Merge pull request #413 from Bjerregaard/master

Fixed bug in false positive test for time-based injections
This commit is contained in:
Miroslav Stampar 2013-03-02 00:43:32 -08:00
commit 333ca0369b

View File

@ -661,7 +661,7 @@ def checkFalsePositives(injection):
# Just in case if DBMS hasn't properly recovered from previous delayed request # Just in case if DBMS hasn't properly recovered from previous delayed request
if PAYLOAD.TECHNIQUE.BOOLEAN not in injection.data: if PAYLOAD.TECHNIQUE.BOOLEAN not in injection.data:
checkBooleanExpression("%d=%d", randInt1, randInt2) checkBooleanExpression("%d=%d" % (randInt1, randInt2))
if checkBooleanExpression("%d>(%d+%d)" % (min(randInt1, randInt2), randInt3, max(randInt1, randInt2))): if checkBooleanExpression("%d>(%d+%d)" % (min(randInt1, randInt2), randInt3, max(randInt1, randInt2))):
retVal = None retVal = None