PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-06 12:41:29 +00:00
Code Issues Projects Releases Wiki Activity

Fixed bug that would make the script fail with the error message:

Browse Source 
"invalid capture index" [Patrik Karlsson]
This commit is contained in:
patrik
2012-05-23 17:53:30 +00:00
parent 9300777ced
commit 5368a4adea
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
scripts/http-unsafe-output-escaping.nse
View File

@@ -62,7 +62,7 @@ local function getReflected(parsed, r)
local q = url.parse_query(parsed.query)
-- Check the values (and keys) and see if they are reflected in the page
for k,v in pairs(q) do
if r.response.body:find(v) then
if r.response.body:find(v, 1, true) then
dbg("Reflected content %s=%s", k,v)
reflected_values[k] = v
count = count +1
@@ -83,7 +83,7 @@ local function createMinedLinks(reflected_values, all_values)
local new_links = {}
for k,v in pairs(reflected_values) do
-- First of all, add the payload to the reflected param
local urlParams = {k = addPayload(v)}
local urlParams = { [k] = addPayload(v)}
for k2,v2 in pairs(all_values) do
if k2 ~= k then
urlParams[k2] = v2