Function _goUnion

lib/request/inject.py:346–357

Retrieve the output of a SQL query taking advantage of an union SQL injection vulnerability on the affected parameter.

(expression, unpack=True, dump=False)

    return output

def _goUnion(expression, unpack=True, dump=False):
    """
    Retrieve the output of a SQL query taking advantage of an union SQL
    injection vulnerability on the affected parameter.
    """

    output = unionUse(expression, unpack=unpack, dump=dump)

    if isinstance(output, six.string_types):
        output = parseUnionPage(output)

    return output

@lockedmethod
@stackedmethod