PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-07 05:01:30 +00:00
Code Issues Projects Releases Wiki Activity

minor improvement for --sql-shell/--sql-query (when non-SELECT default is N for retrieve data output which automatically does STACKED injection)

Browse Source
This commit is contained in:
Miroslav Stampar
2011-05-01 21:41:14 +00:00
parent 900ee0ff93
commit 8e8886cd20
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
plugins/generic/enumeration.py
View File

@@ -2230,8 +2230,13 @@ class Enumeration:
if not self.alwaysRetrieveSqlOutput: if not self.alwaysRetrieveSqlOutput:
message = "do you want to retrieve the SQL statement output? " message = "do you want to retrieve the SQL statement output? "
message += "[Y/n/a] "
getOutput = readInput(message, default="Y") if not sqlType or 'SELECT' in sqlType:
message += "[Y/n/a] "
getOutput = readInput(message, default="Y")
else:
message += "[y/N/a] "
getOutput = readInput(message, default="N")
if getOutput in ("a", "A"): if getOutput in ("a", "A"):
self.alwaysRetrieveSqlOutput = True self.alwaysRetrieveSqlOutput = True