sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-03 05:04:11 +03:00
Code Issues Packages Projects Releases Wiki Activity

few updates

Browse Source
This commit is contained in:
Miroslav Stampar 2011-02-25 09:35:24 +00:00
parent aa88361ab1
commit 2bbbc9a41e
2 changed files with 11 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
extra/keepalive/keepalive.py
View File

@ -325,18 +325,15 @@ class HTTPConnection(httplib.HTTPConnection):
else:
raise CannotSendHeader()
for header in self._headers:
self._headers[header] = unicodeToSafeHTMLValue(self._headers[header])
for header in ['Host', 'Accept-Encoding']:
if header in self._headers:
str = '%s: %s' % (header, self._headers[header])
self._output(str)
self._output(unicodeToSafeHTMLValue(str))
del self._headers[header]
for header, value in self._headers.items():
str = '%s: %s' % (header, value)
self._output(str)
self._output(unicodeToSafeHTMLValue(str))
self._send_output()

15
lib/core/common.py
View File

@ -2395,13 +2395,16 @@ def removeReflectiveValues(content, payload):
(e.g. ?search=sql injection ---> ...value="sql%20injection")
"""
payload = payload.replace(PAYLOAD_DELIMITER, '')
retVal = content
regex = filterStringValue(payload, r'[A-Za-z0-9]', r'[^\s]+')
retVal = re.sub(regex, REFLECTED_VALUE_MARKER, content)
if all([content, payload]):
payload = payload.replace(PAYLOAD_DELIMITER, '')
if retVal != content:
warnMsg = "reflective value found and filtered out"
logger.warn(warnMsg)
regex = filterStringValue(payload, r'[A-Za-z0-9]', r'[^\s]+')
retVal = re.sub(regex, REFLECTED_VALUE_MARKER, content)
if retVal != content:
debugMsg = "reflective value found and filtered out"
logger.debug(debugMsg)
return retVal