minor update

This commit is contained in:
Miroslav Stampar 2010-12-08 13:09:27 +00:00
parent 6223f25dd9
commit af22679605
2 changed files with 5 additions and 3 deletions

View File

@ -20,6 +20,7 @@ from lib.core.data import kb
from lib.core.data import queries from lib.core.data import queries
from lib.core.datatype import advancedDict from lib.core.datatype import advancedDict
from lib.core.enums import DBMS from lib.core.enums import DBMS
from lib.core.enums import PAYLOAD
from lib.core.enums import PLACE from lib.core.enums import PLACE
from lib.core.exception import sqlmapNoneDataException from lib.core.exception import sqlmapNoneDataException
from lib.core.settings import PAYLOAD_DELIMITER from lib.core.settings import PAYLOAD_DELIMITER
@ -151,10 +152,10 @@ class Agent:
# Either if the technique is stacked queries (<stype>) or we are # Either if the technique is stacked queries (<stype>) or we are
# replacing (<where>) the parameter original value with our # replacing (<where>) the parameter original value with our
# payload, do not put a space after the prefix # payload, do not put a space after the prefix
if kb.technique == 4: if kb.technique == PAYLOAD.TECHNIQUE.STACKED:
query = kb.injection.prefix query = kb.injection.prefix
elif kb.injection.clause == [2, 3] or kb.injection.clause == [ 3 ]: elif kb.injection.clause == [2, 3] or kb.injection.clause == [ 3 ]:
if kb.technique != 3: if kb.technique != PAYLOAD.TECHNIQUE.UNION:
query = kb.injection.prefix query = kb.injection.prefix
elif kb.technique and kb.technique in kb.injection.data: elif kb.technique and kb.technique in kb.injection.data:
where = kb.injection.data[kb.technique].where where = kb.injection.data[kb.technique].where

View File

@ -14,6 +14,7 @@ from lib.core.data import kb
from lib.core.data import logger from lib.core.data import logger
from lib.core.data import queries from lib.core.data import queries
from lib.core.enums import DBMS from lib.core.enums import DBMS
from lib.core.enums import PAYLOAD
from lib.core.session import setUnion from lib.core.session import setUnion
from lib.core.unescaper import unescaper from lib.core.unescaper import unescaper
from lib.parse.html import htmlParser from lib.parse.html import htmlParser
@ -118,7 +119,7 @@ def unionTest():
return kb.unionTest return kb.unionTest
oldTechnique = kb.technique oldTechnique = kb.technique
kb.technique = 3 kb.technique = PAYLOAD.TECHNIQUE.UNION
if conf.uChar == "NULL": if conf.uChar == "NULL":
technique = "NULL bruteforcing" technique = "NULL bruteforcing"