From c9a73aeed104aacbc549abae6e1c156cb58ee726 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Mon, 10 Sep 2018 11:51:00 +0200 Subject: [PATCH] Minor patch for #3226 --- lib/core/settings.py | 2 +- lib/request/connect.py | 6 +++--- txt/checksum.md5 | 4 ++-- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/lib/core/settings.py b/lib/core/settings.py index 7de5f884a..fa7c35e64 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -19,7 +19,7 @@ from lib.core.enums import DBMS_DIRECTORY_NAME from lib.core.enums import OS # sqlmap version (...) -VERSION = "1.2.9.15" +VERSION = "1.2.9.16" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE) diff --git a/lib/request/connect.py b/lib/request/connect.py index 199dd8284..0c24e5765 100644 --- a/lib/request/connect.py +++ b/lib/request/connect.py @@ -1243,11 +1243,11 @@ class Connect(object): page, headers, code = Connect.getPage(url=conf.secondUrl, cookie=cookie, ua=ua, silent=silent, auxHeaders=auxHeaders, response=response, raise404=False, ignoreTimeout=timeBasedCompare, refreshing=True) elif kb.secondReq and IDS_WAF_CHECK_PAYLOAD not in urllib.unquote(value or ""): def _(value): - if CUSTOM_INJECTION_MARK_CHAR in (value or "") and kb.customInjectionMark: + if kb.customInjectionMark in (value or ""): if payload is None: - value = value.replace(CUSTOM_INJECTION_MARK_CHAR, "") + value = value.replace(kb.customInjectionMark, "") else: - value = re.sub(r"\w*%s" % re.escape(CUSTOM_INJECTION_MARK_CHAR), payload, value) + value = re.sub(r"\w*%s" % re.escape(kb.customInjectionMark), payload, value) return value page, headers, code = Connect.getPage(url=_(kb.secondReq[0]), post=_(kb.secondReq[2]), method=kb.secondReq[1], cookie=kb.secondReq[3], silent=silent, auxHeaders=dict(auxHeaders, **dict(kb.secondReq[4])), response=response, raise404=False, ignoreTimeout=timeBasedCompare, refreshing=True) diff --git a/txt/checksum.md5 b/txt/checksum.md5 index 8b0fb71b6..3877c4aa9 100644 --- a/txt/checksum.md5 +++ b/txt/checksum.md5 @@ -50,7 +50,7 @@ c8c386d644d57c659d74542f5f57f632 lib/core/patch.py 0c3eef46bdbf87e29a3f95f90240d192 lib/core/replication.py a7db43859b61569b601b97f187dd31c5 lib/core/revision.py fcb74fcc9577523524659ec49e2e964b lib/core/session.py -c4ab9e38f258b0666e19ffdb5537cbbf lib/core/settings.py +b8cbaa6f57a74b5ad7c258d93dcd8f0c lib/core/settings.py dd68a9d02fccb4fa1428b20e15b0db5d lib/core/shell.py a7edc9250d13af36ac0108f259859c19 lib/core/subprocessng.py 815d1cf27f0f8738d81531e73149867d lib/core/target.py @@ -72,7 +72,7 @@ f2af274126ce0a789027d35d367f2b9e lib/parse/payloads.py 30eed3a92a04ed2c29770e1b10d39dc0 lib/request/basicauthhandler.py 2b81435f5a7519298c15c724e3194a0d lib/request/basic.py 859b6ad583e0ffba154f17ee179b5b89 lib/request/comparison.py -3146b6639369b3f629e23860baffff17 lib/request/connect.py +cb148ee9778fdd61bdfc6b524aa1b3a2 lib/request/connect.py dd4598675027fae99f2e2475b05986da lib/request/direct.py 2044fce3f4ffa268fcfaaf63241b1e64 lib/request/dns.py 98535d0efca5551e712fcc4b34a3f772 lib/request/httpshandler.py