sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-09-20 11:02:27 +03:00
Code Issues Packages Projects Releases Wiki Activity

Optimize Apache Doris detection with more reliable logic

Browse Source 
- Use VERSION()='5.7.99' as primary fingerprint (Apache Doris hardcoded value)
- Add dual verification: VERSION()='5.7.99' AND @@VERSION_COMMENT LIKE '%Doris%'
- Prioritize StarRocks detection to avoid confusion
- Provide fallback detection for restricted environments
- Based on official Doris documentation: version() always returns '5.7.99'

This implementation follows best practices:
1. StarRocks checked first (returns real versions like 5.1.0)
2. Combined verification for Apache Doris (5.7.99 + banner)
3. Fallback to version-only detection when VERSION_COMMENT inaccessible
4. Leverages the fact that MySQL never released version 5.7.99
This commit is contained in:
User 2025-08-22 11:15:52 +08:00
parent 70ae4236de
commit 6583472ccf
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
plugins/dbms/mysql/fingerprint.py
View File

@ -105,12 +105,12 @@ class Fingerprint(GenericFingerprint):
fork = FORK.PERCONA fork = FORK.PERCONA
elif inject.checkBooleanExpression("AURORA_VERSION() LIKE '%'"): # Reference: https://aws.amazon.com/premiumsupport/knowledge-center/aurora-version-number/ elif inject.checkBooleanExpression("AURORA_VERSION() LIKE '%'"): # Reference: https://aws.amazon.com/premiumsupport/knowledge-center/aurora-version-number/
fork = FORK.AURORA fork = FORK.AURORA
elif inject.checkBooleanExpression("VERSION() LIKE '5.7.99'"): # Reference: Apache Doris returns fixed version 5.7.99 for MySQL compatibility elif inject.checkBooleanExpression("@@VERSION_COMMENT LIKE '%StarRocks%'"): # Reference: StarRocks version comment contains 'StarRocks' - check first to avoid confusion
fork = FORK.DORIS
elif inject.checkBooleanExpression("@@VERSION_COMMENT LIKE '%Doris%'"): # Reference: Apache Doris version comment contains 'Doris'
fork = FORK.DORIS
elif inject.checkBooleanExpression("@@VERSION_COMMENT LIKE '%StarRocks%'"): # Reference: StarRocks version comment contains 'StarRocks'
fork = FORK.STARROCKS fork = FORK.STARROCKS
elif inject.checkBooleanExpression("VERSION()='5.7.99' AND @@VERSION_COMMENT LIKE '%Doris%'"): # Reference: Apache Doris hardcoded version 5.7.99 + banner confirmation
fork = FORK.DORIS
elif inject.checkBooleanExpression("VERSION()='5.7.99'"): # Reference: Apache Doris hardcoded version 5.7.99 (fallback if VERSION_COMMENT inaccessible)
fork = FORK.DORIS
else: else:
fork = "" fork = ""