Adding support for Apache Ignite (H2 fork)

stamparm · stamparm · commit feb1df6a05ca · 2020-02-03T13:47:31.000+01:00
diff --git a/lib/core/dicts.py b/lib/core/dicts.py
@@ -247,7 +247,7 @@
     DBMS.PRESTO: "FROM_HEX(NULL)",
     DBMS.ALTIBASE: "TDESENCRYPT(NULL,NULL)",
     DBMS.MIMERSQL: "ASCII_CHAR(256)",
-    DBMS.CRATEDB: "(NULL~NULL)",
+    DBMS.CRATEDB: "MD5(NULL~NULL)",  # Note: NULL~NULL also being evaluated on H2 and Ignite
     DBMS.CUBRID: "(NULL SETEQ NULL)",
 }
 
diff --git a/lib/core/enums.py b/lib/core/enums.py
@@ -88,6 +88,7 @@ class FORK(object):
     REDSHIFT = "Amazon Redshift"
     GREENPLUM = "Greenplum"
     DRIZZLE = "Drizzle"
+    IGNITE = "Apache Ignite"
 
 class CUSTOM_LOGGING(object):
     PAYLOAD = 9
diff --git a/lib/core/settings.py b/lib/core/settings.py
@@ -18,7 +18,7 @@
 from thirdparty.six import unichr as _unichr
 
 # sqlmap version (<major>.<minor>.<month>.<monthly commit>)
-VERSION = "1.4.2.10"
+VERSION = "1.4.2.11"
 TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
 TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
 VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)
@@ -257,7 +257,7 @@
 SYBASE_SYSTEM_DBS = ("master", "model", "sybsystemdb", "sybsystemprocs")
 DB2_SYSTEM_DBS = ("NULLID", "SQLJ", "SYSCAT", "SYSFUN", "SYSIBM", "SYSIBMADM", "SYSIBMINTERNAL", "SYSIBMTS", "SYSPROC", "SYSPUBLIC", "SYSSTAT", "SYSTOOLS")
 HSQLDB_SYSTEM_DBS = ("INFORMATION_SCHEMA", "SYSTEM_LOB")
-H2_SYSTEM_DBS = ("INFORMATION_SCHEMA",)
+H2_SYSTEM_DBS = ("INFORMATION_SCHEMA",) + ("IGNITE", "ignite-sys-cache")
 INFORMIX_SYSTEM_DBS = ("sysmaster", "sysutils", "sysuser", "sysadmin")
 MONETDB_SYSTEM_DBS = ("tmp", "json", "profiler")
 DERBY_SYSTEM_DBS = ("NULLID", "SQLJ", "SYS", "SYSCAT", "SYSCS_DIAG", "SYSCS_UTIL", "SYSFUN", "SYSIBM", "SYSPROC", "SYSSTAT")
@@ -267,7 +267,7 @@
 ALTIBASE_SYSTEM_DBS = ("SYSTEM_",)
 MIMERSQL_SYSTEM_DBS = ("information_schema", "SYSTEM",)
 CRATEDB_SYSTEM_DBS = ("information_schema", "pg_catalog", "sys")
-CUBRID_SYSTEM_DBS = ("",)
+CUBRID_SYSTEM_DBS = ("DBA",)
 
 # Note: (<regular>) + (<forks>)
 MSSQL_ALIASES = ("microsoft sql server", "mssqlserver", "mssql", "ms")
diff --git a/plugins/dbms/h2/fingerprint.py b/plugins/dbms/h2/fingerprint.py
@@ -7,10 +7,14 @@
 
 from lib.core.common import Backend
 from lib.core.common import Format
+from lib.core.common import hashDBRetrieve
+from lib.core.common import hashDBWrite
 from lib.core.data import conf
 from lib.core.data import kb
 from lib.core.data import logger
 from lib.core.enums import DBMS
+from lib.core.enums import FORK
+from lib.core.enums import HASHDB_KEYS
 from lib.core.session import setDbms
 from lib.core.settings import H2_ALIASES
 from lib.request import inject
@@ -21,6 +25,16 @@ def __init__(self):
         GenericFingerprint.__init__(self, DBMS.H2)
 
     def getFingerprint(self):
+        fork = hashDBRetrieve(HASHDB_KEYS.DBMS_FORK)
+
+        if fork is None:
+            if inject.checkBooleanExpression("EXISTS(SELECT * FROM INFORMATION_SCHEMA.SCHEMATA WHERE SCHEMA_NAME='IGNITE')"):
+                fork = FORK.IGNITE
+            else:
+                fork = ""
+
+            hashDBWrite(HASHDB_KEYS.DBMS_FORK, fork)
+
         value = ""
         wsOsFp = Format.getOs("web server", kb.headersFp)
 
@@ -37,6 +51,8 @@ def getFingerprint(self):
 
         if not conf.extensiveFp:
             value += DBMS.H2
+            if fork:
+                value += " (%s fork)" % fork
             return value
 
         actVer = Format.getDbms()

Original file line number	Diff line number	Diff line change
`@@ -247,7 +247,7 @@`
`247`	`247`	`DBMS.PRESTO: "FROM_HEX(NULL)",`
`248`	`248`	`DBMS.ALTIBASE: "TDESENCRYPT(NULL,NULL)",`
`249`	`249`	`DBMS.MIMERSQL: "ASCII_CHAR(256)",`
`250`		`- DBMS.CRATEDB: "(NULL~NULL)",`
	`250`	`+ DBMS.CRATEDB: "MD5(NULL~NULL)", # Note: NULL~NULL also being evaluated on H2 and Ignite`
`251`	`251`	`DBMS.CUBRID: "(NULL SETEQ NULL)",`
`252`	`252`	`}`
`253`	`253`