sqlmap-users

[sqlmap-users] paramToDict function

[Adi M. <adi...@ya...>]

What does this function do :

__paramDict = paramToDict("GET", parameters)

It is called in __setRequestParams.
I'm not a python developer i'm just a python junior hacking into sqlmap's code....


      

Re: [sqlmap-users] paramToDict function

[Adi M. <adi...@ya...>]

In the above function I'm a little confused about the next variables:

1)testableParameters
2)conf.parameters
3)conf.testParameter

4)and this condition test:

            condition  = not conf.testParameter
            condition |= parameter in conf.testParameter

            if condition:
                value = elem[1]
                testableParameters[parameter] = value

Can you please clarify these a little?
Cheers, 



      

Re: [sqlmap-users] paramToDict function

[Miroslav S. <mir...@gm...>]

On Sat, Jan 2, 2010 at 4:35 PM, Adi Mutu <adi...@ya...> wrote:
> In the above function I'm a little confused about the next variables:
>
> 1)testableParameters
__testableParameters is a simple boolean variable used for flagging if
the function went properly regarding extracting of parameters into
returning dictionary. If not, user is warned accordingly.
> 2)conf.parameters
used to store user provided parameters, like GET/POST data
> 3)conf.testParameter
used to store testable parameter(s) supplied by command option -p
>
> 4)and this condition test:
>
>             condition  = not conf.testParameter
>             condition |= parameter in conf.testParameter
>
>             if condition:
>                 value = elem[1]
>                 testableParameters[parameter] = value
either the testable parameter(s) is/are not supplied by command option
-p at all
or particular parameter by that name (stored in variable parameter)
must be inside dictionary conf.testParameter
for this condition to be true - if that's the case, returning
dictionary testableParameters
used by this function is filled with the proper value.

Kind regards.

>
> Can you please clarify these a little?
> Cheers,
>
>
> ------------------------------------------------------------------------------
> This SF.Net email is sponsored by the Verizon Developer Community
> Take advantage of Verizon's best-in-class app development support
> A streamlined, 14 day to market process makes app distribution fast and easy
> Join now and get one step closer to millions of Verizon customers
> http://p.sf.net/sfu/verizon-dev2dev
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>

Re: [sqlmap-users] paramToDict function

[Miroslav S. <mir...@gm...>]

Hi.

This function splits supplied parameters (type string) into a
dictionary for a easier manipulation during the testing/injection
phase, regarding the place of usage in HTTP request packet - in this
case "GET".

For example, this parameters string "a=user1&b=place2" would be
converted to a dictionary {a:"user1", b:"place2"}

Kind regards.

On Fri, Jan 1, 2010 at 4:01 PM, Adi Mutu <adi...@ya...> wrote:
>
>
> What does this function do :
>
> __paramDict = paramToDict("GET", parameters)
>
> It is called in __setRequestParams.
> I'm not a python developer i'm just a python junior hacking into sqlmap's
> code....
>
>
>
> ------------------------------------------------------------------------------
> This SF.Net email is sponsored by the Verizon Developer Community
> Take advantage of Verizon's best-in-class app development support
> A streamlined, 14 day to market process makes app distribution fast and easy
> Join now and get one step closer to millions of Verizon customers
> http://p.sf.net/sfu/verizon-dev2dev
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>