search

client9 / libinjection

SQL / SQLI tokenizer parser analyzer
Other
1k stars 274 forks source link

Problems with very short SQLi in form [[ a" + "b ]] #7

Closed client9 closed 11 years ago

client9 commented 11 years ago

currently the rules for "sos" fingerprints can't distinguish between:

1) foo" + "bar 2) foo "+" bar

They are semantically different. 1 is likely an attack but 2 is not.

Need to fix so these types of attacks/probes are detected by default... may cause slight increase in FP but that's ok.

client9 commented 11 years ago

nickg$ git push Counting objects: 15, done. Delta compression using up to 4 threads. Compressing objects: 100% (8/8), done. Writing objects: 100% (8/8), 1.63 KiB, done. Total 8 (delta 7), reused 0 (delta 0) To git@github.com:client9/libinjection.git 65e357e..fc3a325 master -> master