sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-12-01 22:13:53 +03:00
Code Issues Packages Projects Releases Wiki Activity

remove Host header field and add cookie support #1198

Browse Source
This commit is contained in:
ricterz 2015-03-24 18:50:57 +08:00
parent 9b5dcbbbb2
commit 811f5c11c6
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
lib/request/connect.py
View File

@ -367,11 +367,14 @@ class Connect(object):
post = unicodeencode(post, kb.pageEncoding) post = unicodeencode(post, kb.pageEncoding)
if is_websocket: if is_websocket:
# WebSocket will add Host field of headers automatically
disallowed_headers = ['Host']
ws = websocket.WebSocket() ws = websocket.WebSocket()
ws.connect(url) ws.connect(url, header=["%s: %s" % _ for _ in headers.items() if _[0] not in disallowed_headers], cookie=cookie)
ws.send(urldecode(post) if post else '') ws.send(urldecode(post) if post else '')
response = ws.recv() response = ws.recv()
ws.close() ws.close()
# WebSocket class does not have response headers
return response, {}, 101 return response, {}, 101
elif method and method not in (HTTPMETHOD.GET, HTTPMETHOD.POST): elif method and method not in (HTTPMETHOD.GET, HTTPMETHOD.POST):
@ -554,7 +557,7 @@ class Connect(object):
if "no host given" in tbMsg: if "no host given" in tbMsg:
warnMsg = "invalid URL address used (%s)" % repr(url) warnMsg = "invalid URL address used (%s)" % repr(url)
raise SqlmapSyntaxException(warnMsg) raise SqlmapSyntaxException(warnMsg)
elif "forcibly closed" in tbMsg: elif "forcibly closed" in tbMsg or "Connection is already closed" in tbMsg:
warnMsg = "connection was forcibly closed by the target URL" warnMsg = "connection was forcibly closed by the target URL"
elif "timed out" in tbMsg: elif "timed out" in tbMsg:
if kb.testMode and kb.testType not in (None, PAYLOAD.TECHNIQUE.TIME, PAYLOAD.TECHNIQUE.STACKED): if kb.testMode and kb.testType not in (None, PAYLOAD.TECHNIQUE.TIME, PAYLOAD.TECHNIQUE.STACKED):