CERBERUS/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-10-23 12:14:50 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Adding heuristic check for FI vulnerability

Browse source
This commit is contained in:
Miroslav Stampar 2016-01-14 09:59:13 +01:00
parent a8c6c6fca1
commit 4c1fc095d8
2 changed files with 11 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

4
lib/core/settings.py
View file

@ -548,8 +548,8 @@ DNS_BOUNDARIES_ALPHABET = re.sub("[a-fA-F]", "", string.ascii_letters)
# Alphabet used for heuristic checks
HEURISTIC_CHECK_ALPHABET = ('"', '\'', ')', '(', ',', '.')
# String used for dummy XSS check of a tested parameter value
DUMMY_XSS_CHECK_APPENDIX = "<'\">"
# String used for dummy non-SQLi (e.g. XSS) check of a tested parameter value
DUMMY_NON_SQLI_CHECK_APPENDIX = "<'\">"
# Connection chunk size (processing large responses in chunks to avoid MemoryError crashes - e.g. large table dump in full UNION injections)
MAX_CONNECTION_CHUNK_SIZE = 10 * 1024 * 1024