Bug fix for --hex/--technique=B (especially MsSQL)

lib/core/common.py

@@ -1260,7 +1260,9 @@ def getCharset(charsetType=None):
         asciiTbl.extend([0, 1])
         asciiTbl.extend(xrange(47, 58))
         asciiTbl.extend(xrange(64, 71))
+        asciiTbl.extend([87, 88])  # X
         asciiTbl.extend(xrange(96, 103))
+        asciiTbl.extend([119, 120])  # x
 
     # Characters
     elif charsetType == CHARSET_TYPE.ALPHA:

lib/request/inject.py

@@ -366,6 +366,9 @@ def getValue(expression, blind=True, union=True, error=True, time=True, fromUser
     affected parameter.
     """
 
+    if conf.hexConvert:
+        charsetType = CHARSET_TYPE.HEXADECIMAL
+
     kb.safeCharEncode = safeCharEncode
     kb.resumeValues = resumeValue
 

lib/techniques/blind/inference.py

@@ -308,7 +308,7 @@ def bisection(payload, expression, length=None, charsetType=None, firstChar=None
                                             dbgMsg = "turning back on time auto-adjustment mechanism"
                                             logger.debug(dbgMsg)
                                             kb.adjustTimeDelay = ADJUST_TIME_DELAY.YES
-                                    
+
                                     return decodeIntToUnicode(retVal)
                             else:
                                 return None