fix #94 如果存在返回包,sqlmap的RequestAsFile是返回包的内容 #95
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
作者您好,今天我测试时也发现同样Sqlmap调用RequestAsFile文件内容为返回包的问题#94,(dirsearch的{BaseURL}没有反应这个我没使用到,未能复现成功,我测试使用BaseURL正常)我调试了下,发现是修复#90 这个bug时引入的新bug,在这个循环时:
part 列表中有多个带asFile的名称,使用getValueByPartType获取变量时会不停的生成文件
同时,生成文件的命名使用的时间戳为秒级别,同时机器处理循环的速度较快,导致后面生成的Respose的文件名称与前面的文件名称相同,覆盖了前面的文件:建议更改处理逻辑:
也可以回滚下前面我提交的PR中的正则我经过测试是可以正常使用,不会出现这种情况,其匹配的是最小{}的内容如{ x{ds}S中匹配的是{ds} 而不是{ x{ds}或其他