From 9efe0015153cb209979db344e6a3018f8d3f76e8 Mon Sep 17 00:00:00 2001 From: Bernardo Damele Date: Wed, 12 May 2010 22:02:47 +0000 Subject: [PATCH] SQLite does not support BETWEEN --- lib/techniques/blind/inference.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lib/techniques/blind/inference.py b/lib/techniques/blind/inference.py index 445f6a3d2..e29c19a82 100644 --- a/lib/techniques/blind/inference.py +++ b/lib/techniques/blind/inference.py @@ -158,17 +158,17 @@ def bisection(payload, expression, length=None, charsetType=None, firstChar=None posValueOld = posValue posValue = chr(posValue) - if not conf.useBetween: + if not conf.useBetween or kb.dbms == "SQLite": forgedPayload = safeStringFormat(payload, (expressionUnescaped, idx, posValue)) else: - forgedPayload = safeStringFormat(payload.replace('%3E', 'BETWEEN 0 AND '), (expressionUnescaped, idx, posValue)) + forgedPayload = safeStringFormat(payload.replace('%3E', 'BETWEEN 0 AND'), (expressionUnescaped, idx, posValue)) result = Request.queryPage(urlencode(forgedPayload)) if kb.dbms == "SQLite": posValue = posValueOld - if not conf.useBetween: #normal + if not conf.useBetween or kb.dbms == "SQLite": #normal if result: minValue = posValue asciiTbl = asciiTbl[position:]