PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-08 13:41:29 +00:00
Code Issues Projects Releases Wiki Activity

minor fix for command execution via web shell

Browse Source
This commit is contained in:
Bernardo Damele
2014-02-10 09:59:57 +00:00
parent fe0ff6e679
commit be6767b3b0
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
lib/takeover/web.py
View File

@@ -235,6 +235,7 @@ class Web:
if "sqlmap file uploader" in uplPage: if "sqlmap file uploader" in uplPage:
uploaded = True uploaded = True
break
# Fall-back to UNION queries file upload technique # Fall-back to UNION queries file upload technique
if not uploaded: if not uploaded:
@@ -273,6 +274,8 @@ class Web:
if "sqlmap file uploader" in uplPage: if "sqlmap file uploader" in uplPage:
uploaded = True uploaded = True
break
if not uploaded: if not uploaded:
self.webBaseUrl = "%s://%s:%d/" % (conf.scheme, conf.hostname, conf.port) self.webBaseUrl = "%s://%s:%d/" % (conf.scheme, conf.hostname, conf.port)
self.webStagerUrl = os.path.join(self.webBaseUrl, stagerName) self.webStagerUrl = os.path.join(self.webBaseUrl, stagerName)