From cd1c100cc05bec00260fd80b47fa5ad17566d6bd Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Mon, 14 Jul 2014 21:10:45 +0200 Subject: [PATCH] Another patch for an Issue #757 --- lib/techniques/error/use.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/techniques/error/use.py b/lib/techniques/error/use.py index e414a5a4e..c8a43874e 100644 --- a/lib/techniques/error/use.py +++ b/lib/techniques/error/use.py @@ -100,7 +100,7 @@ def _oneShotErrorUse(expression, field=None): incrementCounter(kb.technique) if page and conf.noCast: - page = re.sub(r"'%s'.*?'%s'" % (kb.chars.start, kb.chars.stop), "", page) + page = re.sub(r"('|\%%27)%s('|\%%27).*?('|\%%27)%s('|\%%27)" % (kb.chars.start, kb.chars.stop), "", page) # Parse the returned page to get the exact error-based # SQL injection output