Apply --level also to User-Agent (level >= 4) and Cookie (level >= 3).

GET and POST parameters are always tested.
This commit is contained in:
Bernardo Damele 2010-11-29 16:33:20 +00:00
parent e735f2960a
commit e9291932e5

View File

@ -311,6 +311,14 @@ def start():
parameters.insert(0, place)
for place in parameters:
# Test User-Agent header only if --level >= 4
condition = (place == "User-Agent" and conf.level < 4)
# Test Cookie header only if --level >= 3
condition |= (place == "Cookie" and conf.level < 3)
if condition:
continue
if not conf.paramDict.has_key(place):
continue