sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-22 17:46:37 +03:00
Code Issues Packages Projects Releases Wiki Activity

optimization of comment checking in MySQL

Browse Source
This commit is contained in:
Miroslav Stampar 2010-12-31 12:21:02 +00:00
parent 281d124fa6
commit ce19b0c431
1 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
plugins/dbms/mysql/fingerprint.py
View File

@ -60,10 +60,22 @@ class Fingerprint(GenericFingerprint):
(60000, 60011), # MySQL 6.0 (60000, 60011), # MySQL 6.0
) )
for element in versions: index = None
for i in xrange(len(versions)):
element = versions[i]
version = element[0]
randInt = randomInt()
version = getUnicode(version)
result = inject.checkBooleanExpression("%d=%d/*!%s AND %d=%d*/" % (randInt, randInt, version, randInt, randInt + 1))
if result:
index = i - 1
break
if index and index >= 0:
prevVer = None prevVer = None
for version in range(element[0], element[1] + 1): for version in range(versions[index][0], versions[index][1] + 1):
randInt = randomInt() randInt = randomInt()
version = getUnicode(version) version = getUnicode(version)
result = inject.checkBooleanExpression("%d=%d/*!%s AND %d=%d*/" % (randInt, randInt, version, randInt, randInt + 1)) result = inject.checkBooleanExpression("%d=%d/*!%s AND %d=%d*/" % (randInt, randInt, version, randInt, randInt + 1))