diff --git a/lib/controller/checks.py b/lib/controller/checks.py index 5a38ecdac..a986defc3 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -351,7 +351,7 @@ def checkSqlInjection(place, parameter, value): socket.setdefaulttimeout(120) # Perform the test's request - _ = Request.queryPage(reqPayload, place, noteResponseTime = False) + _ = Request.queryPage(reqPayload, place, content=True, noteResponseTime=False) # 99.9999999997440% of all non time-based sql injection # affected durations should be inside +-7*stdev(durations) diff --git a/lib/request/connect.py b/lib/request/connect.py index 1b7402a9d..ad7c17db7 100644 --- a/lib/request/connect.py +++ b/lib/request/connect.py @@ -387,6 +387,7 @@ class Connect: Connect.getPage(url=conf.safUrl, cookie=cookie, direct=True, silent=True, ua=ua) start = time.time() + if not content and not response and kb.nullConnection: if kb.nullConnection == NULLCONNECTION.HEAD: method = HTTPMETHOD.HEAD @@ -405,6 +406,7 @@ class Connect: if not pageLength: page, headers = Connect.getPage(url=uri, get=get, post=post, cookie=cookie, ua=ua, silent=silent, method=method, auxHeaders=auxHeaders, response=response, raise404=raise404) + kb.lastQueryDuration = calculateDeltaSeconds(start) if conf.textOnly: