PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-06 20:51:31 +00:00
Code Issues Projects Releases Wiki Activity

more code updates regarding good samaritan (common output) feature

Browse Source
This commit is contained in:
Miroslav Stampar
2010-05-26 09:48:20 +00:00
parent 8ed76b3024
commit 7f0db26e99
3 changed files with 27 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
lib/techniques/blind/inference.py
View File

@@ -31,6 +31,7 @@ from lib.core.common import dataToSessionFile
from lib.core.common import dataToStdout
from lib.core.common import getCharset
from lib.core.common import getGoodSamaritanParameters
from lib.core.common import getPartRun
from lib.core.common import replaceNewlineTabs
from lib.core.common import safeStringFormat
from lib.core.convert import urlencode
@@ -56,6 +57,8 @@ def bisection(payload, expression, length=None, charsetType=None, firstChar=None
asciiTbl = getCharset(charsetType)
kb.partRun = getPartRun() if conf.useCommonPrediction else None
if "LENGTH(" in expression or "LEN(" in expression:
firstChar = 0
elif conf.firstChar is not None and ( isinstance(conf.firstChar, int) or ( isinstance(conf.firstChar, basestring) and conf.firstChar.isdigit() ) ):
@@ -376,13 +379,13 @@ def bisection(payload, expression, length=None, charsetType=None, firstChar=None
if singleValue is None:
val = getChar(index, predictedCharset, False) if predictedCharset else None
else:
#forgedPayload = safeStringFormat('AND (%s) = \'%s\'', (expressionUnescaped, singleValue))
#result = Request.queryPage(urlencode(forgedPayload))
#if result:
# finalValue = singleValue
# break
pass
query = agent.prefixQuery(" %s" % safeStringFormat('AND (%s) = \'%s\'', (expressionUnescaped, singleValue)))
query = agent.postfixQuery(query)
payload = agent.payload(newValue=query)
result = Request.queryPage(urlencode(payload))
if result:
finalValue = singleValue
break
if not val:
val = getChar(index, otherCharset)
else: