diff --git a/config.ini b/config.ini index 73281fb..efd1d9b 100644 --- a/config.ini +++ b/config.ini @@ -1,7 +1,7 @@ [blacklist] filename = jquery.js,flexible.js,data-set.js,monitor.js,umi.js,honeypot.js,.min.js,angular.js domain = api.map.baidu.com,alipayobjects.com -apiExts = *,+,=,{,},[,],(,),<,>,@,#,",',@,:,?,!, ,^,\,.docx,.xlsx,.jpeg,.jpg,.bmp,.png,.svg,.vue,.js,.doc,.ppt,.pptx,.mp3,.png,.doc,.pptx,.xls,.mp4 +apiExts = *,+,=,{,},[,],(,),<,>,@,#,",',@,:,?,!, ,^,\,.docx,.xlsx,.jpeg,.jpg,.bmp,.png,.svg,.vue,.js,.doc,.ppt,.pptx,.mp3,.png,.doc,.pptx,.xls,.mp4,.gif [vulnTest] resultFilter = 未登录,请登录,权限鉴定失败,未授权,鉴权失败,unauth,状态失效,没有登录,会话超时,token???,login_failure diff --git a/lib/Database.py b/lib/Database.py index c29f5e8..98526d5 100755 --- a/lib/Database.py +++ b/lib/Database.py @@ -43,7 +43,9 @@ def createProjectDatabase(self, url, type, cloneTag): unixTime = int(time.time()) res = urlparse(url) domain = res.netloc - PATH = "tmp/" + self.projectTag + "_" + domain + "/" + self.projectTag + ".db" + if ":" in domain: + domain = str(domain).split(":")[0] + PATH = "tmp/" + self.projectTag + "_" + domain + '/' + self.projectTag + ".db" try: if Utils().creatSometing(2, PATH) == 1: connect = sqlite3.connect(os.sep.join(PATH.split('/'))) @@ -234,17 +236,16 @@ def insertTextFromDB(self, res): blacks = ReadConfig() blacks.getValue("blacklist", "apiExts") black_ext = "".join(blacks.res).split(",") - - for ext in black_ext: - if ("