diff --git a/lib/takeover/xp_cmdshell.py b/lib/takeover/xp_cmdshell.py index f489d598d..41ed84975 100644 --- a/lib/takeover/xp_cmdshell.py +++ b/lib/takeover/xp_cmdshell.py @@ -181,4 +181,6 @@ class xp_cmdshell: debugMsg += "output to" logger.debug(debugMsg) - self.createSupportTbl(self.cmdTblName, self.tblField, "TEXT") + # TEXT can't be used here because in error technique you get: + # "The text, ntext, and image data types cannot be compared or sorted" + self.createSupportTbl(self.cmdTblName, self.tblField, "NVARCHAR(4000)") diff --git a/lib/techniques/error/use.py b/lib/techniques/error/use.py index 234a24d1e..ef316c17c 100644 --- a/lib/techniques/error/use.py +++ b/lib/techniques/error/use.py @@ -93,7 +93,7 @@ def __oneShotErrorUse(expression, field): threadData.lastRequestUID else None, re.DOTALL | re.IGNORECASE) if trimmed: - warnMsg = "trimmed output detected: " + warnMsg = "possible server trimmed output detected (due to it's length): " warnMsg += trimmed logger.warn(warnMsg) diff --git a/lib/techniques/inband/union/use.py b/lib/techniques/inband/union/use.py index 264a1e2bb..737de15d7 100644 --- a/lib/techniques/inband/union/use.py +++ b/lib/techniques/inband/union/use.py @@ -79,7 +79,7 @@ def __oneShotUnionUse(expression, unpack=True): if headers else None), payload, True), re.DOTALL | re.IGNORECASE) if trimmed: - warnMsg = "trimmed output detected: " + warnMsg = "possible server trimmed output detected (due to it's length): " warnMsg += trimmed logger.warn(warnMsg)