From 50bced511f687adeb35fc76c9f318dd360c27b83 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Fri, 3 Jun 2016 02:24:19 +0200 Subject: [PATCH] Adding support for fingerprinting MsSQL 2014 and 2016 --- lib/core/settings.py | 2 +- plugins/dbms/mssqlserver/fingerprint.py | 4 +++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/lib/core/settings.py b/lib/core/settings.py index f0d090043..e937f8a59 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -19,7 +19,7 @@ from lib.core.enums import OS from lib.core.revision import getRevisionNumber # sqlmap version (...) -VERSION = "1.0.6.12" +VERSION = "1.0.6.13" REVISION = getRevisionNumber() STABLE = VERSION.count('.') <= 2 VERSION_STRING = "sqlmap/%s#%s" % (VERSION, "stable" if STABLE else "dev") diff --git a/plugins/dbms/mssqlserver/fingerprint.py b/plugins/dbms/mssqlserver/fingerprint.py index 891f3f058..f99bd7300 100644 --- a/plugins/dbms/mssqlserver/fingerprint.py +++ b/plugins/dbms/mssqlserver/fingerprint.py @@ -93,7 +93,9 @@ class Fingerprint(GenericFingerprint): for version, check in (("2000", "HOST_NAME()=HOST_NAME()"), \ ("2005", "XACT_STATE()=XACT_STATE()"), \ ("2008", "SYSDATETIME()=SYSDATETIME()"), \ - ("2012", "CONCAT(NULL,NULL)=CONCAT(NULL,NULL)")): + ("2012", "CONCAT(NULL,NULL)=CONCAT(NULL,NULL)"), \ + ("2014", "CHARINDEX('12.0.2000',@@version)>0"), \ + ("2016", "ISJSON(NULL) IS NULL")): result = inject.checkBooleanExpression(check) if result: