This commit is contained in:
Miroslav Stampar 2010-12-31 12:58:27 +00:00
parent 5db8ebbfa9
commit 076560f59f

View File

@ -36,10 +36,8 @@ class Fingerprint(GenericFingerprint):
infoMsg = "executing MySQL comment injection fingerprint"
logger.info(infoMsg)
query = agent.prefixQuery("/* NoValue */")
query = agent.suffixQuery(query)
payload = agent.payload(newValue=query)
result = Request.queryPage(payload)
randInt = randomInt()
result = inject.checkBooleanExpression("%d=%d/* NoValue */" % (randInt, randInt))
if not result:
warnMsg = "unable to perform MySQL comment injection"