diff --git a/lib/techniques/union/use.py b/lib/techniques/union/use.py index 58cdbb162..c50164b65 100644 --- a/lib/techniques/union/use.py +++ b/lib/techniques/union/use.py @@ -175,7 +175,7 @@ def unionUse(expression, unpack=True, dump=False): # NOTE: we assume that only queries that get data from a table can # return multiple entries if (kb.injection.data[PAYLOAD.TECHNIQUE.UNION].where == PAYLOAD.WHERE.NEGATIVE or \ - (dump and (conf.limitStart or conf.limitStop))) and \ + (dump and (conf.limitStart or conf.limitStop)) or "LIMIT " in expression.upper()) and \ " FROM " in expression.upper() and ((Backend.getIdentifiedDbms() \ not in FROM_DUMMY_TABLE) or (Backend.getIdentifiedDbms() in FROM_DUMMY_TABLE \ and not expression.upper().endswith(FROM_DUMMY_TABLE[Backend.getIdentifiedDbms()]))) \