sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-02 20:54:13 +03:00
Code Issues Packages Projects Releases Wiki Activity

Fix for an Issue #804

Browse Source
This commit is contained in:
Miroslav Stampar 2014-08-28 14:26:55 +02:00
parent 9476359255
commit 77cb35dcf6
1 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
lib/techniques/blind/inference.py
View File

@ -225,7 +225,7 @@ def bisection(payload, expression, length=None, charsetType=None, firstChar=None
if charTbl is None: if charTbl is None:
charTbl = type(asciiTbl)(asciiTbl) charTbl = type(asciiTbl)(asciiTbl)
originalTbl = type(asciiTbl)(charTbl) originalTbl = type(charTbl)(charTbl)
if continuousOrder and shiftTable is None: if continuousOrder and shiftTable is None:
# Used for gradual expanding into unicode charspace # Used for gradual expanding into unicode charspace
@ -344,10 +344,13 @@ def bisection(payload, expression, length=None, charsetType=None, firstChar=None
if minValue == maxChar or maxValue == minChar: if minValue == maxChar or maxValue == minChar:
return None return None
# If we are working with non-continuous elements, set for index in xrange(len(originalTbl)):
# both minValue and character afterwards are possible if originalTbl[index] == minValue:
# candidates break
for retVal in (originalTbl[originalTbl.index(minValue)], originalTbl[originalTbl.index(minValue) + 1]):
# If we are working with non-continuous elements, both minValue and character after
# are possible candidates
for retVal in (originalTbl[index], originalTbl[index + 1]):
forgedPayload = safeStringFormat(payload.replace(INFERENCE_GREATER_CHAR, INFERENCE_EQUALS_CHAR), (expressionUnescaped, idx, retVal)) forgedPayload = safeStringFormat(payload.replace(INFERENCE_GREATER_CHAR, INFERENCE_EQUALS_CHAR), (expressionUnescaped, idx, retVal))
result = Request.queryPage(forgedPayload, timeBasedCompare=timeBasedCompare, raise404=False) result = Request.queryPage(forgedPayload, timeBasedCompare=timeBasedCompare, raise404=False)
incrementCounter(kb.technique) incrementCounter(kb.technique)