PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-07 05:01:30 +00:00
Code Issues Projects Releases Wiki Activity

fix for --union-use with --error-test

Browse Source
This commit is contained in:
Miroslav Stampar
2010-10-25 12:25:29 +00:00
parent 71543092b7
commit 32728d14b7
6 changed files with 19 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
plugins/dbms/mssqlserver/enumeration.py
View File

@@ -57,7 +57,7 @@ class Enumeration(GenericEnumeration):
continue
query = rootQuery.inband.query % db
value = inject.getValue(query, blind=False)
value = inject.getValue(query, blind=False, error=False)
if value:
kb.data.cachedTables[db] = value
@@ -141,7 +141,7 @@ class Enumeration(GenericEnumeration):
if kb.unionPosition or conf.direct:
query = rootQuery["inband"]["query"] % db
query += tblQuery
values = inject.getValue(query, blind=False)
values = inject.getValue(query, blind=False, error=False)
if values:
if isinstance(values, basestring):
@@ -226,7 +226,7 @@ class Enumeration(GenericEnumeration):
if kb.unionPosition or conf.direct:
query = rootQuery["inband"]["query"] % (db, db, db, db, db)
query += " AND %s" % colQuery.replace("[DB]", db)
values = inject.getValue(query, blind=False)
values = inject.getValue(query, blind=False, error=False)
if values:
if isinstance(values, basestring):

2
plugins/dbms/mssqlserver/filesystem.py
View File

@@ -93,7 +93,7 @@ class Filesystem(GenericFilesystem):
inject.goStacked(binToHexQuery)
if kb.unionPosition:
result = inject.getValue("SELECT %s FROM %s ORDER BY id ASC" % (self.tblField, hexTbl), sort=False, resumeValue=False, blind=False)
result = inject.getValue("SELECT %s FROM %s ORDER BY id ASC" % (self.tblField, hexTbl), sort=False, resumeValue=False, blind=False, error=False)
if not result:
result = []