sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-05-15 21:23:46 +03:00
Code Issues Packages Projects Releases Wiki Activity

Minor update for an Issue #2

Browse Source
This commit is contained in:
Miroslav Stampar 2012-09-06 14:13:54 +02:00
parent 1e238b5a5a
commit c3d191e626
2 changed files with 10 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
lib/controller/controller.py
View File

@ -161,12 +161,13 @@ def __randomFillBlankFields(value):
message = "do you want to fill blank fields with random values? [Y/n] " message = "do you want to fill blank fields with random values? [Y/n] "
test = readInput(message, default="Y") test = readInput(message, default="Y")
if not test or test[0] in ("y", "Y"): if not test or test[0] in ("y", "Y"):
while extractRegexResult(EMPTY_FORM_FIELDS_REGEX, retVal): for match in re.finditer(EMPTY_FORM_FIELDS_REGEX, retVal):
item = extractRegexResult(EMPTY_FORM_FIELDS_REGEX, retVal) item = match.group("result")
if item[-1] == DEFAULT_GET_POST_DELIMITER: if not any(_ in item for _ in IGNORE_PARAMETERS):
retVal = retVal.replace(item, "%s%s%s" % (item[:-1], randomStr(), DEFAULT_GET_POST_DELIMITER)) if item[-1] == DEFAULT_GET_POST_DELIMITER:
else: retVal = retVal.replace(item, "%s%s%s" % (item[:-1], randomStr(), DEFAULT_GET_POST_DELIMITER))
retVal = retVal.replace(item, "%s%s" % (item, randomStr())) else:
retVal = retVal.replace(item, "%s%s" % (item, randomStr()))
return retVal return retVal

3
lib/core/settings.py
View File

@ -455,3 +455,6 @@ MAX_HELP_OPTION_LENGTH = 18
# Strings for detecting formatting errors # Strings for detecting formatting errors
FORMAT_EXCEPTION_STRINGS = ("Type mismatch", "Error converting", "Failed to convert", "System.FormatException", "java.lang.NumberFormatException") FORMAT_EXCEPTION_STRINGS = ("Type mismatch", "Error converting", "Failed to convert", "System.FormatException", "java.lang.NumberFormatException")
# Regular expression used for extracting ASP.NET View State values
VIEWSTATE_REGEX = r'(?P<name>__VIEWSTATE[^"]*)[^>]+value="(?P<name>[^"]+)'