From 27265f56baf316e7447da61b51fd18f2ad9b0ac6 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Mon, 11 Feb 2019 15:58:25 +0100 Subject: [PATCH] Update for #3488 (found samples with Server: wts) --- lib/core/settings.py | 2 +- txt/checksum.md5 | 4 ++-- waf/wts.py | 1 + 3 files changed, 4 insertions(+), 3 deletions(-) diff --git a/lib/core/settings.py b/lib/core/settings.py index 09a13d528..0268d6452 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -19,7 +19,7 @@ from lib.core.enums import DBMS_DIRECTORY_NAME from lib.core.enums import OS # sqlmap version (...) -VERSION = "1.3.2.17" +VERSION = "1.3.2.18" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE) diff --git a/txt/checksum.md5 b/txt/checksum.md5 index 3d3c3e329..48753df40 100644 --- a/txt/checksum.md5 +++ b/txt/checksum.md5 @@ -50,7 +50,7 @@ d5ef43fe3cdd6c2602d7db45651f9ceb lib/core/readlineng.py 7d8a22c582ad201f65b73225e4456170 lib/core/replication.py 3179d34f371e0295dd4604568fb30bcd lib/core/revision.py d6269c55789f78cf707e09a0f5b45443 lib/core/session.py -33c1396c08313221a337ba08b678d0d7 lib/core/settings.py +23e7cd640ca9345ced37e2c30194859d lib/core/settings.py 4483b4a5b601d8f1c4281071dff21ecc lib/core/shell.py 10fd19b0716ed261e6d04f311f6f527c lib/core/subprocessng.py 43772ea73e9e3d446f782af591cb4eda lib/core/target.py @@ -475,7 +475,7 @@ ba0fb1e6b815446b9d6f30950900fc80 waf/trafficshield.py a7b8c4c3d1463409e0e204932f0ddff0 waf/webknight.py 053c6b1ea20133bd9f563f1275ddb5a4 waf/webseal.py ac9e4e3ced77012ed97284634a9ffc74 waf/wordfence.py -db5cf700712d8439453d4d22111e0617 waf/wts.py +512788a2a07f41290f78c9ad0053bd84 waf/wts.py e69f77220558564785f0b3c961782a93 waf/yundun.py a560bee3e948b97af2c88805933dcaad waf/yunsuo.py c8b6517da2c8a28d474956e3a6b8c1ed waf/zenedge.py diff --git a/waf/wts.py b/waf/wts.py index d84ca223f..b729cbdc2 100644 --- a/waf/wts.py +++ b/waf/wts.py @@ -18,6 +18,7 @@ def detect(get_page): for vector in WAF_ATTACK_VECTORS: page, headers, _ = get_page(get=vector) retval = ">WTS-WAF" in (page or "") + retval |= re.search(r"\Awts/", headers.get(HTTP_HEADER.SERVER, ""), re.I) is not None if retval: break