PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-07 05:01:30 +00:00
Code Issues Projects Releases Wiki Activity

Added support for --privileges on MSSQL to test wheter or not the DBMS users are DBA

Browse Source
This commit is contained in:
Bernardo Damele
2011-02-10 14:24:04 +00:00
parent a2c20acf94
commit c078de894f
3 changed files with 44 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
plugins/generic/enumeration.py
View File

@@ -126,21 +126,25 @@ class Enumeration:
return kb.data.currentDb
def isDba(self):
def isDba(self, user=None):
infoMsg = "testing if current user is DBA"
logger.info(infoMsg)
if Backend.getIdentifiedDbms() == DBMS.MYSQL:
self.getCurrentUser()
query = queries[Backend.getIdentifiedDbms()].is_dba.query % kb.data.currentUser.split("@")[0]
elif Backend.getIdentifiedDbms() == DBMS.MSSQL and user is not None:
query = queries[Backend.getIdentifiedDbms()].is_dba.query2 % user
else:
query = queries[Backend.getIdentifiedDbms()].is_dba.query
query = agent.forgeCaseStatement(query)
isDba = inject.getValue(query, unpack=False, charsetType=1)
kb.data.isDba = inject.getValue(query, unpack=False, charsetType=1)
if user is None:
kb.data.isDba = isDba
return kb.data.isDba == "1"
return isDba == "1"
def getUsers(self):
infoMsg = "fetching database users"