PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-06 20:51:31 +00:00
Code Issues Projects Releases Wiki Activity

Proper english (--postfix is now --suffix) and --string/--regexp does not necessarily need to match into the original response body, it might well be in the injected True condition only!

Browse Source
This commit is contained in:
Bernardo Damele
2010-11-17 22:00:09 +00:00
parent ca5125bbe0
commit 17486e472a
20 changed files with 77 additions and 78 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
lib/core/agent.py
View File

@@ -120,7 +120,7 @@ class Agent:
return self.payloadDirect(query)
query = self.prefixQuery(query)
query = self.postfixQuery(query)
query = self.suffixQuery(query)
payload = self.payload(newValue=query)
return payload
@@ -156,7 +156,7 @@ class Agent:
return query
def postfixQuery(self, string, comment=None):
def suffixQuery(self, string, comment=None):
"""
This method appends the DBMS comment to the
SQL injection request
@@ -182,10 +182,10 @@ class Agent:
if comment:
string += comment
if conf.postfix:
string += " %s" % conf.postfix
if conf.suffix:
string += " %s" % conf.suffix
else:
string += case.usage.postfix.format % eval(case.usage.postfix.params)
string += case.usage.suffix.format % eval(case.usage.suffix.params)
return string
@@ -499,7 +499,7 @@ class Agent:
if intoRegExp:
inbandQuery += intoRegExp
inbandQuery = self.postfixQuery(inbandQuery, kb.unionComment)
inbandQuery = self.suffixQuery(inbandQuery, kb.unionComment)
return inbandQuery
@@ -636,7 +636,7 @@ class Agent:
regObj = getCompiledRegex("(?P<result>%s.*?%s)" % (PAYLOAD_DELIMITER, PAYLOAD_DELIMITER))
for match in regObj.finditer(inpStr):
retVal = retVal.replace(match.group("result"), urlencode(match.group("result").strip(PAYLOAD_DELIMITER), convall=True))
retVal = retVal.replace(match.group("result"), match.group("result").strip(PAYLOAD_DELIMITER))
else:
retVal = retVal.replace(PAYLOAD_DELIMITER, '')