diff --git a/lib/request/connect.py b/lib/request/connect.py index efe549579..558e68c6f 100644 --- a/lib/request/connect.py +++ b/lib/request/connect.py @@ -118,7 +118,7 @@ class Connect: if conf.method == "POST": if conf.parameters.has_key("POST") and not post: post = conf.parameters["POST"] - + requestMsg += " HTTP/1.1" # Perform HTTP request diff --git a/lib/techniques/blind/inference.py b/lib/techniques/blind/inference.py index 0c6389ce8..b799f6579 100644 --- a/lib/techniques/blind/inference.py +++ b/lib/techniques/blind/inference.py @@ -32,6 +32,7 @@ from lib.core.common import dataToStdout from lib.core.common import getCharset from lib.core.common import replaceNewlineTabs from lib.core.common import safeStringFormat +from lib.core.convert import urlencode from lib.core.data import conf from lib.core.data import kb from lib.core.data import logger @@ -127,7 +128,7 @@ def bisection(payload, expression, length=None, charsetType=None, firstChar=None posValue = chr(posValue) forgedPayload = safeStringFormat(payload, (expressionUnescaped, idx, posValue)) - result = Request.queryPage(forgedPayload) + result = Request.queryPage(urlencode(forgedPayload)) if kb.dbms == "SQLite": posValue = posValueOld