From be992b44711271645e333b6ae204148c0e1fdb7d Mon Sep 17 00:00:00 2001
From: Miroslav Stampar <miroslav.stampar@gmail.com>
Date: Thu, 11 Nov 2010 17:09:31 +0000
Subject: [PATCH] update regarding common columns existance check

---
 plugins/dbms/access/enumeration.py |  2 +-
 plugins/generic/enumeration.py     | 23 ++++++++++++++++++++++-
 2 files changed, 23 insertions(+), 2 deletions(-)

diff --git a/plugins/dbms/access/enumeration.py b/plugins/dbms/access/enumeration.py
index c408bac28..9013782a1 100644
--- a/plugins/dbms/access/enumeration.py
+++ b/plugins/dbms/access/enumeration.py
@@ -31,7 +31,7 @@ class Enumeration(GenericEnumeration):
     def getCurrentDb(self):
         warnMsg = "on Microsoft Access it is not possible to get name of the current database"
         logger.warn(warnMsg)
-        
+
     def getPasswordHashes(self):
         warnMsg = "on Microsoft Access it is not possible to enumerate the user password hashes"
         logger.warn(warnMsg)
diff --git a/plugins/generic/enumeration.py b/plugins/generic/enumeration.py
index b566ad9e6..9bd587a7c 100644
--- a/plugins/generic/enumeration.py
+++ b/plugins/generic/enumeration.py
@@ -42,6 +42,7 @@ from lib.core.unescaper import unescaper
 from lib.parse.banner import bannerParser
 from lib.request import inject
 from lib.request.connect import Connect as Request
+from lib.techniques.brute.use import columnExists
 from lib.techniques.brute.use import tableExists
 from lib.techniques.error.test import errorTest
 from lib.techniques.inband.union.test import unionTest
@@ -847,10 +848,30 @@ class Enumeration:
         return kb.data.cachedTables
 
     def getColumns(self, onlyColNames=False):
+        bruteForce = False
+
         if kb.dbms == DBMS.MYSQL and not kb.data.has_information_schema:
             errMsg  = "information_schema not available, "
             errMsg += "back-end DBMS is MySQL < 5.0"
-            raise sqlmapUnsupportedFeatureException, errMsg
+            logger.error(errMsg)
+            bruteForce = True
+
+        elif kb.dbms == DBMS.ACCESS:
+            errMsg  = "cannot retrieve column names, "
+            errMsg += "back-end DBMS is Access"
+            logger.error(errMsg)
+            bruteForce = True
+
+        if bruteForce:
+            message = "do you want to use common columns existance check? [Y/n/q]"
+            test = readInput(message, default="Y")
+
+            if test[0] in ("n", "N"):
+                return
+            elif test[0] in ("q", "Q"):
+                raise sqlmapUserQuitException
+            else:
+                return columnExists(paths.COMMON_COLUMNS)
 
         if not conf.tbl:
             errMsg = "missing table parameter"