CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-10-21 19:22:48 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

ORDER BY technique used for finding proper UNION col count (dramatical improvement of speed and capabilities) and one minor bug fix

Browse source
This commit is contained in:
Miroslav Stampar 2011-08-03 09:08:16 +00:00
parent 07afcd5440
commit 9423d15fb3
5 changed files with 54 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

6
plugins/generic/enumeration.py
View file

@ -2031,10 +2031,8 @@ class Enumeration:
query += exclDbsQuery
values = inject.getValue(query, blind=False)
if not isNoneValue(values):
if isinstance(values, basestring):
values = [ values ]
if not any([isNoneValue(values), isinstance(values, basestring)]):
values = filter(lambda x: isinstance(x, (tuple, list, set)) and len(x) == 2, values)
for foundDb, foundTbl in values:
foundDb = safeSQLIdentificatorNaming(foundDb)
foundTbl = safeSQLIdentificatorNaming(foundTbl, True)