sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-28 20:43:49 +03:00
Code Issues Packages Projects Releases Wiki Activity

implemented suppressResumeInfo mechanism (huge slowdown on large tables)

Browse Source
This commit is contained in:
Miroslav Stampar 2011-04-22 19:58:10 +00:00
parent 493b9adf8e
commit f88aa4b165
5 changed files with 83 additions and 58 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
lib/core/option.py
View File

@ -1323,6 +1323,7 @@ def __setKnowledgeBaseAttributes(flushAll=True):
kb.singleLogFlags = set()
kb.skipOthersDbms = None
kb.suppressSession = False
kb.suppressResumeInfo = False
kb.technique = None
kb.testMode = False
kb.testQueryCount = 0

3
lib/core/settings.py
View File

@ -310,3 +310,6 @@ MAX_INT = sys.maxint
# Parameters to be ignored in detection phase (upper case)
IGNORE_PARAMETERS = ("__VIEWSTATE", "__EVENTARGUMENT", "__EVENTTARGET", "__EVENTVALIDATION", "ASPSESSIONID", "ASP.NET_SESSIONID", "JSESSIONID", "CFID", "CFTOKEN")
# Turn off resume console info to avoid potential slowdowns
TURN_OFF_RESUME_INFO_LIMIT = 20

10
lib/techniques/error/use.py
View File

@ -35,6 +35,7 @@ from lib.core.enums import PAYLOAD
from lib.core.exception import sqlmapConnectionException
from lib.core.settings import FROM_TABLE
from lib.core.settings import MYSQL_ERROR_CHUNK_LENGTH
from lib.core.settings import TURN_OFF_RESUME_INFO_LIMIT
from lib.core.threads import getCurrentThreadData
from lib.core.unescaper import unescaper
from lib.request.connect import Connect as Request
@ -301,6 +302,12 @@ def errorUse(expression, expected=None, resumeValue=True, dump=False):
logger.info(infoMsg)
try:
if stopLimit > TURN_OFF_RESUME_INFO_LIMIT:
kb.suppressResumeInfo = True
infoMsg = "suppressing resume console info because of "
infoMsg += "large number of rows (possible slowdown)"
logger.info(infoMsg)
for num in xrange(startLimit, stopLimit):
output = __errorFields(expression, expressionFields, expressionFieldsList, expected, num, resumeValue)
@ -320,6 +327,9 @@ def errorUse(expression, expected=None, resumeValue=True, dump=False):
errMsg += "'%s'" % e
logger.critical(errMsg)
finally:
kb.suppressResumeInfo = False
if not outputs:
outputs = __errorFields(expression, expressionFields, expressionFieldsList)

10
lib/techniques/inband/union/use.py
View File

@ -34,6 +34,7 @@ from lib.core.enums import PAYLOAD
from lib.core.exception import sqlmapConnectionException
from lib.core.exception import sqlmapSyntaxException
from lib.core.settings import FROM_TABLE
from lib.core.settings import TURN_OFF_RESUME_INFO_LIMIT
from lib.core.unescaper import unescaper
from lib.request.connect import Connect as Request
from lib.utils.resume import resume
@ -246,6 +247,12 @@ def unionUse(expression, unpack=True, dump=False):
logger.info(infoMsg)
try:
if stopLimit > TURN_OFF_RESUME_INFO_LIMIT:
kb.suppressResumeInfo = True
infoMsg = "suppressing resume console info because of "
infoMsg += "large number of rows (possible slowdown)"
logger.info(infoMsg)
for num in xrange(startLimit, stopLimit):
if Backend.getIdentifiedDbms() in (DBMS.MSSQL, DBMS.SYBASE):
field = expressionFieldsList[0]
@ -284,6 +291,9 @@ def unionUse(expression, unpack=True, dump=False):
errMsg += "'%s'" % e
logger.critical(errMsg)
finally:
kb.suppressResumeInfo = False
if not value:
value = __oneShotUnionUse(expression, unpack)

1
lib/utils/resume.py
View File

@ -135,6 +135,7 @@ def resume(expression, payload):
else:
infoMsg += logValue
if not kb.suppressResumeInfo:
dataToStdout("[%s] [INFO] %s\n" % (time.strftime("%X"), infoMsg))
return resumedValue