From d7d3db415beb1cda55530d8b92a252572f141819 Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Fri, 27 May 2016 15:32:30 +0200 Subject: [PATCH] Minor update --- lib/core/settings.py | 2 +- waf/cloudflare.py | 7 ++++--- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/lib/core/settings.py b/lib/core/settings.py index 38f2d64fc..d3932cc75 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -19,7 +19,7 @@ from lib.core.enums import OS from lib.core.revision import getRevisionNumber # sqlmap version (...) -VERSION = "1.0.5.88" +VERSION = "1.0.5.90" REVISION = getRevisionNumber() STABLE = VERSION.count('.') <= 2 VERSION_STRING = "sqlmap/%s#%s" % (VERSION, "stable" if STABLE else "dev") diff --git a/waf/cloudflare.py b/waf/cloudflare.py index 82aab695a..8bfaf0737 100644 --- a/waf/cloudflare.py +++ b/waf/cloudflare.py @@ -18,9 +18,10 @@ def detect(get_page): for vector in WAF_ATTACK_VECTORS: page, headers, code = get_page(get=vector) retval = re.search(r"cloudflare-nginx", headers.get(HTTP_HEADER.SERVER, ""), re.I) is not None - retval |= re.search(r"\A__cfduid=", headers.get(HTTP_HEADER.SET_COOKIE, ""), re.I) is not None - retval |= headers.get("cf-ray") is not None - retval |= code == 403 and re.search(r"CloudFlare Ray ID:|var CloudFlare=", page or "") is not None + if code == 403: + retval |= re.search(r"\A__cfduid=", headers.get(HTTP_HEADER.SET_COOKIE, ""), re.I) is not None + retval |= headers.get("cf-ray") is not None + retval |= re.search(r"CloudFlare Ray ID:|var CloudFlare=", page or "") is not None if retval: break