infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Brute force directory and file names with MySQL

bug/bundler_fix
Robin Wood 2013-01-20 21:32:02 +00:00
parent e7604f80b2
commit 4d5a7a3d4d
1 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
modules/auxiliary/scanner/mysql/mysql_file_enum.rb
View File

@ -44,7 +44,16 @@ class Metasploit3 < Msf::Auxiliary
return
end
mysql_query("USE " + datastore['DATABASE_NAME'])
begin
mysql_query_no_handle("USE " + datastore['DATABASE_NAME'])
rescue ::RbMysql::Error => e
print_error("MySQL Error: #{e.class} #{e.to_s}")
return
rescue Rex::ConnectionTimeout => e
print_error("Timeout: #{e.message}")
return
end
res = mysql_query("SELECT * FROM information_schema.TABLES WHERE TABLE_SCHEMA = '" + datastore['DATABASE_NAME'] + "' AND TABLE_NAME = '" + datastore['TABLE_NAME'] + "';")
table_exists = (res.size == 1)