mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2024-11-22 09:36:35 +03:00
Minor improvement to be able to provide CU as user value (-U) when enumerating
users privileges or users passwords.
This commit is contained in:
parent
7f055924a7
commit
78e8a83c11
|
@ -170,10 +170,15 @@ class Enumeration:
|
||||||
|
|
||||||
def getPasswordHashes(self):
|
def getPasswordHashes(self):
|
||||||
infoMsg = "fetching database users password hashes"
|
infoMsg = "fetching database users password hashes"
|
||||||
logger.info(infoMsg)
|
|
||||||
|
|
||||||
rootQuery = queries[kb.dbms].passwords
|
rootQuery = queries[kb.dbms].passwords
|
||||||
|
|
||||||
|
if conf.user == "CU":
|
||||||
|
infoMsg += " for current user"
|
||||||
|
conf.user = self.getCurrentUser()
|
||||||
|
|
||||||
|
logger.info(infoMsg)
|
||||||
|
|
||||||
if conf.unionUse:
|
if conf.unionUse:
|
||||||
if kb.dbms == "Microsoft SQL Server" and kb.dbmsVersion[0] in ( "2005", "2008" ):
|
if kb.dbms == "Microsoft SQL Server" and kb.dbmsVersion[0] in ( "2005", "2008" ):
|
||||||
query = rootQuery["inband"]["query2"]
|
query = rootQuery["inband"]["query2"]
|
||||||
|
@ -301,10 +306,15 @@ class Enumeration:
|
||||||
|
|
||||||
def getPrivileges(self):
|
def getPrivileges(self):
|
||||||
infoMsg = "fetching database users privileges"
|
infoMsg = "fetching database users privileges"
|
||||||
logger.info(infoMsg)
|
|
||||||
|
|
||||||
rootQuery = queries[kb.dbms].privileges
|
rootQuery = queries[kb.dbms].privileges
|
||||||
|
|
||||||
|
if conf.user == "CU":
|
||||||
|
infoMsg += " for current user"
|
||||||
|
conf.user = self.getCurrentUser()
|
||||||
|
|
||||||
|
logger.info(infoMsg)
|
||||||
|
|
||||||
# Set containing the list of DBMS administrators
|
# Set containing the list of DBMS administrators
|
||||||
areAdmins = set()
|
areAdmins = set()
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue
Block a user