PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-07 05:01:30 +00:00
Code Issues Projects Releases Wiki Activity

Implementation on request

Browse Source
This commit is contained in:
Miroslav Stampar
2017-07-26 00:24:13 +02:00
parent d12b65d38c
commit 0f9c81965b
6 changed files with 28 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
waf/generic.py
View File

@@ -5,6 +5,7 @@ Copyright (c) 2006-2017 sqlmap developers (http://sqlmap.org/)
See the file 'doc/COPYING' for copying permission
"""
from lib.core.option import kb
from lib.core.settings import IDS_WAF_CHECK_PAYLOAD
from lib.core.settings import WAF_ATTACK_VECTORS
@@ -13,7 +14,7 @@ __product__ = "Generic (Unknown)"
def detect(get_page):
retval = False
page, _, code = get_page()
page, headers, code = get_page()
if page is None or code >= 400:
return False
@@ -21,6 +22,7 @@ def detect(get_page):
page, _, code = get_page(get=vector)
if code >= 400 or IDS_WAF_CHECK_PAYLOAD in vector and code is None:
kb.wafSpecificResponse = "HTTP/1.1 %s\n%s\n%s" % (code, "".join(_ for _ in headers.headers or [] if not _.startswith("URI")), page)
retval = True
break