CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-06-09 17:51:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fuck yea, first tests (MySQL/--tables & --common-prediction) are great :)

Browse source
This commit is contained in:
Miroslav Stampar 2010-05-26 10:41:37 +00:00
parent 7f0db26e99
commit bbdbe44e3f
3 changed files with 25 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

10
lib/techniques/blind/inference.py
View file

@ -379,11 +379,15 @@ def bisection(payload, expression, length=None, charsetType=None, firstChar=None
if singleValue is None:
val = getChar(index, predictedCharset, False) if predictedCharset else None
else:
query = agent.prefixQuery(" %s" % safeStringFormat('AND (%s) = \'%s\'', (expressionUnescaped, singleValue)))
query = agent.prefixQuery(" %s" % safeStringFormat('AND (%s) = %s', (expressionUnescaped, unescaper.unescape('\'%s\'' % singleValue))))
query = agent.postfixQuery(query)
payload = agent.payload(newValue=query)
result = Request.queryPage(urlencode(payload))
result = Request.queryPage(urlencode(agent.payload(newValue=query)))
if result:
dataToSessionFile(replaceNewlineTabs(singleValue[index-1:]))
if showEta:
etaProgressUpdate(time.time() - charStart, lastChar + 1)
elif conf.verbose >= 1:
dataToStdout(singleValue[index-1:])
finalValue = singleValue
break
if not val: