More fixes for --common-columns to work against MSSQL too

This commit is contained in:
Bernardo Damele 2011-02-09 17:22:07 +00:00
parent 917b2b0d6b
commit aa0fb276ba
2 changed files with 2 additions and 2 deletions

View File

@ -250,7 +250,7 @@ def resumeConfKb(expression, url, value):
kb.brute.tables.append((db, table)) kb.brute.tables.append((db, table))
elif expression == "COLUMN_EXISTS" and url == conf.url: elif expression == "COLUMN_EXISTS" and url == conf.url:
table, column = unSafeFormatString(value[:-1]).split('..') table, column = unSafeFormatString(value[:-1]).split('|')
colName, colType = column.split(' ') colName, colType = column.split(' ')
if '.' in table: if '.' in table:

View File

@ -257,7 +257,7 @@ def columnExists(columnFile, regex=None):
else: else:
columns[column] = 'non-numeric' columns[column] = 'non-numeric'
dataToSessionFile("[%s][%s][%s][COLUMN_EXISTS][%s..%s %s]\n" % (conf.url, kb.injection.place,\ dataToSessionFile("[%s][%s][%s][COLUMN_EXISTS][%s|%s %s]\n" % (conf.url, kb.injection.place,\
safeFormatString(conf.parameters[kb.injection.place]), safeFormatString(table),\ safeFormatString(conf.parameters[kb.injection.place]), safeFormatString(table),\
safeFormatString(column), safeFormatString(columns[column]))) safeFormatString(column), safeFormatString(columns[column])))