sqlmap/waf/requestvalidationmode.py at master · getcode2git/sqlmap · GitHub

22 lines (16 loc) · 642 Bytes

#!/usr/bin/env python

"""

See the file 'doc/COPYING' for copying permission

"""

from lib.core.settings import WAF_ATTACK_VECTORS

__product__ = "ASP.NET RequestValidationMode (Microsoft)"

def detect(get_page):

retval = False

for vector in WAF_ATTACK_VECTORS:

page, headers, code = get_page(get=vector)

retval = "ASP.NET has detected data in the request that is potentially dangerous" in page

retval |= "Request Validation has detected a potentially dangerous client input value" in page

if retval:

break

return retval

Expand file tree