PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-06 12:41:30 +00:00
Code Issues Projects Releases Wiki Activity

update regarding time based data retrieval

Browse Source
This commit is contained in:
Miroslav Stampar
2011-01-16 17:52:42 +00:00
parent ec1ab3cd2a
commit 30d6791968
6 changed files with 43 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
lib/core/common.py
View File

@@ -73,6 +73,7 @@ from lib.core.settings import DUMP_TAB_MARKER
from lib.core.settings import DUMP_START_MARKER
from lib.core.settings import DUMP_STOP_MARKER
from lib.core.settings import MIN_TIME_RESPONSES
from lib.core.settings import TIME_DEFAULT_DELAY
from lib.core.settings import TIME_STDEV_COEFF
from lib.core.settings import DYNAMICITY_MARK_LENGTH
from lib.core.threads import getCurrentThreadData
@@ -1588,21 +1589,31 @@ def wasLastRequestDelayed():
warnMsg += "with less than %d response times" % MIN_TIME_RESPONSES
logger.warn(warnMsg)
lowerLimit = average(kb.responseTimes) + TIME_STDEV_COEFF * deviation
retVal = (threadData.lastQueryDuration >= lowerLimit)
lowerStdLimit = average(kb.responseTimes) + TIME_STDEV_COEFF * deviation
retVal = (threadData.lastQueryDuration >= lowerStdLimit)
if not kb.testMode and retVal:
newVal = int(ceil((1 - (threadData.lastQueryDuration - lowerLimit) / threadData.lastQueryDuration) * conf.timeSec))
if newVal and newVal != conf.timeSec:
clearConsoleLine(True)
warnMsg = "adjusting time delay to %d seconds" % newVal
logger.warn(warnMsg)
conf.timeSec = newVal
if not kb.testMode and retVal and conf.timeSec == TIME_DEFAULT_DELAY:
adjustTimeDelay(threadData.lastQueryDuration, lowerStdLimit)
return retVal
else:
return threadData.lastQueryDuration - conf.timeSec
def adjustTimeDelay(lastQueryDuration, lowerStdLimit):
"""
Adjusts time delay in time based data retrieval
"""
candidate = 1 + int(ceil((1 - (lastQueryDuration - lowerStdLimit) / lastQueryDuration) * conf.timeSec))
if candidate:
kb.delayCandidates = [candidate] + kb.delayCandidates[:-1]
if all([x == candidate for x in kb.delayCandidates]) and candidate < conf.timeSec:
clearConsoleLine(True)
warnMsg = "adjusting time delay to %d seconds" % candidate
logger.warn(warnMsg)
conf.timeSec = candidate
def extractErrorMessage(page):
"""
Returns reported error message from page if it founds one