Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 996ad59

Browse files
stamparmstamparm
committed
Minor patch
1 parent 6d48df2 commit 996ad59

10 files changed

Lines changed: 33 additions & 33 deletions

File tree

‎lib/controller/checks.py‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -552,7 +552,7 @@ def genCmpPayload():
552552
# Perform the test's request and grep the response
553553
# body for the test's <grep> regular expression
554554
try:
555-
page, headers = Request.queryPage(reqPayload, place, content=True, raise404=False)
555+
page, headers, _ = Request.queryPage(reqPayload, place, content=True, raise404=False)
556556
output = extractRegexResult(check, page, re.DOTALL | re.IGNORECASE) \
557557
or extractRegexResult(check, threadData.lastHTTPError[2] if wasLastResponseHTTPError() else None, re.DOTALL | re.IGNORECASE) \
558558
or extractRegexResult(check, listToStrValue([headers[key] for key in headers.keys() if key.lower() != URI_HTTP_HEADER.lower()] if headers else None), re.DOTALL | re.IGNORECASE) \
@@ -959,7 +959,7 @@ def heuristicCheckSqlInjection(place, parameter):
959959

960960
payload = "%s%s%s" % (prefix, randStr, suffix)
961961
payload = agent.payload(place, parameter, newValue=payload)
962-
page, _ = Request.queryPage(payload, place, content=True, raise404=False)
962+
page, _, _ = Request.queryPage(payload, place, content=True, raise404=False)
963963

964964
kb.heuristicPage = page
965965
kb.heuristicMode = False
@@ -1015,7 +1015,7 @@ def _(page):
10151015
value = "%s%s%s" % (randStr1, DUMMY_NON_SQLI_CHECK_APPENDIX, randStr2)
10161016
payload = "%s%s%s" % (prefix, "'%s" % value, suffix)
10171017
payload = agent.payload(place, parameter, newValue=payload)
1018-
page, _ = Request.queryPage(payload, place, content=True, raise404=False)
1018+
page, _, _ = Request.queryPage(payload, place, content=True, raise404=False)
10191019

10201020
paramType = conf.method if conf.method not in (None, HTTPMETHOD.GET, HTTPMETHOD.POST) else place
10211021

@@ -1124,7 +1124,7 @@ def checkDynamicContent(firstPage, secondPage):
11241124
warnMsg += ". sqlmap is going to retry the request"
11251125
logger.critical(warnMsg)
11261126

1127-
secondPage, _ = Request.queryPage(content=True)
1127+
secondPage, _, _ = Request.queryPage(content=True)
11281128
findDynamicContent(firstPage, secondPage)
11291129

11301130
def checkStability():
@@ -1147,7 +1147,7 @@ def checkStability():
11471147
delay = max(0, min(1, delay))
11481148
time.sleep(delay)
11491149

1150-
secondPage, _ = Request.queryPage(content=True, noteResponseTime=False, raise404=False)
1150+
secondPage, _, _ = Request.queryPage(content=True, noteResponseTime=False, raise404=False)
11511151

11521152
if kb.redirectChoice:
11531153
return None
@@ -1229,7 +1229,7 @@ def checkString():
12291229
infoMsg += "target URL page content"
12301230
logger.info(infoMsg)
12311231

1232-
page, headers = Request.queryPage(content=True)
1232+
page, headers, _ = Request.queryPage(content=True)
12331233
rawResponse = "%s%s" % (listToStrValue(headers.headers if headers else ""), page)
12341234

12351235
if conf.string not in rawResponse:
@@ -1248,7 +1248,7 @@ def checkRegexp():
12481248
infoMsg += "the target URL page content"
12491249
logger.info(infoMsg)
12501250

1251-
page, headers = Request.queryPage(content=True)
1251+
page, headers, _ = Request.queryPage(content=True)
12521252
rawResponse = "%s%s" % (listToStrValue(headers.headers if headers else ""), page)
12531253

12541254
if not re.search(conf.regexp, rawResponse, re.I | re.M):
@@ -1455,7 +1455,7 @@ def checkConnection(suppressOutput=False):
14551455

14561456
try:
14571457
kb.originalPageTime = time.time()
1458-
page, headers = Request.queryPage(content=True, noteResponseTime=False)
1458+
page, headers, _ = Request.queryPage(content=True, noteResponseTime=False)
14591459
kb.originalPage = kb.pageTemplate = page
14601460

14611461
kb.errorIsNone = False

‎lib/core/option.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -628,7 +628,7 @@ def _findPageForms():
628628
logger.info(infoMsg)
629629

630630
if not any((conf.bulkFile, conf.googleDork, conf.sitemapUrl)):
631-
page, _ = Request.queryPage(content=True)
631+
page, _, _ = Request.queryPage(content=True)
632632
findPageForms(page, conf.url, True, True)
633633
else:
634634
if conf.bulkFile:

