Documentation
¶
Index ¶
Constants ¶
View Source
const ( ModuleID = "sqli-error-based" ModuleName = "SQLi Error Based" ModuleShort = "Detects SQLi via error messages" )
Variables ¶
View Source
var ( ModuleDesc = `` /* 655-byte string literal not displayed */ ModuleConfirmation = "Confirmed when injected SQL syntax triggers a database error pattern in the response body" ModuleSeverity = severity.Critical ModuleConfidence = severity.Certain ModuleTags = []string{"injection", "sqli", "moderate"} )
Functions ¶
This section is empty.
Types ¶
type Module ¶
type Module struct {
modkit.BaseActiveModule
// contains filtered or unexported fields
}
func (*Module) ScanPerInsertionPoint ¶
func (m *Module) ScanPerInsertionPoint( ctx *httpmsg.HttpRequestResponse, ip httpmsg.InsertionPoint, httpClient *http.Requester, scanCtx *modkit.ScanContext, ) ([]*output.ResultEvent, error)
ScanPerInsertionPoint tests a single insertion point for SQL injection.
Click to show internal directories.
Click to hide internal directories.