diff --git a/lib/core/settings.py b/lib/core/settings.py index e27142979..1f7c01865 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -19,7 +19,7 @@ from lib.core.enums import OS from thirdparty import six # sqlmap version (...) -VERSION = "1.10.11.53" +VERSION = "1.10.11.54" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE) diff --git a/lib/utils/crawler.py b/lib/utils/crawler.py index 05cc4a6b4..9a5b15c52 100644 --- a/lib/utils/crawler.py +++ b/lib/utils/crawler.py @@ -501,7 +501,7 @@ def normalizeCrawlingResults(targets): # action name and parameters (e.g. /users/edit?id= vs /products/edit?id=) are not collapsed match = re.search(r"\A[^?]+\?.+\Z", value) if match: - key = re.sub(r"=[^=&]*", "=", match.group(0)).strip("&?") + key = "%s %s" % (target[1] or "GET", re.sub(r"=[^=&]*", "=", match.group(0)).strip("&?")) # Note: e.g. GET link and POST form with same parameter(s) are distinct targets if '=' in key and key not in seen: results.add(target) seen.add(key)