fixes #181 - proper save/resume information about single entry UNION SQL injection

This commit is contained in:
Bernardo Damele
2010-03-22 15:39:29 +00:00
parent d00e4a458a
commit d13ad8b2d7
6 changed files with 92 additions and 46 deletions

View File

@@ -55,11 +55,11 @@ class Agent:
retValue = ""
newValue = urlencode(newValue)
if negative or conf.paramNegative:
if negative or kb.unionNegative:
negValue = "-"
elif falseCond or conf.paramFalseCond:
elif falseCond or kb.unionFalseCond:
randInt = randomInt()
falseValue = " AND %d=%d" % (randInt, randInt + 1)
falseValue = urlencode(" AND %d=%d" % (randInt, randInt + 1))
# After identifing the injectable parameter
if kb.injPlace == "User-Agent":