PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-06 12:41:30 +00:00
Code Issues Projects Releases Wiki Activity

code refactoring

Browse Source
This commit is contained in:
Miroslav Stampar
2010-12-07 13:34:06 +00:00
parent 4f01d4c109
commit 0dc630203f
4 changed files with 10 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
lib/controller/checks.py
View File

@@ -95,7 +95,7 @@ def checkSqlInjection(place, parameter, value):
injection = injectionDict()
# Clear cookies after each query page attempt
kb.flushCookies = True
kb.testMode = True
for test in conf.tests:
title = test.title
@@ -269,7 +269,6 @@ def checkSqlInjection(place, parameter, value):
# as we are changing parameters value, which will result
# most definitely with a different content
kb.pageTemplate, _ = Request.queryPage(agent.payload(place, parameter, value, origValue), place, content=True)
kb.testCount += 1
elif where == 3:
origValue = ""
kb.pageTemplate = kb.originalPage
@@ -307,15 +306,12 @@ def checkSqlInjection(place, parameter, value):
# the False response content
conf.matchRatio = None
_ = Request.queryPage(cmpPayload, place)
kb.testCount += 1
# Compare True and False response contents
trueResult = Request.queryPage(reqPayload, place)
kb.testCount += 1
if trueResult:
falseResult = Request.queryPage(cmpPayload, place)
kb.testCount += 1
if not falseResult:
infoMsg = "%s parameter '%s' is '%s' injectable " % (place, parameter, title)
@@ -329,7 +325,6 @@ def checkSqlInjection(place, parameter, value):
# Perform the test's request and grep the response
# body for the test's <grep> regular expression
reqBody, _ = Request.queryPage(reqPayload, place, content=True)
kb.testCount += 1
output = extractRegexResult(check, reqBody, re.DOTALL | re.IGNORECASE)
if output:
@@ -354,9 +349,7 @@ def checkSqlInjection(place, parameter, value):
# Perform the test's request and check how long
# it takes to get the response back
start = time.time()
_ = Request.queryPage(reqPayload, place)
kb.testCount += 1
duration = calculateDeltaSeconds(start)
# Threat sleep and delayed (heavy query) differently
@@ -429,7 +422,7 @@ def checkSqlInjection(place, parameter, value):
break
# Flush the flag
kb.flushCookies = False
kb.testMode = False
# Return the injection object
if injection.place is not None and injection.parameter is not None: