excMsg . strip ( ) . split ( ' \n ' ) [ - 1 ]
logger . critical ( errMsg )
raise SystemExit
elif " Invalid IPv6 URL " in excMsg : # 检查异常信息是否包含无效IPv6 URL
errMsg = " invalid URL ( ' %s ' ) " % excMsg . strip ( ) . split ( ' \n ' ) [ - 1 ] # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果异常信息中包含临时文件访问问题的消息，则记录临时文件访问错误并退出
elif " _mkstemp_inner " in excMsg :
errMsg = " there has been a problem while accessing temporary files "
logger . critical ( errMsg )
raise SystemExit
elif " _mkstemp_inner " in excMsg : # 检查异常信息是否包含临时文件访问问题
errMsg = " there has been a problem while accessing temporary files " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果异常信息中包含无法写入临时目录的消息，则记录临时目录写入错误并退出
elif any ( _ in excMsg for _ in ( " tempfile.mkdtemp " , " tempfile.mkstemp " , " tempfile.py " ) ) :
errMsg = " unable to write to the temporary directory ' %s ' . " % tempfile . gettempdir ( )
errMsg + = " Please make sure that your disk is not full and "
errMsg + = " that you have sufficient write permissions to "
errMsg + = " create temporary files and/or directories "
logger . critical ( errMsg )
raise SystemExit
elif any ( _ in excMsg for _ in ( " tempfile.mkdtemp " , " tempfile.mkstemp " , " tempfile.py " ) ) : # 检查异常信息是否包含临时目录写入问题
errMsg = " unable to write to the temporary directory ' %s ' . " % tempfile . gettempdir ( ) # 生成错误信息
errMsg + = " Please make sure that your disk is not full and " # 添加提示信息
errMsg + = " that you have sufficient write permissions to " # 添加提示信息
errMsg + = " create temporary files and/or directories " # 添加提示信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果异常信息中包含权限拒绝的消息，则记录文件访问权限错误并退出
elif " Permission denied: ' " in excMsg :
match = re . search ( r " Permission denied: ' ([^ ' ]*) " , excMsg )
errMsg = " permission error occurred while accessing file ' %s ' " % match . group ( 1 )
logger . critical ( errMsg )
raise SystemExit
elif " Permission denied: ' " in excMsg : # 检查异常信息是否包含权限拒绝
match = re . search ( r " Permission denied: ' ([^ ' ]*) " , excMsg ) # 提取被拒绝访问的文件路径
errMsg = " permission error occurred while accessing file ' %s ' " % match . group ( 1 ) # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果异常信息中包含sqlalchemy包版本问题的消息，
elif all ( _ in excMsg for _ in ( " twophase " , " sqlalchemy " ) ) :
errMsg = " please update the ' sqlalchemy ' package (>= 1.1.11) "
# 由于网络原因，无法解析提供的链接，可能是链接问题或网络问题，请检查链接的合法性并适当重试。
logger . critical ( errMsg )
raise SystemExit
elif all ( _ in excMsg for _ in ( " twophase " , " sqlalchemy " ) ) : # 检查异常信息是否包含sqlalchemy版本问题
errMsg = " please update the ' sqlalchemy ' package (>= 1.1.11) " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果异常信息中包含Python版本问题的消息，
elif " invalid maximum character passed to PyUnicode_New " in excMsg and re . search ( r " \ A3 \ .[34] " , sys . version ) is not None :
errMsg = " please upgrade the Python version (>= 3.5) "
# 由于网络原因，无法解析提供的链接，可能是链接问题或网络问题，请检查链接的合法性并适当重试。
logger . critical ( errMsg )
raise SystemExit
elif " invalid maximum character passed to PyUnicode_New " in excMsg and re . search ( r " \ A3 \ .[34] " , sys . version ) is not None : # 检查异常信息是否包含Python版本问题
