From 0bbbfc2eaca1fd08e9b9866a97a56133ae73e8b7 Mon Sep 17 00:00:00 2001 From: stamparm Date: Fri, 22 Feb 2013 11:12:41 +0100 Subject: [PATCH] Adding a small warning message (related to the Issue #407) --- lib/controller/checks.py | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/lib/controller/checks.py b/lib/controller/checks.py index fa1cd845d..a510119d7 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -671,6 +671,13 @@ def checkFalsePositives(injection): warnMsg = "false positive or unexploitable injection point detected" logger.warn(warnMsg) + if PAYLOAD.TECHNIQUE.BOOLEAN in injection.data: + if all(_.__name__ != "between" for _ in kb.tamperFunctions): + warnMsg = "there is a possibility that the character '>' is " + warnMsg += "filtered by the back-end server. You can try " + warnMsg += "to rerun with '--tamper=between'" + logger.warn(warnMsg) + kb.injection = popValue() return retVal