mirror of
https://github.com/projectdiscovery/nuclei.git
synced 2025-12-20 10:55:26 +00:00
4f93520e47
* rebase js-layer PR from @ice3man543 * package restructuring * working * fix duplicated event & matcher status * fix lint error * fix response field * add new functions * multiple minor improvements * fix incorrect stats in js protocol * sort output metadata in cli * remove temp files * remove dead code * add unit and integration test * fix lint error * add jsdoclint using llm * fix error in test * add js lint using llm * generate docs of libs * llm lint * remove duplicated docs * update generated docs * update prompt in doclint * update docs * temp disable version check test * fix unit test and add retry * fix panic in it * update and move jsdocs * updated jsdocs * update docs * update container platform in test * dir restructure and adding docs * add api_reference and remove markdown docs * fix imports * add javascript design and contribution docs * add js protocol documentation * update integration test and docs * update doc ext mdx->md * minor update to docs * new integration test and more * move go libs and add docs * gen new net docs and more * final docs update * add new devtool * use fastdialer * fix build fail * use fastdialer + network sandbox support * add reserved keyword 'Port' * update Port to new syntax * misc update * always enable templatectx in js protocol * move docs to 'js-proto-docs' repo * remove scrapefuncs binary --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
111 lines
3.1 KiB
Go
111 lines
3.1 KiB
Go
package mssql
|
|
|
|
import (
|
|
"context"
|
|
"database/sql"
|
|
"fmt"
|
|
"net"
|
|
"net/url"
|
|
"strings"
|
|
"time"
|
|
|
|
_ "github.com/denisenkom/go-mssqldb"
|
|
"github.com/praetorian-inc/fingerprintx/pkg/plugins/services/mssql"
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/protocols/common/protocolstate"
|
|
)
|
|
|
|
// Client is a client for MS SQL database.
|
|
//
|
|
// Internally client uses denisenkom/go-mssqldb driver.
|
|
type MSSQLClient struct{}
|
|
|
|
// Connect connects to MS SQL database using given credentials.
|
|
//
|
|
// If connection is successful, it returns true.
|
|
// If connection is unsuccessful, it returns false and error.
|
|
//
|
|
// The connection is closed after the function returns.
|
|
func (c *MSSQLClient) Connect(host string, port int, username, password string) (bool, error) {
|
|
return connect(host, port, username, password, "master")
|
|
}
|
|
|
|
// ConnectWithDB connects to MS SQL database using given credentials and database name.
|
|
//
|
|
// If connection is successful, it returns true.
|
|
// If connection is unsuccessful, it returns false and error.
|
|
//
|
|
// The connection is closed after the function returns.
|
|
func (c *MSSQLClient) ConnectWithDB(host string, port int, username, password, dbName string) (bool, error) {
|
|
return connect(host, port, username, password, dbName)
|
|
}
|
|
|
|
func connect(host string, port int, username, password, dbName string) (bool, error) {
|
|
if host == "" || port <= 0 {
|
|
return false, fmt.Errorf("invalid host or port")
|
|
}
|
|
if !protocolstate.IsHostAllowed(host) {
|
|
// host is not valid according to network policy
|
|
return false, protocolstate.ErrHostDenied.Msgf(host)
|
|
}
|
|
|
|
target := net.JoinHostPort(host, fmt.Sprintf("%d", port))
|
|
|
|
connString := fmt.Sprintf("sqlserver://%s:%s@%s?database=%s&connection+timeout=30",
|
|
url.PathEscape(username),
|
|
url.PathEscape(password),
|
|
target,
|
|
dbName)
|
|
|
|
db, err := sql.Open("sqlserver", connString)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
defer db.Close()
|
|
|
|
_, err = db.Exec("select 1")
|
|
if err != nil {
|
|
switch {
|
|
case strings.Contains(err.Error(), "connect: connection refused"):
|
|
fallthrough
|
|
case strings.Contains(err.Error(), "no pg_hba.conf entry for host"):
|
|
fallthrough
|
|
case strings.Contains(err.Error(), "network unreachable"):
|
|
fallthrough
|
|
case strings.Contains(err.Error(), "reset"):
|
|
fallthrough
|
|
case strings.Contains(err.Error(), "i/o timeout"):
|
|
return false, err
|
|
}
|
|
return false, nil
|
|
}
|
|
return true, nil
|
|
}
|
|
|
|
// IsMssql checks if the given host is running MS SQL database.
|
|
//
|
|
// If the host is running MS SQL database, it returns true.
|
|
// If the host is not running MS SQL database, it returns false.
|
|
func (c *MSSQLClient) IsMssql(host string, port int) (bool, error) {
|
|
if !protocolstate.IsHostAllowed(host) {
|
|
// host is not valid according to network policy
|
|
return false, protocolstate.ErrHostDenied.Msgf(host)
|
|
}
|
|
|
|
conn, err := protocolstate.Dialer.Dial(context.TODO(), "tcp", net.JoinHostPort(host, fmt.Sprintf("%d", port)))
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
defer conn.Close()
|
|
|
|
data, check, err := mssql.DetectMSSQL(conn, 5*time.Second)
|
|
if check && err != nil {
|
|
return false, nil
|
|
} else if !check && err != nil {
|
|
return false, err
|
|
}
|
|
if data.Version != "" {
|
|
return true, nil
|
|
}
|
|
return false, nil
|
|
}
|