rapid7 / metasploit-framework

Metasploit Framework
https://www.metasploit.com/
Other
32.92k stars 13.71k forks source link

add more mssql datatypes #19105

Closed zgoldman-r7 closed 3 weeks ago

zgoldman-r7 commented 4 weeks ago

This adds support for 7 new datatypes for MSSQL: float, real, money, smallmoney, datetime, smalldatetime, and numeric.

To test this, make sure you can connect to a remote mssql session, either via docker or VM.

use mssql_sql run with credentials/connection info to the MSSQL instance, setting sql to a query that returns one of the new datatypes. ie:

query "select cast('1990-01-02' as datetime);"})}
query "select cast(null as datetime);"})}
query "select cast('1990-01-02' as smalldatetime);"})}
query "select cast('19900' as float);"})}
query "select cast(null as float);"})}
query "select cast('19900' as real);"})}
query "select cast(null as real);"})}
query "select cast('12.50' as money);"})}
query "select cast(null as money);"})}
query "select cast('12.50' as smallmoney);"})}
query "select cast(null as smallmoney);"})}
query "select cast('1999999900' as numeric(16, 6));"})}
query "select cast(null as numeric);"})}

checking null as well

Validate that output response looks okay

adfoster-r7 commented 2 weeks ago

Release Notes

Updates MSSQL modules to support querying multiple new column types: float, real, money, smallmoney, datetime, smalldatetime, and numeric