Yasso/cmd/mysql.go

package cmd

import (
	"Yasso/config"
	"context"
	"database/sql"
	"fmt"
	_ "github.com/denisenkom/go-mssqldb"
	"github.com/go-sql-driver/mysql"
	_ "github.com/go-sql-driver/mysql"
	_ "github.com/lib/pq"
	"github.com/spf13/cobra"
	"net"
	"time"
)

var MysqlCmd = &cobra.Command{
	Use: "mysql",
	Short: "MYSQL burst module and extend tools (support proxy)",
	Run: func(cmd *cobra.Command, args []string) {
		if Hosts == "" && ConnHost == ""{
			_ = cmd.Help()
		}else{
			BruteMysqlByUser()
		}
	},
}

func BruteMysqlByUser(){
	if BrutePort == 0 {
		BrutePort = 3306
	}
	var ips []string
	var err error
	if Hosts != "" && ConnHost == ""{
		ips,err = ResolveIPS(Hosts)
		if err != nil {
			Println(fmt.Sprintf("resolve hosts address failed %v",err))
			return
		}
		if BruteFlag == true {
			users,pass := ReadTextToDic("mysql",UserDic,PassDic)
			Println(Clearln+"[*] Brute Module [mysql]")
			Println(fmt.Sprintf(Clearln + "[*] Have [user:%v] [pass:%v] [request:%v]",len(users),len(pass),len(users) * len(pass) * len(ips)))
			SwitchBurp("mysql",users,pass,ips,BrutePort,Runtime,TimeDuration,"")
		}else{
			Println(Clearln + "[*] May be you want to brute? try to add --crack")
		}
	}
	if Hosts == "" && ConnHost != ""{
		if SQLCommand == "" && SQLShellBool == false {
			Println("[*] try to add -C to exec sql command or -shell")
			return
		}
		if SQLCommand != "" && SQLShellBool == false {
			db,status,err := MySQLConn(config.HostIn{Host: ConnHost,Port: BrutePort,TimeOut: TimeDuration},LoginUser,LoginPass)
			if err != nil {
				Println("mysql conn failed")
				return
			}
			if status == true {
				r,err := SQLExecute(db,SQLCommand)
				if err != nil {
					Println(fmt.Sprintf("sql execute failed %v",err))
					return
				}
				Println(r.String())
			}
		}
		if SQLCommand == "" && SQLShellBool == true {
			db,status,err := MySQLConn(config.HostIn{Host: ConnHost,Port: BrutePort,TimeOut: TimeDuration},LoginUser,LoginPass)
			if err != nil {
				Println("mysql conn failed")
				return
			}
			if status == true{
				SQLshell(db,"mysql")
			}
		}
	}
}

func init(){
	MysqlCmd.Flags().StringVarP(&SQLCommand,"cmd","C","","mysql sql command")
	MysqlCmd.Flags().StringVar(&ConnHost,"hostname","","Remote Connect a Mysql (brute param need false)")
	MysqlCmd.Flags().StringVar(&LoginUser,"user","","Login ssh username")
	MysqlCmd.Flags().StringVar(&LoginPass,"pass","","Login ssh password")
	MysqlCmd.Flags().BoolVar(&SQLShellBool,"shell",false,"create sql shell to exec sql command")
}

// mysql 连接

func MySQLConn(info config.HostIn,user,pass string)(*sql.DB,bool ,error){
	var flag = false
	address := fmt.Sprintf("%v:%v@tcp(%v:%v)/mysql?charset=utf8&timeout=%v",user,pass,info.Host,info.Port,time.Duration(info.TimeOut))

	mysql.RegisterDialContext("tcp", func(ctx context.Context,network string) (net.Conn, error) {
		return GetConn(network,info.TimeOut)
	})

	db, err := sql.Open("mysql",address)
	if err == nil {
		db.SetConnMaxLifetime(time.Duration(info.TimeOut))
		db.SetConnMaxIdleTime(time.Duration(info.TimeOut))
		//defer db.Close()
		err = db.Ping()
		if err == nil {
			flag = true
		}
	}
	return db,flag,err
}