mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-12-06 20:51:31 +00:00
more restrictions on crypt(3) hash recognition to prevent false positives
This commit is contained in:
@@ -303,7 +303,8 @@ def hashRecognition(value):
|
|||||||
continue
|
continue
|
||||||
elif Backend.getIdentifiedDbms() == DBMS.MYSQL and regex == HASH.ORACLE_OLD:
|
elif Backend.getIdentifiedDbms() == DBMS.MYSQL and regex == HASH.ORACLE_OLD:
|
||||||
continue
|
continue
|
||||||
elif regex == HASH.CRYPT_GENERIC and getCompiledRegex(GENERAL_IP_ADDRESS_REGEX).match(value):
|
elif regex == HASH.CRYPT_GENERIC:
|
||||||
|
if any([getCompiledRegex(GENERAL_IP_ADDRESS_REGEX).match(value), value.lower() == value, value.upper() == value, value.isdigit()]):
|
||||||
continue
|
continue
|
||||||
elif getCompiledRegex(regex).match(value):
|
elif getCompiledRegex(regex).match(value):
|
||||||
retVal = regex
|
retVal = regex
|
||||||
|
|||||||
Reference in New Issue
Block a user