sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-22 01:26:42 +03:00
Code Issues Packages Projects Releases Wiki Activity

Use %TEMP% environment variable as temporary directory (--tmp-path overwrites this btw) folder with direct connection (-d). Via SQL injection, env variables do not work apparently

Browse Source
This commit is contained in:
Bernardo Damele 2012-02-20 11:06:55 +00:00
parent 08bf8c201f
commit f55ad46119
1 changed files with 10 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
plugins/generic/misc.py
View File

@ -39,14 +39,17 @@ class Miscellaneous:
def getRemoteTempPath(self):
if not conf.tmpPath:
if Backend.isOs(OS.WINDOWS):
self.checkDbmsOs(detailed=True)
if Backend.getOsVersion() in ("2000", "NT"):
conf.tmpPath = "C:/WINNT/Temp"
elif Backend.getOsVersion() in ("2003", "XP"):
conf.tmpPath = "C:/Documents and Settings/All Users/Application Data/TEMP"
if conf.direct:
conf.tmpPath = "%TEMP%"
else:
conf.tmpPath = "C:/Users/All Users/Application Data/TEMP"
self.checkDbmsOs(detailed=True)
if Backend.getOsVersion() in ("2000", "NT"):
conf.tmpPath = "C:/WINNT/Temp"
elif Backend.getOsVersion() in ("2003", "XP"):
conf.tmpPath = "C:/Documents and Settings/All Users/Application Data/TEMP"
else:
conf.tmpPath = "C:/Users/All Users/Application Data/TEMP"
else:
conf.tmpPath = "/tmp"