CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-08-04 14:55:40 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

update (now URIs like www.site.com/id82 are automatically treated as possible URI injectable)

Browse source
This commit is contained in:
Miroslav Stampar 2011-01-31 20:36:01 +00:00
parent 777a19cfa9
commit fa58a9c86b
4 changed files with 12 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
lib/core/target.py
View file

@ -32,6 +32,7 @@ from lib.core.option import __setDBMS
from lib.core.option import __setKnowledgeBaseAttributes
from lib.core.session import resumeConfKb
from lib.core.settings import UNICODE_ENCODING
from lib.core.settings import URI_INJECTABLE_REGEX
from lib.core.xmldump import dumper as xmldumper
from lib.request.connect import Connect as Request
@ -78,6 +79,9 @@ def __setRequestParams():
conf.method = HTTPMETHOD.POST
if re.search(URI_INJECTABLE_REGEX, conf.url, re.I):
conf.url = "%s*" % conf.url
if "*" in conf.url:
conf.parameters[PLACE.URI] = conf.url
conf.paramDict[PLACE.URI] = {}