diff --git a/lib/techniques/brute/use.py b/lib/techniques/brute/use.py index a6c1cb4ae..e8d22a5ad 100644 --- a/lib/techniques/brute/use.py +++ b/lib/techniques/brute/use.py @@ -225,7 +225,10 @@ def columnExists(columnFile, regex=None): columns = {} for column in threadData.shared.value: - result = inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE ROUND(%s)=ROUND(%s))", (column, table, column, column))) + if Backend.getIdentifiedDbms() in (DBMS.MYSQL,): + result = inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE ABS(%s)>0)", (column, table, column))) + else: + result = inject.checkBooleanExpression("%s" % safeStringFormat("EXISTS(SELECT %s FROM %s WHERE ROUND(%s)=ROUND(%s))", (column, table, column, column))) if result: columns[column] = 'numeric'