From 65ed2304fda571794fea49aaf580946114ece809 Mon Sep 17 00:00:00 2001 From: Bernardo Damele Date: Wed, 19 Dec 2012 09:38:03 +0000 Subject: [PATCH] comment update --- lib/takeover/web.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/lib/takeover/web.py b/lib/takeover/web.py index 2a67f45da..31e171ea1 100644 --- a/lib/takeover/web.py +++ b/lib/takeover/web.py @@ -242,7 +242,7 @@ class Web: localPath = posixpath.normpath(localPath).rstrip('/') uriPath = posixpath.normpath(uriPath).rstrip('/') - # Upload the file stager + # Upload the file stager with the LIMIT 0, 1 INTO OUTFILE technique self._webFileInject(stagerContent, stagerName, localPath) self.webBaseUrl = "%s://%s:%d%s" % (conf.scheme, conf.hostname, conf.port, uriPath) @@ -252,6 +252,7 @@ class Web: uplPage, _, _ = Request.getPage(url=self.webStagerUrl, direct=True, raise404=False) uplPage = uplPage or "" + # Fall-back to UNION queries file upload technique if "sqlmap file uploader" not in uplPage: warnMsg = "unable to upload the file stager " warnMsg += "on '%s'" % localPath