dnrops
/
metasploit-framework
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Initial attempt at blind_dump_data improvements 

Add in fully binary search orientated version of blind_dump_data
This commit is contained in:
Grant Willcox 2022-09-12 23:46:10 -05:00
parent 32df4cdeee
commit 0d639b99bb
No known key found for this signature in database
GPG Key ID: D35E05C0F2B81E83
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
modules/auxiliary/gather/suite_crm_export_sqli.rb
View File

@ -204,7 +204,7 @@ class MetasploitModule < Msf::Auxiliary
min_length = 0
max_length = 800
loop do
break if flag = blind_request("length(cast((#{query}) as binary))=#{output_length}")
break if blind_request("length(cast((#{query}) as binary))=#{output_length}")
flag = blind_request("length(cast((#{query}) as binary))+BETWEEN+#{output_length}+AND+#{max_length}")
if flag