minor improvement for URI injections

stamparm · stamparm · commit 2f4e34f5a084 · 2011-09-08T11:13:12.000Z
diff --git a/lib/core/agent.py b/lib/core/agent.py
@@ -80,6 +80,9 @@ def payload(self, place=None, parameter=None, value=None, newValue=None, where=N
         if place == PLACE.URI:
             origValue = origValue.split(URI_INJECTION_MARK_CHAR)[0]
             origValue = origValue[origValue.rfind('/') + 1:]
+            for char in ('?', '=', ':'):
+                if char in origValue:
+                    origValue = origValue[origValue.rfind(char) + 1:]
 
         if value is None:
             if where == PAYLOAD.WHERE.ORIGINAL:
