PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2025-12-24 00:19:01 +00:00
Code Issues Projects Releases Wiki Activity

Update and proofread documentation of all the scripts, with the exception of

Browse Source 
nbstat.nse and smb-*.nse, which Ron is going to do.
This commit is contained in:
david
2008-10-25 03:11:25 +00:00
parent 879b33ad75
commit 84afa54d3a
31 changed files with 268 additions and 274 deletions
Download Patch File Download Diff File Expand all files Collapse all files

27
scripts/SQLInject.nse
View File

@@ -2,22 +2,19 @@ id = "sql-inject"
description = [[
Spiders an HTTP server looking for URLs containing queries vulnerable to an SQL
injection attack.
\n\n
The script spiders an HTTP server looking for URLs containing queries.
It then proceeds to combine crafted SQL commands with
susceptible URLs in order to obtain errors. The errors
are analysed to see if the url is vulnerable to attack.
This uses the most basic form of SQL injection but anything
more complication is more suited to a stand alone tool.
Both meta and HTTP redirects are supported.
\n\n
The script spiders an HTTP server looking for URLs containing queries. It then
proceeds to combine crafted SQL commands with susceptible URLs in order to
obtain errors. The errors are analysed to see if the url is vulnerable to
attack. This uses the most basic form of SQL injection but anything more
complication is more suited to a stand alone tool. Both meta and HTTP redirects
are supported.
It is not advisable to run this against unknown hosts.
\n\n
NOTES\n
We may not have access to the servers true hostname.
This means we cannot access virtually hosted sites and
cannot follow absolute links when the hostname is
different from the resolved ip address
We may not have access to the servers true hostname. This means we cannot
access virtually hosted sites and cannot follow absolute links when the
hostname is different from the resolved ip address
]]
require('url')