Class: String

Inherits:
Object
  • Object
show all
Defined in:
lib/ronin/formatting/extensions/sql/string.rb,
lib/ronin/sql/error/extensions/string.rb

Overview

Ronin SQL - A Ronin library providing support for SQL related security tasks.

Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA

Instance Method Summary collapse

Instance Method Details

#sql_decode ⇒ Object

Returns the SQL decoded form of the String.

"'Conan O''Brian'".sql_decode
# => "Conan O'Brian"

"0x2f6574632f706173737764".sql_decode

=> "/etc/passwd"



51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
 
# File 'lib/ronin/formatting/extensions/sql/string.rb', line 51

def sql_decode
  if ((self[0...2] == '0x') && (length % 2 == 0))
    raw = ''

    self[2..-1].scan(/[0-9a-fA-F]{2}/).each do |hex_char|
      raw << hex_char.hex.chr
    end

    return raw
  elsif (self[0..0] == "'" && self[-1..-1] == "'")
    self[1..-2].gsub(/\\'/,"'").gsub(/''/,"'")
  else
    return self
  end
end

#sql_encode ⇒ Object

Returns the SQL hex-string encoded form of the String.

"/etc/passwd".sql_encode
# => "0x2f6574632f706173737764"


30
31
32
33
34
35
36
37
38
39
40
 
# File 'lib/ronin/formatting/extensions/sql/string.rb', line 30

def sql_encode
  return '' if empty?

  hex_string = '0x'

  each_byte do |b|
    hex_string << ('%.2x' % b)
  end

  return hex_string
end

#sql_error(options = {}) ⇒ Object

Returns an SQL error Message using the given options if the String contains a SQL error Pattern. If no SQL error Pattern can be found within the String, nil will be returned.

options may contain the following keys: :dialect:: The SQL dialect whos error messages to test for. :types:: A list of error pattern types to test for.



35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
 
# File 'lib/ronin/sql/error/extensions/string.rb', line 35

def sql_error(options={})
  if options[:dialect]
    patterns = Ronin::SQL::Error.patterns_for_dialect(options[:dialect])
  elsif options[:types]
    patterns = Ronin::SQL::Error.patterns_for(*options[:types])
  else
    patterns = Ronin::SQL::Error.patterns.values
  end

  patterns.each do |pattern|
    if (message = pattern.match(self))
      return message
    end
  end

  return nil
end

#sql_error?(options = {}) ⇒ Boolean

Returns true if a SQL error Pattern can be found within the String using the given options, returns false otherwise.

options may contain the following keys: :dialect:: The SQL dialect whos error messages to test for. :types:: A list of error pattern types to test for.

Returns:

  • (Boolean) 


61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
 
# File 'lib/ronin/sql/error/extensions/string.rb', line 61

def sql_error?(options={})
  if options[:dialect]
    patterns = Ronin::SQL::Error.patterns_for_dialect(options[:dialect])
  elsif options[:types]
    patterns = Ronin::SQL::Error.patterns_for(*options[:types])
  else
    patterns = Ronin::SQL::Error.patterns.values
  end

  patterns.each do |pattern|
    return true if pattern =~ self
  end

  return false
end