search

chushuai / wscan

Wscan is a web security scanner that focuses on web security, dedicated to making web security accessible to everyone.
Other
513 stars 63 forks source link

SQL注入误报 #10

Closed york-cmd closed 6 months ago

york-cmd commented 7 months ago

当页面被waf拦截时,页面为403会检测出boolean注入 而且全站所有参数都报注入点

image
chushuai commented 6 months ago

最新版已修复, 麻烦验证一下 @york-cmd https://github.com/chushuai/wscan/releases

york-cmd commented 6 months ago

大佬 该问题已修复

另外是否可以优化一下 如果没有漏洞的情况下不输出报告呢?