diff --git a/lib/techniques/inband/union/test.py b/lib/techniques/inband/union/test.py index 318fd3c64..1775e73e3 100644 --- a/lib/techniques/inband/union/test.py +++ b/lib/techniques/inband/union/test.py @@ -100,6 +100,8 @@ def __unionTestByCharBruteforce(comment, place, parameter, value, prefix, suffix validPayload = None vector = None query = agent.prefixQuery("UNION ALL SELECT %s" % conf.uChar) + total = conf.uColsStop+1 - conf.uColsStart + index = 1 for count in range(conf.uColsStart, conf.uColsStop+1): if Backend.getIdentifiedDbms() in FROM_TABLE and query.endswith(FROM_TABLE[Backend.getIdentifiedDbms()]): @@ -112,7 +114,7 @@ def __unionTestByCharBruteforce(comment, place, parameter, value, prefix, suffix query += FROM_TABLE[Backend.getIdentifiedDbms()] status = "%d/%d" % (count, conf.uColsStop) - debugMsg = "testing %s columns (%d%%)" % (status, round(100.0*count/conf.uColsStop)) + debugMsg = "testing %s columns (%d%%)" % (status, round(100.0*index/total)) logger.debug(debugMsg) validPayload, vector = __unionConfirm(comment, place, parameter, value, prefix, suffix, count) @@ -120,6 +122,8 @@ def __unionTestByCharBruteforce(comment, place, parameter, value, prefix, suffix if validPayload: break + index += 1 + clearConsoleLine(True) return validPayload, vector