CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-08-04 14:55:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Some more fixing of CI/CD errors

Browse source
This commit is contained in:
Miroslav Štampar 2026-07-28 18:27:23 +02:00
parent b0afe6b8d4
commit d7d06c088d
2 changed files with 11 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
lib/core/settings.py
View file

@ -20,7 +20,7 @@ from lib.core.enums import OS
from thirdparty import six
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
VERSION = "1.10.7.226"
VERSION = "1.10.7.227"
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)

11
tests/test_error_engine.py
View file

@ -129,7 +129,11 @@ class TestErrorChunkLengthHex(unittest.TestCase):
"inj": (kb.injection.place, kb.injection.parameter, kb.injection.data),
"qp": Connect.queryPage,
"dbmsHandler": conf.get("dbmsHandler"), "forceDbms": conf.get("forceDbms"),
"charsStart": kb.chars.start, "charsStop": kb.chars.stop,
}
# Pin the boundary markers so the CAP-relative channel capacity is deterministic and the
# extraction regex can never hit a leaked/odd marker (the default markers are random).
kb.chars.start, kb.chars.stop = "qzxjq", "qkvbq"
conf.hexConvert = False
conf.charset = None
conf.hashDB = None
@ -165,12 +169,17 @@ class TestErrorChunkLengthHex(unittest.TestCase):
eu.Request.queryPage = self._saved["qp"]
conf.dbmsHandler = self._saved["dbmsHandler"]
conf.forceDbms = self._saved["forceDbms"]
kb.chars.start = self._saved["charsStart"]
kb.chars.stop = self._saved["charsStop"]
def _install_oracle(self, secret="hello"):
cap = self.CAP
def oracle(payload=None, content=False, raise404=True, **kwargs):
m = re.search(r"REPEAT\((?:0x([0-9a-fA-F]{2})|'(.)'),(\d+)\)", payload) # chunk-length probe
# chunk-length probe: recognize every repeat-family builder the search may emit
# (REPEAT=MySQL, REPLICATE=MSSQL/Sybase, RPAD=Oracle/Firebird) so a leaked non-MySQL
# back-end still exercises the search instead of mis-detecting length 0
m = re.search(r"(?:REPEAT|REPLICATE|RPAD)\((?:0x([0-9a-fA-F]{2})|'(.)'),(\d+)", payload)
if m:
raw = (chr(int(m.group(1), 16)) if m.group(1) else m.group(2)) * int(m.group(3))
else: