mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-12-09 14:11:29 +00:00
further update of DNS data retrieval mechanism through SQLi
This commit is contained in:
@@ -261,7 +261,7 @@ class Agent:
|
||||
if 'hex' in rootQuery:
|
||||
hexField = rootQuery.hex.query % field
|
||||
else:
|
||||
warnMsg = "switch '--hex' is currently not supported on DBMS '%s'" % Backend.getIdentifiedDbms()
|
||||
warnMsg = "switch '--hex' is currently not supported on DBMS %s" % Backend.getIdentifiedDbms()
|
||||
singleTimeWarnMessage(warnMsg)
|
||||
|
||||
return hexField
|
||||
|
||||
@@ -1613,7 +1613,7 @@ def getSPLSnippet(dbms, name, **variables):
|
||||
for _ in variables.keys():
|
||||
retVal = re.sub(r"%%%s%%" % _, variables[_], retVal)
|
||||
|
||||
_ = re.search(r"%([^%]+)%", retVal, re.I)
|
||||
_ = re.search(r"%(\w+)%", retVal, re.I)
|
||||
if _:
|
||||
errMsg = "unresolved variable '%s' in SPL snippet '%s'" % (_.group(1), name)
|
||||
raise sqlmapGenericException, errMsg
|
||||
|
||||
@@ -1437,6 +1437,7 @@ def __setKnowledgeBaseAttributes(flushAll=True):
|
||||
|
||||
kb.delayCandidates = TIME_DELAY_CANDIDATES * [0]
|
||||
kb.dep = None
|
||||
kb.dnsMode = False
|
||||
kb.docRoot = None
|
||||
kb.dumpMode = False
|
||||
kb.dynamicMarkings = []
|
||||
|
||||
@@ -472,3 +472,6 @@ MAX_SINGLE_URL_REDIRECTIONS = 4
|
||||
|
||||
# Maximum total number of redirections (regardless of URL) - before assuming we're in a loop
|
||||
MAX_TOTAL_REDIRECTIONS = 10
|
||||
|
||||
# Reference: http://www.tcpipguide.com/free/t_DNSLabelsNamesandSyntaxRules.htm
|
||||
MAX_DNS_LABEL = 63
|
||||
|
||||
Reference in New Issue
Block a user