Trivial patch

stamparm · stamparm · commit 39ca71619c09 · 2019-11-11T12:43:45.000+01:00
diff --git a/lib/core/common.py b/lib/core/common.py
@@ -4476,6 +4476,9 @@ def geturl(self):
             # flag to know if we are dealing with the same target host
             _ = checkSameHost(response.geturl(), url)
 
+            if data:
+                data = data.lstrip("&=").rstrip('&')
+
             if conf.scope:
                 if not re.search(conf.scope, url, re.I):
                     continue
diff --git a/lib/core/settings.py b/lib/core/settings.py
@@ -18,7 +18,7 @@
 from thirdparty.six import unichr as _unichr
 
 # sqlmap version (<major>.<minor>.<month>.<monthly commit>)
-VERSION = "1.3.11.27"
+VERSION = "1.3.11.28"
 TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
 TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
 VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)
diff --git a/lib/utils/crawler.py b/lib/utils/crawler.py
@@ -215,7 +215,7 @@ def crawlThread():
                     if target[1] in (HTTPMETHOD.GET, None):
                         match = re.search(r"/[^/?]*\?.*\Z", target[0])
                         if match:
-                            key = re.sub(r"=[^=&]*", "=", match.group(0))
+                            key = re.sub(r"=[^=&]*", "=", match.group(0)).strip('&')
                             if key not in seen:
                                 results.add(target)
                                 seen.add(key)
