mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2026-08-04 06:50:14 +00:00
Minor enhancement to support an option (--union-tech) to specify the
technique to use to detect the number of columns used in the web application SELECT statement: NULL bruteforcing (default) or ORDER BY clause.
This commit is contained in:
parent
f92b76a8b0
commit
4ae464c80d
6 changed files with 105 additions and 33 deletions
|
|
@ -142,6 +142,13 @@ timeTest = False
|
|||
# Valid: True or False
|
||||
unionTest = False
|
||||
|
||||
# Technique to test for UNION query SQL injection
|
||||
# The possible techniques are by NULL bruteforcing (bf) or by ORDER BY
|
||||
# clause (ob)
|
||||
# Valid: bf, ob
|
||||
# Default: bf
|
||||
uTech = bf
|
||||
|
||||
# Use the UNION query (inband) SQL injection to retrieve the queries
|
||||
# output. No need to go blind.
|
||||
# Valid: True or False
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue