CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-09-27 13:34:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Enabling PostgreSQL file write over a gadget when stacked queries are unavailable

Browse source
This commit is contained in:
Miroslav Štampar 2026-08-18 11:45:44 +02:00
parent 529fc7aebb
commit bec4dedbc9
2 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
lib/core/settings.py
View file

@ -20,7 +20,7 @@ from lib.core.enums import OS
from thirdparty import six
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
VERSION = "1.10.8.48"
VERSION = "1.10.8.49"
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)

7
plugins/generic/filesystem.py
View file

@ -315,6 +315,13 @@ class Filesystem(object):
debugMsg += "stacked query technique"
logger.debug(debugMsg)
written = self.stackedWriteFile(localFile, remoteFile, fileType, forceCheck)
self.cleanup(onlyFileTbl=True)
elif Backend.isDbms(DBMS.PGSQL) and inject.getGadget():
debugMsg = "going to upload the file '%s' with " % fileType
debugMsg += "large object technique through a gadget"
logger.debug(debugMsg)
written = self.stackedWriteFile(localFile, remoteFile, fileType, forceCheck)
self.cleanup(onlyFileTbl=True)
elif isTechniqueAvailable(PAYLOAD.TECHNIQUE.UNION) and Backend.isDbms(DBMS.MYSQL):