diff --git a/lib/controller/checks.py b/lib/controller/checks.py index 4d84ff719..b515d5f08 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -181,7 +181,7 @@ def checkSqlInjection(place, parameter, value): fstPayload = unescapeDbms(fstPayload, injection, dbms) fstPayload = "%s%s" % (fstPayload, comment) - if stype != 4 and clause != [2, 3] and clause != [ 2 ]: + if stype != 4 and clause != [2, 3] and clause != [ 3 ]: space = " " else: space = "" @@ -279,6 +279,7 @@ def checkSqlInjection(place, parameter, value): origValue = "" kb.pageTemplate = getPageTemplate(templatePayload, place) + print "kb.originalPage:", kb.originalPage # Forge request payload by prepending with boundary's # prefix and appending the boundary's suffix to the diff --git a/lib/core/agent.py b/lib/core/agent.py index 65c0bc281..01a93d526 100644 --- a/lib/core/agent.py +++ b/lib/core/agent.py @@ -153,7 +153,7 @@ class Agent: # payload, do not put a space after the prefix if kb.technique == 4: query = kb.injection.prefix - elif kb.injection.clause == [2, 3] or kb.injection.clause == [ 2 ]: + elif kb.injection.clause == [2, 3] or kb.injection.clause == [ 3 ]: if kb.technique != 3: query = kb.injection.prefix elif kb.technique and kb.technique in kb.injection.data: