Bug fix for MsSQL --hex --technique=E (NOT IN based queries were not working properly)

stamparm · stamparm · commit c1eb803ef583 · 2012-10-28T21:16:51.000+01:00
diff --git a/lib/core/agent.py b/lib/core/agent.py
@@ -752,7 +752,7 @@ def limitQuery(self, num, query, field=None, uniqueField=None):
                 if " ORDER BY " not in fromFrom:
                     # Reference: http://vorg.ca/626-the-MS-SQL-equivalent-to-MySQLs-limit-command
                     if " WHERE " in limitedQuery:
-                        limitedQuery = "%s AND %s " % (limitedQuery, uniqueField or field)
+                        limitedQuery = "%s AND %s " % (limitedQuery, self.nullAndCastField(uniqueField or field))
                     else:
                         limitedQuery = "%s WHERE ISNULL(%s,' ') " % (limitedQuery, uniqueField or field)
 
