w-digital-scanner / w13scan

Passive Security Scanner (被动式安全扫描器)
GNU General Public License v2.0
1.9k stars 360 forks source link

Unhandled exception (#60d91f35) #482

Closed sqlmapreporter closed 2 years ago

sqlmapreporter commented 2 years ago
W13scan plugin traceback:
Running version: 2.2.2
Python version: 3.8.2
Operating system: macOS-12.0.1-arm64-arm-64bit

request raw:
GET /zwgk/zfxxgk/fdzdgknr/tzgg 1.1
Host: czt.nmg.gov.cn
Proxy-Connection: keep-alive
Referer: http://czt.nmg.gov.cn/
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/95.0.4638.69 Safari/537.36
Accept-Encoding: gzip, deflate
Accept-Language: en-US
cookie: *
Traceback (most recent call last):
  File "/Users/h3llo_w0r1d/Desktop/w13/W13SCAN/lib/core/plugins.py", line 158, in execute
    output = self.audit()
  File "/Users/h3llo_w0r1d/Desktop/w13/W13SCAN/scanners/PerFile/command_system.py", line 124, in audit
    r = self.req(positon, payload)
  File "/Users/h3llo_w0r1d/Desktop/w13/W13SCAN/lib/core/plugins.py", line 144, in req
    r = requests.get(self.requests.url, headers=headers)
  File "/Library/Python/3.8/site-packages/requests/api.py", line 76, in get
    return request('get', url, params=params, **kwargs)
  File "/Library/Python/3.8/site-packages/requests/api.py", line 61, in request
    return session.request(method=method, url=url, **kwargs)
  File "/Users/h3llo_w0r1d/Desktop/w13/W13SCAN/thirdpart/requests/__init__.py", line 52, in session_request
    prep = self.prepare_request(req)
  File "/Library/Python/3.8/site-packages/requests/sessions.py", line 449, in prepare_request
    p.prepare(
  File "/Library/Python/3.8/site-packages/requests/models.py", line 315, in prepare
    self.prepare_headers(headers)
  File "/Library/Python/3.8/site-packages/requests/models.py", line 449, in prepare_headers
    check_header_validity(header)
  File "/Library/Python/3.8/site-packages/requests/utils.py", line 947, in check_header_validity
    raise InvalidHeader("Invalid return character or leading space in header: %s" % name)
requests.exceptions.InvalidHeader: Invalid return character or leading space in header: Cookie