Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 0882fe0

Browse files
committed
Minor update related to the last two
1 parent eb1bfc2 commit 0882fe0

1 file changed

Lines changed: 4 additions & 5 deletions

File tree

lib/core/target.py

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -136,10 +136,6 @@ def process(match, repl):
136136
conf.data = re.sub(r"(?si)(Content-Disposition.+?)((\r)?\n--)", r"\g<1>%s\g<2>" % CUSTOM_INJECTION_MARK_CHAR, conf.data)
137137
kb.postHint = POST_HINT.MULTIPART
138138

139-
if kb.postHint:
140-
if CUSTOM_INJECTION_MARK_CHAR not in conf.data: # in case that no usable parameter values has been found
141-
kb.postHint = None
142-
143139
if not kb.postHint:
144140
if CUSTOM_INJECTION_MARK_CHAR in conf.data: # later processed
145141
pass
@@ -152,8 +148,11 @@ def process(match, repl):
152148
if paramDict:
153149
conf.paramDict[place] = paramDict
154150
testableParameters = True
151+
else:
152+
if CUSTOM_INJECTION_MARK_CHAR not in conf.data: # in case that no usable parameter values has been found
153+
conf.parameters[PLACE.POST] = conf.data
155154

156-
kb.processUserMarks = True if kb.postHint else kb.processUserMarks
155+
kb.processUserMarks = True if (kb.postHint and CUSTOM_INJECTION_MARK_CHAR in conf.data) else kb.processUserMarks
157156

158157
if re.search(URI_INJECTABLE_REGEX, conf.url, re.I) and not any(place in conf.parameters for place in (PLACE.GET, PLACE.POST)) and not kb.postHint:
159158
warnMsg = "you've provided target url without any GET "

0 commit comments

Comments
 (0)