File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 6262 "testParameter" : "string" ,
6363 "skip" : "string" ,
6464 "dbms" : "string" ,
65+ "dbmsCred" : "string" ,
6566 "os" : "string" ,
6667 "invalidBignum" : "boolean" ,
6768 "invalidLogical" : "boolean" ,
175176 "checkTor" : "boolean" ,
176177 "crawlDepth" : "integer" ,
177178 "csvDel" : "string" ,
178- "dbmsCred" : "string" ,
179179 "dumpFormat" : "string" ,
180180 "eta" : "boolean" ,
181181 "flushSession" : "boolean" ,
Original file line number Diff line number Diff line change @@ -198,6 +198,9 @@ def cmdLineParser():
198198 injection .add_option ("--dbms" , dest = "dbms" ,
199199 help = "Force back-end DBMS to this value" )
200200
201+ injection .add_option ("--dbms-cred" , dest = "dbmsCred" ,
202+ help = "DBMS authentication credentials (user:password)" )
203+
201204 injection .add_option ("--os" , dest = "os" ,
202205 help = "Force back-end DBMS operating system "
203206 "to this value" )
@@ -549,9 +552,6 @@ def cmdLineParser():
549552 help = "Delimiting character used in CSV output "
550553 "(default \" %s\" )" % defaults .csvDel )
551554
552- general .add_option ("--dbms-cred" , dest = "dbmsCred" ,
553- help = "DBMS authentication credentials (user:password)" )
554-
555555 general .add_option ("--dump-format" , dest = "dumpFormat" ,
556556 help = "Format of dumped data (CSV (default), HTML or SQLITE)" )
557557
Original file line number Diff line number Diff line change @@ -185,6 +185,14 @@ skip =
185185# access, firebird, maxdb, sybase
186186dbms =
187187
188+ # DBMS authentication credentials (user:password). Useful if you want to
189+ # run SQL statements as another user, the back-end database management
190+ # system is PostgreSQL or Microsoft SQL Server and the parameter is
191+ # vulnerable by stacked queries SQL injection or you are connecting directly
192+ # to the DBMS (-d switch).
193+ # Syntax: username:password
194+ dbmsCred =
195+
188196# Force back-end DBMS operating system to this value. If this option is
189197# set, the back-end DBMS identification process will be minimized as
190198# needed.
@@ -596,14 +604,6 @@ crawlDepth = 0
596604# Default: ,
597605csvDel = ,
598606
599- # DBMS authentication credentials (user:password). Useful if you want to
600- # run SQL statements as another user, the back-end database management
601- # system is PostgreSQL or Microsoft SQL Server and the parameter is
602- # vulnerable by stacked queries SQL injection or you are connecting directly
603- # to the DBMS (-d switch).
604- # Syntax: username:password
605- dbmsCred =
606-
607607# Format of dumped data
608608# Valid: CSV, HTML or SQLITE
609609dumpFormat = CSV
You can’t perform that action at this time.
0 commit comments