commixproject / commix

Automated All-in-One OS Command Injection Exploitation Tool.
https://commixproject.com
Other
4.62k stars 818 forks source link

Bug Report: Unhandled exception "AttributeError: 'NoneType' object has no attribute 'groups'" (#c97ba93c) #939

Closed commixreporter closed 4 months ago

commixreporter commented 4 months ago
Commix version: 3.9-stable
Python version: 3.11.8
Operating system: posix
Command line: commix.py -u ************************************ -commandinj.php --method POST -d ************************************************************* -instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:urn="urn:commandinjwsdl"> \n <soapenv:Header/> \n <soapenv:Body> \n <urn:commandinj soapenv:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"> \n <name xsi:type="xsd:string"> * </name> \n </urn:commandinj> \n </soapenv:Body> \n </soapenv:Envelope> --random-agent
Traceback (most recent call last):
  File "commix.py", line 35, in <module>
    main()
  File "commix.py", line 30, in main
    import src.core.main
  File "main.py", line 842, in <module>
    main(filename, url)
  File "main.py", line 529, in main
    controller.do_check(url, http_request_method, filename)
  File "controller.py", line 760, in do_check
    perform_checks(url, http_request_method, filename)
  File "controller.py", line 688, in perform_checks
    post_request(url, http_request_method, filename, timesec)
  File "controller.py", line 606, in post_request
    check_parameter = parameters.vuln_POST_param(parameter, url)
                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "parameters.py", line 386, in vuln_POST_param
    if (_.groups()[0]) == (_.groups()[1]):
        ^^^^^^^^
AttributeError: 'NoneType' object has no attribute 'groups'
stasinopoulos commented 4 months ago

Similar with https://github.com/commixproject/commix/issues/902

github-actions[bot] commented 2 months ago

This issue has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

This action has been performed automatically by a bot.