sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-25 19:13:48 +03:00
Code Issues Packages Projects Releases Wiki Activity

Minor bug fix to make --file-read and --os-bof syntactically work also with -d (direct connection)

Browse Source
This commit is contained in:
Bernardo Damele 2012-02-17 15:16:05 +00:00
parent aee269cc14
commit ebd40b3933
2 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
plugins/dbms/mssqlserver/filesystem.py
View File

@ -51,8 +51,7 @@ class Filesystem(GenericFilesystem):
inject.goStacked("BULK INSERT %s FROM '%s' WITH (CODEPAGE='RAW', FIELDTERMINATOR='%s', ROWTERMINATOR='%s')" % (txtTbl, rFile, randomStr(10), randomStr(10)), silent=True) inject.goStacked("BULK INSERT %s FROM '%s' WITH (CODEPAGE='RAW', FIELDTERMINATOR='%s', ROWTERMINATOR='%s')" % (txtTbl, rFile, randomStr(10), randomStr(10)), silent=True)
# Reference: http://support.microsoft.com/kb/104829 # Reference: http://support.microsoft.com/kb/104829
binToHexQuery = """ binToHexQuery = """DECLARE @charset VARCHAR(16)
DECLARE @charset VARCHAR(16)
DECLARE @counter INT DECLARE @counter INT
DECLARE @hexstr VARCHAR(4096) DECLARE @hexstr VARCHAR(4096)
DECLARE @length INT DECLARE @length INT

3
plugins/dbms/mssqlserver/takeover.py
View File

@ -76,8 +76,7 @@ class Takeover(GenericTakeover):
shellcodeChar = shellcodeChar[:-1] shellcodeChar = shellcodeChar[:-1]
self.spExploit = """ self.spExploit = """DECLARE @buf NVARCHAR(4000),
DECLARE @buf NVARCHAR(4000),
@val NVARCHAR(4), @val NVARCHAR(4),
@counter INT @counter INT
SET @buf = ' SET @buf = '