From 93cb879e5d5661ddc3b7295cfc1f76deb98d72b7 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Mon, 11 Sep 2017 10:17:02 +0200 Subject: [PATCH] Fixes #2692 --- lib/core/agent.py | 2 +- lib/core/settings.py | 2 +- lib/core/target.py | 4 ++-- txt/checksum.md5 | 6 +++--- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/lib/core/agent.py b/lib/core/agent.py index 6821b24c6..c50192421 100644 --- a/lib/core/agent.py +++ b/lib/core/agent.py @@ -113,7 +113,7 @@ class Agent(object): if kb.postHint in (POST_HINT.SOAP, POST_HINT.XML): origValue = origValue.split('>')[-1] elif kb.postHint in (POST_HINT.JSON, POST_HINT.JSON_LIKE): - origValue = extractRegexResult(r"(?s)\"\s*:\s*(?P\d+\Z)", origValue) or extractRegexResult(r'(?s)\s*(?P[^"\[,]+\Z)', origValue) + origValue = extractRegexResult(r"(?s)\"\s*:\s*(?P\d+\Z)", origValue) or extractRegexResult(r'(?s)[\s:]*(?P[^"\[,]+\Z)', origValue) else: _ = extractRegexResult(r"(?s)(?P[^\s<>{}();'\"&]+\Z)", origValue) or "" origValue = _.split('=', 1)[1] if '=' in _ else "" diff --git a/lib/core/settings.py b/lib/core/settings.py index 76a5e0425..54c247094 100755 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -19,7 +19,7 @@ from lib.core.enums import DBMS_DIRECTORY_NAME from lib.core.enums import OS # sqlmap version (...) -VERSION = "1.1.9.11" +VERSION = "1.1.9.12" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE) diff --git a/lib/core/target.py b/lib/core/target.py index ab6397772..2a2a167a8 100644 --- a/lib/core/target.py +++ b/lib/core/target.py @@ -142,8 +142,8 @@ def _setRequestParams(): conf.data = getattr(conf.data, UNENCODED_ORIGINAL_VALUE, conf.data) conf.data = conf.data.replace(kb.customInjectionMark, ASTERISK_MARKER) conf.data = re.sub(r'("(?P[^"]+)"\s*:\s*"[^"]*)"', functools.partial(process, repl=r'\g<1>%s"' % kb.customInjectionMark), conf.data) - conf.data = re.sub(r'("(?P[^"]+)"\s*:\s*)(-?\d[\d\.]*)\b', functools.partial(process, repl=r'\g<1>"\g<3>%s"' % kb.customInjectionMark), conf.data) - conf.data = re.sub(r'("(?P[^"]+)"\s*:\s*)((true|false|null))\b', functools.partial(process, repl=r'\g<1>"\g<3>%s"' % kb.customInjectionMark), conf.data) + conf.data = re.sub(r'("(?P[^"]+)"\s*:\s*)(-?\d[\d\.]*)\b', functools.partial(process, repl=r'\g<1>\g<3>%s' % kb.customInjectionMark), conf.data) + conf.data = re.sub(r'("(?P[^"]+)"\s*:\s*)((true|false|null))\b', functools.partial(process, repl=r'\g<1>\g<3>%s' % kb.customInjectionMark), conf.data) match = re.search(r'(?P[^"]+)"\s*:\s*\[([^\]]+)\]', conf.data) if match and not (conf.testParameter and match.group("name") not in conf.testParameter): _ = match.group(2) diff --git a/txt/checksum.md5 b/txt/checksum.md5 index fce88a57a..23a905a34 100644 --- a/txt/checksum.md5 +++ b/txt/checksum.md5 @@ -25,7 +25,7 @@ c55b400b72acc43e0e59c87dd8bb8d75 extra/shellcodeexec/windows/shellcodeexec.x32. a66093c734c7f94ecdf94d882c2d8b89 lib/controller/controller.py 926bdaf98d082a41fdd57bb41c1692d1 lib/controller/handler.py 310efc965c862cfbd7b0da5150a5ad36 lib/controller/__init__.py -9f1adb993f66da030a4168571978e6fa lib/core/agent.py +5a15aba70e75749ada5c194aba640de3 lib/core/agent.py 6cc95a117fbd34ef31b9aa25520f0e31 lib/core/bigarray.py 8dafb651e35d90c05ffe08bf2a9832ae lib/core/common.py 9edefb92b0b9cad862543fcd587aaa66 lib/core/convert.py @@ -46,10 +46,10 @@ c5f09788ee8ff9c9d12a052986875bc6 lib/core/option.py d8e9250f3775119df07e9070eddccd16 lib/core/replication.py 785f86e3f963fa3798f84286a4e83ff2 lib/core/revision.py 40c80b28b3a5819b737a5a17d4565ae9 lib/core/session.py -d3d234152b3f74559d5fadff31a100da lib/core/settings.py +0a387452776db9ef7f0648048f965561 lib/core/settings.py d91291997d2bd2f6028aaf371bf1d3b6 lib/core/shell.py 2ad85c130cc5f2b3701ea85c2f6bbf20 lib/core/subprocessng.py -1576b63db3261e2afd5459189abf967b lib/core/target.py +effc153067a00bd43461bfc1cdec1122 lib/core/target.py 8970b88627902239d695280b1160e16c lib/core/testing.py 40881e63d516d8304fc19971049cded0 lib/core/threads.py ad74fc58fc7214802fd27067bce18dd2 lib/core/unescaper.py