Got rid of unreliable 'ORDER BY' technique to detect UNION query SQL injection, consequently switch --union-tech has gone now.

Minor code refactoring too.
This commit is contained in:
Bernardo Damele
2010-11-29 17:18:38 +00:00
parent e9291932e5
commit 8b9706656e
6 changed files with 25 additions and 79 deletions

View File

@@ -235,9 +235,6 @@ def cmdLineParser():
action="store_true", default=False,
help="Test for and use UNION query (inband) SQL injection")
techniques.add_option("--union-tech", dest="uTech", default="char",
help="Technique to test for UNION query SQL injection")
techniques.add_option("--union-cols", dest="uCols", default="1-20",
help="Range of columns to test for UNION query SQL injection")