83 lines
3.0 KiB
Python
Executable File
83 lines
3.0 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
|
|
try:
|
|
import readline
|
|
except ImportError:
|
|
import pyreadline as readline
|
|
|
|
from graphqlmap.attacks import *
|
|
import urllib3
|
|
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
|
|
|
|
|
|
class GraphQLmap(object):
|
|
author = "@pentest_swissky"
|
|
version = "1.1"
|
|
endpoint = "graphql"
|
|
method = "POST"
|
|
args = None
|
|
url = None
|
|
headers = None
|
|
use_json = False
|
|
|
|
def __init__(self, args_graphql):
|
|
print(" _____ _ ____ _ ")
|
|
print(" / ____| | | / __ \| | ")
|
|
print(" | | __ _ __ __ _ _ __ | |__ | | | | | _ __ ___ __ _ _ __ ")
|
|
print(" | | |_ | '__/ _` | '_ \| '_ \| | | | | | '_ ` _ \ / _` | '_ \ ")
|
|
print(" | |__| | | | (_| | |_) | | | | |__| | |____| | | | | | (_| | |_) |")
|
|
print(" \_____|_| \__,_| .__/|_| |_|\___\_\______|_| |_| |_|\__,_| .__/ ")
|
|
print(" | | | | ")
|
|
print(" |_| |_| ")
|
|
print(" " * 30, end='')
|
|
print(f"\033[1mAuthor\033[0m: {self.author} \033[1mVersion\033[0m: {self.version} ")
|
|
self.args = args_graphql
|
|
self.url = args_graphql.url
|
|
self.method = args_graphql.method
|
|
self.headers = None if not args_graphql.headers else json.loads(args_graphql.headers)
|
|
self.use_json = True if args_graphql.use_json else False
|
|
self.proxy = {
|
|
"http" : args_graphql.proxy,
|
|
}
|
|
|
|
while True:
|
|
query = input("GraphQLmap > ")
|
|
cmdlist.append(query)
|
|
if query == "exit" or query == "q":
|
|
exit()
|
|
|
|
elif query == "help":
|
|
display_help()
|
|
|
|
elif query == "debug":
|
|
display_types(self.url, self.method, self.proxy, self.headers, self.use_json)
|
|
|
|
elif query == "dump_via_introspection":
|
|
dump_schema(self.url, self.method, 15, self.proxy, self.headers, self.use_json)
|
|
|
|
elif query == "dump_via_fragment":
|
|
dump_schema(self.url, self.method, 14, self.proxy, self.headers, self.use_json)
|
|
|
|
elif query == "nosqli":
|
|
blind_nosql(self.url, self.method, self.proxy, self.headers, self.use_json)
|
|
|
|
elif query == "postgresqli":
|
|
blind_postgresql(self.url, self.method, self.proxy, self.headers, self.use_json)
|
|
|
|
elif query == "mysqli":
|
|
blind_mysql(self.url, self.method, self.proxy, self.headers, self.use_json)
|
|
|
|
elif query == "mssqli":
|
|
blind_mssql(self.url, self.method, self.proxy, self.headers, self.use_json)
|
|
|
|
else:
|
|
print(self.headers)
|
|
exec_advanced(self.url, self.method, query, self.headers, self.use_json, self.proxy)
|
|
|
|
|
|
if __name__ == "__main__":
|
|
readline.set_completer(auto_completer)
|
|
readline.parse_and_bind("tab: complete")
|
|
args = parse_args()
|
|
GraphQLmap(args)
|