Major enhancement to directly connect to the dbms without passing via a sql injection: adapted code accordingly - see #158. This feature relies on python third-party libraries to be able to connect to the database. For the moment it has been implemented for MySQL (with python-mysqldb module) and PostgreSQL (with python-psycopg2 module).

Minor layout adjustments.

lib/techniques/inband/union/test.py

@@ -200,6 +200,9 @@ def unionTest():
     SQL injection vulnerability. The test is done up to 3*50 times
     """
 
+    if conf.direct:
+        return
+
     if conf.uTech == "orderby":
         technique = "ORDER BY clause bruteforcing"
     else: