sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-07-24 23:19:45 +03:00
Code Issues Packages Projects Releases Wiki Activity

support for URLs containing credentials

Browse Source
This commit is contained in:
Rend 2022-03-15 10:10:56 +03:30
parent dcf304c65e
commit 29e08d80cc
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
lib/core/common.py
View File

@ -1721,13 +1721,13 @@ def parseTargetUrl():
try:
urlSplit = _urllib.parse.urlsplit(conf.url)
hostnamePort = [urlSplit.hostname, urlSplit.port]
except ValueError as ex:
errMsg = "invalid URL '%s' has been given ('%s'). " % (conf.url, getSafeExString(ex))
errMsg += "Please be sure that you don't have any leftover characters (e.g. '[' or ']') "
errMsg += "in the hostname part"
raise SqlmapGenericException(errMsg)
hostnamePort = urlSplit.netloc.split(":") if not re.search(r"\[.+\]", urlSplit.netloc) else filterNone((re.search(r"\[.+\]", urlSplit.netloc).group(0), re.search(r"\](:(?P<port>\d+))?", urlSplit.netloc).group("port")))
conf.scheme = (urlSplit.scheme.strip().lower() or "http")
conf.path = urlSplit.path.strip()
@ -1736,8 +1736,8 @@ def parseTargetUrl():
if conf.forceSSL:
conf.scheme = re.sub(r"(?i)\A(http|ws)\Z", r"\g<1>s", conf.scheme)
conf.ipv6 = conf.hostname != conf.hostname.strip("[]")
conf.hostname = conf.hostname.strip("[]").replace(kb.customInjectionMark, "")
conf.ipv6 = ":" in conf.hostname
conf.hostname = conf.hostname.replace(kb.customInjectionMark, "")
try:
conf.hostname.encode("idna")

2
lib/core/option.py
View File

@ -1527,7 +1527,7 @@ def _setHostname():
if conf.url:
try:
conf.hostname = _urllib.parse.urlsplit(conf.url).netloc.split(':')[0]
conf.hostname = _urllib.parse.urlsplit(conf.url).hostname
except ValueError as ex:
errMsg = "problem occurred while "
errMsg += "parsing an URL '%s' ('%s')" % (conf.url, getSafeExString(ex))