Skip to content

Commit

Permalink
Fixes #942
Browse files Browse the repository at this point in the history
  • Loading branch information
stasinopoulos committed Jul 14, 2024
1 parent c31836e commit beca7ca
Showing 1 changed file with 12 additions and 11 deletions.
23 changes: 12 additions & 11 deletions src/core/injections/controller/controller.py
Original file line number Diff line number Diff line change
Expand Up @@ -535,19 +535,20 @@ def define_check_parameter(found, i, url):
"""
def cookie_injection(url, http_request_method, filename, timesec):

settings.COOKIE_INJECTION = True
# Cookie Injection
cookie_value = menu.options.cookie
header_name = settings.SINGLE_WHITESPACE + settings.COOKIE
settings.HTTP_HEADER = header_name[1:].lower()
cookie_parameters = parameters.do_cookie_check(menu.options.cookie)
if type(cookie_parameters) is str:
cookie_parameters_list = []
cookie_parameters_list.append(cookie_parameters)
cookie_parameters = cookie_parameters_list
# Remove whitespaces
cookie_parameters = [x.replace(settings.SINGLE_WHITESPACE, "") for x in cookie_parameters]
do_injection(cookie_parameters, settings.COOKIE, header_name, url, http_request_method, filename, timesec)
if cookie_value:
settings.COOKIE_INJECTION = True
header_name = settings.SINGLE_WHITESPACE + settings.COOKIE
settings.HTTP_HEADER = header_name[1:].lower()
cookie_parameters = parameters.do_cookie_check(menu.options.cookie)
if type(cookie_parameters) is str:
cookie_parameters_list = []
cookie_parameters_list.append(cookie_parameters)
cookie_parameters = cookie_parameters_list
# Remove whitespaces
cookie_parameters = [x.replace(settings.SINGLE_WHITESPACE, "") for x in cookie_parameters]
do_injection(cookie_parameters, settings.COOKIE, header_name, url, http_request_method, filename, timesec)

if settings.COOKIE_INJECTION:
# Restore cookie value
Expand Down

0 comments on commit beca7ca

Please sign in to comment.