mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2026-01-20 21:39:02 +00:00
Minor enhancement to support an option (--union-tech) to specify the
technique to use to detect the number of columns used in the web application SELECT statement: NULL bruteforcing (default) or ORDER BY clause.
This commit is contained in:
@@ -142,6 +142,13 @@ timeTest = False
|
||||
# Valid: True or False
|
||||
unionTest = False
|
||||
|
||||
# Technique to test for UNION query SQL injection
|
||||
# The possible techniques are by NULL bruteforcing (bf) or by ORDER BY
|
||||
# clause (ob)
|
||||
# Valid: bf, ob
|
||||
# Default: bf
|
||||
uTech = bf
|
||||
|
||||
# Use the UNION query (inband) SQL injection to retrieve the queries
|
||||
# output. No need to go blind.
|
||||
# Valid: True or False
|
||||
|
||||
Reference in New Issue
Block a user