PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-06 04:31:30 +00:00
Code Issues Projects Releases Wiki Activity

Added support for --scope also in WebScarab logs (-l)

Browse Source
This commit is contained in:
Bernardo Damele
2011-02-19 21:03:55 +00:00
parent f30dea74f3
commit 8e60acae5d
1 changed files with 10 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
lib/core/option.py
View File

@@ -150,12 +150,15 @@ def __feedTargetsDict(reqFile, addedTargetUrls):
"""
Parses web scarab logs (POST method not supported)
"""
reqResList = content.split(WEBSCARAB_SPLITTER)
getPostReq = False
for request in reqResList:
url = extractRegexResult(r"URL: (?P<result>.+?)\n", request, re.I)
method = extractRegexResult(r"METHOD: (?P<result>.+?)\n", request, re.I)
cookie = extractRegexResult(r"COOKIE: (?P<result>.+?)\n", request, re.I)
getPostReq = True
if not method or not url:
logger.debug("Invalid log data")
@@ -168,9 +171,13 @@ def __feedTargetsDict(reqFile, addedTargetUrls):
logger.warning(warnMsg)
continue
if not kb.targetUrls or url not in addedTargetUrls:
kb.targetUrls.add((url, method, None, cookie))
addedTargetUrls.add(url)
if conf.scope:
getPostReq &= re.search(conf.scope, url) is not None
if getPostReq:
if not kb.targetUrls or url not in addedTargetUrls:
kb.targetUrls.add((url, method, None, cookie))
addedTargetUrls.add(url)
def __parseBurpLog(content):
"""