mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-05-10 02:33:44 +03:00
Implementation for an #162
This commit is contained in:
parent
0ad3846451
commit
e9ae44c6fc
|
@ -520,8 +520,7 @@ def checkSqlInjection(place, parameter, value):
|
||||||
break
|
break
|
||||||
|
|
||||||
if injectable is True:
|
if injectable is True:
|
||||||
# There is no need to perform this test with others
|
kb.vulnHosts.add(conf.hostname)
|
||||||
# boundaries
|
|
||||||
break
|
break
|
||||||
|
|
||||||
# Reset forced back-end DBMS value
|
# Reset forced back-end DBMS value
|
||||||
|
|
|
@ -236,7 +236,7 @@ def start():
|
||||||
action()
|
action()
|
||||||
return True
|
return True
|
||||||
|
|
||||||
if conf.url and not any([conf.forms, conf.crawlDepth]):
|
if conf.url and not any((conf.forms, conf.crawlDepth)):
|
||||||
kb.targetUrls.add((conf.url, conf.method, conf.data, conf.cookie))
|
kb.targetUrls.add((conf.url, conf.method, conf.data, conf.cookie))
|
||||||
|
|
||||||
if conf.configFile and not kb.targetUrls:
|
if conf.configFile and not kb.targetUrls:
|
||||||
|
@ -277,6 +277,7 @@ def start():
|
||||||
testSqlInj = True
|
testSqlInj = True
|
||||||
|
|
||||||
testSqlInj &= (conf.hostname, conf.path, None, None) not in kb.testedParams
|
testSqlInj &= (conf.hostname, conf.path, None, None) not in kb.testedParams
|
||||||
|
testSqlInj &= conf.hostname not in kb.vulnHosts
|
||||||
|
|
||||||
if not testSqlInj:
|
if not testSqlInj:
|
||||||
infoMsg = "skipping '%s'" % targetUrl
|
infoMsg = "skipping '%s'" % targetUrl
|
||||||
|
|
|
@ -1569,6 +1569,7 @@ def __setKnowledgeBaseAttributes(flushAll=True):
|
||||||
kb.testedParams = set()
|
kb.testedParams = set()
|
||||||
kb.userAgents = None
|
kb.userAgents = None
|
||||||
kb.vainRun = True
|
kb.vainRun = True
|
||||||
|
kb.vulnHosts = set()
|
||||||
kb.wordlists = None
|
kb.wordlists = None
|
||||||
|
|
||||||
def __useWizardInterface():
|
def __useWizardInterface():
|
||||||
|
|
Loading…
Reference in New Issue
Block a user