CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-08-04 14:55:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Improving dialect checks

Browse source
This commit is contained in:
Miroslav Štampar 2026-07-17 14:46:52 +02:00
parent b38eb79ed0
commit 76b75e95f0
5 changed files with 269 additions and 179 deletions
Download patch file Download diff file Expand all files Collapse all files

13
lib/controller/checks.py
View file

@ -166,9 +166,11 @@ def checkSqlInjection(place, parameter, value):
# keyword-free fallback: heuristicCheckDbms() above uses SELECT/quote payloads
# and is skipped when the WAF/IPS is dropping requests; the operator-dialect
# probes carry no SELECT/quote/schema name, so they can still narrow the DBMS in
# that case (or when it was inconclusive), using the now-calibrated boolean oracle
if not Backend.getIdentifiedDbms() and kb.heuristicDbms is None:
kb.heuristicDbms = dialectCheckDbms(injection)
# that case (or when it was inconclusive), using the now-calibrated boolean oracle.
# It feeds the lower-confidence heuristicExtendedDbms (UNION FROM / handler hint),
# deliberately NOT heuristicDbms, so it never drives reduceTests (skipping payloads)
if not Backend.getIdentifiedDbms() and kb.heuristicDbms is None and kb.heuristicExtendedDbms is None:
kb.heuristicExtendedDbms = dialectCheckDbms(injection)
# If the DBMS has already been fingerprinted (via DBMS-specific
# error message, simple heuristic check or via DBMS-specific
@ -730,7 +732,8 @@ def checkSqlInjection(place, parameter, value):
if len(kb.dbmsFilter or []) == 1:
Backend.forceDbms(kb.dbmsFilter[0])
elif not Backend.getIdentifiedDbms():
if kb.heuristicDbms is None:
heuristicDbms = kb.heuristicDbms or kb.heuristicExtendedDbms
if heuristicDbms is None:
if kb.heuristicTest == HEURISTIC_TEST.POSITIVE or injection.data:
warnMsg = "using unescaped version of the test "
warnMsg += "because of zero knowledge of the "
@ -738,7 +741,7 @@ def checkSqlInjection(place, parameter, value):
warnMsg += "explicitly set it with option '--dbms'"
singleTimeWarnMessage(warnMsg)
else:
Backend.forceDbms(kb.heuristicDbms)
Backend.forceDbms(heuristicDbms)
if unionExtended:
infoMsg = "automatically extending ranges for UNION "