PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-07 05:01:30 +00:00
Code Issues Projects Releases Wiki Activity

further improvement for ms access table dumping

Browse Source
This commit is contained in:
Miroslav Stampar
2010-12-26 01:04:30 +00:00
parent 64523212a4
commit 2c8115eed9
2 changed files with 12 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
plugins/generic/enumeration.py
View File

@@ -1212,10 +1212,18 @@ class Enumeration:
if kb.dbms == DBMS.ACCESS:
for column in colList:
# It would be good to have a numeric column as a pivot
result = inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE RND(%s)>0)", (column, conf.tbl, column)))
infoMsg = "fetching number of distinct "
infoMsg += "values for column '%s'" % column
logger.info(infoMsg)
query = rootQuery.blind.count2 % (column, conf.tbl)
value = inject.getValue(query, inband=False)
if isNumPosStrValue(value) and value == count:
infoMsg = "using column '%s' as a pivot " % column
infoMsg += "for retrieving row data"
logger.info(infoMsg)
if result:
colList.remove(column)
colList.insert(0, column)
break