STRLCPY/pentest-tools

Total 1 files

■ ■ ■ ■ ■ ■

lfi.py

		skipped 98 lines
99	99		def testPath( t_urlparse, payload ):
100	100		path = ''
101	101		t_path = ['/'] + t_urlparse.path.split('/')
	102	+	# print(t_path)
102	103
103	104		for dir in t_path:
104	105		if len(dir):
		skipped 2 lines
107	108		# new_value = os.path.dirname(t_urlparse.path) + '/' + urllib.parse.quote(payload)
108	109		# new_value = path + '/' + urllib.parse.quote(payload)
109	110		new_value = path + '/' + payload
110		-	new_value = new_value.replace('//','/')
	111	+	# new_value = new_value.replace('//','/')
111	112		t_urlparse = t_urlparse._replace(path=new_value)
112	113		url = urllib.parse.urlunparse(t_urlparse)
113	114		doTest( url )
		skipped 8 lines
122	123		# if len(t_urlparse.fragment):
123	124		# testFragment( t_urlparse, payload.strip('/') )
124	125
125		-	# testPath( t_urlparse, payload )
	126	+	testPath( t_urlparse, payload )
126	127
127	128
128	129		def testURL( url ):
		skipped 436 lines
565	566		t = Thread( target=realDoWork )
566	567		t.daemon = True
567	568		t.start()
	569	+
	570	+
	571	+	with open('generated_urls', 'w') as fp:
	572	+	fp.write("\n".join(str(item[0]) for item in t_realdotest))
	573	+
	574	+	# f = open("generated_urls", "w")
	575	+	# f.write(t_realdotest.join("\n"))
	576	+	# # f.write("\n".join(t_realdotest))
	577	+	# f.close()
568	578
569	579		try:
570	580		for url in t_realdotest:
		skipped 8 lines