errMsg = " please upgrade the Python version (>= 3.5) " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果异常信息中包含PyMySQL包版本问题的消息，
elif all ( _ in excMsg for _ in ( " scramble_caching_sha2 " , " TypeError " ) ) :
errMsg = " please downgrade the ' PyMySQL ' package (=< 0.8.1) "
# 由于网络原因，无法解析提供的链接，可能是链接问题或网络问题，请检查链接的合法性并适当重试。
logger . critical ( errMsg )
raise SystemExit
elif all ( _ in excMsg for _ in ( " scramble_caching_sha2 " , " TypeError " ) ) : # 检查异常信息是否包含PyMySQL版本问题
errMsg = " please downgrade the ' PyMySQL ' package (=< 0.8.1) " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果异常信息中包含Python解
# 假设excMsg是一个包含异常信息的字符串变量
# 检查excMsg是否包含"pymysql"和"configparser"这两个字符串
elif all ( _ in excMsg for _ in ( " pymysql " , " configparser " ) ) :
# 如果都包含，则设置错误信息为检测到'pymsql'的错误初始化（ ）
errMsg = " wrong initialization of ' pymsql ' detected (using Python3 dependencies) "
# 使用logger记录这个严重错误
logger . critical ( errMsg )
# 抛出SystemExit异常，
raise SystemExit
elif all ( _ in excMsg for _ in ( " pymysql " , " configparser " ) ) : # 检查异常信息是否包含pymysql和configparser
errMsg = " wrong initialization of ' pymsql ' detected (using Python3 dependencies) " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 检查excMsg是否包含"ntlm"、"socket.error, err"和"SyntaxError"这三个字符串
elif all ( _ in excMsg for _ in ( " ntlm " , " socket.error, err " , " SyntaxError " ) ) :
# 如果都包含，则设置错误信息为检测到'python-ntlm'的错误初始化（ ）
errMsg = " wrong initialization of ' python-ntlm ' detected (using Python2 syntax) "
# 使用logger记录这个严重错误
logger . critical ( errMsg )
# 抛出SystemExit异常，
raise SystemExit
elif all ( _ in excMsg for _ in ( " ntlm " , " socket.error, err " , " SyntaxError " ) ) : # 检查异常信息是否包含ntlm、socket.error和SyntaxError
errMsg = " wrong initialization of ' python-ntlm ' detected (using Python2 syntax) " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 检查excMsg是否包含"drda"和"to_bytes"这两个字符串
elif all ( _ in excMsg for _ in ( " drda " , " to_bytes " ) ) :
# 如果都包含，则设置错误信息为检测到'drda'的错误初始化（ ）
errMsg = " wrong initialization of ' drda ' detected (using Python3 syntax) "
# 使用logger记录这个严重错误
logger . critical ( errMsg )
# 抛出SystemExit异常，
raise SystemExit
elif all ( _ in excMsg for _ in ( " drda " , " to_bytes " ) ) : # 检查异常信息是否包含drda和to_bytes
errMsg = " wrong initialization of ' drda ' detected (using Python3 syntax) " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 检查excMsg是否包含特定的错误信息，
elif " ' WebSocket ' object has no attribute ' status ' " in excMsg :
# 如果包含，
errMsg = " wrong websocket library detected "
# 添加参考链接到错误信息中
errMsg + = " (Reference: ' https://github.com/sqlmapproject/sqlmap/issues/4572#issuecomment-775041086 ' ) "
# 使用logger记录这个严重错误
logger . critical ( errMsg )
# 抛出SystemExit异常，
raise SystemExit
elif " ' WebSocket ' object has no attribute ' status ' " in excMsg : # 检查异常信息是否包含WebSocket对象缺少status属性
errMsg = " wrong websocket library detected " # 生成错误信息
errMsg + = " (Reference: ' https://github.com/sqlmapproject/sqlmap/issues/4572#issuecomment-775041086 ' ) " # 添加参考链接
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 检查excMsg是否包含特定的错误信息，
elif all ( _ in excMsg for _ in ( " window = tkinter.Tk() " , ) ) :
# 如果包含，
errMsg = " there has been a problem in initialization of GUI interface "
# 添加具体的错误信息到错误消息中
errMsg + = " ( ' %s ' ) " % excMsg . strip ( ) . split ( ' \n ' ) [ - 1 ]
# 使用logger记录这个严重错误
logger . critical ( errMsg )
# 抛出SystemExit异常，
raise SystemExit
elif all ( _ in excMsg for _ in ( " window = tkinter.Tk() " , ) ) : # 检查异常信息是否包含GUI初始化问题
errMsg = " there has been a problem in initialization of GUI interface " # 生成错误信息
errMsg + = " ( ' %s ' ) " % excMsg . strip ( ) . split ( ' \n ' ) [ - 1 ] # 添加具体错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 检查excMsg是否包含特定的错误信息，
elif any ( _ in excMsg for _ in ( " unable to access item ' liveTest ' " , ) ) :
# 如果包含，
errMsg = " detected usage of files from different versions of sqlmap "
# 使用logger记录这个严重错误
logger . critical ( errMsg )
# 抛出SystemExit异常，
raise SystemExit
elif any ( _ in excMsg for _ in ( " unable to access item ' liveTest ' " , ) ) : # 检查异常信息是否包含不同版本sqlmap文件问题
errMsg = " detected usage of files from different versions of sqlmap " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 检查errMsg是否包含特定的错误信息，
elif any ( _ in errMsg for _ in ( " : 9.9.9# " , ) ) :
# 如果包含，则设置错误信息为一个简单的文本
errMsg = " LOL xD "
# 使用logger记录这个严重错误
logger . critical ( errMsg )
# 抛出SystemExit异常，
raise SystemExit
elif any ( _ in errMsg for _ in ( " : 9.9.9# " , ) ) : # 检查错误信息是否包含特定版本号
errMsg = " LOL xD " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 检查是否设置了键盘中断的标记
elif kb . get ( " dumpKeyboardInterrupt " ) :
# 如果设置了， ，
raise SystemExit
elif kb . get ( " dumpKeyboardInterrupt " ) : # 检查是否设置了键盘中断标记
raise SystemExit # 退出程序
# 检查excMsg是否包含特定的错误信息，
elif any ( _ in excMsg for _ in ( " Broken pipe " , ) ) :
# 如果包含， ，
raise SystemExit
elif any ( _ in excMsg for _ in ( " Broken pipe " , ) ) : # 检查异常信息是否包含Broken pipe
raise SystemExit # 退出程序
# 检查valid变量是否为False
elif valid is False :
# 如果为False，
errMsg = " code checksum failed (turning off automatic issue creation). "
errMsg + = " You should retrieve the latest development version from official GitHub "
errMsg + = " repository at ' %s ' " % GIT_PAGE
# 使用logger记录这个严重错误
logger . critical ( errMsg )
# 打印空行
print ( )
# 将错误信息输出到标准输出
dataToStdout ( excMsg )
# 抛出SystemExit异常，
raise SystemExit
elif valid is False : # 检查校验和是否无效
errMsg = " code checksum failed (turning off automatic issue creation). " # 生成错误信息
errMsg + = " You should retrieve the latest development version from official GitHub " # 添加提示信息
errMsg + = " repository at ' %s ' " % GIT_PAGE # 添加GitHub仓库链接
logger . critical ( errMsg ) # 记录严重错误信息
print ( ) # 打印空行
dataToStdout ( excMsg ) # 输出异常信息到标准输出
raise SystemExit # 退出程序
# 检查errMsg和excMsg组合后是否包含特定的错误信息，
elif any ( _ in " %s \n %s " % ( errMsg , excMsg ) for _ in ( " tamper/ " , " waf/ " , " --engagement-dojo " ) ) :
# 如果包含，
logger . critical ( errMsg )
# 打印空行
print ( )
# 将错误信息输出到标准输出
dataToStdout ( excMsg )
# 抛出SystemExit异常，
raise SystemExit
elif any ( _ in " %s \n %s " % ( errMsg , excMsg ) for _ in ( " tamper/ " , " waf/ " , " --engagement-dojo " ) ) : # 检查错误信息是否包含特定路径或参数
