Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix #94 如果存在返回包,sqlmap的RequestAsFile是返回包的内容 #95

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

coutcin-xw
Copy link
Contributor

作者您好,今天我测试时也发现同样Sqlmap调用RequestAsFile文件内容为返回包的问题#94,(dirsearch的{BaseURL}没有反应这个我没使用到,未能复现成功,我测试使用BaseURL正常)我调试了下,发现是修复#90 这个bug时引入的新bug,在这个循环时:
image
part 列表中有多个带asFile的名称,使用getValueByPartType获取变量时会不停的生成文件
image
同时,生成文件的命名使用的时间戳为秒级别,同时机器处理循环的速度较快,导致后面生成的Respose的文件名称与前面的文件名称相同,覆盖了前面的文件:建议更改处理逻辑:
image
也可以回滚下前面我提交的PR中的正则我经过测试是可以正常使用,不会出现这种情况,其匹配的是最小{}的内容如{ x{ds}S中匹配的是{ds} 而不是{ x{ds}或其他
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant