saoshao / DetSql

Burp插件,快速探测可能存在SQL注入的请求并标记,提高测试效率
187 stars 8 forks source link

XML Parameters support and more check ways #1

Open passwa11 opened 1 month ago

passwa11 commented 1 month ago

hi, sir

thank u dev this powerful burp extensions! if u it can support xml Parameters testing will greate more.

passwa11 commented 1 month ago

and more check ways most like bool and time-based or stacked queries ,some times bool is more powerful than others

saoshao commented 1 month ago

Thanks your advice,XML parameter support is planned and will be available in the next version, which will take some time and is expected to be within a week. As for the addition of judgment methods, I will actively consider time-based, Boolean based, and stacked check ways, and can also recommend specific check ways to me. If I find suitable and efficient check ways, I will add them in a timely manner