Implementing --skip-heuristics (#4414)

This commit is contained in:
Miroslav Stampar
2020-11-09 22:11:11 +01:00
parent a35fc713a2
commit c243c5fe0d
5 changed files with 16 additions and 1 deletions

View File

@@ -876,8 +876,12 @@ def heuristicCheckDbms(injection):
to identify with a simple DBMS specific boolean-based test what the DBMS
may be
"""
retVal = False
if conf.skipHeuristics:
return retVal
pushValue(kb.injection)
kb.injection = injection
@@ -1031,6 +1035,9 @@ def checkFilteredChars(injection):
kb.injection = popValue()
def heuristicCheckSqlInjection(place, parameter):
if conf.skipHeuristics:
return None
if kb.heavilyDynamic:
debugMsg = "heuristic check skipped because of heavy dynamicity"
logger.debug(debugMsg)