From ad529f24cb631fc42298d045dd4e63ad05e93a3e Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Tue, 29 Nov 2022 15:12:18 +0100 Subject: [PATCH] Minor update --- lib/core/settings.py | 2 +- lib/parse/cmdline.py | 3 +++ lib/techniques/union/use.py | 2 +- 3 files changed, 5 insertions(+), 2 deletions(-) diff --git a/lib/core/settings.py b/lib/core/settings.py index a0803c089..ead5d26f8 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -20,7 +20,7 @@ from thirdparty import six from thirdparty.six import unichr as _unichr # sqlmap version (...) -VERSION = "1.6.11.9" +VERSION = "1.6.11.10" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE) diff --git a/lib/parse/cmdline.py b/lib/parse/cmdline.py index 004e695fa..9b809baa6 100644 --- a/lib/parse/cmdline.py +++ b/lib/parse/cmdline.py @@ -839,6 +839,9 @@ def cmdLineParser(argv=None): parser.add_argument("--vuln-test", dest="vulnTest", action="store_true", help=SUPPRESS) + parser.add_argument("--disable-json", dest="disableJson", action="store_true", + help=SUPPRESS) + # API options parser.add_argument("--api", dest="api", action="store_true", help=SUPPRESS) diff --git a/lib/techniques/union/use.py b/lib/techniques/union/use.py index b77cc646d..868cae4ef 100644 --- a/lib/techniques/union/use.py +++ b/lib/techniques/union/use.py @@ -252,7 +252,7 @@ def unionUse(expression, unpack=True, dump=False): debugMsg += "it does not play well with UNION query SQL injection" singleTimeDebugMessage(debugMsg) - if Backend.getIdentifiedDbms() in (DBMS.MYSQL, DBMS.ORACLE, DBMS.PGSQL, DBMS.MSSQL, DBMS.SQLITE) and expressionFields and not any((conf.binaryFields, conf.limitStart, conf.limitStop, conf.forcePartial)): + if Backend.getIdentifiedDbms() in (DBMS.MYSQL, DBMS.ORACLE, DBMS.PGSQL, DBMS.MSSQL, DBMS.SQLITE) and expressionFields and not any((conf.binaryFields, conf.limitStart, conf.limitStop, conf.forcePartial, conf.disableJson)): match = re.search(r"SELECT\s*(.+?)\bFROM", expression, re.I) if match and not (Backend.isDbms(DBMS.ORACLE) and FROM_DUMMY_TABLE[DBMS.ORACLE] in expression) and not re.search(r"\b(MIN|MAX|COUNT)\(", expression): kb.jsonAggMode = True