diff --git a/src/utils/settings.py b/src/utils/settings.py index 8a8201312e..d162a28af9 100755 --- a/src/utils/settings.py +++ b/src/utils/settings.py @@ -262,7 +262,7 @@ def sys_argv_errors(): DESCRIPTION = "The command injection exploiter" AUTHOR = "Anastasios Stasinopoulos" VERSION_NUM = "4.0" -REVISION = "113" +REVISION = "114" STABLE_RELEASE = False VERSION = "v" if STABLE_RELEASE: @@ -509,16 +509,15 @@ class OS(object): # The command injection prefixes. PREFIXES = [] PREFIXES_LVL1 = [""] -PREFIXES_LVL2 = SEPARATORS_LVL1 +PREFIXES_LVL2 = PREFIXES_LVL1 + SEPARATORS_LVL1 PREFIXES_LVL3 = PREFIXES_LVL2 + ["'", "\""] # The command injection suffixes. SUFFIXES = [] SUFFIXES_LVL1 = [""] -SUFFIXES_LVL2 = SEPARATORS_LVL1 +SUFFIXES_LVL2 = SUFFIXES_LVL1 + SEPARATORS_LVL1 SUFFIXES_LVL3 = SUFFIXES_LVL2 + ["'", "\"", " #", "//", "\\\\"] - # Bad combination of prefix and separator JUNK_COMBINATION = [SEPARATORS_LVL1[i] + SEPARATORS_LVL1[j] for i in range(len(SEPARATORS_LVL1)) for j in range(len(SEPARATORS_LVL1))]