From edc8ef9d5b1d0f4805646d0fdedfe431f5e40765 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Tue, 25 Feb 2014 13:48:34 +0100 Subject: [PATCH] Patch for an Issue #611 (original page used in case of tamper functions was wrong - e.g. if --tamper=base64encode was used) --- lib/controller/checks.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/lib/controller/checks.py b/lib/controller/checks.py index ed50fa1d8..99b4b70b2 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -324,6 +324,9 @@ def checkSqlInjection(place, parameter, value): # test's tag if where == PAYLOAD.WHERE.ORIGINAL or conf.prefix: origValue = value + + if kb.tamperFunctions: + templatePayload = agent.payload(place, parameter, value="", newValue=origValue, where=where) elif where == PAYLOAD.WHERE.NEGATIVE: # Use different page template than the original # one as we are changing parameters value, which