STRLCPY/ghauri

■ ■ ■ ■ ■ ■

ghauri/common/utils.py

		skipped 1708 lines
1709	1709		return raw_response
1710	1710
1711	1711
	1712	+	def clean_dups(payloads):
	1713	+	_temp = []
	1714	+	s = set()
	1715	+	for entry in payloads:
	1716	+	title = entry.title
	1717	+	if title.lower() not in s:
	1718	+	s.add(title.lower())
	1719	+	_temp.append(entry)
	1720	+	return _temp
	1721	+
	1722	+
1712	1723		def fetch_db_specific_payload(
1713	1724		dbms=None,
1714	1725		timebased_only=False,
		skipped 32 lines
1747	1758		)
1748	1759		if ok:
1749	1760		_temp.extend(ok)
	1761	+	# experimental..
	1762	+	if conf.test_filter:
	1763	+	_filtered_tests = []
	1764	+	for t in _temp:
	1765	+	title = t.title
	1766	+	mobj = re.search(r"(?:%s)" % (re.escape(conf.test_filter)), title)
	1767	+	if mobj:
	1768	+	logger.debug(f"{title} ==> {conf.test_filter}")
	1769	+	_filtered_tests.append(t)
	1770	+	if _filtered_tests:
	1771	+	_temp = _filtered_tests
1750	1772		return _temp
1751	1773
1752	1774
		skipped 142 lines
1895	1917		vector=vector,
1896	1918		)
1897	1919		_temp.append(_r)
1898		-	# experimental..
1899		-	if conf.test_filter:
1900		-	_filtered_tests = []
1901		-	for t in _temp:
1902		-	title = t.title
1903		-	mobj = re.search(r"(?is)(?:%s)" % (re.escape(conf.test_filter)), title)
1904		-	if mobj:
1905		-	_filtered_tests.append(t)
1906		-	if _filtered_tests:
1907		-	_temp = _filtered_tests
1908	1920		return _temp
1909	1921
1910	1922
		skipped 145 lines

■ ■ ■ ■ ■ ■

ghauri/core/tests.py

		skipped 63 lines
64	64		merge_time_based_attack_payloads,
65	65		encode_object,
66	66		Struct,
	67	+	clean_dups,
67	68		)
68	69
69	70
		skipped 432 lines
502	503		booleanbased_only=True, dbms=dbms or possible_dbms
503	504		)
504	505		blind_payloads.extend(dbms_specific_boolean_payloads)
	506	+	blind_payloads = clean_dups(blind_payloads)
505	507		param_key = parameter.key
506	508		param_value = parameter.value
507	509		is_injected = False
		skipped 2022 lines