From fe0ff6e679f13546377cb0f58f38b000054fefad Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Sun, 9 Feb 2014 17:50:16 +0100 Subject: [PATCH] Changing 'is injectable' to 'seems to be injectable' for boolean and time-based blind injection cases - for false positive cases --- lib/controller/checks.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/controller/checks.py b/lib/controller/checks.py index 15b8b4640..a05297131 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -390,7 +390,7 @@ def checkSqlInjection(place, parameter, value): # Perform the test's False request if not falseResult: - infoMsg = "%s parameter '%s' is '%s' injectable " % (place, parameter, title) + infoMsg = "%s parameter '%s' seems to be '%s' injectable " % (place, parameter, title) logger.info(infoMsg) injectable = True @@ -445,7 +445,7 @@ def checkSqlInjection(place, parameter, value): trueResult = Request.queryPage(reqPayload, place, timeBasedCompare=True, raise404=False) if trueResult: - infoMsg = "%s parameter '%s' is '%s' injectable " % (place, parameter, title) + infoMsg = "%s parameter '%s' seems to be '%s' injectable " % (place, parameter, title) logger.info(infoMsg) injectable = True