Bug fix for DNS Exfiltration in PgSQL case ('invalid URI')

stamparm · stamparm · commit 4e0e64d06bbd · 2014-10-31T20:28:37.000+01:00
diff --git a/lib/core/agent.py b/lib/core/agent.py
@@ -993,7 +993,7 @@ def replacePayload(self, value, payload):
         """
 
         _ = re.escape(PAYLOAD_DELIMITER)
-        return re.sub("(%s.*?%s)" % (_, _), ("%s%s%s" % (PAYLOAD_DELIMITER, payload, PAYLOAD_DELIMITER)).replace("\\", r"\\"), value) if value else value
+        return re.sub("(?s)(%s.*?%s)" % (_, _), ("%s%s%s" % (PAYLOAD_DELIMITER, payload, PAYLOAD_DELIMITER)).replace("\\", r"\\"), value) if value else value
 
     def runAsDBMSUser(self, query):
         if conf.dbmsCred and "Ad Hoc Distributed Queries" not in query:
