infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Use name convention 

git-svn-id: file:///home/svn/framework3/trunk@7146 4d416f70-5f16-0410-b530-b9f4589650da
unstable
et 2009-10-11 23:07:34 +00:00
parent c14bd99aff
commit 09ec91d9bf
1 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
modules/auxiliary/scanner/http/wmap_error_sql_injection.rb
View File

@ -38,7 +38,7 @@ class Metasploit3 < Msf::Auxiliary
OptString.new('METHOD', [ true, "HTTP Method",'GET']),
OptString.new('PATH', [ true, "The path/file to test SQL injection", '/default.aspx']),
OptString.new('QUERY', [ false, "HTTP URI Query", '']),
OptString.new('DATA', [ false, "HTTP Body Data", '']),
OptString.new('BODY', [ false, "HTTP Body Data", '']),
OptString.new('COOKIE',[ false, "HTTP Cookies", ''])
], self.class)
@ -75,11 +75,11 @@ class Metasploit3 < Msf::Auxiliary
gvars = nil
end
if !datastore['DATA'] or datastore['DATA'].empty?
datastore['DATA'] = nil
if !datastore['BODY'] or datastore['BODY'].empty?
datastore['BODY'] = nil
pvars = nil
else
pvars = queryparse(datastore['DATA'])
pvars = queryparse(datastore['BODY'])
end
if !datastore['COOKIE'] or datastore['COOKIE'].empty?
@ -103,7 +103,7 @@ class Metasploit3 < Msf::Auxiliary
'method' => datastore['METHOD'],
'ctype' => 'application/x-www-form-urlencoded',
'cookie' => datastore['COOKIE'],
'data' => datastore['DATA']
'data' => datastore['BODY']
}, 20)
@ -176,7 +176,7 @@ class Metasploit3 < Msf::Auxiliary
'method' => datastore['METHOD'],
'ctype' => 'application/x-www-form-urlencoded',
'cookie' => datastore['COOKIE'],
'data' => datastore['DATA']
'data' => datastore['BODY']
}, 20)
rescue ::Rex::ConnectionRefused, ::Rex::HostUnreachable, ::Rex::ConnectionTimeout
@ -235,7 +235,7 @@ class Metasploit3 < Msf::Auxiliary
end
pvars.each do |key,value|
pvars = queryparse(datastore['DATA']) #Now its a Hash
pvars = queryparse(datastore['BODY']) #Now its a Hash
print_status("- Testing data with #{idesc}. Parameter #{key}:")
pvars[key] = pvars[key]+istr