search

chushuai / wscan

Wscan is a web security scanner that focuses on web security, dedicated to making web security accessible to everyone.
Other
537 stars 66 forks source link

误报率挺高 #6

Closed MAOGE555 closed 4 months ago

MAOGE555 commented 11 months ago

大佬，误报率好高呀，基本上我扫啥网站都能扫出来一堆SQL注入

chushuai commented 11 months ago

能否提供一下屏幕截图，或者发送一下扫描的目标?

chushuai commented 11 months ago

@MAOGE555 感谢，涉及到隐私我先把报告删除了。

MAOGE555 commented 11 months ago

好的^_^

chushuai commented 11 months ago

基于真假的SQL注入，我下个版本将会把True、False测试的快照都保存到结果中，以便于排查问题。

MAOGE555 commented 11 months ago

nb，期待下个版本

chushuai commented 10 months ago

https://github.com/chushuai/wscan/releases/tag/1.0.13

chushuai commented 4 months ago

没有问题的话，先关闭这个issue