commixproject / commix

Automated All-in-One OS Command Injection Exploitation Tool.
https://commixproject.com
Other
4.62k stars 818 forks source link

Bug Report: Unhandled exception "IndexError: list index out of range" (#ca39477b) #972

Closed commixreporter closed 2 weeks ago

commixreporter commented 3 weeks ago
Commix version: 4.0-dev#100
Python version: 3.12.7
Operating system: posix
Command line: commix.py -u *********************************************************** 
Traceback (most recent call last):
  File \"commix.py", line 36, in <module>
    main()
  File \"commix.py", line 31, in main
    import src.core.main
  File \"main.py", line 899, in <module>
    main(filename, url, http_request_method)
  File \"main.py", line 560, in main
    controller.do_check(url, http_request_method, filename)
  File \"controller.py", line 743, in do_check
    perform_checks(url, http_request_method, filename)
  File \"controller.py", line 706, in perform_checks
    data_checks(url, http_request_method, filename, timesec)
  File \"controller.py", line 627, in data_checks
    if get_request(url, http_request_method, filename, timesec) is None:
       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File \"controller.py", line 590, in get_request
    do_injection(found_url, settings.HTTPMETHOD.GET, header_name, url, http_request_method, filename, timesec)
  File \"controller.py", line 545, in do_injection
    url, check_parameter = define_check_parameter(found, i, url)
                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File \"controller.py", line 536, in define_check_parameter
    check_parameter = parameters.vuln_GET_param(url)
                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File \"parameters.py", line 202, in vuln_GET_param
    settings.TESTABLE_VALUE = pairs[param].split("=")[1].replace(settings.INJECT_TAG, "")
                              ~~~~~~~~~~~~~~~~~~~~~~~^^^
IndexError: list index out of range
stasinopoulos commented 2 weeks ago

Duplicate https://github.com/commixproject/commix/issues/971 and fixed.