more sql dumps

CERT-Polska · Nov 5, 2023 · 0ad0d19 · 0ad0d19
1 parent 2b4da4a
commit 0ad0d19
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/artemis/reporting/modules/bruter/classifier.py b/artemis/reporting/modules/bruter/classifier.py
@@ -92,8 +92,14 @@ def is_sql_dump(found_url: FoundURL) -> bool:
     if "sql dump" in found_url.content_prefix.lower():
         return True
 
-    if "\ncreate table" in found_url.content_prefix.lower():
-        return True
+    if any([
+        # strip() to allow lines starting with whitespace
+        line.strip().startswith("create table") or
+        line.strip().startswith("alter table") or
+        line.strip().startswith("insert into")
+        for line in found_url.content_prefix.lower().split("\n")
+        ]):
+            return True
 
     return False