‎lib/core/settings.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@
1919
from lib.core.enums import OS
2020

2121
# sqlmap version (<major>.<minor>.<month>.<monthly commit>)
22-
VERSION = "1.1.6.2"
22+
VERSION = "1.1.6.3"
2323
TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
2424
TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
2525
VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)

‎lib/request/connect.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1227,7 +1227,7 @@ def _randomizeParameter(paramString, randomParameter):
12271227
kb.permissionFlag = re.search(PERMISSION_DENIED_REGEX, page or "", re.I) is not None
12281228

12291229
if content or response:
1230-
return page, headers
1230+
return page, headers, code
12311231

12321232
if getRatioValue:
12331233
return comparison(page, headers, code, getRatioValue=False, pageLength=pageLength), comparison(page, headers, code, getRatioValue=True, pageLength=pageLength)

‎lib/request/templates.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ def getPageTemplate(payload, place):
1313

1414
if payload and place:
1515
if (payload, place) not in kb.pageTemplates:
16-
page, _ = Request.queryPage(payload, place, content=True, raise404=False)
16+
page, _, _ = Request.queryPage(payload, place, content=True, raise404=False)
1717
kb.pageTemplates[(payload, place)] = (page, kb.lastParserStatus is None)
1818

1919
retVal = kb.pageTemplates[(payload, place)]

‎lib/takeover/web.py‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -232,7 +232,7 @@ def webInit(self):
232232
if place in conf.parameters:
233233
value = re.sub(r"(\A|&)(\w+)=", "\g<2>[]=", conf.parameters[place])
234234
if "[]" in value:
235-
page, headers = Request.queryPage(value=value, place=place, content=True, raise404=False, silent=True, noteResponseTime=False)
235+
page, headers, _ = Request.queryPage(value=value, place=place, content=True, raise404=False, silent=True, noteResponseTime=False)
236236
parseFilePaths(page)
237237

238238
cookie = None
@@ -244,12 +244,12 @@ def webInit(self):
244244
if cookie:
245245
value = re.sub(r"(\A|;)(\w+)=[^;]*", "\g<2>=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA", cookie)
246246
if value != cookie:
247-
page, _ = Request.queryPage(value=value, place=PLACE.COOKIE, content=True, raise404=False, silent=True, noteResponseTime=False)
247+
page, _, _ = Request.queryPage(value=value, place=PLACE.COOKIE, content=True, raise404=False, silent=True, noteResponseTime=False)
248248
parseFilePaths(page)
249249

250250
value = re.sub(r"(\A|;)(\w+)=[^;]*", "\g<2>=", cookie)
251251
if value != cookie:
252-
page, _ = Request.queryPage(value=value, place=PLACE.COOKIE, content=True, raise404=False, silent=True, noteResponseTime=False)
252+
page, _, _ = Request.queryPage(value=value, place=PLACE.COOKIE, content=True, raise404=False, silent=True, noteResponseTime=False)
253253
parseFilePaths(page)
254254

255255
directories = list(arrayizeValue(getManualDirectories()))

‎lib/techniques/error/use.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -121,7 +121,7 @@ def _oneShotErrorUse(expression, field=None, chunkTest=False):
121121
payload = agent.payload(newValue=injExpression)
122122

123123
# Perform the request
124-
page, headers = Request.queryPage(payload, content=True, raise404=False)
124+
page, headers, _ = Request.queryPage(payload, content=True, raise404=False)
125125

126126
incrementCounter(kb.technique)
127127

‎lib/techniques/union/test.py‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -53,8 +53,8 @@ def _orderByTest(cols):
5353
query = agent.prefixQuery("ORDER BY %d" % cols, prefix=prefix)
5454
query = agent.suffixQuery(query, suffix=suffix, comment=comment)
5555
payload = agent.payload(newValue=query, place=place, parameter=parameter, where=where)
56-
page, headers = Request.queryPage(payload, place=place, content=True, raise404=False)
57-
return not any(re.search(_, page or "", re.I) and not re.search(_, kb.pageTemplate or "", re.I) for _ in ("(warning|error):", "order by", "unknown column", "failed")) and comparison(page, headers) or re.search(r"data types cannot be compared or sorted", page or "", re.I)
56+
page, headers, code = Request.queryPage(payload, place=place, content=True, raise404=False)
57+
return not any(re.search(_, page or "", re.I) and not re.search(_, kb.pageTemplate or "", re.I) for _ in ("(warning|error):", "order by", "unknown column", "failed")) and comparison(page, headers, code) or re.search(r"data types cannot be compared or sorted", page or "", re.I)
5858

