sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-07-15 02:32:31 +03:00
Code Issues Packages Projects Releases Wiki Activity

now ASPX works too for --os-shell

Browse Source
This commit is contained in:
Miroslav Stampar 2010-11-24 11:38:27 +00:00
parent ca58bdbc66
commit 9579a97039
2 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
lib/core/common.py
View File

@ -1626,3 +1626,13 @@ def getPublicTypeMembers(type_):
retVal.append((name, value)) retVal.append((name, value))
return retVal return retVal
def extractRegexResult(regex, content):
retVal = None
if regex and content and '?P<result>' in regex:
match = re.search(regex, content)
if match:
retVal = match.group("result")
return retVal

6
lib/takeover/web.py
View File

@ -15,6 +15,7 @@ import re
from extra.cloak.cloak import decloak from extra.cloak.cloak import decloak
from lib.core.agent import agent from lib.core.agent import agent
from lib.core.common import decloakToNamedTemporaryFile from lib.core.common import decloakToNamedTemporaryFile
from lib.core.common import extractRegexResult
from lib.core.common import getDirs from lib.core.common import getDirs
from lib.core.common import getDocRoot from lib.core.common import getDocRoot
from lib.core.common import ntToPosixSlashes from lib.core.common import ntToPosixSlashes
@ -83,6 +84,11 @@ class Web:
"uploadDir": directory, "uploadDir": directory,
} }
if self.webApi == "aspx":
page = Request.getPage(url=self.webStagerUrl, content=True, raise404=False)
multipartParams['__EVENTVALIDATION'] = extractRegexResult(r"__EVENTVALIDATION[^>]+value=\"(?P<result>[^\"]+)\"", page[0])
multipartParams['__VIEWSTATE'] = extractRegexResult(r"__VIEWSTATE[^>]+value=\"(?P<result>[^\"]+)\"", page[0])
page = Request.getPage(url=self.webStagerUrl, multipart=multipartParams, raise404=False) page = Request.getPage(url=self.webStagerUrl, multipart=multipartParams, raise404=False)
if "File uploaded" not in page: if "File uploaded" not in page: