diff --git a/lib/controller/checks.py b/lib/controller/checks.py index cf5e22ff4..ba439b26a 100644 --- a/lib/controller/checks.py +++ b/lib/controller/checks.py @@ -81,7 +81,7 @@ def checkSqlInjection(place, parameter, value, parenthesis): if not falseResult: infoMsg = "%s parameter '%s' is %s (%s) injectable " % (place, parameter, case.desc, logic) - infoMsg += "with %d parenthesis" % parenthesis + infoMsg += "with %d parenthesis%s" % (parenthesis, "\a" if conf.beep else "") logger.info(infoMsg) return case.name diff --git a/lib/parse/cmdline.py b/lib/parse/cmdline.py index 1730532ef..8b6c20ec2 100644 --- a/lib/parse/cmdline.py +++ b/lib/parse/cmdline.py @@ -484,6 +484,10 @@ def cmdLineParser(): action="store_true", default=False, help="Replicate dumped data into a sqlite3 database") + miscellaneous.add_option("--beep", dest="beep", + action="store_true", default=False, + help="Alert with audio beep when sql injection found") + # Hidden and/or experimental options parser.add_option("--profile", dest="profile", action="store_true", default=False, help=SUPPRESS_HELP)