PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-01-19 04:39:01 +00:00
Code Issues Projects Releases Wiki Activity

Fixes the way of creating the request line by changing string.format for regular string concatenation to allow null bytes in the requests.

Browse Source
This commit is contained in:
paulino
2011-07-15 23:48:00 +00:00
parent deded46038
commit 8215c3420f
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
nselib/http.lua
View File

@@ -1081,11 +1081,12 @@ local function build_request(host, port, method, path, options)
-- Add any other header fields into the local copy.
table_augment(mod_options, options)
local request_line = string.format("%s %s HTTP/1.1", method, path)
-- We concat this string manually to allow null bytes in requests
local request_line = method.." "..path.." HTTP/1.1"
local header = {}
for name, value in pairs(mod_options.header) do
header[#header + 1] = string.format("%s: %s", name, value)
-- we concat this string manually to allow null bytes in requests
header[#header + 1] = name..": "..value
end
return request_line .. "\r\n" .. stdnse.strjoin("\r\n", header) .. "\r\n\r\n" .. (body or "")