Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 9b127e5

Browse files
committed
Adjusted for MySQL weirdness
1 parent 8803096 commit 9b127e5

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

lib/techniques/error/use.py

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ def errorUse(expression):
5151
nulledCastedField = agent.nullAndCastField(fieldToCastStr)
5252

5353
if kb.dbms == "MySQL":
54-
nulledCastedField = nulledCastedField.replace("AS CHAR)", "AS CHAR(255))") #fix for that 'Subquery returns more than 1 row'
54+
nulledCastedField = nulledCastedField.replace("AS CHAR)", "AS CHAR(100))") # fix for that 'Subquery returns more than 1 row'
5555

5656
expressionReplaced = expression.replace(fieldToCastStr, nulledCastedField, 1)
5757
expressionUnescaped = unescaper.unescape(expressionReplaced)
@@ -69,8 +69,8 @@ def errorUse(expression):
6969

7070
payload = agent.payload(newValue=forgedQuery)
7171
result = Request.queryPage(urlencode(payload), content=True)
72-
7372
match = re.search('%s(?P<result>.*?)%s' % (ERROR_START_CHAR, ERROR_END_CHAR), result[0], re.DOTALL | re.IGNORECASE)
73+
7474
if match:
7575
output = match.group('result')
7676
if output:

0 commit comments

Comments
 (0)