From a435ba6863ecd0600bdcb75e97cf022034a6d678 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Sun, 28 Oct 2012 00:19:00 +0200 Subject: [PATCH] Minor fix --- lib/request/inject.py | 1 + lib/utils/pivotdumptable.py | 2 +- plugins/generic/entries.py | 2 +- plugins/generic/users.py | 2 +- 4 files changed, 4 insertions(+), 3 deletions(-) diff --git a/lib/request/inject.py b/lib/request/inject.py index 7c6eff4c3..dd6390843 100644 --- a/lib/request/inject.py +++ b/lib/request/inject.py @@ -367,6 +367,7 @@ def getValue(expression, blind=True, inband=True, error=True, time=True, fromUse through inband SQL injection (if selected) and/or blind SQL injection (if selected). """ + kb.safeCharEncode = safeCharEncode kb.resumeValues = resumeValue diff --git a/lib/utils/pivotdumptable.py b/lib/utils/pivotdumptable.py index cbefcff48..6c47b189c 100644 --- a/lib/utils/pivotdumptable.py +++ b/lib/utils/pivotdumptable.py @@ -110,7 +110,7 @@ def pivotDumpTable(table, colList, count=None, blind=True): else: query = dumpNode.query2 % (column, table, colList[0], pivotValue) - value = unArrayizeValue(inject.getValue(query, blind=blind, inband=not blind, error=not blind)) + value = unArrayizeValue(inject.getValue(query, blind=blind, time=blind, inband=not blind, error=not blind)) if column == colList[0]: if isNoneValue(value): diff --git a/plugins/generic/entries.py b/plugins/generic/entries.py index dcc5ace75..e94c84744 100644 --- a/plugins/generic/entries.py +++ b/plugins/generic/entries.py @@ -147,7 +147,7 @@ class Entries: if not (isTechniqueAvailable(PAYLOAD.TECHNIQUE.UNION) and kb.injection.data[PAYLOAD.TECHNIQUE.UNION].where == PAYLOAD.WHERE.ORIGINAL): table = "%s.%s" % (conf.db, tbl) - retVal = pivotDumpTable(table, colList, blind=False, time=False) + retVal = pivotDumpTable(table, colList, blind=False) if retVal: entries, _ = retVal diff --git a/plugins/generic/users.py b/plugins/generic/users.py index d1c0f5f42..ff5838733 100644 --- a/plugins/generic/users.py +++ b/plugins/generic/users.py @@ -182,7 +182,7 @@ class Users: randStr = randomStr() getCurrentThreadData().disableStdOut = True - retVal = pivotDumpTable("(%s) AS %s" % (query, randStr), ['%s.name' % randStr, '%s.password' % randStr], blind=False, time=False) + retVal = pivotDumpTable("(%s) AS %s" % (query, randStr), ['%s.name' % randStr, '%s.password' % randStr], blind=False) if retVal: for user, password in filterPairValues(zip(retVal[0]["%s.name" % randStr], retVal[0]["%s.password" % randStr])):