sqlmapproject / sqlmap

Automatic SQL injection and database takeover tool
http://sqlmap.org
Other
32.69k stars 5.73k forks source link

Improve boolean blind injection #5797

Open Strongys90 opened 3 weeks ago

Strongys90 commented 3 weeks ago

About a year ago a new open source tool came out called hakuin https://github.com/pruzko/hakuin made for faster boolean blind data extraction. it is extremely quick. Hakuin, a new open-source framework that leverages Machine Learning and statistics to optimize BSQLI. Hakuin uses probabilistic language models trained on millions of tables and columns extracted from Stack Exchange questions to infer DB schemas. To infer DB content, it utilizes several strategies including adaptive language models and opportunistic string guessing. Compared to the state-of-the-art (SOTA) BSQLI tools, Hakuin is about 6x faster on DB schemas, up to 3.2x faster on normal DB columns, and up to 26x faster on columns with limited values.

Just a suggestion to rework boolean blind injection methodology in sqlmap taking it from hakuin to make data extracting from boolean based injection faster.