adding new switch '--smart' by request

This commit is contained in:
Miroslav Stampar 2011-07-10 15:16:58 +00:00
parent 5d31eb5ef7
commit 0d6afca7db
4 changed files with 14 additions and 3 deletions

View File

@ -440,9 +440,11 @@ def start():
if testSqlInj:
check = heuristicCheckSqlInjection(place, parameter)
if not check and conf.realTest and \
not simpletonCheckSqlInjection(place, parameter, value):
continue
if not check:
if conf.smart or conf.realTest and not simpletonCheckSqlInjection(place, parameter, value):
infoMsg = "skipping %s parameter '%s'" % (place, parameter)
logger.info(infoMsg)
continue
infoMsg = "testing sql injection on %s " % place
infoMsg += "parameter '%s'" % parameter

View File

@ -175,6 +175,7 @@ optDict = {
"googlePage": "integer",
"mobile": "boolean",
"pageRank": "boolean",
"smart": "boolean",
"wizard": "boolean",
"verbose": "integer"
},

View File

@ -549,6 +549,10 @@ def cmdLineParser():
action="store_true",
help="Display page rank (PR) for Google dork results")
miscellaneous.add_option("--smart", dest="smart",
action="store_true",
help="Conduct through tests only if positive heuristic(s)")
miscellaneous.add_option("--wizard", dest="wizard",
action="store_true",
help="Simple wizard interface for beginner users")

View File

@ -584,6 +584,10 @@ mobile = False
# Valid: True or False
pageRank = False
# Conduct through tests only if positive heuristic(s).
# Valid: True or False
smart = False
# Simple wizard interface for beginner users.
# Valid: True or False
wizard = False