PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-06 20:51:31 +00:00
Code Issues Projects Releases Wiki Activity

On my way to properly parse test's <where> tag in exploitation phase

Browse Source
This commit is contained in:
Bernardo Damele
2010-12-01 23:32:58 +00:00
parent 09b265a1ea
commit 283a04e29a
4 changed files with 20 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
lib/request/inject.py
View File

@@ -99,7 +99,12 @@ def __goInferenceProxy(expression, fromUser=False, expected=None, batch=False, r
parameter through a bisection algorithm.
"""
query = agent.prefixQuery(queries[kb.misc.testedDbms].inference.query)
if kb.injection.data[1].epayload is not None:
vector = agent.cleanupPayload(kb.injection.data[1].epayload)
else:
vector = queries[kb.misc.testedDbms].inference.query
query = agent.prefixQuery(vector)
query = agent.suffixQuery(query)
payload = agent.payload(newValue=query)
count = None