From 9ed074451025295b46ec74aeb771e67265648b06 Mon Sep 17 00:00:00 2001 From: Bernardo Damele Date: Sat, 30 Jan 2010 22:24:20 +0000 Subject: [PATCH] Added some error messages to detect back-end DBMS --- doc/ChangeLog | 4 ++-- xml/errors.xml | 2 ++ 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/doc/ChangeLog b/doc/ChangeLog index efd2d5fa3..4ec558aa6 100644 --- a/doc/ChangeLog +++ b/doc/ChangeLog @@ -1,7 +1,7 @@ sqlmap (0.8-1) stable; urgency=low * Support to enumerate and dump all databases' tables containing user - provided column(s) by specifying for instance '--dump -C 'user,pass'. + provided column(s) by specifying for instance '--dump -C user,pass'. Useful to identify for instance tables containing custom application credentials (Bernardo). * Support to parse -C (column name(s)) when fetching @@ -10,7 +10,7 @@ sqlmap (0.8-1) stable; urgency=low * Support for takeover features on PostgreSQL 8.4 (Bernardo). * Enhanced --priv-esc to rely on new Metasploit Meterpreter's 'getsystem' command to elevate privileges of the user running the - back-end DBMS instance to SYSTEM (Bernardo). + back-end DBMS instance on Windows to SYSTEM (Bernardo). * Automatic support in --os-pwn to use the web uploader/backdoor to upload and execute the Metasploit payload stager when stacked queries SQL injection is not supported, for instance on MySQL/PHP and diff --git a/xml/errors.xml b/xml/errors.xml index e571dff7c..380ce8482 100644 --- a/xml/errors.xml +++ b/xml/errors.xml @@ -6,6 +6,7 @@ + @@ -13,6 +14,7 @@ +