logger . critical ( errMsg ) # 记录严重错误信息
print ( ) # 打印空行
dataToStdout ( excMsg ) # 输出异常信息到标准输出
raise SystemExit # 退出程序
# 检查错误信息中是否包含特定的错误关键词，如果包含，则认为是运行时环境错误，并提取错误信息的最后部分。
elif any ( _ in excMsg for _ in ( " ImportError " , " ModuleNotFoundError " , " <frozen " , " Can ' t find file for module " , " SAXReaderNotAvailable " , " <built-in function compile> returned NULL without setting an exception " , " source code string cannot contain null bytes " , " No module named " , " tp_name field " , " module ' sqlite3 ' has no attribute ' OperationalError ' " ) ) :
errMsg = " invalid runtime environment ( ' %s ' ) " % excMsg . split ( " Error: " ) [ - 1 ] . strip ( )
logger . critical ( errMsg )
raise SystemExit
elif any ( _ in excMsg for _ in ( " ImportError " , " ModuleNotFoundError " , " <frozen " , " Can ' t find file for module " , " SAXReaderNotAvailable " , " <built-in function compile> returned NULL without setting an exception " , " source code string cannot contain null bytes " , " No module named " , " tp_name field " , " module ' sqlite3 ' has no attribute ' OperationalError ' " ) ) : # 检查异常信息是否包含运行时环境错误
errMsg = " invalid runtime environment ( ' %s ' ) " % excMsg . split ( " Error: " ) [ - 1 ] . strip ( ) # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果错误信息包含非ASCII字符编码错误， ，
elif all ( _ in excMsg for _ in ( " SyntaxError: Non-ASCII character " , " .py on line " , " but no encoding declared " ) ) :
errMsg = " invalid runtime environment ( ' %s ' ) " % excMsg . split ( " Error: " ) [ - 1 ] . strip ( )
logger . critical ( errMsg )
raise SystemExit
elif all ( _ in excMsg for _ in ( " SyntaxError: Non-ASCII character " , " .py on line " , " but no encoding declared " ) ) : # 检查异常信息是否包含非ASCII字符编码错误
errMsg = " invalid runtime environment ( ' %s ' ) " % excMsg . split ( " Error: " ) [ - 1 ] . strip ( ) # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果错误信息包含文件不存在的错误，则认为是运行时环境错误，并提取错误信息的最后部分。
elif all ( _ in excMsg for _ in ( " FileNotFoundError: [Errno 2] No such file or directory " , " cwd = os.getcwd() " ) ) :
errMsg = " invalid runtime environment ( ' %s ' ) " % excMsg . split ( " Error: " ) [ - 1 ] . strip ( )
logger . critical ( errMsg )
raise SystemExit
elif all ( _ in excMsg for _ in ( " FileNotFoundError: [Errno 2] No such file or directory " , " cwd = os.getcwd() " ) ) : # 检查异常信息是否包含文件不存在错误
errMsg = " invalid runtime environment ( ' %s ' ) " % excMsg . split ( " Error: " ) [ - 1 ] . strip ( ) # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果错误信息包含权限错误，则提示用户可能存在权限问题，并建议重新运行程序时禁用多进程。
elif all ( _ in excMsg for _ in ( " PermissionError: [WinError 5] " , " multiprocessing " ) ) :
errMsg = " there is a permission problem in running multiprocessing on this system. "
errMsg + = " Please rerun with ' --disable-multi ' "
logger . critical ( errMsg )
raise SystemExit
elif all ( _ in excMsg for _ in ( " PermissionError: [WinError 5] " , " multiprocessing " ) ) : # 检查异常信息是否包含权限错误
errMsg = " there is a permission problem in running multiprocessing on this system. " # 生成错误信息
errMsg + = " Please rerun with ' --disable-multi ' " # 添加建议信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果错误信息包含文件不存在的错误， ，
elif all ( _ in excMsg for _ in ( " No such file " , " _ ' " ) ) :
errMsg = " corrupted installation detected ( ' %s ' ). " % excMsg . strip ( ) . split ( ' \n ' ) [ - 1 ]
errMsg + = " You should retrieve the latest development version from official GitHub "
errMsg + = " repository at ' %s ' " % GIT_PAGE
logger . critical ( errMsg )
raise SystemExit
elif all ( _ in excMsg for _ in ( " No such file " , " _ ' " ) ) : # 检查异常信息是否包含文件不存在错误
errMsg = " corrupted installation detected ( ' %s ' ). " % excMsg . strip ( ) . split ( ' \n ' ) [ - 1 ] # 生成错误信息
errMsg + = " You should retrieve the latest development version from official GitHub " # 添加提示信息
errMsg + = " repository at ' %s ' " % GIT_PAGE # 添加GitHub仓库链接
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果错误信息包含尝试在生产环境中运行开发测试的错误，则输出相应的错误信息。
elif all ( _ in excMsg for _ in ( " No such file " , " sqlmap.conf " , " Test " ) ) :
errMsg = " you are trying to run (hidden) development tests inside the production environment "
logger . critical ( errMsg )
raise SystemExit
elif all ( _ in excMsg for _ in ( " No such file " , " sqlmap.conf " , " Test " ) ) : # 检查异常信息是否包含在生产环境中运行开发测试的错误
errMsg = " you are trying to run (hidden) development tests inside the production environment " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果错误信息包含HTTP NTLM认证相关的兼容性问题， ，
elif all ( _ in excMsg for _ in ( " HTTPNtlmAuthHandler " , " ' str ' object has no attribute ' decode ' " ) ) :
errMsg = " package ' python-ntlm ' has a known compatibility issue with the "
errMsg + = " Python 3 (Reference: ' https://github.com/mullender/python-ntlm/pull/61')" "
logger . critical ( errMsg )
raise SystemExit
elif all ( _ in excMsg for _ in ( " HTTPNtlmAuthHandler " , " ' str ' object has no attribute ' decode ' " ) ) : # 检查异常信息是否包含HTTP NTLM认证兼容性问题
errMsg = " package ' python-ntlm ' has a known compatibility issue with the " # 生成错误信息
errMsg + = " Python 3 (Reference: ' https://github.com/mullender/python-ntlm/pull/61')" " # 添加参考链接
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果错误信息包含字典对象属性错误，并且与枚举相关，则提示用户可能存在枚举问题，并建议重新运行程序时刷新会话。
elif " ' DictObject ' object has no attribute ' " in excMsg and all ( _ in errMsg for _ in ( " (fingerprinted) " , " (identified) " ) ) :
errMsg = " there has been a problem in enumeration. "
errMsg + = " Because of a considerable chance of false-positive case "
errMsg + = " you are advised to rerun with switch ' --flush-session ' "
logger . critical ( errMsg )
raise SystemExit
elif " ' DictObject ' object has no attribute ' " in excMsg and all ( _ in errMsg for _ in ( " (fingerprinted) " , " (identified) " ) ) : # 检查异常信息是否包含字典对象属性错误
errMsg = " there has been a problem in enumeration. " # 生成错误信息
errMsg + = " Because of a considerable chance of false-positive case " # 添加提示信息
errMsg + = " you are advised to rerun with switch ' --flush-session ' " # 添加建议信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果错误信息包含数据库磁盘映像损坏的错误，则提示用户会话文件可能损坏，并建议刷新会话。
elif " database disk image is malformed " in excMsg :
errMsg = " local session file seems to be malformed. Please rerun with ' --flush-session ' "
logger . critical ( errMsg )
raise SystemExit
elif " database disk image is malformed " in excMsg : # 检查异常信息是否包含数据库磁盘映像损坏
errMsg = " local session file seems to be malformed. Please rerun with ' --flush-session ' " # 生成错误信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果错误信息包含模块属性错误，则认为是运行时环境错误，并提取错误信息的最后部分。
elif " AttributeError: ' module ' object has no attribute ' F_GETFD ' " in excMsg :
errMsg = " invalid runtime ( \" %s \" ) " % excMsg . split ( " Error: " ) [ - 1 ] . strip ( )
errMsg + = " (Reference: ' https://stackoverflow.com/a/38841364' & ' https://bugs.python.org/issue24944#msg249231')" "
logger . critical ( errMsg )
raise SystemExit
elif " AttributeError: ' module ' object has no attribute ' F_GETFD ' " in excMsg : # 检查异常信息是否包含模块属性错误
errMsg = " invalid runtime ( \" %s \" ) " % excMsg . split ( " Error: " ) [ - 1 ] . strip ( ) # 生成错误信息
errMsg + = " (Reference: ' https://stackoverflow.com/a/38841364' & ' https://bugs.python.org/issue24944#msg249231')" " # 添加参考链接
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 如果错误信息包含marshal数据错误， ，
elif " bad marshal data (unknown type code) " in excMsg :
match = re . search ( r " \ s*(.+) \ s+ValueError " , excMsg )
errMsg = " one of your .pyc files are corrupted %s " % ( " ( ' %s ' ) " % match . group ( 1 ) if match else " " )
errMsg + = " . Please delete .pyc files on your system to fix the problem "
logger . critical ( errMsg )
raise SystemExit
for match in re . finditer ( r ' File " (.+?) " , line ' , excMsg ) :
file_ = match . group ( 1 )
elif " bad marshal data (unknown type code) " in excMsg : # 检查异常信息是否包含marshal数据错误
match = re . search ( r " \ s*(.+) \ s+ValueError " , excMsg ) # 提取损坏的文件路径
errMsg = " one of your .pyc files are corrupted %s " % ( " ( ' %s ' ) " % match . group ( 1 ) if match else " " ) # 生成错误信息
errMsg + = " . Please delete .pyc files on your system to fix the problem " # 添加建议信息
logger . critical ( errMsg ) # 记录严重错误信息
raise SystemExit # 退出程序
# 遍历异常信息中的文件路径，并对其进行规范化处理
for match in re . finditer ( r ' File " (.+?) " , line ' , excMsg ) : # 查找异常信息中的文件路径
file_ = match . group ( 1 ) # 提取文件路径
try :
file_ = os . path . relpath ( file_ , os . path . dirname ( __file__ ) )
except ValueError :
pass
file_ = file_ . replace ( " \\ " , ' / ' )
if " ../ " in file_ :
file_ = re . sub ( r " ( \ . \ ./)+ " , ' / ' , file_ )
file_ = os . path . relpath ( file_ , os . path . dirname ( __file__ ) ) # 将文件路径转换为相对路径
except ValueError : # 捕获路径转换错误
pass # 忽略错误
file_ = file_ . replace ( " \\ " , ' / ' ) # 将路径中的反斜杠替换为正斜杠
if " ../ " in file_ : # 检查路径中是否包含上级目录
file_ = re . sub ( r " ( \ . \ ./)+ " , ' / ' , file_ ) # 替换上级目录为单斜杠
else :
file_ = file_ . lstrip ( ' / ' )
file_ = re . sub ( r " / { 2,} " , ' / ' , file_ )
excMsg = excMsg . replace ( match . group ( 1 ) , file_ )
file_ = file_ . lstrip ( ' / ' ) # 去除路径开头的斜杠
file_ = re . sub ( r " / { 2,} " , ' / ' , file_ ) # 将多个斜杠替换为单斜杠
excMsg = excMsg . replace ( match . group ( 1 ) , file_ ) # 更新异常信息中的文件路径
errMsg = maskSensitiveData ( errMsg )
excMsg = maskSensitiveData ( excMsg )
# 对错误信息和异常信息进行敏感数据掩码处理
errMsg = maskSensitiveData ( errMsg ) # 掩码处理错误信息中的敏感数据
excMsg = maskSensitiveData ( excMsg ) # 掩码处理异常信息中的敏感数据
if conf . get ( " api " ) or not valid :
logger . critical ( " %s \n %s " % ( errMsg , excMsg ) )
# 如果配置了API或校验和无效，
if conf . get ( " api " ) or not valid : # 检查是否配置了API或校验和无效
logger . critical ( " %s \n %s " % ( errMsg , excMsg ) ) # 记录严重错误信息和异常信息
else :
logger . critical ( errMsg )
dataToStdout ( " %s \n " % setColor ( excMsg . strip ( ) , level = logging . CRITICAL ) )
createGithubIssue ( errMsg , excMsg )
logger . critical ( errMsg ) # 记录严重错误信息
dataToStdout ( " %s \n " % setColor ( excMsg . strip ( ) , level = logging . CRITICAL ) ) # 输出带颜色的异常信息到标准输出
createGithubIssue ( errMsg , excMsg ) # 创建GitHub问题
finally :
kb . threadContinue = False
finally : # 无论是否发生异常，最终都会执行的代码块
kb . threadContinue = False # 设置线程继续标志为False
if ( getDaysFromLastUpdate ( ) or 0 ) > LAST_UPDATE_NAGGING_DAYS :
warnMsg = " your sqlmap version is outdated "
logger . warning ( warnMsg )
# 如果距离上次更新的天数超过指定值，则提示用户版本过时
if ( getDaysFromLastUpdate ( ) or 0 ) > LAST_UPDATE_NAGGING_DAYS : # 检查距离上次更新的天数
warnMsg = " your sqlmap version is outdated " # 生成警告信息
logger . warning ( warnMsg ) # 记录警告信息
if conf . get ( " showTime " ) :
dataToStdout ( " \n [*] ending @ %s \n \n " % time . strftime ( " %X / % Y- % m- %d / " ) , forceOutput = True )
# 如果配置了显示时间，则输出结束时间
if conf . get ( " showTime " ) : # 检查是否配置了显示时间
dataToStdout ( " \n [*] ending @ %s \n \n " % time . strftime ( " %X / % Y- % m- %d / " ) , forceOutput = True ) # 输出结束时间
kb . threadException = True
kb . threadException = True # 设置线程异常标志为True
if kb . get ( " tempDir " ) :
for prefix in ( MKSTEMP_PREFIX . IPC , MKSTEMP_PREFIX . TESTING , MKSTEMP_PREFIX . COOKIE_JAR , MKSTEMP_PREFIX . BIG_ARRAY ) :
for filepath in glob . glob ( os . path . join ( kb . tempDir , " %s * " % prefix ) ) :
# 如果存在临时目录，则清理临时文件
if kb . get ( " tempDir " ) : # 检查是否存在临时目录
for prefix in ( MKSTEMP_PREFIX . IPC , MKSTEMP_PREFIX . TESTING , MKSTEMP_PREFIX . COOKIE_JAR , MKSTEMP_PREFIX . BIG_ARRAY ) : # 遍历临时文件前缀
for filepath in glob . glob ( os . path . join ( kb . tempDir , " %s * " % prefix ) ) : # 查找匹配的临时文件
try :
os . remove ( filepath )
except OSError :
pass
os . remove ( filepath ) # 删除临时文件
except OSError : # 捕获文件删除错误
pass # 忽略错误
if not filterNone ( filepath for filepath in glob . glob ( os . path . join ( kb . tempDir , ' * ' ) ) if not any ( filepath . endswith ( _ ) for _ in ( " .lock " , " .exe " , " .so " , ' _ ' ) ) ) : # ignore junk files
# 如果临时目录中没有其他文件，则删除临时目录
if not filterNone ( filepath for filepath in glob . glob ( os . path . join ( kb . tempDir , ' * ' ) ) if not any ( filepath . endswith ( _ ) for _ in ( " .lock " , " .exe " , " .so " , ' _ ' ) ) ) : # 检查临时目录是否为空
try :
shutil . rmtree ( kb . tempDir , ignore_errors = True )
except OSError :
pass
shutil . rmtree ( kb . tempDir , ignore_errors = True ) # 删除临时目录
except OSError : # 捕获目录删除错误
pass # 忽略错误
if conf . get ( " hashDB " ) :
conf . hashDB . flush ( True )
