Fixes #2052

2025-12-07 05:01:30 +00:00 · 2016-07-21 09:38:52 +02:00
parent e21d751834
commit 7cca56edfa
3 changed files with 9 additions and 4 deletions
--- a/lib/techniques/union/use.py
+++ b/lib/techniques/union/use.py
@@ -111,8 +111,13 @@ def _oneShotUnionUse(expression, unpack=True, limited=False):
                    for column in kb.dumpColumns:
                        base64 = True
                        for child in root:
+                            value = child.attrib.get(column, "").strip()
+                            if value and not re.match(r"\A[a-zA-Z0-9+/]+={0,2}\Z", value):
+                                base64 = False
+                                break
+
                            try:
-                                child.attrib.get(column, "").decode("base64")
+                                value.decode("base64")
                            except binascii.Error:
                                base64 = False
                                break