mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2026-10-22 08:25:58 +08:00
fa0507ab39a7a82cafa7f5aa8f5f8397f26a4c0d
version, release, distribution, codename and service pack) by parsing the
DBMS banner value when both -f and -b are provided: adapted the code and
added XML files defining regular expressions for matching.
Example of the -f -b output now on MySQL 5.0.67 running on latest Ubuntu:
--8<--
back-end DBMS: active fingerprint: MySQL >= 5.0.38 and < 5.1.2
comment injection fingerprint: MySQL 5.0.67
banner parsing fingerprint: MySQL 5.0.67
html error message fingerprint: MySQL
back-end DBMS operating system: Linux Ubuntu 8.10 (Intrepid)
--8<--
Minor improvements to sqlmap msf3 auxiliary modules based on Efrain Torres' commit on msf3 trunk, http://metasploit.com/dev/trac/changeset/5787
Description
Automatic SQL injection and database takeover tool
Languages
Python
99.4%
Shell
0.3%
C
0.2%