Minor bug fix to make --file-read and --os-bof syntactically work also with -d (direct connection)

bdamele · bdamele · commit ebd40b3933a9 · 2012-02-17T15:16:05.000Z
diff --git a/plugins/dbms/mssqlserver/filesystem.py b/plugins/dbms/mssqlserver/filesystem.py
@@ -51,8 +51,7 @@ def stackedReadFile(self, rFile):
         inject.goStacked("BULK INSERT %s FROM '%s' WITH (CODEPAGE='RAW', FIELDTERMINATOR='%s', ROWTERMINATOR='%s')" % (txtTbl, rFile, randomStr(10), randomStr(10)), silent=True)
 
         # Reference: http://support.microsoft.com/kb/104829
-        binToHexQuery = """
-        DECLARE @charset VARCHAR(16)
+        binToHexQuery = """DECLARE @charset VARCHAR(16)
         DECLARE @counter INT
         DECLARE @hexstr VARCHAR(4096)
         DECLARE @length INT
diff --git a/plugins/dbms/mssqlserver/takeover.py b/plugins/dbms/mssqlserver/takeover.py
@@ -76,8 +76,7 @@ def spHeapOverflow(self):
 
         shellcodeChar = shellcodeChar[:-1]
 
-        self.spExploit = """
-        DECLARE @buf NVARCHAR(4000),
+        self.spExploit = """DECLARE @buf NVARCHAR(4000),
         @val NVARCHAR(4),
         @counter INT
         SET @buf = '
