From 7690aa85ce40d5ccf88bf72fddde743da534bf33 Mon Sep 17 00:00:00 2001 From: Bernardo Damele Date: Fri, 3 Dec 2010 11:00:41 +0000 Subject: [PATCH] Added a comment needed to understand this hack when looking at the code in a month or so ;) --- lib/core/agent.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/lib/core/agent.py b/lib/core/agent.py index aac2e3f9f..97452a6d8 100644 --- a/lib/core/agent.py +++ b/lib/core/agent.py @@ -148,6 +148,9 @@ class Agent: if conf.direct: return self.payloadDirect(string) + # Either if the technique is stacked queries () or we are + # replacing () the parameter original value with our + # payload, do not put a space after the prefix if kb.technique == 4: query = kb.injection.prefix elif kb.technique and kb.technique in kb.injection.data: