Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 0f48dd6

Browse files
committed
fix for skipping non-GET urls
1 parent 207bef7 commit 0f48dd6

1 file changed

Lines changed: 7 additions & 2 deletions

File tree

lib/controller/controller.py

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -118,17 +118,22 @@ def start():
118118
conf.data = targetData
119119
conf.cookie = targetCookie
120120
injData = []
121-
121+
122122
initTargetEnv()
123123
parseTargetUrl()
124-
124+
125125
testSqlInj = False
126126
if "GET" in conf.parameters:
127127
for parameter in re.findall(r"([^=]+)=[^&]+&?", conf.parameters["GET"]):
128128
paramKey = (conf.hostname, conf.path, "GET", parameter)
129129
if paramKey not in kb.testedParams:
130130
testSqlInj = True
131131
break
132+
else:
133+
paramKey = (conf.hostname, conf.path, None, None)
134+
if paramKey not in kb.testedParams:
135+
testSqlInj = True
136+
132137
if not testSqlInj:
133138
infoMsg = "skipping '%s'" % targetUrl
134139
logger.info(infoMsg)

0 commit comments

Comments
 (0)