maplgebra
maplgebra
> https://github.com/dstogov/llk thank u , u answer so fast!!
and can u show the whole command args with llk.php?
thanks alot
I suggest that tool should give warnings to these fails and continue working. Because that is really annoyed, the backup will never finish...
Is this feature supported now?
但是实际上有很多,外部变量都不是直接引用的,都是或多或少拼接的。
我看你还继续保留字面量,我觉得可以像cobra那样在处理等号右边的expr的时候直接忽略了,没必要再放到列表里面,再做一次递归了。
> > 我看你还继续保留字面量,我觉得可以像cobra那样在处理等号右边的expr的时候直接忽略了,没必要再放到列表里面,再做一次递归了。 > > 哪个地方递归了? 例如`$a = $pid ^ 'randow';` 其中的字面量`'randow'`做了一次 ``` [DEBUG] [MainThread] [09:43:03] [parser.py:598] [BT] param=Variable('randow'),nodes=[Assignment(Variable('$did'), ArrayOffset(Variable('$_GET'), 'maple'), False), Assignment(Variable('$pid'), 'random', False), Assignment(Variable('$pid'), BinaryOp('.', Variable('$pid'), Variable('$did')), False)],function_params=[FormalParameter('$did',...
师傅我完整的递归给你看看,这个地方是`'randow'` 最后一个是w ``` [DEBUG] [MainThread] [09:43:03] [parser.py:1315] [AST] vul_function:mysql_query [DEBUG] [MainThread] [09:43:03] [parser.py:1122] [AST] AST to find param Variable('$b') [DEBUG] [MainThread] [09:43:03] [parser.py:598] [BT] param=Variable('$b'),nodes=[Assignment(Variable('$glob'), ArrayOffset(Variable('$_GET'), 'maple'), False), Function('add_func', [FormalParameter('$did',...
其中的test输出 可以忽略