PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-07 05:01:30 +00:00
Code Issues Projects Releases Wiki Activity

blind dumping of tables in sqlite implemented

Browse Source
This commit is contained in:
Miroslav Stampar
2010-12-11 22:13:19 +00:00
parent b1babeefe5
commit c93634b6c7
7 changed files with 20 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
lib/core/common.py
View File

@@ -1731,11 +1731,12 @@ def isDBMSVersionAtLeast(version):
return retVal
def parseSqliteTableSchema(value):
table = {}
columns = {}
if value:
table = {}
columns = {}
for match in re.finditer(getCompiledRegex(r"(\w+) ([A-Z]+)[,\r\n]"), value):
columns[match.group(1)] = match.group(2)
for match in re.finditer(getCompiledRegex(r"(\w+) ([A-Z]+)[,\r\n]"), value):
columns[match.group(1)] = match.group(2)
table[conf.tbl] = columns
kb.data.cachedColumns[conf.db] = table
table[conf.tbl] = columns
kb.data.cachedColumns[conf.db] = table

3
lib/core/settings.py
View File

@@ -49,6 +49,9 @@ DUMP_STOP_MARKER = "__STOP__"
PAYLOAD_DELIMITER = "\x00"
CHAR_INFERENCE_MARK = "%c"
# suffix used for naming meta databases in DBMS(es) without explicit database name
METADB_SUFFIX = "_masterdb"
# minimum time response set needed for time-comparison based on standard deviation
MIN_TIME_RESPONSES = 10