CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-07-13 20:13:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

improvement of heuristic check (now original value is included too)

Browse source
This commit is contained in:
Miroslav Stampar 2010-11-12 23:06:01 +00:00
parent 06a872fc99
commit 84849316b3
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
lib/controller/checks.py
View file

@ -125,7 +125,7 @@ def heuristicCheckSqlInjection(place, parameter, value):
if conf.postfix:
postfix = conf.postfix
payload = "%s%s%s" % (prefix, randomStr(length=10, alphabet=['"', '\'', ')', '(']), postfix)
payload = "%s%s%s%s" % (value, prefix, randomStr(length=10, alphabet=['"', '\'', ')', '(']), postfix)
payload = agent.payload(place, parameter, value, payload)
Request.queryPage(payload, place, raise404=False)
result = wasLastRequestError()