PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-06 12:41:30 +00:00
Code Issues Projects Releases Wiki Activity

--technique can now be something like 123 which includes both techniques 1, 2 and 3

Browse Source
This commit is contained in:
Miroslav Stampar
2011-02-17 21:39:16 +00:00
parent 7ebc1ab90a
commit 22cd49a217
4 changed files with 13 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
lib/core/session.py
View File

@@ -13,6 +13,7 @@ from lib.core.common import Backend
from lib.core.common import Format
from lib.core.common import dataToSessionFile
from lib.core.common import getFilteredPageContent
from lib.core.common import intersect
from lib.core.common import readInput
from lib.core.convert import base64pickle
from lib.core.convert import base64unpickle
@@ -49,9 +50,8 @@ def setInjection(inj):
or ( kb.resumedQueries.has_key(conf.url) and
( not kb.resumedQueries[conf.url].has_key("Injection data")
or ( kb.resumedQueries[conf.url].has_key("Injection data")
and isinstance(conf.technique, int) and conf.technique > 0
and conf.technique not in
base64unpickle(kb.resumedQueries[conf.url]["Injection data"][:-1]).data
and intersect(base64unpickle(kb.resumedQueries[conf.url]["Injection data"][:-1]).data,\
inj.data.keys()) != inj.data.keys()
) ) ) )
if condition:
@@ -164,7 +164,7 @@ def resumeConfKb(expression, url, value):
if injection.place in conf.paramDict and \
injection.parameter in conf.paramDict[injection.place]:
if not conf.technique or ( conf.technique in injection.data ):
if not conf.technique or intersect(conf.technique, injection.data):
kb.injections.append(injection)
else:
warnMsg = "there is an injection in %s parameter '%s' " % (injection.place, injection.parameter)