From 09ddb3bd8be2458fe95d6ef9e2ba77d5bf97cd4e Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Wed, 4 Oct 2017 14:02:47 +0200 Subject: [PATCH] Minor update for #2731 (--smoke-test failed) --- lib/core/settings.py | 2 +- tamper/charunicodeescape.py | 4 ++-- txt/checksum.md5 | 3 ++- 3 files changed, 5 insertions(+), 4 deletions(-) diff --git a/lib/core/settings.py b/lib/core/settings.py index f1c0b60c8..f85e6741e 100755 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -19,7 +19,7 @@ from lib.core.enums import DBMS_DIRECTORY_NAME from lib.core.enums import OS # sqlmap version (...) -VERSION = "1.1.10.0" +VERSION = "1.1.10.1" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE) diff --git a/tamper/charunicodeescape.py b/tamper/charunicodeescape.py index 1d19d998b..8fc8c7aca 100644 --- a/tamper/charunicodeescape.py +++ b/tamper/charunicodeescape.py @@ -21,8 +21,8 @@ def tamper(payload, **kwargs): Notes: * Useful to bypass weak filtering and/or WAFs in JSON contexes - >>> tamper('SELECT FIELD%20FROM TABLE') - '\u0053\u0045\u004C\u0045\u0043\u0054\u0020\u0046\u0049\u0045\u004C\u0044\u0020\u0046\u0052\u004F\u004D\u0020\u0054\u0041\u0042\u004C\u0045' + >>> tamper('SELECT FIELD FROM TABLE') + '\\\\u0053\\\\u0045\\\\u004C\\\\u0045\\\\u0043\\\\u0054\\\\u0020\\\\u0046\\\\u0049\\\\u0045\\\\u004C\\\\u0044\\\\u0020\\\\u0046\\\\u0052\\\\u004F\\\\u004D\\\\u0020\\\\u0054\\\\u0041\\\\u0042\\\\u004C\\\\u0045' """ retVal = payload diff --git a/txt/checksum.md5 b/txt/checksum.md5 index f65113a22..9c504f27e 100644 --- a/txt/checksum.md5 +++ b/txt/checksum.md5 @@ -46,7 +46,7 @@ e8e9fd4f224ead0caa1569312b5b2582 lib/core/optiondict.py d8e9250f3775119df07e9070eddccd16 lib/core/replication.py 785f86e3f963fa3798f84286a4e83ff2 lib/core/revision.py 40c80b28b3a5819b737a5a17d4565ae9 lib/core/session.py -d5d19c38c07e9ef926caa778b75571d6 lib/core/settings.py +00551710c935268b4f54ea28e5220712 lib/core/settings.py d91291997d2bd2f6028aaf371bf1d3b6 lib/core/shell.py 2ad85c130cc5f2b3701ea85c2f6bbf20 lib/core/subprocessng.py effc153067a00bd43461bfc1cdec1122 lib/core/target.py @@ -234,6 +234,7 @@ e6e3ae32bc3c3d5acb4b93289e3fe698 tamper/bluecoat.py 8576274cc84f77a7cfd936521e89397c tamper/chardoubleencode.py 6a7a04c35b6d5853ad6f449581c79ce4 tamper/charencode.py 893e7d907bcd370394b70a30d502be2b tamper/charunicodeencode.py +5c35346f93da0c1500c1205b8bb3962e tamper/charunicodeescape.py 596883203fbdd81ee760e4a00071bf39 tamper/commalesslimit.py f341a48112354a50347546fa73f4f531 tamper/commalessmid.py 1a368a32530c04a11a531cd21d587682 tamper/commentbeforeparentheses.py