Fixes #180 - properly url encode sqlmap payload in POST/Cookie too, like for GET

This commit is contained in:
Bernardo Damele 2010-03-23 10:27:39 +00:00
parent 09768a7b62
commit 8e57767c48
2 changed files with 3 additions and 2 deletions

View File

@ -118,7 +118,7 @@ class Connect:
if conf.method == "POST":
if conf.parameters.has_key("POST") and not post:
post = conf.parameters["POST"]
requestMsg += " HTTP/1.1"
# Perform HTTP request

View File

@ -32,6 +32,7 @@ from lib.core.common import dataToStdout
from lib.core.common import getCharset
from lib.core.common import replaceNewlineTabs
from lib.core.common import safeStringFormat
from lib.core.convert import urlencode
from lib.core.data import conf
from lib.core.data import kb
from lib.core.data import logger
@ -127,7 +128,7 @@ def bisection(payload, expression, length=None, charsetType=None, firstChar=None
posValue = chr(posValue)
forgedPayload = safeStringFormat(payload, (expressionUnescaped, idx, posValue))
result = Request.queryPage(forgedPayload)
result = Request.queryPage(urlencode(forgedPayload))
if kb.dbms == "SQLite":
posValue = posValueOld