diff --git a/lib/techniques/brute/use.py b/lib/techniques/brute/use.py index e8d22a5ad..6ba0ae808 100644 --- a/lib/techniques/brute/use.py +++ b/lib/techniques/brute/use.py @@ -226,7 +226,7 @@ def columnExists(columnFile, regex=None): for column in threadData.shared.value: if Backend.getIdentifiedDbms() in (DBMS.MYSQL,): - result = inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE ABS(%s)>0)", (column, table, column))) + result = not inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE %s REGEXP '[^0-9]')", (column, table, column))) else: result = inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE ROUND(%s)=ROUND(%s))", (column, table, column, column)))