Fine tuning of Cloudfrount WAF script (less FP)

stamparm · stamparm · commit dc01f2e77358 · 2018-08-30T16:42:35.000+02:00
diff --git a/lib/core/settings.py b/lib/core/settings.py
@@ -19,7 +19,7 @@
 from lib.core.enums import OS
 
 # sqlmap version (<major>.<minor>.<month>.<monthly commit>)
-VERSION = "1.2.8.31"
+VERSION = "1.2.8.32"
 TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
 TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
 VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)
diff --git a/txt/checksum.md5 b/txt/checksum.md5
@@ -50,7 +50,7 @@ c8c386d644d57c659d74542f5f57f632  lib/core/patch.py
 0c3eef46bdbf87e29a3f95f90240d192  lib/core/replication.py
 a7db43859b61569b601b97f187dd31c5  lib/core/revision.py
 fcb74fcc9577523524659ec49e2e964b  lib/core/session.py
-6f054fe13c3a24d17c82b35c96ca0ed0  lib/core/settings.py
+d4926186bd8f94eb38b5daf98f1cd67d  lib/core/settings.py
 dd68a9d02fccb4fa1428b20e15b0db5d  lib/core/shell.py
 a7edc9250d13af36ac0108f259859c19  lib/core/subprocessng.py
 815d1cf27f0f8738d81531e73149867d  lib/core/target.py
@@ -405,7 +405,7 @@ ef722d062564def381b1f96f5faadee3  waf/baidu.py
 2f3bbf43be94d4e9ffe9f80e8483d62f  waf/ciscoacexml.py
 ba84f296cb52f5e78a0670b98d7763fa  waf/cloudbric.py
 94b50385a9d462492e3a639d71aaa1c3  waf/cloudflare.py
-b16b1c15532103346d5e2f5b8bd1ed36  waf/cloudfront.py
+8c8344b4f7e97c31f130f3d48da9b393  waf/cloudfront.py
 ac96f34c254951d301973617064eb1b5  waf/comodo.py
 56d58c982c2cf775e0f8dc6767f336fd  waf/datapower.py
 1538b661e35843074f4599be93b3fae9  waf/denyall.py
diff --git a/waf/cloudfront.py b/waf/cloudfront.py
@@ -18,8 +18,7 @@ def detect(get_page):
     for vector in WAF_ATTACK_VECTORS:
         _, headers, _ = get_page(get=vector)
 
-        retval |= re.search(r"cloudfront", headers.get(HTTP_HEADER.SERVER, ""), re.I) is not None
-        retval |= re.search(r"cloudfront", headers.get("X-Cache", ""), re.I) is not None
+        retval = re.search(r"Error from cloudfront", headers.get("X-Cache", ""), re.I) is not None
         retval |= headers.get("X-Amz-Cf-Id") is not None
 
         if retval:
