PenTest/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-12-07 05:01:30 +00:00
Code Issues Projects Releases Wiki Activity

Apply --level also to User-Agent (level >= 4) and Cookie (level >= 3).

Browse Source 
GET and POST parameters are always tested.
This commit is contained in:
Bernardo Damele
2010-11-29 16:33:20 +00:00
parent e735f2960a
commit e9291932e5
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
lib/controller/controller.py
View File

@@ -311,6 +311,14 @@ def start():
parameters.insert(0, place) parameters.insert(0, place)
for place in parameters: for place in parameters:
# Test User-Agent header only if --level >= 4
condition = (place == "User-Agent" and conf.level < 4)
# Test Cookie header only if --level >= 3
condition |= (place == "Cookie" and conf.level < 3)
if condition:
continue
if not conf.paramDict.has_key(place): if not conf.paramDict.has_key(place):
continue continue