From e105e1ea32a6c640c7db0eb087c40af4676022fa Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Sat, 15 Jan 2011 16:42:33 +0000 Subject: [PATCH] bug fix (some sites raise 404 during union tests) --- lib/techniques/inband/union/test.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/techniques/inband/union/test.py b/lib/techniques/inband/union/test.py index 14bff54ad..a5956f45f 100644 --- a/lib/techniques/inband/union/test.py +++ b/lib/techniques/inband/union/test.py @@ -45,7 +45,7 @@ def __unionPosition(comment, place, parameter, value, prefix, suffix, dbms, coun payload = agent.payload(place=place, parameter=parameter, newValue=query, where=where) # Perform the request - resultPage, _ = Request.queryPage(payload, place=place, content=True) + resultPage, _ = Request.queryPage(payload, place=place, content=True, raise404=False) if resultPage and randQuery in resultPage and " UNION ALL SELECT " not in resultPage: validPayload = payload @@ -62,7 +62,7 @@ def __unionPosition(comment, place, parameter, value, prefix, suffix, dbms, coun payload = agent.payload(place=place, parameter=parameter, newValue=query, where=2) # Perform the request - resultPage, _ = Request.queryPage(payload, place=place, content=True) + resultPage, _ = Request.queryPage(payload, place=place, content=True, raise404=False) if resultPage and " UNION ALL SELECT " not in resultPage and ((randQuery in resultPage and randQuery2 not in resultPage) or (randQuery not in resultPage and randQuery2 in resultPage)): vector = (position, count, comment, prefix, suffix, conf.uChar, 2)