From 0e7f771be607fbbfa343150e9b352308efa93848 Mon Sep 17 00:00:00 2001 From: Bernardo Damele Date: Fri, 15 Feb 2013 16:28:09 +0000 Subject: [PATCH] minor adjustment --- lib/techniques/blind/inference.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/techniques/blind/inference.py b/lib/techniques/blind/inference.py index c1207e33a..458bf75da 100644 --- a/lib/techniques/blind/inference.py +++ b/lib/techniques/blind/inference.py @@ -485,7 +485,7 @@ def bisection(payload, expression, length=None, charsetType=None, firstChar=None testValue = unescaper.escape("'%s'" % commonValue) if "'" not in commonValue else unescaper.escape("%s" % commonValue, quote=False) if timeBasedCompare: - query = kb.injection.data[kb.technique].vector.replace("[RANDNUM]", testValue) + query = kb.injection.data[kb.technique].vector query = agent.prefixQuery(query.replace("[INFERENCE]", "(%s)=%s" % (expressionUnescaped, testValue))) else: query = agent.prefixQuery(safeStringFormat("AND (%s)=%s", (expressionUnescaped, testValue))) @@ -512,7 +512,7 @@ def bisection(payload, expression, length=None, charsetType=None, firstChar=None testValue = unescaper.escape("'%s'" % commonPattern) if "'" not in commonPattern else unescaper.escape("%s" % commonPattern, quote=False) if timeBasedCompare: - query = kb.injection.data[kb.technique].vector.replace("[RANDNUM]", testValue) + query = kb.injection.data[kb.technique].vector query = agent.prefixQuery(query.replace("[INFERENCE]", "(%s)=%s" % (subquery, testValue))) else: query = agent.prefixQuery(safeStringFormat("AND (%s)=%s", (subquery, testValue)))