Home page logo

metasploit logo Metasploit mailing list archives

Re: bug in parsing mssql output
From: HD Moore <hdm () metasploit com>
Date: Wed, 09 Jun 2010 10:26:32 -0500

On 6/9/2010 10:09 AM, Robin Wood wrote:
If I run the mssql_query with true rather than false I get a lot of

[-] unsupported token: 0
[-] unsupported token: 0
[-] unsupported token: 11
[-] unsupported token: 0
[-] unsupported token: 231
[-] unsupported token: 20

Since its a stream parser, as soon as we hit one bad token, all bets are
off and we can no longer follow the stream. The current parser needs an
overhaul in order to parse all record types correctly, the MS protocol
spec indicates how big each field type is, which should be smarter than
just hardcoding a list of tested types.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]