From 07ae3779877ec41b131474b9d5e46d8464922cd4 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Mon, 13 Jun 2022 04:41:52 +0200 Subject: [PATCH] Minor patch (some middleware doesn't like switching from GET to POST) --- lib/controller/checks.py | 3 +-- lib/core/settings.py | 2 +- 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/lib/controller/checks.py b/lib/controller/checks.py index a1a53878e..1b0e0dd2b 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -1367,11 +1367,10 @@ def checkWaf(): retVal = False payload = "%d %s" % (randomInt(), IPS_WAF_CHECK_PAYLOAD) + place = PLACE.GET if PLACE.URI in conf.parameters: - place = PLACE.POST value = "%s=%s" % (randomStr(), agent.addPayloadDelimiters(payload)) else: - place = PLACE.GET value = "" if not conf.parameters.get(PLACE.GET) else conf.parameters[PLACE.GET] + DEFAULT_GET_POST_DELIMITER value += "%s=%s" % (randomStr(), agent.addPayloadDelimiters(payload)) diff --git a/lib/core/settings.py b/lib/core/settings.py index 8089b02ab..601a545a9 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -20,7 +20,7 @@ from thirdparty import six from thirdparty.six import unichr as _unichr # sqlmap version (...) -VERSION = "1.6.6.2" +VERSION = "1.6.6.3" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)