CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-06-10 02:01:57 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

improvement toward proper implementation of OR-based injection by usage of "negative logic" mechanism

Browse source
This commit is contained in:
Miroslav Stampar 2012-03-29 14:33:27 +00:00
parent ce4c697bbd
commit 637a8d8273
5 changed files with 23 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

1
lib/controller/checks.py
View file

@ -327,6 +327,7 @@ def checkSqlInjection(place, parameter, value):
# Useful to set kb.matchRatio at first based on
# the False response content
kb.matchRatio = None
kb.negativeLogic = (where == PAYLOAD.WHERE.NEGATIVE)
Request.queryPage(genCmpPayload(), place, raise404=False)
# Perform the test's True request