5959
if _orderByTest(1) and not _orderByTest(randomInt()):
6060
infoMsg = "'ORDER BY' technique appears to be usable. "
@@ -105,10 +105,10 @@ def _orderByTest(cols):
105105
for count in xrange(lowerCount, upperCount + 1):
106106
query = agent.forgeUnionQuery('', -1, count, comment, prefix, suffix, kb.uChar, where)
107107
payload = agent.payload(place=place, parameter=parameter, newValue=query, where=where)
108-
page, headers = Request.queryPage(payload, place=place, content=True, raise404=False)
108+
page, headers, code = Request.queryPage(payload, place=place, content=True, raise404=False)
109109
if not isNullValue(kb.uChar):
110110
pages[count] = page
111-
ratio = comparison(page, headers, getRatioValue=True) or MIN_RATIO
111+
ratio = comparison(page, headers, code, getRatioValue=True) or MIN_RATIO
112112
ratios.append(ratio)
113113
min_, max_ = min(min_, ratio), max(max_, ratio)
114114
items.append((count, ratio))
@@ -187,7 +187,7 @@ def _unionPosition(comment, place, parameter, prefix, suffix, count, where=PAYLO
187187
payload = agent.payload(place=place, parameter=parameter, newValue=query, where=where)
188188

189189
# Perform the request
190-
page, headers = Request.queryPage(payload, place=place, content=True, raise404=False)
190+
page, headers, _ = Request.queryPage(payload, place=place, content=True, raise404=False)
191191
content = "%s%s".lower() % (removeReflectiveValues(page, payload) or "", \
192192
removeReflectiveValues(listToStrValue(headers.headers if headers else None), \
193193
payload, True) or "")
@@ -209,7 +209,7 @@ def _unionPosition(comment, place, parameter, prefix, suffix, count, where=PAYLO
209209
payload = agent.payload(place=place, parameter=parameter, newValue=query, where=where)
210210

211211
# Perform the request
212-
page, headers = Request.queryPage(payload, place=place, content=True, raise404=False)
212+
page, headers, _ = Request.queryPage(payload, place=place, content=True, raise404=False)
213213
content = "%s%s".lower() % (page or "", listToStrValue(headers.headers if headers else None) or "")
214214

215215
if not all(_ in content for _ in (phrase, phrase2)):
@@ -222,7 +222,7 @@ def _unionPosition(comment, place, parameter, prefix, suffix, count, where=PAYLO
222222
payload = agent.payload(place=place, parameter=parameter, newValue=query, where=where)
223223

224224
# Perform the request
225-
page, headers = Request.queryPage(payload, place=place, content=True, raise404=False)
225+
page, headers, _ = Request.queryPage(payload, place=place, content=True, raise404=False)
226226
content = "%s%s".lower() % (removeReflectiveValues(page, payload) or "", \
227227
removeReflectiveValues(listToStrValue(headers.headers if headers else None), \
228228
payload, True) or "")

‎lib/techniques/union/use.py‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -81,7 +81,7 @@ def _oneShotUnionUse(expression, unpack=True, limited=False):
8181
payload = agent.payload(newValue=query, where=where)
8282

8383
# Perform the request
84-
page, headers = Request.queryPage(payload, content=True, raise404=False)
84+
page, headers, _ = Request.queryPage(payload, content=True, raise404=False)
8585

