Removed --error-test, --stacked-test and --time-test switches and adapted the code accordingly. This is due to the fact that the new XML based detection engine already supports all of those tests (and more).

lib/techniques/outband/stacked.py

@@ -1,53 +0,0 @@
-#!/usr/bin/env python
-
-"""
-$Id$
-
-Copyright (c) 2006-2010 sqlmap developers (http://sqlmap.sourceforge.net/)
-See the file 'doc/COPYING' for copying permission
-"""
-
-import time
-
-from lib.core.agent import agent
-from lib.core.common import calculateDeltaSeconds
-from lib.core.common import getDelayQuery
-from lib.core.data import conf
-from lib.core.data import kb
-from lib.core.data import logger
-from lib.core.session import setStacked
-from lib.request import inject
-
-def stackedTest():
-    if conf.direct:
-        return
-
-    if kb.stackedTest is not None:
-        return kb.stackedTest
-
-    infoMsg  = "testing stacked queries sql injection on parameter "
-    infoMsg += "'%s'" % kb.injection.parameter
-    logger.info(infoMsg)
-
-    query      = getDelayQuery()
-    start      = time.time()
-    payload, _ = inject.goStacked(query)
-    duration   = calculateDeltaSeconds(start)
-
-    if duration >= conf.timeSec:
-        infoMsg  = "the target url is affected by a stacked queries "
-        infoMsg += "sql injection on parameter '%s'" % kb.injection.parameter
-        logger.info(infoMsg)
-
-        kb.stackedTest = agent.removePayloadDelimiters(payload, False)
-    else:
-        warnMsg  = "the target url is not affected by a stacked queries "
-        warnMsg += "sql injection on parameter '%s'" % kb.injection.parameter
-        logger.warn(warnMsg)
-
-        kb.stackedTest = False
-
-    if kb.stackedTest:
-        setStacked(kb.injection.place, kb.injection.parameter, payload)
-
-    return kb.stackedTest