From 732267876c3ca2d4bf6d8bfdb934f06c0db2621d Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Wed, 6 Nov 2019 11:39:57 +0100 Subject: [PATCH] Bug fix for SOAP/XML (proper origValue calculation) --- lib/core/agent.py | 2 +- lib/core/settings.py | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/core/agent.py b/lib/core/agent.py index f642ea54c..d591d6bbd 100644 --- a/lib/core/agent.py +++ b/lib/core/agent.py @@ -121,7 +121,7 @@ class Agent(object): paramString = origValue origValue = origValue.split(kb.customInjectionMark)[0] if kb.postHint in (POST_HINT.SOAP, POST_HINT.XML): - origValue = origValue.split('>')[-1] + origValue = re.split(r"['\">]", origValue)[-1] elif kb.postHint in (POST_HINT.JSON, POST_HINT.JSON_LIKE): origValue = extractRegexResult(r"(?s)\"\s*:\s*(?P\d+\Z)", origValue) or extractRegexResult(r'(?s)[\s:]*(?P[^"\[,]+\Z)', origValue) else: diff --git a/lib/core/settings.py b/lib/core/settings.py index 390afeba8..694e3de1a 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -18,7 +18,7 @@ from lib.core.enums import OS from thirdparty.six import unichr as _unichr # sqlmap version (...) -VERSION = "1.3.11.6" +VERSION = "1.3.11.7" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)