sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-09-20 11:02:27 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix: fix truncated response body when logging to HAR (fixes https://github.com/sqlmapproject/sqlmap/issues/5942)

Browse Source
This commit is contained in:
evilsocket 2025-08-17 14:35:10 +02:00
parent 99546c77c7
commit a760c7109e
1 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
lib/utils/har.py
View File

@ -11,13 +11,13 @@ import io
import re import re
import time import time
from lib.core.bigarray import BigArray
from lib.core.convert import getBytes
from lib.core.convert import getText
from lib.core.settings import VERSION
from thirdparty.six.moves import BaseHTTPServer as _BaseHTTPServer from thirdparty.six.moves import BaseHTTPServer as _BaseHTTPServer
from thirdparty.six.moves import http_client as _http_client from thirdparty.six.moves import http_client as _http_client
from lib.core.bigarray import BigArray
from lib.core.convert import getBytes, getText
from lib.core.settings import VERSION
# Reference: https://dvcs.w3.org/hg/webperf/raw-file/tip/specs/HAR/Overview.html # Reference: https://dvcs.w3.org/hg/webperf/raw-file/tip/specs/HAR/Overview.html
# http://www.softwareishard.com/har/viewer/ # http://www.softwareishard.com/har/viewer/
@ -159,6 +159,14 @@ class Response(object):
altered = getBytes(status_line) + b"\r\n" + remain altered = getBytes(status_line) + b"\r\n" + remain
comment = first_line comment = first_line
# when the response is compressed, the previous layer of logging decompressed the body
# already, but did not adjust the content-length, see https://github.com/sqlmapproject/sqlmap/issues/5942
if re.search(b"Content-Encoding:\\s*(gzip|deflate|br|compress|x-gzip|x-compress)", altered, flags=re.IGNORECASE):
# remove Content-Length header as it refers to compressed size
altered = re.sub(b"Content-Length:\\s*\\d+\r\n", b'', altered, flags=re.IGNORECASE)
# remove Content-Encoding header as we're decompressing the content
altered = re.sub(b"Content-Encoding:\\s*[^\r\n]+\r\n", b'', altered, flags=re.IGNORECASE)
response = _http_client.HTTPResponse(FakeSocket(altered)) response = _http_client.HTTPResponse(FakeSocket(altered))
response.begin() response.begin()