|
19 | 19 | from thirdparty import six
|
20 | 20 |
|
21 | 21 | # sqlmap version (<major>.<minor>.<month>.<monthly commit>)
|
22 |
| -VERSION = "1.9.7.9" |
| 22 | +VERSION = "1.9.7.10" |
23 | 23 | TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable"
|
24 | 24 | TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34}
|
25 | 25 | VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)
|
|
64 | 64 | DUMMY_JUNK = "ahy9Ouge"
|
65 | 65 |
|
66 | 66 | # Markers for special cases when parameter values contain html encoded characters
|
67 |
| -PARAMETER_AMP_MARKER = "__AMP__" |
68 |
| -PARAMETER_SEMICOLON_MARKER = "__SEMICOLON__" |
69 |
| -BOUNDARY_BACKSLASH_MARKER = "__BACKSLASH__" |
70 |
| -PARAMETER_PERCENTAGE_MARKER = "__PERCENTAGE__" |
| 67 | +PARAMETER_AMP_MARKER = "__PARAMETER_AMP__" |
| 68 | +PARAMETER_SEMICOLON_MARKER = "__PARAMETER_SEMICOLON__" |
| 69 | +BOUNDARY_BACKSLASH_MARKER = "__BOUNDARY_BACKSLASH__" |
| 70 | +PARAMETER_PERCENTAGE_MARKER = "__PARAMETER_PERCENTAGE__" |
71 | 71 | PARTIAL_VALUE_MARKER = "__PARTIAL_VALUE__"
|
72 | 72 | PARTIAL_HEX_VALUE_MARKER = "__PARTIAL_HEX_VALUE__"
|
73 |
| -URI_QUESTION_MARKER = "__QUESTION__" |
| 73 | +URI_QUESTION_MARKER = "__URI_QUESTION__" |
74 | 74 | ASTERISK_MARKER = "__ASTERISK__"
|
75 | 75 | REPLACEMENT_MARKER = "__REPLACEMENT__"
|
76 | 76 | BOUNDED_BASE64_MARKER = "__BOUNDED_BASE64__"
|
77 | 77 | BOUNDED_INJECTION_MARKER = "__BOUNDED_INJECTION__"
|
78 |
| -SAFE_VARIABLE_MARKER = "__SAFE__" |
| 78 | +SAFE_VARIABLE_MARKER = "__SAFE_VARIABLE__" |
79 | 79 | SAFE_HEX_MARKER = "__SAFE_HEX__"
|
80 | 80 | DOLLAR_MARKER = "__DOLLAR__"
|
81 | 81 |
|
|
97 | 97 | TEXT_CONTENT_TYPE_REGEX = r"(?i)(text|form|message|xml|javascript|ecmascript|json)"
|
98 | 98 |
|
99 | 99 | # Regular expression used for recognition of generic permission messages
|
100 |
| -PERMISSION_DENIED_REGEX = r"(?P<result>(command|permission|access)\s*(was|is)?\s*denied)" |
| 100 | +PERMISSION_DENIED_REGEX = r"\b(?P<result>(command|permission|access|user)\s*(was|is|has been)?\s*(denied|forbidden|unauthorized|rejected|not allowed))" |
101 | 101 |
|
102 | 102 | # Regular expression used in recognition of generic protection mechanisms
|
103 | 103 | GENERIC_PROTECTION_REGEX = r"(?i)\b(rejected|blocked|protection|incident|denied|detected|dangerous|firewall)\b"
|
|
0 commit comments