sqlmapproject/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-10-12 02:22:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

Enabling PostgreSQL file write over a gadget when stacked queries are unavailable

Browse Source
This commit is contained in:
Miroslav Štampar
2026-08-18 11:45:44 +02:00
parent 529fc7aebb
commit bec4dedbc9
2 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
plugins/generic/filesystem.py
+7
View File
@@ -315,6 +315,13 @@ class Filesystem(object):
debugMsg += "stacked query technique"
logger.debug(debugMsg)
written = self.stackedWriteFile(localFile, remoteFile, fileType, forceCheck)
self.cleanup(onlyFileTbl=True)
elif Backend.isDbms(DBMS.PGSQL) and inject.getGadget():
debugMsg = "going to upload the file '%s' with " % fileType
debugMsg += "large object technique through a gadget"
logger.debug(debugMsg)
written = self.stackedWriteFile(localFile, remoteFile, fileType, forceCheck)
self.cleanup(onlyFileTbl=True)
elif isTechniqueAvailable(PAYLOAD.TECHNIQUE.UNION) and Backend.isDbms(DBMS.MYSQL):