CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-08-03 22:31:34 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Implemented FOR JSON AUTO in MsSQL

Browse source
This commit is contained in:
Miroslav Stampar 2020-10-28 16:48:11 +01:00
parent 7e483ffd7a
commit 0ff3b1ce70
5 changed files with 23 additions and 63 deletions
Download patch file Download diff file Expand all files Collapse all files

12
plugins/generic/databases.py
View file

@ -639,18 +639,6 @@ class Databases(object):
logger.info(infoMsg)
values = None
if Backend.isDbms(DBMS.MSSQL) and isTechniqueAvailable(PAYLOAD.TECHNIQUE.UNION):
expression = query
kb.dumpColumns = []
kb.rowXmlMode = True
for column in (extractRegexResult(r"SELECT (?P<result>.+?) FROM", query) or "").split(','):
kb.dumpColumns.append(randomStr().lower())
expression = expression.replace(column, "%s AS %s" % (column, kb.dumpColumns[-1]), 1)
values = unionUse(expression)
kb.rowXmlMode = False
kb.dumpColumns = None
if values is None:
values = inject.getValue(query, blind=False, time=False)