sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-09 08:00:36 +03:00
Code Issues Packages Projects Releases Wiki Activity

More appropriate warning message, got rid of a TODO

Browse Source
This commit is contained in:
Bernardo Damele 2009-07-24 23:20:22 +00:00
parent b4fd71e8b9
commit 3d4bfb3263
1 changed files with 9 additions and 27 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
plugins/dbms/mssqlserver.py
View File

@ -590,37 +590,19 @@ class MSSQLServerMap(Fingerprint, Enumeration, Filesystem, Miscellaneous, Takeov
def overflowBypassDEP(self): def overflowBypassDEP(self):
# TODO: use 'sc' to:
# * Get the SQL Server 'Service name' (usually MSSQLSERVER)
# * Detect the absolute SQL Server executable file path
#
# References:
# * http://www.ss64.com/nt/sc.html
# * http://www.ss64.com/nt/for_cmd.html
self.handleDep("C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe") self.handleDep("C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe")
if self.bypassDEP == False: if self.bypassDEP == False:
return return
else:
logger.info("restarting Microsoft SQL Server, wait..") warnMsg = "sqlmap tried to add the expection for "
time.sleep(15) warnMsg += "'sqlservr.exe' within the registry, but will not "
warnMsg += "restart the MSSQLSERVER process to avoid denial "
# TODO: use 'sc' to: warnMsg += "of service. The buffer overflow trigger could not "
# * Warn the user that sqlmap needs to restart the SQL Server warnMsg += "work, however sqlmap will give it a try. Soon "
# service, ask for confirmation warnMsg += "it will come a new MS09-004 exploit to "
# * Stop the SQL Server service (after handling DEP) warnMsg += "automatically bypass DEP."
# * Start the SQL Server service (after handling DEP) logger.warn(warnMsg)
# Another way to restart MSSQL consists of writing a bat file with
# the following text:
#
#@ECHO OFF
#NET STOP MSSQLSERVER
#NET START MSSQLSERVER
#
# Then run the following statement and wait a few seconds:
#
# exec master..xp_cmdshell 'start C:\WINDOWS\Temp\sqlmaprandom.bat'
def spHeapOverflow(self): def spHeapOverflow(self):