search

cr0hn / golismero-legacy

THIS IS A LEGACY VERSION PRESERVED FOR BACKUP, DO NOT USE
http://golismero-project.com
15 stars 4 forks source link

SQL injection vulnerabilities need to formalize their parameters #223

Open MarioVilas opened 10 years ago

MarioVilas commented 10 years ago

We haven't documented anywhere what all of the parameters mean, and most of them come straight from sqlmap anyway, which isn't good (if they change something in their text output we're screwed).

We should probably use constants, or start parsing an output format from sqlmap we know won't change (XML or whatever), and document the possible values in any case.

MarioVilas commented 10 years ago

Probably the same goes for xsser.