CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-08-04 14:55:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Implemented a better way to deal with % characters in parameters' value. Minor code restyle.

Browse source
This commit is contained in:
Bernardo Damele 2008-10-16 15:31:02 +00:00
parent d664f0387e
commit a5b2366033
8 changed files with 30 additions and 40 deletions
Download patch file Download diff file Expand all files Collapse all files

13
lib/techniques/inference/blind.py
View file

@ -92,9 +92,7 @@ def bisection(payload, expression, length=None):
queriesCount[0] += 1
limit = ((maxValue + minValue) / 2)
# TODO: find a cleaner way to do this
forgedPayload = payload.replace("%", "%%", 1) % (expressionUnescaped, idx, limit)
forgedPayload = forgedPayload.replace("%%", "%")
forgedPayload = payload % (expressionUnescaped, idx, limit)
result = Request.queryPage(forgedPayload)
@ -175,8 +173,7 @@ def bisection(payload, expression, length=None):
assert index[0] == length
if conf.sessionFile:
dataToSessionFile(replaceNewlineTabs(value))
dataToSessionFile(replaceNewlineTabs(value))
if conf.verbose in ( 1, 2 ) and not showEta:
dataToStdout("\r[%s] [INFO] retrieved: %s" % (time.strftime("%X"), value))
@ -195,8 +192,7 @@ def bisection(payload, expression, length=None):
value += val
if conf.sessionFile:
dataToSessionFile(replaceNewlineTabs(val))
dataToSessionFile(replaceNewlineTabs(val))
if showEta:
etaProgressUpdate(time.time() - charStart, index)
@ -210,7 +206,6 @@ def bisection(payload, expression, length=None):
infoMsg = "retrieved: %s" % value
logger.info(infoMsg)
if conf.sessionFile:
dataToSessionFile("]\n")
dataToSessionFile("]\n")
return queriesCount[0], value