sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-03 21:24:13 +03:00
Code Issues Packages Projects Releases Wiki Activity

minor improvement for --sql-shell/--sql-query (when non-SELECT default is N for retrieve data output which automatically does STACKED injection)

Browse Source
This commit is contained in:
Miroslav Stampar 2011-05-01 21:41:14 +00:00
parent 900ee0ff93
commit 8e8886cd20
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
plugins/generic/enumeration.py
View File

@ -2230,8 +2230,13 @@ class Enumeration:
if not self.alwaysRetrieveSqlOutput: if not self.alwaysRetrieveSqlOutput:
message = "do you want to retrieve the SQL statement output? " message = "do you want to retrieve the SQL statement output? "
if not sqlType or 'SELECT' in sqlType:
message += "[Y/n/a] " message += "[Y/n/a] "
getOutput = readInput(message, default="Y") getOutput = readInput(message, default="Y")
else:
message += "[y/N/a] "
getOutput = readInput(message, default="N")
if getOutput in ("a", "A"): if getOutput in ("a", "A"):
self.alwaysRetrieveSqlOutput = True self.alwaysRetrieveSqlOutput = True