From f5ed2c0c97d91f6b562565e487d88e65e6ce550e Mon Sep 17 00:00:00 2001 From: Miroslav Stampar Date: Tue, 8 Mar 2022 00:51:14 +0100 Subject: [PATCH] Fixes #4990 --- lib/core/agent.py | 4 +++- lib/core/settings.py | 2 +- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/lib/core/agent.py b/lib/core/agent.py index b0731ca40..56c387a45 100644 --- a/lib/core/agent.py +++ b/lib/core/agent.py @@ -129,7 +129,9 @@ class Agent(object): if kb.postHint in (POST_HINT.SOAP, POST_HINT.XML): origValue = re.split(r"['\">]", origValue)[-1] elif kb.postHint in (POST_HINT.JSON, POST_HINT.JSON_LIKE): - origValue = extractRegexResult(r":\s*['\"]?(?P\w+\Z)", origValue) or extractRegexResult(r'(?s)[\s:]*(?P[^"\[,]+\Z)', origValue) + match = re.search(r"['\"]", origValue) + quote = match.group(0) if match else '"' + origValue = extractRegexResult(r"%s\s*:\s*(?P\d+)\Z" % quote, origValue) or extractRegexResult(r"(?P[^%s]*)\Z" % quote, origValue) else: _ = extractRegexResult(r"(?s)(?P[^\s<>{}();'\"&]+\Z)", origValue) or "" origValue = _.split('=', 1)[1] if '=' in _ else "" diff --git a/lib/core/settings.py b/lib/core/settings.py index 336b1eba5..2feb79294 100644 --- a/lib/core/settings.py +++ b/lib/core/settings.py @@ -20,7 +20,7 @@ from thirdparty import six from thirdparty.six import unichr as _unichr # sqlmap version (...) -VERSION = "1.6.3.10" +VERSION = "1.6.3.11" TYPE = "dev" if VERSION.count('.') > 2 and VERSION.split('.')[-1] != '0' else "stable" TYPE_COLORS = {"dev": 33, "stable": 90, "pip": 34} VERSION_STRING = "sqlmap/%s#%s" % ('.'.join(VERSION.split('.')[:-1]) if VERSION.count('.') > 2 and VERSION.split('.')[-1] == '0' else VERSION, TYPE)