From ced9657d954a64310c4f0ccd3a8a5a209a966c30 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Mon, 11 Feb 2019 10:53:04 +0100 Subject: [PATCH] Patch for #3488 --- lib/core/settings.py | 2 +- txt/checksum.md5 | 3 ++- waf/wts.py | 3 +-- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/lib/core/settings.py b/lib/core/settings.py index 9e44da3b3..09a13d528 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -19,7 +19,7 @@ from lib.core.enums import DBMS_DIRECTORY_NAME from lib.core.enums import OS # sqlmap version (...) -VERSION = "1.3.2.16" +VERSION = "1.3.2.17" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE) diff --git a/txt/checksum.md5 b/txt/checksum.md5 index 9cefa4798..3d3c3e329 100644 --- a/txt/checksum.md5 +++ b/txt/checksum.md5 @@ -50,7 +50,7 @@ d5ef43fe3cdd6c2602d7db45651f9ceb lib/core/readlineng.py 7d8a22c582ad201f65b73225e4456170 lib/core/replication.py 3179d34f371e0295dd4604568fb30bcd lib/core/revision.py d6269c55789f78cf707e09a0f5b45443 lib/core/session.py -f8515bbac09b5707af54ec874d27aef1 lib/core/settings.py +33c1396c08313221a337ba08b678d0d7 lib/core/settings.py 4483b4a5b601d8f1c4281071dff21ecc lib/core/shell.py 10fd19b0716ed261e6d04f311f6f527c lib/core/subprocessng.py 43772ea73e9e3d446f782af591cb4eda lib/core/target.py @@ -475,6 +475,7 @@ ba0fb1e6b815446b9d6f30950900fc80 waf/trafficshield.py a7b8c4c3d1463409e0e204932f0ddff0 waf/webknight.py 053c6b1ea20133bd9f563f1275ddb5a4 waf/webseal.py ac9e4e3ced77012ed97284634a9ffc74 waf/wordfence.py +db5cf700712d8439453d4d22111e0617 waf/wts.py e69f77220558564785f0b3c961782a93 waf/yundun.py a560bee3e948b97af2c88805933dcaad waf/yunsuo.py c8b6517da2c8a28d474956e3a6b8c1ed waf/zenedge.py diff --git a/waf/wts.py b/waf/wts.py index a68d09ead..d84ca223f 100644 --- a/waf/wts.py +++ b/waf/wts.py @@ -17,8 +17,7 @@ def detect(get_page): for vector in WAF_ATTACK_VECTORS: page, headers, _ = get_page(get=vector) - retval = re.search(r"wts(.*)?", headers.get(HTTP_HEADER.SERVER, ""), re.I) is not None - retval |= all(_ in (page or "") for _ in ("WTS.WAF", "<h1>WTS-WAF")) + retval = ">WTS-WAF" in (page or "") if retval: break