PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-07 21:21:33 +00:00
Code Issues Projects Releases Wiki Activity

Major bug fix to --union-test

Browse Source
This commit is contained in:
Bernardo Damele
2010-10-25 23:39:55 +00:00
parent 7effd0c301
commit f5904d0bc0
9 changed files with 29 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
plugins/dbms/mssqlserver/enumeration.py
View File

@@ -48,7 +48,7 @@ class Enumeration(GenericEnumeration):
else:
dbs = [conf.db]
if kb.unionPosition or conf.direct:
if kb.unionPosition is not None or conf.direct:
for db in dbs:
if conf.excludeSysDbs and db in self.excludeDbsList:
infoMsg = "skipping system database '%s'" % db
@@ -138,7 +138,7 @@ class Enumeration(GenericEnumeration):
continue
if kb.unionPosition or conf.direct:
if kb.unionPosition is not None or conf.direct:
query = rootQuery["inband"]["query"] % db
query += tblQuery
values = inject.getValue(query, blind=False, error=False)
@@ -223,7 +223,7 @@ class Enumeration(GenericEnumeration):
continue
if kb.unionPosition or conf.direct:
if kb.unionPosition is not None or conf.direct:
query = rootQuery["inband"]["query"] % (db, db, db, db, db)
query += " AND %s" % colQuery.replace("[DB]", db)
values = inject.getValue(query, blind=False, error=False)

2
plugins/dbms/mssqlserver/filesystem.py
View File

@@ -92,7 +92,7 @@ class Filesystem(GenericFilesystem):
binToHexQuery = urlencode(binToHexQuery, convall=True)
inject.goStacked(binToHexQuery)
if kb.unionPosition:
if kb.unionPosition is not None:
result = inject.getValue("SELECT %s FROM %s ORDER BY id ASC" % (self.tblField, hexTbl), sort=False, resumeValue=False, blind=False, error=False)
if not result: