sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-02 20:54:13 +03:00
Code Issues Packages Projects Releases Wiki Activity

Consistency between cmdline.py, optiondict.py and sqlmap.conf and got rid of --union-use switch

Browse Source
This commit is contained in:
Bernardo Damele 2010-10-25 15:54:45 +00:00
parent 378653a1ec
commit debaf2215f
4 changed files with 15 additions and 22 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/controller/action.py
View File

@ -64,7 +64,7 @@ def action():
if conf.timeTest:
conf.dumper.technic("time based blind sql injection payload", timeTest())
if ( conf.unionUse or conf.unionTest ) and not kb.unionPosition:
if conf.unionTest and not kb.unionPosition:
conf.dumper.technic("valid union", unionTest())
# Enumeration options

20
lib/parse/cmdline.py
View File

@ -207,14 +207,14 @@ def cmdLineParser():
"the affected parameter(s) rather than using "
"the default blind SQL injection technique.")
techniques.add_option("--stacked-test", dest="stackedTest",
action="store_true", default=False,
help="Test for stacked queries (multiple "
"statements) support")
techniques.add_option("--error-test", dest="errorTest",
action="store_true", default=False,
help="Test for error based SQL injection support (beta)")
help="Test for and use error based SQL injection")
techniques.add_option("--stacked-test", dest="stackedTest",
action="store_true", default=False,
help="Test for and use stacked queries (multiple "
"statements)")
techniques.add_option("--time-test", dest="timeTest",
action="store_true", default=False,
@ -227,17 +227,11 @@ def cmdLineParser():
techniques.add_option("--union-test", dest="unionTest",
action="store_true", default=False,
help="Test for UNION query (inband) SQL injection")
help="Test for and use UNION query (inband) SQL injection")
techniques.add_option("--union-tech", dest="uTech",
help="Technique to test for UNION query SQL injection")
techniques.add_option("--union-use", dest="unionUse",
action="store_true", default=False,
help="Use the UNION query (inband) SQL injection "
"to retrieve the queries output. No "
"need to go blind")
# Fingerprint options
fingerprint = OptionGroup(parser, "Fingerprint")

2
plugins/generic/enumeration.py
View File

@ -73,7 +73,7 @@ class Enumeration:
logger.info(infoMsg)
if not kb.data.banner:
if conf.unionUse or conf.unionTest:
if conf.unionTest:
conf.dumper.technic("valid union", unionTest())
query = queries[kb.dbms].banner.query

13
sqlmap.conf
View File

@ -226,7 +226,11 @@ tamper =
# using the default blind SQL injection technique.
[Techniques]
# Test for stacked queries (multiple statements) support.
# Test for and use error based SQL injection.
# Valid: True or False
errorTest = False
# Test for and use stacked queries (multiple statements).
# Valid: True or False
stackedTest = False
@ -239,7 +243,7 @@ timeTest = False
# Default: 5
timeSec = 5
# Test for UNION query (inband) SQL injection.
# Test for and use UNION query (inband) SQL injection.
# Valid: True or False
unionTest = False
@ -250,11 +254,6 @@ unionTest = False
# Default: NULL
uTech = NULL
# Use the UNION query (inband) SQL injection to retrieve the queries
# output. No need to go blind.
# Valid: True or False
unionUse = False
[Fingerprint]