Improved --union-cols to accept a range to test for union SQL injection. By default it is 1-20.

This commit is contained in:
Bernardo Damele
2010-11-19 15:48:24 +00:00
parent ad17e9ed2a
commit c23126547e
4 changed files with 59 additions and 47 deletions

View File

@@ -240,11 +240,11 @@ def cmdLineParser():
action="store_true", default=False,
help="Test for and use UNION query (inband) SQL injection")
techniques.add_option("--union-tech", dest="uTech",
techniques.add_option("--union-tech", dest="uTech", default="char",
help="Technique to test for UNION query SQL injection")
techniques.add_option("--union-cols", dest="uCols", type="int", default=20,
help="Maximum number of columns to test for")
techniques.add_option("--union-cols", dest="uCols", default="1-20",
help="Range of columns to test for UNION query SQL injection")
techniques.add_option("--union-char", dest="uChar", default="NULL",
help="Character to use to bruteforce number of columns")