Minor fix

This commit is contained in:
Bernardo Damele 2010-12-07 17:17:38 +00:00
parent 8ff7c9a5a1
commit 5f97312f29
2 changed files with 3 additions and 2 deletions

View File

@ -181,7 +181,7 @@ def checkSqlInjection(place, parameter, value):
fstPayload = unescapeDbms(fstPayload, injection, dbms) fstPayload = unescapeDbms(fstPayload, injection, dbms)
fstPayload = "%s%s" % (fstPayload, comment) fstPayload = "%s%s" % (fstPayload, comment)
if stype != 4 and clause != [2, 3] and clause != [ 2 ]: if stype != 4 and clause != [2, 3] and clause != [ 3 ]:
space = " " space = " "
else: else:
space = "" space = ""
@ -279,6 +279,7 @@ def checkSqlInjection(place, parameter, value):
origValue = "" origValue = ""
kb.pageTemplate = getPageTemplate(templatePayload, place) kb.pageTemplate = getPageTemplate(templatePayload, place)
print "kb.originalPage:", kb.originalPage
# Forge request payload by prepending with boundary's # Forge request payload by prepending with boundary's
# prefix and appending the boundary's suffix to the # prefix and appending the boundary's suffix to the

View File

@ -153,7 +153,7 @@ class Agent:
# payload, do not put a space after the prefix # payload, do not put a space after the prefix
if kb.technique == 4: if kb.technique == 4:
query = kb.injection.prefix query = kb.injection.prefix
elif kb.injection.clause == [2, 3] or kb.injection.clause == [ 2 ]: elif kb.injection.clause == [2, 3] or kb.injection.clause == [ 3 ]:
if kb.technique != 3: if kb.technique != 3:
query = kb.injection.prefix query = kb.injection.prefix
elif kb.technique and kb.technique in kb.injection.data: elif kb.technique and kb.technique in kb.injection.data: