From 21b926bd2170d1102ffc5fedabc2e848d90893f5 Mon Sep 17 00:00:00 2001 From: JohnPeng47 Date: Fri, 21 Dec 2018 11:13:22 -0500 Subject: [PATCH] fixed issue where foundParams are not being checked for in reflected response; added vscode folder to gitignore --- .gitignore | 3 +++ core/arjun.py | 3 +-- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 894a44c..d8454ea 100644 --- a/.gitignore +++ b/.gitignore @@ -102,3 +102,6 @@ venv.bak/ # mypy .mypy_cache/ + +#vscode +.vscode/ diff --git a/core/arjun.py b/core/arjun.py index 0faae40..535fadf 100644 --- a/core/arjun.py +++ b/core/arjun.py @@ -28,8 +28,7 @@ def arjun(url, GET, headers, delay, timeout): continue print('%s Heuristics found a potentially valid parameter: %s%s%s. Priortizing it.' % ( good, green, foundParam, end)) - if foundParam in blindParams: - blindParams.remove(foundParam) + if foundParam not in blindParams: blindParams.insert(0, foundParam) threadpool = concurrent.futures.ThreadPoolExecutor(max_workers=threadCount) futures = (threadpool.submit(checky, param, paraNames, url,