PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-06 12:41:30 +00:00
Code Issues Projects Releases Wiki Activity

minor tuning (2 techniques MAX per value used)

Browse Source
This commit is contained in:
Miroslav Stampar
2010-12-21 15:24:14 +00:00
parent 6c1133c4d4
commit b2e7f9484d
2 changed files with 11 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
lib/request/inject.py
View File

@@ -35,6 +35,7 @@ from lib.core.enums import EXPECTED
from lib.core.enums import PAYLOAD
from lib.core.exception import sqlmapNotVulnerableException
from lib.core.settings import MIN_TIME_RESPONSES
from lib.core.settings import MAX_TECHNIQUES_BEFORE_NONE
from lib.core.unescaper import unescaper
from lib.request.connect import Connect as Request
from lib.request.direct import direct
@@ -402,6 +403,7 @@ def getValue(expression, blind=True, inband=True, error=True, time=True, fromUse
value = None
found = False
query = query.replace("DISTINCT ", "")
count = 0
if expected == EXPECTED.BOOL:
forgeCaseExpression = booleanExpression = expression
@@ -419,7 +421,8 @@ def getValue(expression, blind=True, inband=True, error=True, time=True, fromUse
else:
value = __goInband(query, expected, sort, resumeValue, unpack, dump)
found = value or (value is None and expectingNone)
count += 1
found = value or (value is None and expectingNone) or count >= MAX_TECHNIQUES_BEFORE_NONE
oldUnionNegative = kb.unionNegative
kb.unionNegative = False
@@ -432,7 +435,8 @@ def getValue(expression, blind=True, inband=True, error=True, time=True, fromUse
else:
value = __goError(query, resumeValue)
found = value or (value is None and expectingNone)
count += 1
found = value or (value is None and expectingNone) or count >= MAX_TECHNIQUES_BEFORE_NONE
if blind and isTechniqueAvailable(PAYLOAD.TECHNIQUE.BOOLEAN) and not found:
kb.technique = PAYLOAD.TECHNIQUE.BOOLEAN
@@ -442,7 +446,8 @@ def getValue(expression, blind=True, inband=True, error=True, time=True, fromUse
else:
value = __goInferenceProxy(query, fromUser, expected, batch, resumeValue, unpack, charsetType, firstChar, lastChar)
found = value or (value is None and expectingNone)
count += 1
found = value or (value is None and expectingNone) or count >= MAX_TECHNIQUES_BEFORE_NONE
if time and (isTechniqueAvailable(PAYLOAD.TECHNIQUE.TIME) or isTechniqueAvailable(PAYLOAD.TECHNIQUE.STACKED)) and not found:
if isTechniqueAvailable(PAYLOAD.TECHNIQUE.TIME):