Minor fix

This commit is contained in:
Bernardo Damele 2010-12-07 17:17:38 +00:00
parent 8ff7c9a5a1
commit 5f97312f29
2 changed files with 3 additions and 2 deletions

View File

@ -181,7 +181,7 @@ def checkSqlInjection(place, parameter, value):
fstPayload = unescapeDbms(fstPayload, injection, dbms)
fstPayload = "%s%s" % (fstPayload, comment)
if stype != 4 and clause != [2, 3] and clause != [ 2 ]:
if stype != 4 and clause != [2, 3] and clause != [ 3 ]:
space = " "
else:
space = ""
@ -279,6 +279,7 @@ def checkSqlInjection(place, parameter, value):
origValue = ""
kb.pageTemplate = getPageTemplate(templatePayload, place)
print "kb.originalPage:", kb.originalPage
# Forge request payload by prepending with boundary's
# prefix and appending the boundary's suffix to the

View File

@ -153,7 +153,7 @@ class Agent:
# payload, do not put a space after the prefix
if kb.technique == 4:
query = kb.injection.prefix
elif kb.injection.clause == [2, 3] or kb.injection.clause == [ 2 ]:
elif kb.injection.clause == [2, 3] or kb.injection.clause == [ 3 ]:
if kb.technique != 3:
query = kb.injection.prefix
elif kb.technique and kb.technique in kb.injection.data: