CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-10-21 03:03:50 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Delegate urlencoding to agent.py only

Browse source
This commit is contained in:
Bernardo Damele 2010-10-31 13:28:05 +00:00
parent 17e8abe841
commit 65a0a8d285
5 changed files with 0 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lib/takeover/udf.py
View file

@ -12,7 +12,6 @@ import os
from lib.core.agent import agent
from lib.core.common import dataToStdout
from lib.core.common import readInput
from lib.core.convert import urlencode
from lib.core.data import conf
from lib.core.data import kb
from lib.core.data import logger
@ -80,7 +79,6 @@ class UDF:
udfName = "sys_exec"
cmd = unescaper.unescape(cmd)
cmd = urlencode(cmd, convall=True)
inject.goStacked("SELECT %s(%s)" % (udfName, cmd), silent)
@ -90,7 +88,6 @@ class UDF:
udfName = "sys_eval"
cmd = unescaper.unescape(cmd)
cmd = urlencode(cmd, convall=True)
inject.goStacked("INSERT INTO %s(%s) VALUES (%s(%s))" % (self.cmdTblName, self.tblField, udfName, cmd))
output = inject.getValue("SELECT %s FROM %s" % (self.tblField, self.cmdTblName), resumeValue=False, firstChar=first, lastChar=last)

2
lib/takeover/xp_cmdshell.py
View file

@ -9,7 +9,6 @@ See the file 'doc/COPYING' for copying permission
from lib.core.common import randomStr
from lib.core.common import readInput
from lib.core.convert import urlencode
from lib.core.data import conf
from lib.core.data import kb
from lib.core.data import logger
@ -98,7 +97,6 @@ class xp_cmdshell:
def xpCmdshellForgeCmd(self, cmd):
forgedCmd = "EXEC %s '%s'" % (self.xpCmdshellStr, cmd)
forgedCmd = urlencode(forgedCmd, convall=True)
return forgedCmd