PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-07 05:01:30 +00:00
Code Issues Projects Releases Wiki Activity

add possibility to provide a list of web server document root possible directories for web shell upload in --os-cmd and --os-shell for MySQL

Browse Source
This commit is contained in:
Bernardo Damele
2013-01-19 18:04:33 +00:00
parent 6a62292a3f
commit adf97e630f
3 changed files with 40 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
lib/takeover/web.py
View File

@@ -191,7 +191,7 @@ class Web:
self.webApi = choices[int(choice) - 1]
break
kb.docRoot = getDocRoot()
kb.docRoot = arrayizeValue(getDocRoot())
directories = sorted(getDirs())
backdoorName = "tmpb%s.%s" % (randomStr(lowercase=True), self.webApi)
@@ -202,7 +202,7 @@ class Web:
success = False
for docRoot in arrayizeValue(kb.docRoot):
for docRoot in kb.docRoot:
if success:
break