sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-02 20:54:13 +03:00
Code Issues Packages Projects Releases Wiki Activity

minor fix for command execution via web shell

Browse Source
This commit is contained in:
Bernardo Damele 2014-02-10 09:59:57 +00:00
parent fe0ff6e679
commit be6767b3b0
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
lib/takeover/web.py
View File

@ -235,6 +235,7 @@ class Web:
if "sqlmap file uploader" in uplPage: if "sqlmap file uploader" in uplPage:
uploaded = True uploaded = True
break
# Fall-back to UNION queries file upload technique # Fall-back to UNION queries file upload technique
if not uploaded: if not uploaded:
@ -273,6 +274,8 @@ class Web:
if "sqlmap file uploader" in uplPage: if "sqlmap file uploader" in uplPage:
uploaded = True uploaded = True
break
if not uploaded: if not uploaded:
self.webBaseUrl = "%s://%s:%d/" % (conf.scheme, conf.hostname, conf.port) self.webBaseUrl = "%s://%s:%d/" % (conf.scheme, conf.hostname, conf.port)
self.webStagerUrl = os.path.join(self.webBaseUrl, stagerName) self.webStagerUrl = os.path.join(self.webBaseUrl, stagerName)