PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-08 21:51:29 +00:00
Code Issues Projects Releases Wiki Activity

Fix for an Issue #230

Browse Source
This commit is contained in:
Miroslav Stampar
2012-11-05 15:10:49 +01:00
parent 5352b3ebd9
commit 3cf5fc2f5a
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
lib/utils/hash.py
View File

@@ -672,7 +672,7 @@ def dictionaryAttack(attack_dict):
if hash_regex in (HASH.MYSQL, HASH.MYSQL_OLD, HASH.MD5_GENERIC, HASH.SHA1_GENERIC): if hash_regex in (HASH.MYSQL, HASH.MYSQL_OLD, HASH.MD5_GENERIC, HASH.SHA1_GENERIC):
for suffix in suffix_list: for suffix in suffix_list:
if len(attack_info) == len(results) or processException: if len(attack_info) <= len(results) or processException:
break break
if suffix: if suffix:
@@ -728,7 +728,8 @@ def dictionaryAttack(attack_dict):
conf.hashDB.beginTransaction() conf.hashDB.beginTransaction()
while not retVal.empty(): while not retVal.empty():
_, hash_, word = item = retVal.get(block=False) user, hash_, word = item = retVal.get(block=False)
attack_info = filter(lambda _: _[0][0] != user or _[0][1] != hash_, attack_info)
hashDBWrite(hash_, word) hashDBWrite(hash_, word)
results.append(item) results.append(item)
@@ -741,6 +742,9 @@ def dictionaryAttack(attack_dict):
if processException: if processException:
break break
if any(_[0] == user and _[1] == hash_ for _ in results):
continue
count = 0 count = 0
found = False found = False
@@ -812,7 +816,7 @@ def dictionaryAttack(attack_dict):
conf.hashDB.beginTransaction() conf.hashDB.beginTransaction()
while not retVal.empty(): while not retVal.empty():
_, hash_, word = item = retVal.get(block=False) user, hash_, word = item = retVal.get(block=False)
hashDBWrite(hash_, word) hashDBWrite(hash_, word)
results.append(item) results.append(item)