diff --git a/rev_shell.py b/rev_shell.py index 0e0f855..31e655b 100755 --- a/rev_shell.py +++ b/rev_shell.py @@ -187,6 +187,7 @@ class ShellListener: sys.stdout.flush() def interactive(self): + print("[ ] Switching to interactive mode") self.on_message.append(lambda x: self.print_message(x)) while self.running and self.connection is not None: self.sendline(input()) diff --git a/sql.php b/sql.php index d549517..051ff2a 100644 --- a/sql.php +++ b/sql.php @@ -1,6 +1,13 @@ setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); } if ($dump_all) { - $res = mysqli_query($link, "SELECT TABLE_NAME FROM information_schema.TABLES WHERE TABLE_SCHEMA='$database'"); - $tables = array(); - while ($row = $res->fetch_assoc()) { - $tables[] = $row["TABLE_NAME"]; - } + $tables = array(); + + if ($db_driver === "mysqli") { + $res = mysqli_query($link, "SELECT TABLE_NAME FROM information_schema.TABLES WHERE TABLE_SCHEMA='$database'"); + while ($row = $res->fetch_assoc()) { + $tables[] = $row["TABLE_NAME"]; + } + } else if ($db_driver === "PDO") { + $stmt = $link->query("SELECT TABLE_NAME FROM information_schema.TABLES WHERE TABLE_SCHEMA='$database'"); + while ($row = $stmt->fetch(PDO::FETCH_ASSOC)) { + $tables[] = $row["TABLE_NAME"]; + } + } foreach ($tables as $tableName) { echo "-- DATA FOR TABLE: tableName\n"; - $res = mysqli_query($link, "SELECT * FROM $tableName"); - while ($row = $res->fetch_assoc()) { - var_dump($row); + if ($db_driver === "mysqli") { + $res = mysqli_query($link, "SELECT * FROM $tableName"); + while ($row = $res->fetch_assoc()) { + print_r($row); + } + } else if ($db_driver === "PDO") { + $stmt = $link->query("SELECT * FROM $tableName"); + while ($row = $stmt->fetch(PDO::FETCH_ASSOC)) { + print_r($row); + } } echo "-- --------------------------\n\n"; } } else { - $res = mysqli_query($link, $query); - if (!$res) { - die("Error executing query: " . mysqli_error($link)); + if ($db_driver === "mysqli") { + $res = mysqli_query($link, $query); + if (!$res) { + die("Error executing query: " . mysqli_error($link)); + } + + while ($row = $res->fetch_assoc()) { + print_r($row); + } + } else if ($db_driver === "PDO") { + $stmt = $link->query($query); + while ($row = $stmt->fetch(PDO::FETCH_ASSOC)) { + print_r($row); + } } } -while ($row = $res->fetch_assoc()) { - var_dump($row); +if ($db_driver === "mysqli") { + mysqli_close($link); } - -mysqli_close($link); ?>