Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit dea15b5

Browse files
committed
notify user if --udf-inject is provided but no stacked queries SQLi is detected
1 parent d6a361f commit dea15b5

1 file changed

Lines changed: 5 additions & 2 deletions

File tree

lib/takeover/udf.py

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -165,10 +165,13 @@ def udfInjectSys(self):
165165

166166
def udfInjectCustom(self):
167167
if Backend.getIdentifiedDbms() not in (DBMS.MYSQL, DBMS.PGSQL):
168-
errMsg = "UDF injection feature is not yet implemented on %s" % Backend.getIdentifiedDbms()
169-
raise SqlmapUnsupportedFeatureException(errMsg)
168+
errMsg = "UDF injection feature only works on MySQL and PostgreSQL"
169+
logger.error(errMsg)
170+
return
170171

171172
if not isTechniqueAvailable(PAYLOAD.TECHNIQUE.STACKED) and not conf.direct:
173+
errMsg = "UDF injection feature requires stacked queries SQL injection"
174+
logger.error(errMsg)
172175
return
173176

174177
self.checkDbmsOs()

0 commit comments

Comments
 (0)