Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit fb09961

Browse files
committed
minor update
1 parent c5c4aae commit fb09961

2 files changed

Lines changed: 10 additions & 1 deletion

File tree

plugins/generic/enumeration.py

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1211,6 +1211,15 @@ def dumpTable(self):
12111211
indexRange = getRange(count, dump=True, plusOne=plusOne)
12121212

12131213
if kb.dbms == DBMS.ACCESS:
1214+
for column in colList:
1215+
# It would be good to have a numeric column as a pivot
1216+
result = inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE %s>0)", (column, conf.tbl, column)))
1217+
1218+
if result:
1219+
colList.remove(column)
1220+
colList.insert(0, column)
1221+
break
1222+
12141223
value = " "
12151224
for column in colList:
12161225
for index in indexRange:

xml/queries.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -359,7 +359,7 @@
359359
<tables/>
360360
<dump_table>
361361
<inband query="SELECT %s FROM %s"/>
362-
<blind query="SELECT MIN(%s) FROM %s WHERE CVAR(%s) > '%s'" query2="SELECT TOP 1 %s FROM %s WHERE %s LIKE '%s'" count="SELECT COUNT(*) FROM %s"/>
362+
<blind query="SELECT MIN(%s) FROM %s WHERE CVAR(%s) > '%s'" query2="SELECT TOP 1 %s FROM %s WHERE CVAR(%s) LIKE '%s'" count="SELECT COUNT(*) FROM %s"/>
363363
</dump_table>
364364
</dbms>
365365

0 commit comments

Comments
 (0)