Minor bug fix for counting of entries for error-based and partial UNION query SQL injection techs

This commit is contained in:
Bernardo Damele 2011-03-11 16:03:19 +00:00
parent 3cb0ca4b63
commit d8a76ebe34
2 changed files with 2 additions and 4 deletions

View File

@ -227,8 +227,7 @@ def errorUse(expression, expected=None, resumeValue=True, dump=False):
stopLimit = conf.limitStop
# Count the number of SQL query entries output
countFirstField = queries[Backend.getIdentifiedDbms()].count.query % expressionFieldsList[0]
countedExpression = expression.replace(expressionFields, countFirstField, 1)
countedExpression = expression.replace(expressionFields, "COUNT(*)", 1)
if re.search(" ORDER BY ", expression, re.I):
untilOrderChar = countedExpression.index(" ORDER BY ")

View File

@ -198,8 +198,7 @@ def unionUse(expression, unpack=True, dump=False):
stopLimit = conf.limitStop
# Count the number of SQL query entries output
countFirstField = queries[Backend.getIdentifiedDbms()].count.query % expressionFieldsList[0]
countedExpression = expression.replace(expressionFields, countFirstField, 1)
countedExpression = expression.replace(expressionFields, "COUNT(*)", 1)
if re.search(" ORDER BY ", expression, re.I):
untilOrderChar = countedExpression.index(" ORDER BY ")