mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2026-08-04 14:55:40 +00:00
Major bug fix in the comparison algorithm to correctly handle also the
case that the url is stable and the False response changes the page content very little.
This commit is contained in:
parent
c405fb51ab
commit
207e96e2b2
6 changed files with 55 additions and 14 deletions
|
|
@ -31,6 +31,7 @@ from lib.controller.action import action
|
|||
from lib.core.agent import agent
|
||||
from lib.core.common import randomInt
|
||||
from lib.core.common import randomStr
|
||||
from lib.core.convert import md5hash
|
||||
from lib.core.data import conf
|
||||
from lib.core.data import kb
|
||||
from lib.core.data import logger
|
||||
|
|
@ -296,12 +297,17 @@ def checkStability():
|
|||
|
||||
firstPage, firstHeaders = Request.queryPage(content=True)
|
||||
time.sleep(1)
|
||||
|
||||
secondPage, secondHeaders = Request.queryPage(content=True)
|
||||
|
||||
condition = firstPage == secondPage
|
||||
|
||||
if condition == False:
|
||||
if condition == True:
|
||||
conf.md5hash = md5hash(firstPage)
|
||||
|
||||
logMsg = "url is stable"
|
||||
logger.info(logMsg)
|
||||
|
||||
elif condition == False:
|
||||
warnMsg = "url is not stable, sqlmap will base the page "
|
||||
warnMsg += "comparison on a sequence matcher, if no dynamic nor "
|
||||
warnMsg += "injectable parameters are detected, refer to user's "
|
||||
|
|
@ -309,10 +315,6 @@ def checkStability():
|
|||
warnMsg += "string or regular expression to match on"
|
||||
logger.warn(warnMsg)
|
||||
|
||||
if condition == True:
|
||||
logMsg = "url is stable"
|
||||
logger.info(logMsg)
|
||||
|
||||
return condition
|
||||
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue