Class: XspearScan::CallbackErrorPatternMatch

Inherits:

ScanCallbackFunc

• Object
• ScanCallbackFunc
• XspearScan::CallbackErrorPatternMatch

Defined in:

lib/XSpear.rb

Instance Method Summary

• #run ⇒ Object

Methods inherited from ScanCallbackFunc

#initialize

Constructor Details

This class inherits a constructor from XspearScan::ScanCallbackFunc

Instance Method Details

#run ⇒ Object

# File 'lib/XSpear.rb', line 200

def run
  info = "Found"
  if @response.body.to_s.match(/(SQL syntax.*MySQL|Warning.*mysql_.*|MySqlException \(0x|valid MySQL result|check the manual that corresponds to your (MySQL|MariaDB) server version|MySqlClient\.|com\.mysql\.jdbc\.exceptions)/i)
    info = info + "MYSQL Error"
  end
  if @response.body.to_s.match(/(Driver.* SQL[\-\_\ ]*Server|OLE DB.* SQL Server|\bSQL Server.*Driver|Warning.*mssql_.*|\bSQL Server.*[0-9a-fA-F]{8}|[\s\S]Exception.*\WSystem\.Data\.SqlClient\.|[\s\S]Exception.*\WRoadhouse\.Cms\.|Microsoft SQL Native Client.*[0-9a-fA-F]{8})/i)
    info = info + "MSSQL Error"
  end
  if @response.body.to_s.match(/(\bORA-\d{5}|Oracle error|Oracle.*Driver|Warning.*\Woci_.*|Warning.*\Wora_.*)/i)
    info = info + "Oracle Error"
  end
  if @response.body.to_s.match(/(PostgreSQL.*ERROR|Warning.*\Wpg_.*|valid PostgreSQL result|Npgsql\.|PG::SyntaxError:|org\.postgresql\.util\.PSQLException|ERROR:\s\ssyntax error at or near)/i)
    info = info + "Postgres Error"
  end
  if @response.body.to_s.match(/(Microsoft Access (\d+ )?Driver|JET Database Engine|Access Database Engine|ODBC Microsoft Access)/i)
    info = info + "MSAccess Error"
  end
  if @response.body.to_s.match(/(SQLite\/JDBCDriver|SQLite.Exception|System.Data.SQLite.SQLiteException|Warning.*sqlite_.*|Warning.*SQLite3::|\[SQLITE_ERROR\])/i)
    info = info + "SQLite Error"
  end
  if @response.body.to_s.match(/(Warning.*sybase.*|Sybase message|Sybase.*Server message.*|SybSQLException|com\.sybase\.jdbc)/i)
    info = info + "SyBase Error"
  end
  if @response.body.to_s.match(/(Warning.*ingres_|Ingres SQLSTATE|Ingres\W.*Driver)/i)
    info = info + "Ingress Error"
  end

  if info.length > 5
    [true, "#{@info}"]
  else
    [false, "#{@info}"]
  end
end