PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-06 04:31:30 +00:00
Code Issues Projects Releases Wiki Activity

optimization of comment checking in MySQL

Browse Source
This commit is contained in:
Miroslav Stampar
2010-12-31 12:21:02 +00:00
parent 281d124fa6
commit ce19b0c431
1 changed files with 14 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
plugins/dbms/mysql/fingerprint.py
View File

@@ -60,10 +60,22 @@ class Fingerprint(GenericFingerprint):
(60000, 60011), # MySQL 6.0
)
for element in versions:
index = None
for i in xrange(len(versions)):
element = versions[i]
version = element[0]
randInt = randomInt()
version = getUnicode(version)
result = inject.checkBooleanExpression("%d=%d/*!%s AND %d=%d*/" % (randInt, randInt, version, randInt, randInt + 1))
if result:
index = i - 1
break
if index and index >= 0:
prevVer = None
for version in range(element[0], element[1] + 1):
for version in range(versions[index][0], versions[index][1] + 1):
randInt = randomInt()
version = getUnicode(version)
result = inject.checkBooleanExpression("%d=%d/*!%s AND %d=%d*/" % (randInt, randInt, version, randInt, randInt + 1))