From d2221e4604ef1cfe7704ae8f7013421076e09539 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Mon, 16 May 2011 00:23:50 +0000 Subject: [PATCH] fix for a minor "retrieved" cosmetic issue in partial union technique reported by Devon Mitchell (retrieved: "information_schema","COLUMNS<...) --- doc/THANKS | 3 +++ lib/techniques/inband/union/use.py | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/doc/THANKS b/doc/THANKS index e1676f264..df718b03c 100644 --- a/doc/THANKS +++ b/doc/THANKS @@ -277,6 +277,9 @@ Enrico Milanese for reporting a bugs when using (-a) a single line User-Agent file for providing me with some ideas for the PHP backdoor +Devon Mitchell + for reporting a minor bug + Anton Mogilin for reporting a few bugs diff --git a/lib/techniques/inband/union/use.py b/lib/techniques/inband/union/use.py index 6ac8fcd9d..19749c106 100644 --- a/lib/techniques/inband/union/use.py +++ b/lib/techniques/inband/union/use.py @@ -269,7 +269,7 @@ def unionUse(expression, unpack=True, dump=False): value += output if conf.verbose == 1: - items = output.replace(kb.misc.start, "").replace(kb.misc.stop, "").split(kb.misc.delimiter) + items = extractRegexResult(r'%s(?P.*?)%s' % (kb.misc.start, kb.misc.stop), output, re.DOTALL | re.IGNORECASE).split(kb.misc.delimiter) status = "[%s] [INFO] retrieved: %s\r\n" % (time.strftime("%X"), safecharencode(",".join(map(lambda x: "\"%s\"" % x, items)))) if len(status) > width: status = "%s..." % status[:width - 3]