如何利用sqlmapapi发起扫描

help          显示帮助信息new ARGS      开启一个新的扫描任务use TASKID    切换taskid data   获取当前任务返回的数据log           获取当前任务的扫描日志status        获取当前任务的扫描状态option OPTION 获取当前任务的选项options       获取当前任务的所有配置信息stop          停止当前任务 kill          杀死当前任务list          显示所有任务列表flush         清空所有任务exit          退出客户端

@get("/task/new")def task_new():    """    Create a new task    """    taskid = encodeHex(os.urandom(8), binary=False)    remote_addr = request.remote_addr     DataStore.tasks[taskid] = Task(taskid, remote_addr)     logger.debug("Created new task: '%s'" % taskid)    return jsonize({"success": True, "taskid": taskid})

@get("/task/<taskid>/delete")def task_delete(taskid):    """    Delete an existing task    """    if taskid in DataStore.tasks:        DataStore.tasks.pop(taskid)         logger.debug("(%s) Deleted task" % taskid)        return jsonize({"success": True})    else:        response.status = 404        logger.warning("[%s] Non-existing task ID provided to task_delete()" % taskid)        return jsonize({"success": False, "message": "Non-existing task ID"})

@post("/option/<taskid>/set")def option_set(taskid):    """    Set value of option(s) for a certain task ID    """     if taskid not in DataStore.tasks:        logger.warning("[%s] Invalid task ID provided to option_set()" % taskid)        return jsonize({"success": False, "message": "Invalid task ID"})     if request.json is None:        logger.warning("[%s] Invalid JSON options provided to option_set()" % taskid)        return jsonize({"success": False, "message": "Invalid JSON options"})     for option, value in request.json.items():        DataStore.tasks[taskid].set_option(option, value)     logger.debug("(%s) Requested to set options" % taskid)    return jsonize({"success": True})

@post("/scan/<taskid>/start")def scan_start(taskid):    """    Launch a scan    """     if taskid not in DataStore.tasks:        logger.warning("[%s] Invalid task ID provided to scan_start()" % taskid)        return jsonize({"success": False, "message": "Invalid task ID"})     if request.json is None:        logger.warning("[%s] Invalid JSON options provided to scan_start()" % taskid)        return jsonize({"success": False, "message": "Invalid JSON options"})     # Initialize sqlmap engine's options with user's provided options, if any    for option, value in request.json.items():        DataStore.tasks[taskid].set_option(option, value)     # Launch sqlmap engine in a separate process    DataStore.tasks[taskid].engine_start()     logger.debug("(%s) Started scan" % taskid)    return jsonize({"success": True, "engineid": DataStore.tasks[taskid].engine_get_id()})

@get("/scan/<taskid>/stop")def scan_stop(taskid):    """    Stop a scan    """     if (taskid not in DataStore.tasks or DataStore.tasks[taskid].engine_process() is None or DataStore.tasks[taskid].engine_has_terminated()):        logger.warning("[%s] Invalid task ID provided to scan_stop()" % taskid)        return jsonize({"success": False, "message": "Invalid task ID"})     DataStore.tasks[taskid].engine_stop()     logger.debug("(%s) Stopped scan" % taskid)    return jsonize({"success": True})

@get("/scan/<taskid>/kill")def scan_kill(taskid):    """    Kill a scan    """     if (taskid not in DataStore.tasks or DataStore.tasks[taskid].engine_process() is None or DataStore.tasks[taskid].engine_has_terminated()):        logger.warning("[%s] Invalid task ID provided to scan_kill()" % taskid)        return jsonize({"success": False, "message": "Invalid task ID"})     DataStore.tasks[taskid].engine_kill()     logger.debug("(%s) Killed scan" % taskid)    return jsonize({"success": True})

@get("/scan/<taskid>/status")def scan_status(taskid):    """    Returns status of a scan    """     if taskid not in DataStore.tasks:        logger.warning("[%s] Invalid task ID provided to scan_status()" % taskid)        return jsonize({"success": False, "message": "Invalid task ID"})     if DataStore.tasks[taskid].engine_process() is None:        status = "not running"    else:        status = "terminated" if DataStore.tasks[taskid].engine_has_terminated() is True else "running"     logger.debug("(%s) Retrieved scan status" % taskid)    return jsonize({        "success": True,        "status": status,        "returncode": DataStore.tasks[taskid].engine_get_returncode()    })

@get("/scan/<taskid>/data")def scan_data(taskid):    """    Retrieve the data of a scan    """     json_data_message = list()    json_errors_message = list()     if taskid not in DataStore.tasks:        logger.warning("[%s] Invalid task ID provided to scan_data()" % taskid)        return jsonize({"success": False, "message": "Invalid task ID"})     # Read all data from the IPC database for the taskid    for status, content_type, value in DataStore.current_db.execute("SELECT status, content_type, value FROM data WHERE taskid = ? ORDER BY id ASC", (taskid,)):        json_data_message.append({"status": status, "type": content_type, "value": dejsonize(value)})     # Read all error messages from the IPC database    for error in DataStore.current_db.execute("SELECT error FROM errors WHERE taskid = ? ORDER BY id ASC", (taskid,)):        json_errors_message.append(error)     logger.debug("(%s) Retrieved scan data and error messages" % taskid)    return jsonize({"success": True, "data": json_data_message, "error": json_errors_message})

@get("/admin/list")@get("/admin/<token>/list")def task_list(token=None):    """    Pull task list    """    tasks = {}     for key in DataStore.tasks:        if is_admin(token) or DataStore.tasks[key].remote_addr == request.remote_addr:            tasks[key] = dejsonize(scan_status(key))["status"]     logger.debug("(%s) Listed task pool (%s)" % (token, "admin" if is_admin(token) else request.remote_addr))    return jsonize({"success": True, "tasks": tasks, "tasks_num": len(tasks)})

@get("/admin/flush")@get("/admin/<token>/flush")def task_flush(token=None):    """    Flush task spool (delete all tasks)    """     for key in list(DataStore.tasks):        if is_admin(token) or DataStore.tasks[key].remote_addr == request.remote_addr:            DataStore.tasks[key].engine_kill()            del DataStore.tasks[key]     logger.debug("(%s) Flushed task pool (%s)" % (token, "admin" if is_admin(token) else request.remote_addr))    return jsonize({"success": True})