PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-14 19:59:02 +00:00
Code Issues Projects Releases Wiki Activity

Move url-encoding to url.build_query

Browse Source 
patch from nnposter: http://seclists.org/nmap-dev/2014/q3/427
This commit is contained in:
dmiller
2014-10-15 18:12:58 +00:00
parent a318db04b3
commit 5952b9745b
6 changed files with 22 additions and 33 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
scripts/http-form-fuzzer.nse
View File

@@ -97,14 +97,6 @@ local function generate_safe_postdata(form)
return postdata
end
local function generate_get_string(data)
local get_str = {"?"}
for name,value in pairs(data) do
get_str[#get_str+1]=url.escape(name).."="..url.escape(value).."&"
end
return table.concat(get_str)
end
-- generate a charset of characters with ascii codes from 33 to 126
-- you can use http://www.asciitable.com/ to see which characters those actually are
local charset = generate_charset(33,126)
@@ -156,7 +148,7 @@ local function fuzz_form(form, minlen, maxlen, host, port, path)
if form["method"]=="post" then
sending_function = function(data) return http.post(host, port, form_submission_path, nil, nil, data) end
else
sending_function = function(data) return http.get(host, port, form_submission_path..generate_get_string(data), {no_cache=true, bypass_cache=true}) end
sending_function = function(data) return http.get(host, port, form_submission_path.."?"..url.build_query(data), {no_cache=true, bypass_cache=true}) end
end
for _,field in ipairs(form["fields"]) do