diff --git a/lib/techniques/error/use.py b/lib/techniques/error/use.py index 02d7978b6..7c997665d 100644 --- a/lib/techniques/error/use.py +++ b/lib/techniques/error/use.py @@ -317,7 +317,8 @@ def errorUse(expression, dump=False): countedExpression = expression.replace(expressionFields, queries[Backend.getIdentifiedDbms()].count.query % ('*' if len(expressionFieldsList) > 1 else expressionFields), 1) if " ORDER BY " in expression: - countedExpression = countedExpression[:countedExpression.index(" ORDER BY ")] + _ = countedExpression.upper().rindex(" ORDER BY ") + countedExpression = countedExpression[:_] _, _, _, _, _, _, countedExpressionFields, _ = agent.getFields(countedExpression) count = _oneShotErrorUse(countedExpression, countedExpressionFields) diff --git a/lib/techniques/union/use.py b/lib/techniques/union/use.py index 85797d6eb..0512972c7 100644 --- a/lib/techniques/union/use.py +++ b/lib/techniques/union/use.py @@ -263,7 +263,7 @@ def unionUse(expression, unpack=True, dump=False): stopLimit = 1 - elif not count or int(count) == 0: + elif (not count or int(count) == 0): if not count: warnMsg = "the SQL query provided does not " warnMsg += "return any output"