Minor commit related to the last one (bypassing DBMS error trimming problem)

This commit is contained in:
Miroslav Stampar 2014-10-01 13:35:20 +02:00
parent 8c9014c39f
commit a9454fbb43

View File

@ -851,7 +851,7 @@ def heuristicCheckSqlInjection(place, parameter):
kb.heuristicMode = True
payload = "%s%s%s" % (prefix, "%s%s%s" % (randomStr(), DUMMY_XSS_CHECK_APPENDIX, randomStr()), suffix)
payload = "%s%s%s" % (prefix, "%s'%s%s" % (randomStr(), DUMMY_XSS_CHECK_APPENDIX, randomStr()), suffix)
payload = agent.payload(place, parameter, newValue=payload)
page, _ = Request.queryPage(payload, place, content=True, raise404=False)