sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-25 19:13:48 +03:00
Code Issues Packages Projects Releases Wiki Activity

now --users works for MaxDB too

Browse Source
This commit is contained in:
Miroslav Stampar 2010-11-02 21:52:48 +00:00
parent cd0d4135ac
commit b761523f3f
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
plugins/generic/enumeration.py
View File

@ -171,7 +171,7 @@ class Enumeration:
indexRange = getRange(count, plusOne=plusOne) indexRange = getRange(count, plusOne=plusOne)
for index in indexRange: for index in indexRange:
if kb.dbms == DBMS.SYBASE: if kb.dbms in (DBMS.SYBASE, DBMS.MAXDB):
query = rootQuery.blind.query % (kb.data.cachedUsers[-1] if kb.data.cachedUsers else " ") query = rootQuery.blind.query % (kb.data.cachedUsers[-1] if kb.data.cachedUsers else " ")
elif condition: elif condition:
query = rootQuery.blind.query2 % index query = rootQuery.blind.query2 % index

1
xml/queries.xml
View File

@ -436,6 +436,7 @@
<substring query="SUBSTR((%s), %d, %d)"/> <substring query="SUBSTR((%s), %d, %d)"/>
<users> <users>
<inband query="SELECT username FROM domain.users ORDER BY 1"/> <inband query="SELECT username FROM domain.users ORDER BY 1"/>
<blind query="SELECT MIN(username) FROM domain.users WHERE username > '%s'" count="SELECT CHR(COUNT(*)) FROM domain.users"/>
</users> </users>
<tables> <tables>
<inband query="SELECT tablename FROM domain.tables WHERE schemaname='%s' AND type='TABLE'"/> <inband query="SELECT tablename FROM domain.tables WHERE schemaname='%s' AND type='TABLE'"/>