r0oth3x49 / ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws
MIT License
2.98k stars 296 forks source link

Multi threading doesn't change the performance #174

Open thepoorhacker opened 4 weeks ago

thepoorhacker commented 4 weeks ago

Hello, Thank you for the valuable tool. I have an observation, I don't know it if is a bug or not. I tried to make the tool work faster, so I increased the threads: ghauri -u "http://something.com/gg.php?id=1&bid=2&cid=4" --threads 60 but no matter how much I increase it, the performance still the same. Any Idea from your side.

Thank you

r0oth3x49 commented 3 weeks ago

Multi threading won't work in time based or error based injection type as I intentionally didn't implement that because it will because backend DBMS will be dead if you apply threads in time based injection it will only work in case of boolean based injection type plus the target response time also matters here.