way to handle re.I (ignore case) while using getCompiledRegex

stamparm · stamparm · commit 20d05cc404a8 · 2010-05-21T15:03:40.000Z
diff --git a/lib/utils/detection.py b/lib/utils/detection.py
@@ -51,13 +51,13 @@ def checkPayload(string):
         rules = []
         for xmlrule in xmlrules.getElementsByTagName("filter"):
             try:
-                rule = xmlrule.getElementsByTagName('rule')[0].childNodes[0].nodeValue
+                rule = "(?i)%s" % xmlrule.getElementsByTagName('rule')[0].childNodes[0].nodeValue
                 desc = __adjustGrammar(xmlrule.getElementsByTagName('description')[0].childNodes[0].nodeValue)
                 rules.append((rule, desc))
             except sre_constants.error: #some issues with some regex expressions in Python 2.5
                 pass
     
     for rule, desc in rules:
         regObj = getCompiledRegex(rule)
-        if regObj.search(string, re.IGNORECASE):
+        if regObj.search(string):
             logger.warn("highly probable IDS/IPS detection: '%s'" % desc)
diff --git a/plugins/generic/misc.py b/plugins/generic/misc.py
@@ -24,6 +24,7 @@
 
 import re
 
+from lib.core.common import getCompiledRegex
 from lib.core.common import normalizePath
 from lib.core.common import ntToPosixSlashes
 from lib.core.common import posixToNtSlashes
@@ -57,7 +58,7 @@ def getRemoteTempPath(self):
             else:
                 conf.tmpPath = "/tmp"
 
-        if re.search("\A[\w]:[\/\\\\]+", conf.tmpPath, re.I):
+        if getCompiledRegex("(?i)\A[\w]:[\/\\\\]+").search(conf.tmpPath):
             kb.os = "Windows"
 
         conf.tmpPath = normalizePath(conf.tmpPath)
