sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-29 13:03:50 +03:00
Code Issues Packages Projects Releases Wiki Activity

SQLite does not support BETWEEN

Browse Source
This commit is contained in:
Bernardo Damele 2010-05-12 22:02:47 +00:00
parent b2c5807109
commit 9efe001515
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
lib/techniques/blind/inference.py
View File

@ -158,17 +158,17 @@ def bisection(payload, expression, length=None, charsetType=None, firstChar=None
posValueOld = posValue posValueOld = posValue
posValue = chr(posValue) posValue = chr(posValue)
if not conf.useBetween: if not conf.useBetween or kb.dbms == "SQLite":
forgedPayload = safeStringFormat(payload, (expressionUnescaped, idx, posValue)) forgedPayload = safeStringFormat(payload, (expressionUnescaped, idx, posValue))
else: else:
forgedPayload = safeStringFormat(payload.replace('%3E', 'BETWEEN 0 AND '), (expressionUnescaped, idx, posValue)) forgedPayload = safeStringFormat(payload.replace('%3E', 'BETWEEN 0 AND'), (expressionUnescaped, idx, posValue))
result = Request.queryPage(urlencode(forgedPayload)) result = Request.queryPage(urlencode(forgedPayload))
if kb.dbms == "SQLite": if kb.dbms == "SQLite":
posValue = posValueOld posValue = posValueOld
if not conf.useBetween: #normal if not conf.useBetween or kb.dbms == "SQLite": #normal
if result: if result:
minValue = posValue minValue = posValue
asciiTbl = asciiTbl[position:] asciiTbl = asciiTbl[position:]