8686
incrementCounter(PAYLOAD.TECHNIQUE.UNION)
8787

‎txt/checksum.md5‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ c55b400b72acc43e0e59c87dd8bb8d75 extra/shellcodeexec/windows/shellcodeexec.x32.
2121
310efc965c862cfbd7b0da5150a5ad36 extra/sqlharvest/__init__.py
2222
7713aa366c983cdf1f3dbaa7383ea9e1 extra/sqlharvest/sqlharvest.py
2323
7afe836fd97271ccba67b4c0da2482ff lib/controller/action.py
24-
fec857280fd553ee7e9b49fdfe104402 lib/controller/checks.py
24+
cc6623fc0a9790818317653b9463a96d lib/controller/checks.py
2525
130d1c16708668b8d89605b6b5b38bf5 lib/controller/controller.py
2626
52a3969f57170e935e3fc0156335bf2c lib/controller/handler.py
2727
310efc965c862cfbd7b0da5150a5ad36 lib/controller/__init__.py
@@ -40,13 +40,13 @@ b9ff4e622c416116bee6024c0f050349 lib/core/enums.py
4040
310efc965c862cfbd7b0da5150a5ad36 lib/core/__init__.py
4141
9ba39bf66e9ecd469446bdbbeda906c3 lib/core/log.py
4242
edcfce0850771e6454acef244d5c5760 lib/core/optiondict.py
43-
d85f2f63ffcb6135400339f9a7595a7b lib/core/option.py
43+
9eb46811650036aac410b3dde20a86f4 lib/core/option.py
4444
5f2f56e6c5f274408df61943f1e080c0 lib/core/profiling.py
4545
40be71cd774662a7b420caeb7051e7d5 lib/core/readlineng.py
4646
d8e9250f3775119df07e9070eddccd16 lib/core/replication.py
4747
785f86e3f963fa3798f84286a4e83ff2 lib/core/revision.py
4848
40c80b28b3a5819b737a5a17d4565ae9 lib/core/session.py
49-
c83fde3105ab7696692a704c34fc5504 lib/core/settings.py
49+
7dae5446f2587e632536d540c3950848 lib/core/settings.py
5050
d91291997d2bd2f6028aaf371bf1d3b6 lib/core/shell.py
5151
2ad85c130cc5f2b3701ea85c2f6bbf20 lib/core/subprocessng.py
5252
8136241fdbdb99a5dc0e51ba72918f6e lib/core/target.py
@@ -68,7 +68,7 @@ ad74fc58fc7214802fd27067bce18dd2 lib/core/unescaper.py
6868
403d873f1d2fd0c7f73d83f104e41850 lib/request/basicauthhandler.py
6969
86cb5ce3fa5530c255f4599bfc0cc4e2 lib/request/basic.py
7070
ef48de622b0a6b4a71df64b0d2785ef8 lib/request/comparison.py
71-
f5c245a0609065a91c79611ff1b66787 lib/request/connect.py
71+
a912b5148a089ec333cc9210d53235ea lib/request/connect.py
7272
fb6b788d0016ab4ec5e5f661f0f702ad lib/request/direct.py
7373
cc1163d38e9b7ee5db2adac6784c02bb lib/request/dns.py
7474
5dcdb37823a0b5eff65cd1018bcf09e4 lib/request/httpshandler.py
@@ -78,26 +78,26 @@ dc1e0af84ee8eb421797d61c8cb8f172 lib/request/methodrequest.py
7878
bb9c165b050f7696b089b96b5947fac3 lib/request/pkihandler.py
7979
602d4338a9fceaaee40c601410d8ac0b lib/request/rangehandler.py
8080
111b3ee936f23167b5654a5f72e9731b lib/request/redirecthandler.py
81-
20a0e6dac2edcf98fa8c47ee9a332c28 lib/request/templates.py
81+
b373770137dc885889e495de95169b93 lib/request/templates.py
8282
992a02767d12254784f15501a7ab8dd8 lib/takeover/abstraction.py
8383
c6bc7961a186baabe0a9f5b7e0d8974b lib/takeover/icmpsh.py
8484
310efc965c862cfbd7b0da5150a5ad36 lib/takeover/__init__.py
8585
c90c993b020a6ae0f0e497fd84f37466 lib/takeover/metasploit.py
8686
ac541a0d38e4ecb4e41e97799a7235f4 lib/takeover/registry.py
8787
d466eab3ff82dbe29dc820e303eb4cff lib/takeover/udf.py
88-
e7f3012f4f9e822d39eabd934d050b0e lib/takeover/web.py
88+
b7dd3a2697a08108ddc9a4264922c2e8 lib/takeover/web.py
8989
604b087dc52dbcb4c3938ad1bf63829c lib/takeover/xp_cmdshell.py
9090
9f03972ea5ce2df74d43be5f30f068eb lib/techniques/blind/inference.py
9191
310efc965c862cfbd7b0da5150a5ad36 lib/techniques/blind/__init__.py
9292
310efc965c862cfbd7b0da5150a5ad36 lib/techniques/dns/__init__.py
9393
ab1601a7f429b47637c4fb8af703d0f1 lib/techniques/dns/test.py
9494
d3da4c7ceaf57c4687a052d58722f6bb lib/techniques/dns/use.py
9595
310efc965c862cfbd7b0da5150a5ad36 lib/techniques/error/__init__.py
96-
628f1fe86603512ae122f868cdabbfb9 lib/techniques/error/use.py
96+
c7e6589ef171819c4630ca8434f0250b lib/techniques/error/use.py
9797
310efc965c862cfbd7b0da5150a5ad36 lib/techniques/__init__.py
9898
310efc965c862cfbd7b0da5150a5ad36 lib/techniques/union/__init__.py
99-
211e6dc49af6ad6bd3590d16d41e86db lib/techniques/union/test.py
100-
d17ca7177a29d7d07094fc7dd747d4c5 lib/techniques/union/use.py
99+
d71e48e6fd08f75cc612bf8b260994ce lib/techniques/union/test.py
100+
36194e6c0a8dd14139f57ebf87bb80f9 lib/techniques/union/use.py
101101
67f0ad96ec2207d7e59c788b858afd6d lib/utils/api.py
102102
7d10ba0851da8ee9cd3c140dcd18798e lib/utils/brute.py
103103
ed70f1ca9113664043ec9e6778e48078 lib/utils/crawler.py

0 commit comments

Comments
 (0)