CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-08-04 06:50:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

upgrade/fixes for direct DBMS access

Browse source
This commit is contained in:
Miroslav Stampar 2012-02-07 10:46:55 +00:00
parent af71e3c563
commit f7bf1fbe94
9 changed files with 33 additions and 27 deletions
Download patch file Download diff file Expand all files Collapse all files

2
plugins/dbms/maxdb/enumeration.py
View file

@ -78,8 +78,6 @@ class Enumeration(GenericEnumeration):
rootQuery = queries[Backend.getIdentifiedDbms()].tables
for db in dbs:
db = unArrayizeValue(db)
randStr = randomStr()
query = rootQuery.inband.query % (("'%s'" % db) if db != "USER" else 'USER')
retVal = self.__pivotDumpTable("(%s) AS %s" % (query, randStr), ['%s.tablename' % randStr], blind=True)

5
plugins/dbms/mssqlserver/enumeration.py
View file

@ -89,8 +89,6 @@ class Enumeration(GenericEnumeration):
if any(isTechniqueAvailable(_) for _ in (PAYLOAD.TECHNIQUE.UNION, PAYLOAD.TECHNIQUE.ERROR)) or conf.direct:
for db in dbs:
db = unArrayizeValue(db)
if conf.excludeSysDbs and db in self.excludeDbsList:
infoMsg = "skipping system database '%s'" % db
logger.info(infoMsg)
@ -172,9 +170,6 @@ class Enumeration(GenericEnumeration):
enumDbs = kb.data.cachedDbs
for db in enumDbs:
if isinstance(db, list):
db = db[0]
db = safeSQLIdentificatorNaming(db)
foundTbls[db] = []

2
plugins/dbms/sybase/enumeration.py
View file

@ -139,8 +139,6 @@ class Enumeration(GenericEnumeration):
rootQuery = queries[Backend.getIdentifiedDbms()].tables
for db in dbs:
db = unArrayizeValue(db)
for blind in blinds:
randStr = randomStr()
query = rootQuery.inband.query % db

6
plugins/generic/enumeration.py
View file

@ -897,7 +897,7 @@ class Enumeration:
value = map(lambda x: (dbs[0], x), value)
for db, table in filterPairValues(value):
db = safeSQLIdentificatorNaming(unArrayizeValue(db))
db = safeSQLIdentificatorNaming(db)
table = safeSQLIdentificatorNaming(table, True)
if not kb.data.cachedTables.has_key(db):
@ -1654,6 +1654,10 @@ class Enumeration:
else:
colEntry = entry[index] if index < len(entry) else u''
if colEntry is None:
import pdb
pdb.set_trace()
colEntryLen = len(getUnicode(colEntry))
maxLen = max(colLen, colEntryLen)