CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-08-04 14:55:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Some more patches for -d
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
Details
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
Details
/ build (windows-latest, 3.14) (push) Waiting to run
Details

Browse source
This commit is contained in:
Miroslav Štampar 2026-07-11 16:13:12 +02:00
parent e23a91f6db
commit d5ff557a13
9 changed files with 70 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

11
lib/request/direct.py
View file

@ -60,7 +60,10 @@ def direct(query, content=True):
break
if select:
if re.search(r"(?i)\ASELECT ", query) is None:
# only auto-wrap a bare scalar expression (e.g. 'CURRENT_USER', '48*60') in SELECT; a user-supplied
# complete row-returning statement (--sql-query 'PRAGMA ...' / 'WITH ...' / 'EXPLAIN ...') must be left
# intact, otherwise 'SELECT PRAGMA ...' is a syntax error and silently returns nothing
if re.search(r"(?i)\A\s*(?:SELECT|WITH|PRAGMA|EXPLAIN|DESCRIBE|DESC|SHOW|TABLE|VALUES)\b", query) is None:
query = "SELECT %s" % query
if conf.binaryFields:
@ -82,7 +85,11 @@ def direct(query, content=True):
output = [tuple(_hexifyBinary(_) for _ in row) if isListLike(row) else _hexifyBinary(row) for row in output]
if state == TIMEOUT_STATE.NORMAL:
hashDBWrite(query, output, True)
elif state == TIMEOUT_STATE.TIMEOUT:
elif state in (TIMEOUT_STATE.TIMEOUT, TIMEOUT_STATE.EXCEPTION):
# a timed-out OR fatally-errored query (e.g. the connector raised SqlmapConnectionException, or the
# connection dropped mid-scan) left the connection unusable; reconnect so the rest of the scan
# recovers instead of every following query being silently swallowed to None (wrong/empty data).
# A genuinely dead DB makes connect() raise here and the scan aborts cleanly, as with TIMEOUT.
conf.dbmsConnector.close()
conf.dbmsConnector.connect()
elif output: