diff --git a/lib/core/settings.py b/lib/core/settings.py index a925090e2..2b527e4be 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -19,7 +19,7 @@ from lib.core.enums import DBMS_DIRECTORY_NAME from lib.core.enums import OS # sqlmap version (...) -VERSION = "1.1.11.17" +VERSION = "1.1.11.18" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE) diff --git a/lib/request/connect.py b/lib/request/connect.py index aadf435f2..9c9996065 100644 --- a/lib/request/connect.py +++ b/lib/request/connect.py @@ -796,6 +796,8 @@ class Connect(object): raise404 = place != PLACE.URI if raise404 is None else raise404 method = method or conf.method + pushValue(kb.postUrlEncode) + value = agent.adjustLateValues(value) payload = agent.extractPayload(value) threadData = getCurrentThreadData() @@ -862,6 +864,7 @@ class Connect(object): if not skip: payload = urlencode(payload, '%', False, place != PLACE.URI) # spaceplus is handled down below value = agent.replacePayload(value, payload) + kb.postUrlEncode = False if conf.hpp: if not any(conf.url.lower().endswith(_.lower()) for _ in (WEB_API.ASP, WEB_API.ASPX)): @@ -1245,6 +1248,8 @@ class Connect(object): kb.originalCode = kb.originalCode or code + kb.postUrlEncode = popValue() + if kb.testMode: kb.testQueryCount += 1 diff --git a/txt/checksum.md5 b/txt/checksum.md5 index 6a768fcf2..c469a3662 100644 --- a/txt/checksum.md5 +++ b/txt/checksum.md5 @@ -46,7 +46,7 @@ e1c000db9be27f973569b1a430629037 lib/core/option.py 760d9df2a27ded29109b390ab202e72d lib/core/replication.py a2466b62e67f8b31736bac4dac590e51 lib/core/revision.py 02d4762140a72fd44668d3dab5eabda9 lib/core/session.py -6667019557ddeedf87b8eac9ff963e43 lib/core/settings.py +85e16c1193fc5e567addc1cdb77a32d3 lib/core/settings.py 35bffbad762eb9e03db9e93b1c991103 lib/core/shell.py a59ec28371ae067a6fdd8f810edbee3d lib/core/subprocessng.py d5a04d672a18f78deb2839c3745ff83c lib/core/target.py @@ -68,7 +68,7 @@ d8d9bcf9e7107a5e2cf2dd10f115ac28 lib/parse/payloads.py d2f13a0e2fef5273d419d06e516122e1 lib/request/basicauthhandler.py 9ef264b5c0f9e7989b8c2ab91d40400d lib/request/basic.py 28348595147a731677c8bef470c6f57a lib/request/comparison.py -a253670611499bc159879122e05622de lib/request/connect.py +4015dee29a0d2bfc7820e828bfe96b91 lib/request/connect.py ad6f76839408d827abfcdc57813f8518 lib/request/direct.py 4853bd0d523646315607a6a9a4c0b745 lib/request/dns.py effa0c3e4efceaf4932855e8e6677bf7 lib/request/httpshandler.py