improvement toward proper implementation of OR-based injection by usage of "negative logic" mechanism

This commit is contained in:
Miroslav Stampar committed 2012-03-29 14:33:27 +00:00
1 parent ce4c697bbd
commit 637a8d8273
5 files changed
+23 -16

No files matched your search

+1
View File
@@ -327,6 +327,7 @@ def checkSqlInjection(place, parameter, value):
# Useful to set kb.matchRatio at first based on
# the False response content
kb.matchRatio = None
kb.negativeLogic = (where == PAYLOAD.WHERE.NEGATIVE)
Request.queryPage(genCmpPayload(), place, raise404=False)
# Perform the test's True request