From 5cc1bd8a12b6656abf49dc563324e639cec42a5c Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Wed, 27 Oct 2010 08:27:31 +0000 Subject: [PATCH] major fix for heuristic check --- lib/controller/checks.py | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/lib/controller/checks.py b/lib/controller/checks.py index f2f0752e3..2842a954e 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -104,10 +104,7 @@ def heuristicCheckSqlInjection(place, parameter, value): postfix = conf.postfix payload = "%s%s%s" % (prefix, randomStr(length=10, alphabet=['"', '\'', ')', '(']), postfix) - - if place == "URI": - payload = conf.paramDict[place][parameter].replace('*', payload) - + payload = agent.payload(place, parameter, value, payload) Request.queryPage(payload, place) result = wasLastRequestError()