Added some error messages to detect back-end DBMS

This commit is contained in:
Bernardo Damele 2010-01-30 22:24:20 +00:00
parent 267cf5dd1a
commit 9ed0744510
2 changed files with 4 additions and 2 deletions

View File

@ -1,7 +1,7 @@
sqlmap (0.8-1) stable; urgency=low sqlmap (0.8-1) stable; urgency=low
* Support to enumerate and dump all databases' tables containing user * Support to enumerate and dump all databases' tables containing user
provided column(s) by specifying for instance '--dump -C 'user,pass'. provided column(s) by specifying for instance '--dump -C user,pass'.
Useful to identify for instance tables containing custom application Useful to identify for instance tables containing custom application
credentials (Bernardo). credentials (Bernardo).
* Support to parse -C (column name(s)) when fetching * Support to parse -C (column name(s)) when fetching
@ -10,7 +10,7 @@ sqlmap (0.8-1) stable; urgency=low
* Support for takeover features on PostgreSQL 8.4 (Bernardo). * Support for takeover features on PostgreSQL 8.4 (Bernardo).
* Enhanced --priv-esc to rely on new Metasploit Meterpreter's * Enhanced --priv-esc to rely on new Metasploit Meterpreter's
'getsystem' command to elevate privileges of the user running the 'getsystem' command to elevate privileges of the user running the
back-end DBMS instance to SYSTEM (Bernardo). back-end DBMS instance on Windows to SYSTEM (Bernardo).
* Automatic support in --os-pwn to use the web uploader/backdoor to * Automatic support in --os-pwn to use the web uploader/backdoor to
upload and execute the Metasploit payload stager when stacked queries upload and execute the Metasploit payload stager when stacked queries
SQL injection is not supported, for instance on MySQL/PHP and SQL injection is not supported, for instance on MySQL/PHP and

View File

@ -6,6 +6,7 @@
<error regexp="SQL syntax.*MySQL"/> <error regexp="SQL syntax.*MySQL"/>
<error regexp="Warning.*mysql_.*"/> <error regexp="Warning.*mysql_.*"/>
<error regexp="valid MySQL result"/> <error regexp="valid MySQL result"/>
<error regexp="MySqlClient\."/>
</dbms> </dbms>
<!-- PostgreSQL --> <!-- PostgreSQL -->
@ -13,6 +14,7 @@
<error regexp="PostgreSQL.*ERROR"/> <error regexp="PostgreSQL.*ERROR"/>
<error regexp="Warning.*pg_.*"/> <error regexp="Warning.*pg_.*"/>
<error regexp="valid PostgreSQL result"/> <error regexp="valid PostgreSQL result"/>
<error regexp="Npgsql\."/>
</dbms> </dbms>
<!-- Microsoft SQL Server --> <!-- Microsoft SQL Server -->