PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-06 04:31:30 +00:00
Code Issues Projects Releases Wiki Activity

Properly moved and improved inject.goStacked() function and newly

Browse Source 
implemented Time based blind SQL injection now is a single test file
within the lib/techniques/ folder.
Renamed lib/techniques/inference to lib/techniques/blind, it is more
approriate and adapted the rest of the libraries.
Updated ChangeLog file.
This commit is contained in:
Bernardo Damele
2008-11-12 23:44:09 +00:00
parent 9329f8c9c4
commit ecc4a98071
10 changed files with 63 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
lib/request/inject.py
View File

@@ -38,10 +38,10 @@ from lib.core.data import kb
from lib.core.data import logger
from lib.core.data import queries
from lib.core.data import temp
from lib.core.settings import TIME_SECONDS
from lib.core.settings import TIME_DELAY
from lib.request.connect import Connect as Request
from lib.techniques.inband.union.use import unionUse
from lib.techniques.inference.blind import bisection
from lib.techniques.blind.inference import bisection
from lib.utils.resume import queryOutputLength
from lib.utils.resume import resume
@@ -388,8 +388,9 @@ def goStacked(expression, timeTest=False):
TODO: write description
"""
comment = queries[kb.dbms].comment
query = agent.prefixQuery("; %s" % expression)
query = agent.postfixQuery(query)
query = agent.postfixQuery("%s; %s" % (query, comment))
payload = agent.payload(newValue=query)
start = time.time()
@@ -397,6 +398,6 @@ def goStacked(expression, timeTest=False):
duration = int(time.time() - start)
if timeTest:
return (duration >= TIME_SECONDS, payload)
return (duration >= TIME_DELAY, payload)
else:
return duration >= TIME_SECONDS
return duration >= TIME_DELAY