From e66a81ab4ef9c18b6f9e47fe056540afa768eaa7 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Fri, 11 Jul 2014 16:24:57 +0200 Subject: [PATCH] Fix for an Issue #757 --- lib/techniques/error/use.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/lib/techniques/error/use.py b/lib/techniques/error/use.py index 070c573b5..e414a5a4e 100644 --- a/lib/techniques/error/use.py +++ b/lib/techniques/error/use.py @@ -99,6 +99,9 @@ def _oneShotErrorUse(expression, field=None): incrementCounter(kb.technique) + if page and conf.noCast: + page = re.sub(r"'%s'.*?'%s'" % (kb.chars.start, kb.chars.stop), "", page) + # Parse the returned page to get the exact error-based # SQL injection output output = reduce(lambda x, y: x if x is not None else y, (\