mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-12-28 02:19:05 +00:00
Compare commits
4 Commits
dc89ddcfab
...
1.9.9
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
cceda39208 | ||
|
|
f95b85194b | ||
|
|
d9d9b5eeb7 | ||
|
|
8f75402c3c |
@@ -488,6 +488,44 @@ pma_relation
|
||||
pma_table_coords
|
||||
pma_table_info
|
||||
|
||||
# Wordpress
|
||||
wp_users
|
||||
wp_posts
|
||||
wp_comments
|
||||
wp_options
|
||||
wp_postmeta
|
||||
wp_terms
|
||||
wp_term_taxonomy
|
||||
wp_term_relationships
|
||||
wp_links
|
||||
wp_commentmeta
|
||||
|
||||
# WooCommerce
|
||||
wp_woocommerce_sessions
|
||||
wp_woocommerce_api_keys
|
||||
wp_woocommerce_attribute_taxonomies
|
||||
|
||||
# Magento
|
||||
catalog_product_entity
|
||||
sales_order
|
||||
sales_order_item
|
||||
customer_entity
|
||||
quote
|
||||
|
||||
# Drupal
|
||||
node
|
||||
users
|
||||
field_data_body
|
||||
field_revision_body
|
||||
taxonomy_term_data
|
||||
taxonomy_vocabulary
|
||||
|
||||
# Joomla
|
||||
joomla_users
|
||||
joomla_content
|
||||
joomla_categories
|
||||
joomla_modules
|
||||
|
||||
# PostgreSQL
|
||||
pg_aggregate
|
||||
pg_am
|
||||
@@ -501,6 +539,8 @@ pg_cast
|
||||
pg_class
|
||||
pg_constraint
|
||||
pg_conversion
|
||||
pg_cron_job
|
||||
pg_cron_job_run_detail
|
||||
pg_database
|
||||
pg_depend
|
||||
pg_description
|
||||
@@ -522,6 +562,7 @@ pg_rewrite
|
||||
pg_shdepend
|
||||
pg_shdescription
|
||||
pg_statistic
|
||||
pg_stat_statements
|
||||
pg_tablespace
|
||||
pg_trigger
|
||||
pg_ts_config
|
||||
@@ -1194,3 +1235,21 @@ smallint
|
||||
text
|
||||
time
|
||||
timestamp
|
||||
|
||||
# common columns
|
||||
created_at
|
||||
updated_at
|
||||
deleted_at
|
||||
created_on
|
||||
modified_on
|
||||
timestamp
|
||||
is_active
|
||||
is_deleted
|
||||
is_published
|
||||
status
|
||||
enabled
|
||||
user_id
|
||||
product_id
|
||||
category_id
|
||||
order_id
|
||||
customer_id
|
||||
|
||||
@@ -24,7 +24,7 @@ f2648a0cb4d5922d58b8aa6600f786b32324b9ac91e3a57e4ff212e901ffe151 data/shell/sta
|
||||
84b431647a2c13e72b2c9c9242a578349d1b8eef596166128e08f1056d7e4ac8 data/shell/stagers/stager.php_
|
||||
26e2a6d6154cbcef1410a6826169463129380f70a840f848dce4236b686efb23 data/txt/common-columns.txt
|
||||
22cda9937e1801f15370e7cb784797f06c9c86ad8a97db19e732ae76671c7f37 data/txt/common-files.txt
|
||||
a166b1958937364968a25e4bc64074c1ac12358443e58b1bf2ac3d8d88b48a30 data/txt/common-outputs.txt
|
||||
30b3eecf7beb4ebbfdb3aadbd7d7d2ad2a477f07753e5ed1de940693c8b145dc data/txt/common-outputs.txt
|
||||
7953f5967da237115739ee0f0fe8b0ecec7cdac4830770acb8238e6570422a28 data/txt/common-tables.txt
|
||||
b023d7207e5e96a27696ec7ea1d32f9de59f1a269fde7672a8509cb3f0909cd3 data/txt/keywords.txt
|
||||
29a0a6a2c2d94e44899e867590bae865bdf97ba17484c649002d1d8faaf3e127 data/txt/smalldict.txt
|
||||
@@ -175,20 +175,20 @@ ffae7cfe9f9afb92e887b9a8dbc1630d0063e865f35984ae417b04a4513e5024 lib/core/datat
|
||||
d573a37bb00c8b65f75b275aa92549683180fb209b75fd0ff3870e3848939900 lib/core/defaults.py
|
||||
ce6e1c1766acd95168f7708ddcacaa4a586c21ffc9e92024c4715611c802b60c lib/core/dicts.py
|
||||
c9d1f64648062d7962caf02c4e2e7d84e8feb2a14451146f627112aae889afcd lib/core/dump.py
|
||||
8f7923e8bf58c3f9b0d39cf6d2dfef0c31fae5910059c1cc828d3eb9cd32027d lib/core/enums.py
|
||||
c1f211843ccc93a50639ae6f4a50eb434f334e095d9fea440cebe589004374f3 lib/core/enums.py
|
||||
00a9b29caa81fe4a5ef145202f9c92e6081f90b2a85cd76c878d520d900ad856 lib/core/exception.py
|
||||
629c0d06d4f4d093badfc8d1de49432d058f66f3223b08dded012eaf05719de2 lib/core/gui.py
|
||||
4608f21a4333c162ab3c266c903fda4793cc5834de30d06affe9b7566dd09811 lib/core/__init__.py
|
||||
3d308440fb01d04b5d363bfbe0f337756b098532e5bb7a1c91d5213157ec2c35 lib/core/log.py
|
||||
2a06dc9b5c17a1efdcdb903545729809399f1ee96f7352cc19b9aaa227394ff3 lib/core/optiondict.py
|
||||
b244a96aa96ad8da96a60b1cb17a8483c84578523e122834e0bfa40e76ac19f9 lib/core/option.py
|
||||
d33dbc25635e2ae42c70e5997f28097143966279adfbf98e95b0d09ad4976e88 lib/core/option.py
|
||||
fd449fe2c707ce06c929fc164cbabb3342f3e4e2b86c06f3efc1fc09ac98a25a lib/core/patch.py
|
||||
85f10c6195a3a675892d914328173a6fb6a8393120417a2f10071c6e77bfa47d lib/core/profiling.py
|
||||
c4bfb493a03caf84dd362aec7c248097841de804b7413d0e1ecb8a90c8550bc0 lib/core/readlineng.py
|
||||
d1bd70c1a55858495c727fbec91e30af267459c8f64d50fabf9e4ee2c007e920 lib/core/replication.py
|
||||
1d0f80b0193ac5204527bfab4bde1a7aee0f693fd008e86b4b29f606d1ef94f3 lib/core/revision.py
|
||||
d2eb8e4b05ac93551272b3d4abfaf5b9f2d3ac92499a7704c16ed0b4f200db38 lib/core/session.py
|
||||
135bcf03e88c81d2cb553088c8e7a488467188267ad7940f205509f897515057 lib/core/settings.py
|
||||
7dc87552cef805e1b88e13cf595814a2011bbb020b82cc0d1fc2a1fa3c79c989 lib/core/settings.py
|
||||
1c5eab9494eb969bc9ce118a2ea6954690c6851cbe54c18373c723b99734bf09 lib/core/shell.py
|
||||
4eea6dcf023e41e3c64b210cb5c2efc7ca893b727f5e49d9c924f076bb224053 lib/core/subprocessng.py
|
||||
cdd352e1331c6b535e780f6edea79465cb55af53aa2114dcea0e8bf382e56d1a lib/core/target.py
|
||||
@@ -399,7 +399,7 @@ bb0edf756903d8a9df7b60272541768102c64e562e6e7a356c5a761b835efde3 plugins/dbms/m
|
||||
d471eb61a33bd3aa1290cdcce40a5966ebc84af79970f75e8992a2688da4be42 plugins/dbms/mysql/connector.py
|
||||
1e29529d6c4938a728a2d42ef4276b46a40bf4309570213cf3c08871a83abdc1 plugins/dbms/mysql/enumeration.py
|
||||
200b2c910e6902ef8021fe40b3fb426992a016926414cbf9bb74a3630f40842d plugins/dbms/mysql/filesystem.py
|
||||
b7aa7bf8b1f9ba38597bae7fc8bf436b111eeb5ee6a4ad0a977e56dca88a4afc plugins/dbms/mysql/fingerprint.py
|
||||
425ae4b571ba4ffece3a15981a1382ccb59378b06a05b46981e6ace0e33bd0ea plugins/dbms/mysql/fingerprint.py
|
||||
88daad9cf2f62757949cb27128170f33268059e2f0a05d3bd9f75417b99149de plugins/dbms/mysql/__init__.py
|
||||
20108fe32ae3025036aa02b4702c4eda81db01c04a2e0e2e4494d8f1b1717eca plugins/dbms/mysql/syntax.py
|
||||
91f34b67fe3ad5bfa6eae5452a007f97f78b7af000457e9d1c75f4d0207f3d39 plugins/dbms/mysql/takeover.py
|
||||
|
||||
@@ -108,6 +108,8 @@ class FORK(object):
|
||||
YUGABYTEDB = "YugabyteDB"
|
||||
OPENGAUSS = "OpenGauss"
|
||||
DM8 = "DM8"
|
||||
DORIS = "Doris"
|
||||
STARROCKS = "StarRocks"
|
||||
|
||||
class CUSTOM_LOGGING(object):
|
||||
PAYLOAD = 9
|
||||
|
||||
@@ -1129,13 +1129,17 @@ def _setHTTPHandlers():
|
||||
errMsg = "invalid proxy address '%s' ('%s')" % (conf.proxy, getSafeExString(ex))
|
||||
raise SqlmapSyntaxException(errMsg)
|
||||
|
||||
hostnamePort = _.netloc.rsplit(":", 1)
|
||||
match = re.search(r"\A([^:]*):([^:]*)@([^@]+)\Z", _.netloc)
|
||||
if match:
|
||||
username, password = match.group(1), match.group(2)
|
||||
else:
|
||||
username, password = None, None
|
||||
|
||||
hostnamePort = _.netloc.rsplit('@', 1)[-1].rsplit(":", 1)
|
||||
|
||||
scheme = _.scheme.upper()
|
||||
hostname = hostnamePort[0]
|
||||
port = None
|
||||
username = None
|
||||
password = None
|
||||
|
||||
if len(hostnamePort) == 2:
|
||||
try:
|
||||
|
||||
@@ -19,7 +19,7 @@ from lib.core.enums import OS
|
||||
from thirdparty import six
|
||||
|
||||
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
|
||||
VERSION = "1.9.8.7"
|
||||
VERSION = "1.9.9.0"
|
||||
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
|
||||
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
|
||||
VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)
|
||||
@@ -295,7 +295,7 @@ VIRTUOSO_SYSTEM_DBS = ("",)
|
||||
|
||||
# Note: (<regular>) + (<forks>)
|
||||
MSSQL_ALIASES = ("microsoft sql server", "mssqlserver", "mssql", "ms")
|
||||
MYSQL_ALIASES = ("mysql", "my") + ("mariadb", "maria", "memsql", "tidb", "percona", "drizzle")
|
||||
MYSQL_ALIASES = ("mysql", "my") + ("mariadb", "maria", "memsql", "tidb", "percona", "drizzle", "doris", "starrocks")
|
||||
PGSQL_ALIASES = ("postgresql", "postgres", "pgsql", "psql", "pg") + ("cockroach", "cockroachdb", "amazon redshift", "redshift", "greenplum", "yellowbrick", "enterprisedb", "yugabyte", "yugabytedb", "opengauss")
|
||||
ORACLE_ALIASES = ("oracle", "orcl", "ora", "or")
|
||||
SQLITE_ALIASES = ("sqlite", "sqlite3")
|
||||
|
||||
@@ -103,6 +103,10 @@ class Fingerprint(GenericFingerprint):
|
||||
fork = FORK.DRIZZLE
|
||||
elif inject.checkBooleanExpression("@@VERSION_COMMENT LIKE '%Percona%'"):
|
||||
fork = FORK.PERCONA
|
||||
elif inject.checkBooleanExpression("@@VERSION_COMMENT LIKE '%Doris%'"):
|
||||
fork = FORK.DORIS
|
||||
elif inject.checkBooleanExpression("@@VERSION_COMMENT LIKE '%StarRocks%'"):
|
||||
fork = FORK.STARROCKS
|
||||
elif inject.checkBooleanExpression("AURORA_VERSION() LIKE '%'"): # Reference: https://aws.amazon.com/premiumsupport/knowledge-center/aurora-version-number/
|
||||
fork = FORK.AURORA
|
||||
else:
|
||||
@@ -188,7 +192,7 @@ class Fingerprint(GenericFingerprint):
|
||||
infoMsg = "confirming %s" % DBMS.MYSQL
|
||||
logger.info(infoMsg)
|
||||
|
||||
result = inject.checkBooleanExpression("SESSION_USER() LIKE USER()")
|
||||
result = inject.checkBooleanExpression("COALESCE(SESSION_USER(),USER()) IS NOT NULL")
|
||||
|
||||
if not result:
|
||||
# Note: MemSQL doesn't support SESSION_USER()
|
||||
|
||||
Reference in New Issue
Block a user