STRLCPY/ghauri

■ ■ ■ ■ ■ ■

ghauri/common/utils.py

		skipped 1828 lines
1829	1829		return _temp
1830	1830
1831	1831
	1832	+	def merge_time_based_attack_payloads(time_based, stacked_queries):
	1833	+	_temp = []
	1834	+	timed = len(time_based)
	1835	+	stacked = len(stacked_queries)
	1836	+
	1837	+	for i in range(max(timed, stacked)):
	1838	+	if i < timed:
	1839	+	_temp.append(time_based[i])
	1840	+	if i < stacked:
	1841	+	_temp.append(stacked_queries[i])
	1842	+
	1843	+	return _temp
	1844	+
	1845	+
1832	1846		def payloads_to_objects(records):
1833	1847		ParameterResult = collections.namedtuple(
1834	1848		"ParameterResult",
		skipped 102 lines

■ ■ ■ ■ ■ ■

ghauri/core/tests.py

		skipped 59 lines
60	60		fetch_payloads_by_suffix_prefix,
61	61		get_payloads_with_functions,
62	62		payloads_to_objects,
	63	+	merge_time_based_attack_payloads,
63	64		)
64	65
65	66
		skipped 955 lines
1021	1022		timebased_only=bool("T" in techniques),
1022	1023		stack_queries_only=False,
1023	1024		)
1024		-	payloads_list = []
1025		-	[
1026		-	payloads_list.extend([s, t])
1027		-	for t in time_based_payloads
1028		-	for s in stack_queries_payloads
1029		-	]
	1025	+	payloads_list = merge_time_based_attack_payloads(
	1026	+	time_based_payloads, stack_queries_payloads
	1027	+	)
1030	1028		param_key = parameter.get("key")
1031	1029		param_value = parameter.get("value")
1032	1030		# in case of very slow internet users we will consider timesec value for testing and it should be >= 10 otherwise with good internet we are good to consider random sleep value
		skipped 1455 lines