mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-12-07 13:11:29 +00:00
adding support for scanning Host header values (-p host)
This commit is contained in:
@@ -437,7 +437,7 @@ def checkSqlInjection(place, parameter, value):
|
||||
# Feed with the boundaries details only the first time a
|
||||
# test has been successful
|
||||
if injection.place is None or injection.parameter is None:
|
||||
if place in (PLACE.UA, PLACE.REFERER):
|
||||
if place in (PLACE.UA, PLACE.REFERER, PLACE.HOST):
|
||||
injection.parameter = place
|
||||
else:
|
||||
injection.parameter = parameter
|
||||
|
||||
Reference in New Issue
Block a user