sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-04-25 19:33:48 +03:00
Code Issues Packages Projects Releases Wiki Activity

Minor update (adding a warning message about potential dropping of requests because of protection mechanisms involved)

Browse Source
This commit is contained in:
Miroslav Stampar 2014-09-08 14:33:13 +02:00
parent 055b759145
commit 53d0d5bf8b
3 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
lib/controller/checks.py
View File

@ -112,7 +112,7 @@ def checkSqlInjection(place, parameter, value):
kb.extendTests = [] if readInput(msg, default='Y').upper() != 'Y' else ([conf.dbms]) kb.extendTests = [] if readInput(msg, default='Y').upper() != 'Y' else ([conf.dbms])
title = test.title title = test.title
stype = test.stype kb.testType = stype = test.stype
clause = test.clause clause = test.clause
unionExtended = False unionExtended = False
@ -1175,6 +1175,7 @@ def identifyWaf():
infoMsg = "no WAF/IDS/IPS product has been identified" infoMsg = "no WAF/IDS/IPS product has been identified"
logger.info(infoMsg) logger.info(infoMsg)
kb.testType = None
kb.testMode = False kb.testMode = False
return retVal return retVal

1
lib/core/option.py
View File

@ -1741,6 +1741,7 @@ def _setKnowledgeBaseAttributes(flushAll=True):
kb.technique = None kb.technique = None
kb.testMode = False kb.testMode = False
kb.testQueryCount = 0 kb.testQueryCount = 0
kb.testType = None
kb.threadContinue = True kb.threadContinue = True
kb.threadException = False kb.threadException = False
kb.tableExistsChoice = None kb.tableExistsChoice = None

2
lib/request/connect.py
View File

@ -533,6 +533,8 @@ class Connect(object):
elif "forcibly closed" in tbMsg: elif "forcibly closed" in tbMsg:
warnMsg = "connection was forcibly closed by the target URL" warnMsg = "connection was forcibly closed by the target URL"
elif "timed out" in tbMsg: elif "timed out" in tbMsg:
if kb.testMode and kb.testType not in (None, PAYLOAD.TECHNIQUE.TIME, PAYLOAD.TECHNIQUE.STACKED):
singleTimeWarnMessage("there is a possibility that the target (or WAF) is dropping 'suspicious' requests")
warnMsg = "connection timed out to the target URL" warnMsg = "connection timed out to the target URL"
elif "URLError" in tbMsg or "error" in tbMsg: elif "URLError" in tbMsg or "error" in tbMsg:
warnMsg = "unable to connect to the target URL" warnMsg = "unable to connect to the target URL"