CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-10-21 03:03:50 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

removed --useBetween switch and added new tampering module ./tamper/between.py

Browse source
This commit is contained in:
Miroslav Stampar 2010-10-15 23:48:07 +00:00
parent 1ae4d0fc2a
commit 1336b97c2c
4 changed files with 54 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

1
lib/core/optiondict.py
View file

@ -58,7 +58,6 @@ optDict = {
"eString": "string",
"eRegexp": "string",
"thold": "float",
"useBetween": "boolean",
},
"Techniques": {

4
lib/parse/cmdline.py
View file

@ -175,10 +175,6 @@ def cmdLineParser():
action="store_true", default=False,
help="Compare pages based only on their textual content")
injection.add_option("--use-between", dest="useBetween",
action="store_true", default=False,
help="Use operator BETWEEN instead of default '>'")
injection.add_option("--tamper", dest="tamper",
help="Use given module(s) for tampering injection data")

5
lib/techniques/blind/inference.py
View file

@ -169,10 +169,7 @@ def bisection(payload, expression, length=None, charsetType=None, firstChar=None
posValueOld = posValue
posValue = chr(posValue) if posValue < 128 else unichr(posValue)
if not conf.useBetween or kb.dbms == "SQLite":
forgedPayload = safeStringFormat(payload, (expressionUnescaped, idx, posValue))
else:
forgedPayload = safeStringFormat(payload.replace('%3E', 'NOT BETWEEN 0 AND'), (expressionUnescaped, idx, posValue))
forgedPayload = safeStringFormat(payload, (expressionUnescaped, idx, posValue))
queriesCount[0] += 1
result = Request.queryPage(urlencode(forgedPayload))