diff --git a/lib/core/session.py b/lib/core/session.py index aeb2e110f..278d9400f 100644 --- a/lib/core/session.py +++ b/lib/core/session.py @@ -250,7 +250,7 @@ def resumeConfKb(expression, url, value): kb.brute.tables.append((db, table)) elif expression == "COLUMN_EXISTS" and url == conf.url: - table, column = unSafeFormatString(value[:-1]).split('..') + table, column = unSafeFormatString(value[:-1]).split('|') colName, colType = column.split(' ') if '.' in table: diff --git a/lib/techniques/brute/use.py b/lib/techniques/brute/use.py index e64fc86ed..a18385eef 100644 --- a/lib/techniques/brute/use.py +++ b/lib/techniques/brute/use.py @@ -257,7 +257,7 @@ def columnExists(columnFile, regex=None): else: columns[column] = 'non-numeric' - dataToSessionFile("[%s][%s][%s][COLUMN_EXISTS][%s..%s %s]\n" % (conf.url, kb.injection.place,\ + dataToSessionFile("[%s][%s][%s][COLUMN_EXISTS][%s|%s %s]\n" % (conf.url, kb.injection.place,\ safeFormatString(conf.parameters[kb.injection.place]), safeFormatString(table),\ safeFormatString(column), safeFormatString(columns[column])))