sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-03 13:14:13 +03:00
Code Issues Packages Projects Releases Wiki Activity

Implementation for an Issue #155

Browse Source
This commit is contained in:
Miroslav Stampar 2012-08-20 12:14:01 +02:00
parent 823dde73ab
commit 6f450ac8bf
2 changed files with 16 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
lib/controller/checks.py
View File

@ -635,6 +635,15 @@ def heuristicCheckSqlInjection(place, parameter):
kb.heuristicTest = result kb.heuristicTest = result
if not result and kb.dynamicParameter:
_ = conf.paramDict[place][parameter]
if _.isdigit():
randInt = int(randomInt())
payload = "%s%s%s" % (prefix, "%s-%s" % (int(_) + randInt, randInt), suffix)
payload = agent.payload(place, parameter, newValue=payload, where=PAYLOAD.WHERE.REPLACE)
result = Request.queryPage(payload, place, raise404=False)
if result: if result:
infoMsg += "be injectable (possible DBMS: %s)" % (Format.getErrorParsedDBMSes() or UNKNOWN_DBMS_VERSION) infoMsg += "be injectable (possible DBMS: %s)" % (Format.getErrorParsedDBMSes() or UNKNOWN_DBMS_VERSION)
logger.info(infoMsg) logger.info(infoMsg)
@ -675,10 +684,10 @@ def checkDynParam(place, parameter, value):
except sqlmapConnectionException: except sqlmapConnectionException:
pass pass
if dynResult is None: result = None if dynResult is None else not dynResult
return None kb.dynamicParameter = result
else:
return not dynResult return result
def checkDynamicContent(firstPage, secondPage): def checkDynamicContent(firstPage, secondPage):
""" """

5
lib/controller/controller.py
View File

@ -438,8 +438,9 @@ def start():
logger.info(infoMsg) logger.info(infoMsg)
elif PAYLOAD.TECHNIQUE.BOOLEAN in conf.tech: elif PAYLOAD.TECHNIQUE.BOOLEAN in conf.tech:
kb.dynamicParameter = checkDynParam(place, parameter, value) check = checkDynParam(place, parameter, value)
if not kb.dynamicParameter:
if not check:
warnMsg = "%s parameter '%s' appears to be not dynamic" % (place, parameter) warnMsg = "%s parameter '%s' appears to be not dynamic" % (place, parameter)
logger.warn(warnMsg) logger.warn(warnMsg)