sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-03 13:14:13 +03:00
Code Issues Packages Projects Releases Wiki Activity

update

Browse Source
This commit is contained in:
Miroslav Stampar 2010-12-25 16:46:33 +00:00
parent f85bb96221
commit 5249762794
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
plugins/generic/enumeration.py
View File

@ -1213,7 +1213,7 @@ class Enumeration:
if kb.dbms == DBMS.ACCESS: if kb.dbms == DBMS.ACCESS:
for column in colList: for column in colList:
# It would be good to have a numeric column as a pivot # It would be good to have a numeric column as a pivot
result = inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE %s>0)", (column, conf.tbl, column))) result = inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE RND(%s)>0)", (column, conf.tbl, column)))
if result: if result:
colList.remove(column) colList.remove(column)
@ -1236,9 +1236,13 @@ class Enumeration:
value = value[:-1] + chr(ord(value[-1]) + 1) value = value[:-1] + chr(ord(value[-1]) + 1)
query = rootQuery.blind.query % (column, conf.tbl, column, value) query = rootQuery.blind.query % (column, conf.tbl, column, value)
else: else:
if index >= len(entries[colList[0]]):
break
query = rootQuery.blind.query2 % (column, conf.tbl, colList[0], entries[colList[0]][index]) query = rootQuery.blind.query2 % (column, conf.tbl, colList[0], entries[colList[0]][index])
value = inject.getValue(query, inband=False) value = inject.getValue(query, inband=False)
if column == colList[0] and not value:
break
lengths[column] = max(lengths[column], len(value)) lengths[column] = max(lengths[column], len(value))
entries[column].append(value) entries[column].append(value)