CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-07-11 19:13:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

minor update

Browse source
This commit is contained in:
Miroslav Stampar 2011-01-03 08:46:20 +00:00
parent 8625494ff2
commit d19a8d53e4
2 changed files with 20 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
lib/controller/checks.py
View file

@ -497,11 +497,11 @@ def simpletonCheckSqlInjection(place, parameter, value):
firstPage, _ = Request.queryPage(payload, place, content=True, raise404=False)
if not (wasLastRequestDBMSError() or wasLastRequestHTTPError()):
if getComparePageRatio(kb.originalPage, firstPage) > CONSTANT_RATIO:
if getComparePageRatio(kb.originalPage, firstPage, filtered=True) > CONSTANT_RATIO:
payload = "%s AND %d>%d" % (value, randInt, randInt+1)
payload = agent.payload(place, parameter, value, payload)
secondPage, _ = Request.queryPage(payload, place, content=True, raise404=False)
result = getComparePageRatio(firstPage, secondPage) <= CONSTANT_RATIO
result = getComparePageRatio(firstPage, secondPage, filtered=True) <= CONSTANT_RATIO
infoMsg = "simpleton test shows that %s " % place
infoMsg += "parameter '%s' might " % parameter