diff --git a/doc/ChangeLog b/doc/ChangeLog index 51410e63b..827b7d7ed 100644 --- a/doc/ChangeLog +++ b/doc/ChangeLog @@ -1,5 +1,8 @@ sqlmap (0.6.3-1) stable; urgency=low + * Minor enhancement to support stacked queries which will be used + sometimes by takeover functionality and time based blind SQL injection + technique; * Minor enhancement to be able to specify the number of seconds to wait between each HTTP request; * Minor enhancement to be able to enumerate table columns and dump table diff --git a/lib/controller/controller.py b/lib/controller/controller.py index fc8752833..a5635d0fb 100644 --- a/lib/controller/controller.py +++ b/lib/controller/controller.py @@ -96,7 +96,7 @@ def start(): if conf.configFile and not kb.targetUrls: errMsg = "you did not edit the configuration file properly, set " - errMsg += "the target url properly" + errMsg += "the target url" logger.error(errMsg) hostCount = 0 diff --git a/lib/core/option.py b/lib/core/option.py index c0f4064dc..f60bbc71e 100644 --- a/lib/core/option.py +++ b/lib/core/option.py @@ -453,6 +453,7 @@ def __setKnowledgeBaseAttributes(): kb.parenthesis = None kb.resumedQueries = {} kb.targetUrls = set() + kb.timeTest = None kb.unionComment = "" kb.unionCount = None kb.unionPosition = None diff --git a/lib/techniques/blind/timebased.py b/lib/techniques/blind/timebased.py index 14cda73c3..174a2e57e 100644 --- a/lib/techniques/blind/timebased.py +++ b/lib/techniques/blind/timebased.py @@ -40,6 +40,8 @@ def timeTest(): timeTest = inject.goStacked(query, timeTest=True) if timeTest[0] == True: - return timeTest[1] + kb.timeTest = timeTest[1] else: - return None + kb.timeTest = False + + return kb.timeTest