sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-09-20 11:02:27 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix: fix truncated response body when logging to HAR (fixes https://github.com/sqlmapproject/sqlmap/issues/5942)

Browse Source
This commit is contained in:
evilsocket 2025-08-17 14:35:10 +02:00
parent 99546c77c7
commit a760c7109e
1 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
lib/utils/har.py
View File

@ -11,13 +11,13 @@ import io
import re
import time
from lib.core.bigarray import BigArray
from lib.core.convert import getBytes
from lib.core.convert import getText
from lib.core.settings import VERSION
from thirdparty.six.moves import BaseHTTPServer as _BaseHTTPServer
from thirdparty.six.moves import http_client as _http_client
from lib.core.bigarray import BigArray
from lib.core.convert import getBytes, getText
from lib.core.settings import VERSION
# Reference: https://dvcs.w3.org/hg/webperf/raw-file/tip/specs/HAR/Overview.html
# http://www.softwareishard.com/har/viewer/
@ -159,6 +159,14 @@ class Response(object):
altered = getBytes(status_line) + b"\r\n" + remain
comment = first_line
# when the response is compressed, the previous layer of logging decompressed the body
# already, but did not adjust the content-length, see https://github.com/sqlmapproject/sqlmap/issues/5942
if re.search(b"Content-Encoding:\\s*(gzip|deflate|br|compress|x-gzip|x-compress)", altered, flags=re.IGNORECASE):
# remove Content-Length header as it refers to compressed size
altered = re.sub(b"Content-Length:\\s*\\d+\r\n", b'', altered, flags=re.IGNORECASE)
# remove Content-Encoding header as we're decompressing the content
altered = re.sub(b"Content-Encoding:\\s*[^\r\n]+\r\n", b'', altered, flags=re.IGNORECASE)
response = _http_client.HTTPResponse(FakeSocket(altered))
response.begin()